This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json) Hash identifier: qZN9gaYJNX0tPGn7Xnv3H3cgkz9DzOJfyQhwfcPVf+g= Subject key identifier: EA:A9:8B:48:55:82:9E:7C:FA:6C:28:F2:F3:16:9E:D1:F3:E1:1A:1E Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Certificate serial: 019AF2E45BC24D6C8C723758284125735ED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft Manifest number: 0A5D Signing time: Sat 06 Dec 2025 09:00:43 +0000 Manifest this update: Sat 06 Dec 2025 09:00:43 +0000 Manifest next update: Sun 07 Dec 2025 09:00:43 +0000 Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: Pnd4J5Z6QbNLy6NK2biHEumQIWhNvEG0NvdWl5tUPH8=) 2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:5b:c2:4d:6c:8c:72:37:58:28:41:25:73:5e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Validity Not Before: Dec 6 09:00:43 2025 GMT Not After : Dec 7 09:00:43 2025 GMT Subject: CN=eaa98b4855829e7cfa6c28f2f3169ed1f3e11a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:58:ee:3d:25:49:7e:e6:3f:36:4c:25:6d: 0d:14:e4:c2:86:a1:88:42:48:ba:46:55:98:69:ed: bb:fa:8b:41:d5:29:3e:ce:26:68:83:8a:43:ab:01: 7e:3a:00:71:c7:64:a3:1f:59:cc:85:cd:9e:6c:77: 2b:20:46:c0:13:64:00:c2:7c:61:69:f4:82:11:3b: 1e:8e:59:f7:50:96:7c:e5:db:82:90:23:e0:38:fb: 92:97:d3:e7:50:02:fc:0f:86:88:d3:cf:d2:22:cb: 4b:31:02:cf:ab:d4:13:42:4c:e8:2a:af:cc:47:d6: 0b:23:43:0f:00:c9:21:f9:6c:cd:7d:5e:52:c2:f7: 34:6a:27:6c:cd:1d:4a:78:77:ed:88:e9:94:6d:6f: 53:57:4f:d5:fa:73:a1:85:be:9c:7c:f0:59:0b:a3: eb:e6:60:4e:8d:c9:4c:fb:7c:d8:e0:6a:bb:05:63: 32:58:8d:d4:b2:1e:c8:0a:81:93:24:e5:ae:9a:66: 34:9c:73:1b:89:de:99:fc:c9:2b:ba:ba:d4:c7:1f: 0a:45:fd:c5:43:77:af:fa:ae:0c:2e:ab:00:07:30: b2:67:7a:d2:b5:b4:19:31:df:ea:38:8d:31:c0:d0: 1e:2d:23:36:7e:47:18:8b:ba:f5:0c:5c:06:1b:12: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A9:8B:48:55:82:9E:7C:FA:6C:28:F2:F3:16:9E:D1:F3:E1:1A:1E X509v3 Authority Key Identifier: keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:36:8e:87:8f:97:5f:7a:36:bb:8f:43:cc:fc:b1:7d:4d:b2: 36:83:9c:d9:06:fe:d6:66:79:1c:2e:f8:17:2b:5d:53:23:2c: 9c:39:c4:b8:7f:5e:eb:52:aa:d8:82:96:ca:3b:2e:b0:bb:6a: 21:1c:fe:fb:29:6f:a0:0d:aa:40:01:2b:60:68:12:25:69:76: 7c:86:53:7f:7f:7c:dd:ac:73:08:c8:16:9d:0c:d0:7c:18:4e: d6:3e:a9:b3:0e:2a:35:8f:69:68:da:82:24:f9:29:ab:39:03: 50:0d:82:00:9b:7f:09:60:5e:0c:27:b6:2c:48:d3:7b:2a:65: a8:f6:17:3d:c7:f7:be:37:d4:dd:19:b8:2f:72:d1:15:be:0e: 78:5e:a4:65:67:bd:d2:f5:23:75:66:d0:f2:59:b2:01:98:b7: aa:17:b2:00:a5:24:99:3b:f0:89:07:ac:27:85:09:5d:aa:0a: c8:d4:2f:6b:f0:90:74:e3:23:2b:34:ba:71:97:5d:9a:83:d5: 04:38:dd:1b:43:67:6e:e0:66:24:0a:dd:82:9a:49:7e:5b:43: c6:54:8a:7f:57:60:e5:4b:af:fd:e5:0c:5c:fd:e4:40:60:aa: c6:99:66:87:fb:73:bc:d1:21:37:7b:d3:40:30:41:92:7e:3c: 29:76:17:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FvCTWyMcjdYKEElc17XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk YTAwZjAwHhcNMjUxMjA2MDkwMDQzWhcNMjUxMjA3MDkwMDQzWjAzMTEwLwYDVQQD EyhlYWE5OGI0ODU1ODI5ZTdjZmE2YzI4ZjJmMzE2OWVkMWYzZTExYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD5Y7j0lSX7mPzZMJW0NFOTChqGI Qki6RlWYae27+otB1Sk+ziZog4pDqwF+OgBxx2SjH1nMhc2ebHcrIEbAE2QAwnxh afSCETsejln3UJZ85duCkCPgOPuSl9PnUAL8D4aI08/SIstLMQLPq9QTQkzoKq/M R9YLI0MPAMkh+WzNfV5Swvc0aidszR1KeHftiOmUbW9TV0/V+nOhhb6cfPBZC6Pr 5mBOjclM+3zY4Gq7BWMyWI3Ush7ICoGTJOWummY0nHMbid6Z/MkrurrUxx8KRf3F Q3ev+q4MLqsABzCyZ3rStbQZMd/qOI0xwNAeLSM2fkcYi7r1DFwGGxKR4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqpi0hVgp58+mwo8vMWntHz4RoeMB8GA1UdIwQY MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTaOh4+X X3o2u49DzPyxfU2yNoOc2Qb+1mZ5HC74FytdUyMsnDnEuH9e61Kq2IKWyjsusLtq IRz++ylvoA2qQAErYGgSJWl2fIZTf3983axzCMgWnQzQfBhO1j6psw4qNY9paNqC JPkpqzkDUA2CAJt/CWBeDCe2LEjTeyplqPYXPcf3vjfU3Rm4L3LRFb4OeF6kZWe9 0vUjdWbQ8lmyAZi3qheyAKUkmTvwiQesJ4UJXaoKyNQva/CQdOMjKzS6cZddmoPV BDjdG0NnbuBmJArdgppJfltDxlSKf1dg5Uuv/eUMXP3kQGCqxplmh/tzvNEhN3vT QDBBkn48KXYXyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:52 2025 by rpki-client