This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json) Hash identifier: 9VKUWk+eOtuUOSbRXyMsfRAzECUxWiu+nNEyLrtie94= Subject key identifier: 0F:3A:DF:45:F9:39:AE:E7:B5:1B:CD:B4:7B:7C:D8:F3:B9:AE:4A:99 Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Certificate serial: 019AF240231F07F48AD819E534D57EFAE3B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft Manifest number: 01BF Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=) 2: RsBRFW0brdHssKPUQSOMEanQNL8.roa (hash: kh/CbUN8p8XDXB2+pjKcCH50DNAToul6qsyjyLvsIbg=) 3: ZxM4wURmy8vS679u-WqAm5TpqRo.roa (hash: rBXB7y06bQsdKzgtd1Z8p6o286XkP+fDEEAT1wMN/OI=) 4: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=) 5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: yivknChjUMD7tGuVEvWI8zdTMfROr4vMo9qJUQtvQz4=) 6: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:23:1f:07:f4:8a:d8:19:e5:34:d5:7e:fa:e3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=0f3adf45f939aee7b51bcdb47b7cd8f3b9ae4a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:e7:67:b7:8e:8f:f7:55:22:bd:9b:70:68: 73:78:35:d0:76:01:55:28:3c:04:ee:a4:06:85:11: 0b:1a:4b:62:e4:a1:69:9c:93:0a:31:9d:95:52:44: ad:68:2d:54:eb:83:45:dc:80:fe:80:a8:d8:f0:48: 1f:f8:df:c5:2f:2d:ea:8d:f0:8a:dc:b1:b8:06:94: f0:cf:8f:22:53:0f:38:75:1e:53:55:52:28:d0:50: ef:97:f7:eb:91:2b:75:c0:86:6b:f4:82:94:bc:bc: c2:6a:b5:62:b9:ba:09:08:b8:c4:cf:62:1b:8f:d5: 8f:f2:30:a2:f6:2e:df:4b:eb:22:9b:fe:ad:fa:ff: 89:a1:45:c9:0e:22:7e:c0:5c:12:bc:f0:be:b6:39: 6b:15:9e:0e:8c:1c:ea:48:5d:c9:dc:67:e8:5e:a9: f2:0b:aa:e3:bc:74:e9:65:c0:d8:71:ee:0d:c5:17: 4c:9b:ff:9a:df:4e:ad:d1:db:3e:24:dc:d2:de:cd: ca:a7:19:d4:75:2d:6a:13:7b:9b:64:28:2f:f2:a7: b6:ce:54:0e:a3:56:07:a6:63:3a:cb:3d:ae:48:1e: ec:e3:61:01:c9:3e:84:72:20:da:bc:92:98:0f:7a: ff:6b:c2:d7:0c:55:ff:b4:81:4f:4c:fa:cd:d3:f6: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3A:DF:45:F9:39:AE:E7:B5:1B:CD:B4:7B:7C:D8:F3:B9:AE:4A:99 X509v3 Authority Key Identifier: keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e0:c4:2a:d0:d0:e0:5f:d6:97:7d:af:db:e3:cf:52:b4:ea: e5:71:3a:66:05:38:13:87:3b:7c:30:c7:30:eb:df:59:d6:cf: 9f:38:4c:7a:f4:fc:77:c7:ed:73:df:5a:7c:57:31:1c:b7:35: ca:75:02:01:77:ba:9d:1e:a0:c3:54:27:05:4c:2a:ee:17:a9: c3:9a:be:f8:26:4a:f6:e1:af:6a:6e:de:15:dd:b4:e2:5f:b2: 80:14:20:c3:c7:23:cf:73:6a:06:28:61:90:a2:24:d6:be:33: 5c:84:6b:68:61:09:3b:bc:17:00:9b:fa:7b:f8:c5:13:57:7a: b2:ca:8c:55:d4:9c:e2:a6:6b:b0:5a:96:05:2d:5c:c6:51:a8: ee:5b:62:33:8b:43:46:37:ef:5c:db:d6:e1:bb:83:7b:c1:13: 93:35:90:d0:0f:1b:3d:8c:63:7c:ae:d3:b1:12:c2:a0:a0:d8: 17:3f:22:cc:fe:ae:1d:07:24:77:c8:37:9e:e3:f8:69:48:0e: 7e:3e:0c:ec:65:53:e8:03:38:5d:b7:a2:19:cb:0e:d6:55:88: de:80:e3:98:00:cf:c5:d5:87:3b:b1:ea:90:61:9a:62:96:75: df:1f:9a:ea:66:18:86:19:37:8f:24:5a:32:29:b7:5a:a9:5d: af:55:4d:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCMfB/SK2BnlNNV++uO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw OTg1ZjEwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EygwZjNhZGY0NWY5MzlhZWU3YjUxYmNkYjQ3YjdjZDhmM2I5YWU0YTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6fnZ7eOj/dVIr2bcGhzeDXQdgFV KDwE7qQGhRELGkti5KFpnJMKMZ2VUkStaC1U64NF3ID+gKjY8Egf+N/FLy3qjfCK 3LG4BpTwz48iUw84dR5TVVIo0FDvl/frkSt1wIZr9IKUvLzCarViuboJCLjEz2Ib j9WP8jCi9i7fS+sim/6t+v+JoUXJDiJ+wFwSvPC+tjlrFZ4OjBzqSF3J3GfoXqny C6rjvHTpZcDYce4NxRdMm/+a306t0ds+JNzS3s3KpxnUdS1qE3ubZCgv8qe2zlQO o1YHpmM6yz2uSB7s42EByT6EciDavJKYD3r/a8LXDFX/tIFPTPrN0/acWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8630X5Oa7ntRvNtHt82PO5rkqZMB8GA1UdIwQY MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt NDk0NzEzYTk5NjNhLzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuDEKtDQ 4F/Wl32v2+PPUrTq5XE6ZgU4E4c7fDDHMOvfWdbPnzhMevT8d8ftc99afFcxHLc1 ynUCAXe6nR6gw1QnBUwq7hepw5q++CZK9uGvam7eFd204l+ygBQgw8cjz3NqBihh kKIk1r4zXIRraGEJO7wXAJv6e/jFE1d6ssqMVdSc4qZrsFqWBS1cxlGo7ltiM4tD RjfvXNvW4buDe8ETkzWQ0A8bPYxjfK7TsRLCoKDYFz8izP6uHQckd8g3nuP4aUgO fj4M7GVT6AM4XbeiGcsO1lWI3oDjmADPxdWHO7HqkGGaYpZ13x+a6mYYhhk3jyRa Mim3Wqldr1VNAA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:03 2025 by rpki-client