This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json) Hash identifier: 42Cf6ZNiLCRB8K3GZoJGguPhxDJNwCZKDBmBB6ZuwY0= Subject key identifier: 69:6E:D8:F3:6D:A8:F8:0B:DB:41:C3:82:3F:B7:99:39:77:5A:D7:50 Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Certificate serial: 019AF0BF770DC90882818138BE7FBBE83002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft Manifest number: 1492 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=) 2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: +L4lf4ycCIE7biSn/8rP18RzVFi8qJV7Cgmd+84sMdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:77:0d:c9:08:82:81:81:38:be:7f:bb:e8:30:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6 Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=696ed8f36da8f80bdb41c3823fb79939775ad750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:fb:be:c6:46:70:ad:6f:ce:50:25:d1:0d: ff:25:29:15:7c:a6:f4:ae:e5:0d:5e:ec:ea:22:ae: ec:0b:81:ac:a8:b7:67:e0:a3:f7:b8:72:bc:06:94: e0:34:79:0d:6c:30:72:51:cc:8f:d6:f9:5f:01:ae: db:60:3f:72:59:41:0c:1e:79:06:8b:d6:d9:8f:e9: 81:76:61:c2:88:e2:f6:6c:ce:fb:ed:88:73:3f:3a: 84:19:0a:b9:33:7f:6f:c5:cd:cc:3f:d4:e7:30:9f: dc:8f:7c:6d:fb:ff:62:37:76:07:2a:f1:ce:a1:19: a1:b9:16:c6:81:4a:70:b1:d8:bc:d9:5a:e0:92:c6: f5:6d:5e:76:24:3c:8c:cb:4e:6a:6d:fd:19:51:e2: bf:0e:3e:04:03:b2:f0:ed:ca:5d:6b:05:79:1f:e8: 55:23:a5:2e:d2:86:23:09:1c:95:32:06:fa:45:ab: 38:a0:bb:2a:fc:85:fa:bc:6b:07:45:a1:6b:73:1f: 8b:dc:60:6b:bb:da:c5:31:5d:2e:00:c5:45:69:ea: 56:f9:e2:4e:82:8d:cc:ad:7b:47:86:4f:4a:6a:d1: b0:eb:60:01:e7:27:f7:2d:f0:2e:a9:8b:49:32:96: d7:91:a4:40:35:0f:c8:25:a4:7b:99:6b:28:ae:b5: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6E:D8:F3:6D:A8:F8:0B:DB:41:C3:82:3F:B7:99:39:77:5A:D7:50 X509v3 Authority Key Identifier: keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1c:09:fe:cd:5a:6f:8e:f3:59:9f:de:3e:d3:f8:6d:be:3b: 1f:0f:d9:84:c2:ce:d0:22:da:b8:58:2f:1a:a9:98:f6:10:55: 3f:d8:33:e7:d4:e4:ba:6b:08:b8:b0:5c:60:b6:28:3d:5c:cd: 12:c9:53:fe:b9:e9:f2:8f:98:39:99:3f:a1:dc:ad:3f:5c:3d: 94:51:27:1f:36:cb:62:39:59:18:eb:9a:2f:54:67:42:14:59: b1:e1:b3:ac:2f:04:92:9f:09:3c:40:10:42:50:8a:9d:80:28: 37:9e:b5:bd:c7:63:41:74:ea:ae:dc:c1:80:c9:fa:eb:48:dc: f6:67:f0:c7:35:6d:a6:50:e7:8a:90:5e:43:4f:4f:b3:7c:f0: e4:93:be:e5:e3:60:e4:36:f5:bc:cd:c1:5e:da:9b:2e:9f:85: f0:5e:83:3d:55:2f:0b:ba:7e:0b:1d:a2:e4:91:26:23:39:aa: ab:52:85:7d:76:62:6f:da:67:04:4c:93:5f:fe:3f:50:4b:1d: d5:5d:c2:06:79:14:83:95:41:48:cd:5c:70:cb:5c:8a:5a:66: 8c:f5:04:11:95:22:e9:44:96:cf:82:60:80:fa:e0:bb:a0:15: 47:63:5f:7e:32:7f:26:94:b1:79:77:7c:6f:80:78:25:46:5c: 4b:1b:49:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3cNyQiCgYE4vn+76DACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzRhNjdkYmVkNzQ0NGRkZDI3ZTgwMGZiNmMyMTAxM2E1 YjExYzYwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD Eyg2OTZlZDhmMzZkYThmODBiZGI0MWMzODIzZmI3OTkzOTc3NWFkNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNv7vsZGcK1vzlAl0Q3/JSkVfKb0 ruUNXuzqIq7sC4GsqLdn4KP3uHK8BpTgNHkNbDByUcyP1vlfAa7bYD9yWUEMHnkG i9bZj+mBdmHCiOL2bM777YhzPzqEGQq5M39vxc3MP9TnMJ/cj3xt+/9iN3YHKvHO oRmhuRbGgUpwsdi82Vrgksb1bV52JDyMy05qbf0ZUeK/Dj4EA7Lw7cpdawV5H+hV I6Uu0oYjCRyVMgb6Ras4oLsq/IX6vGsHRaFrcx+L3GBru9rFMV0uAMVFaepW+eJO go3MrXtHhk9KatGw62AB5yf3LfAuqYtJMpbXkaRANQ/IJaR7mWsorrV0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlu2PNtqPgL20HDgj+3mTl3WtdQMB8GA1UdIwQY MBaAFI7Epn2+10RN3SfoAPtsIQE6WxHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMt MGNlZjUxMmY1MDA5LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMtMGNlZjUxMmY1MDA5 LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchwJ/s1a b47zWZ/ePtP4bb47Hw/ZhMLO0CLauFgvGqmY9hBVP9gz59TkumsIuLBcYLYoPVzN EslT/rnp8o+YOZk/odytP1w9lFEnHzbLYjlZGOuaL1RnQhRZseGzrC8Ekp8JPEAQ QlCKnYAoN561vcdjQXTqrtzBgMn660jc9mfwxzVtplDnipBeQ09Ps3zw5JO+5eNg 5Db1vM3BXtqbLp+F8F6DPVUvC7p+Cx2i5JEmIzmqq1KFfXZib9pnBEyTX/4/UEsd 1V3CBnkUg5VBSM1ccMtcilpmjPUEEZUi6USWz4JggPrgu6AVR2NffjJ/JpSxeXd8 b4B4JUZcSxtJig== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:09 2025 by rpki-client