This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json) Hash identifier: cKLzmae7OhBXyehrJFJRkO7ljI0nZO7IqT7Uka/u7nU= Subject key identifier: 42:76:7F:54:EE:55:53:7B:D2:E2:FD:1F:5F:2D:B6:2A:96:5B:D7:CB Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8 Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8 Certificate serial: 019AF12E3B0F6C86BBCBD3A43E02CE8166A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft Manifest number: 07DE Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: 3gd5yhd86K_T7jr5SxEq6WbDoig.roa (hash: ojHL5lyJlzOv7t+xWWNn1JpZWPbuIJXizb57Of8VZwQ=) 2: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: maUNxBZ/PnuOL06hvWY6eKeZ+qDZyMbGpkNM+LUDS/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3b:0f:6c:86:bb:cb:d3:a4:3e:02:ce:81:66:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=42767f54ee55537bd2e2fd1f5f2db62a965bd7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:f2:c2:74:1d:d9:06:78:ea:61:06:ce:91: d5:48:76:c4:ed:09:3c:26:10:d7:24:58:b2:08:20: 29:23:1e:88:eb:bf:27:a0:fe:f1:f2:92:c4:0b:92: 82:aa:d2:1e:bb:49:be:e8:4c:b3:7e:b1:08:c6:6f: 33:d2:d9:1d:73:a8:08:f8:b2:16:77:4b:cb:74:3b: 4b:12:c5:4c:d0:6b:70:81:a2:0b:a3:ed:95:6e:10: 6c:d5:2e:47:e7:3b:31:aa:47:af:16:bd:7d:db:37: 5f:2e:26:e5:35:00:f7:2d:c0:3e:49:0c:79:fc:6b: 91:49:e9:2c:e6:44:c1:f2:45:0a:18:7b:68:8d:f7: c3:4a:50:0f:a9:04:6c:84:fb:b1:57:bf:c2:98:e8: 26:cd:60:8c:28:8a:90:e2:25:4e:2a:35:6f:41:32: da:48:48:82:f7:0c:1e:af:6c:ac:96:89:19:3e:c6: 7d:03:11:4a:70:57:4c:be:83:47:58:8b:f5:c4:d5: 01:82:c7:30:b4:c9:bf:cb:a7:1c:2d:d4:cb:f0:38: 57:32:b1:84:37:e5:7f:d8:e7:1a:88:5c:79:86:7f: 79:15:78:13:16:86:70:8e:74:fb:7a:48:e0:94:c8: 24:a8:f5:8b:b0:a9:00:f3:24:e5:e6:09:a3:e5:45: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:7F:54:EE:55:53:7B:D2:E2:FD:1F:5F:2D:B6:2A:96:5B:D7:CB X509v3 Authority Key Identifier: keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:ff:85:91:40:ec:37:bf:ba:7e:05:98:9a:71:dd:5c:00: 0c:84:18:e4:8e:51:71:84:c4:5a:76:06:96:7a:27:94:df:16: 70:29:68:2c:e6:84:e3:d2:e7:d8:3b:1b:0b:c8:86:27:d1:cd: 07:89:4e:6a:a6:c8:9d:eb:b7:9e:ed:7f:f2:b0:12:6d:5b:33: da:49:e2:c7:66:69:58:46:45:1b:a5:61:31:79:43:e3:08:fc: 8a:4c:3a:4f:88:06:3d:14:a6:ab:4b:fa:62:1c:a0:15:98:75: 58:fb:df:7f:07:bc:f3:2e:b8:c3:4e:c6:fb:3e:ab:dd:70:9e: 33:b5:38:a6:91:59:53:b5:eb:15:ae:13:d3:8d:c3:12:25:6f: ea:5f:6e:c1:90:ae:83:24:f1:83:7f:dd:60:89:b8:a3:f3:f9: c6:5e:44:08:00:a1:4e:e0:88:f4:5b:e7:50:66:ae:54:65:ba: ae:ec:31:44:64:ab:a5:3e:95:1c:ca:f0:44:cc:cc:93:e2:f7: 9a:1d:98:b2:66:fc:75:4b:41:1c:72:ad:da:c5:52:35:c3:f4: 51:4f:06:76:cc:0e:b2:37:2d:88:ce:27:9f:1b:85:e0:f1:43: b5:cd:b8:da:03:23:6d:29:dd:7c:79:6c:c1:5c:01:6f:6f:1d: db:bc:94:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjsPbIa7y9OkPgLOgWahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NmYzMWFkMTcwMWRmY2EyMWJiZjRhNjVlMDdmMjVjMWNm MmIyYzgwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg0Mjc2N2Y1NGVlNTU1MzdiZDJlMmZkMWY1ZjJkYjYyYTk2NWJkN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraHywnQd2QZ46mEGzpHVSHbE7Qk8 JhDXJFiyCCApIx6I678noP7x8pLEC5KCqtIeu0m+6EyzfrEIxm8z0tkdc6gI+LIW d0vLdDtLEsVM0GtwgaILo+2VbhBs1S5H5zsxqkevFr192zdfLiblNQD3LcA+SQx5 /GuRSeks5kTB8kUKGHtojffDSlAPqQRshPuxV7/CmOgmzWCMKIqQ4iVOKjVvQTLa SEiC9wwer2yslokZPsZ9AxFKcFdMvoNHWIv1xNUBgscwtMm/y6ccLdTL8DhXMrGE N+V/2OcaiFx5hn95FXgTFoZwjnT7ekjglMgkqPWLsKkA8yTl5gmj5UVWmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ2f1TuVVN70uL9H18ttiqWW9fLMB8GA1UdIwQY MBaAFCZvMa0XAd/KIbv0pl4H8lwc8rLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzct MTBiZjc3YjIwZGFjLzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzctMTBiZjc3YjIwZGFj LzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGL/hZFA 7De/un4FmJpx3VwADIQY5I5RcYTEWnYGlnonlN8WcCloLOaE49Ln2DsbC8iGJ9HN B4lOaqbIneu3nu1/8rASbVsz2knix2ZpWEZFG6VhMXlD4wj8ikw6T4gGPRSmq0v6 YhygFZh1WPvffwe88y64w07G+z6r3XCeM7U4ppFZU7XrFa4T043DEiVv6l9uwZCu gyTxg3/dYIm4o/P5xl5ECAChTuCI9FvnUGauVGW6ruwxRGSrpT6VHMrwRMzMk+L3 mh2Ysmb8dUtBHHKt2sVSNcP0UU8GdswOsjctiM4nnxuF4PFDtc242gMjbSndfHls wVwBb28d27yUpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:59 2025 by rpki-client