This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft File: jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json) Hash identifier: gBIkGgqsQ/k6fwSYYkKGnFjAZesvpDckEmlXSeHtBPw= Subject key identifier: 26:07:1D:B6:F3:0D:C9:01:BC:B0:45:0B:9B:10:22:C3:01:13:99:F2 Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Certificate serial: 019B48F0292130C68D06E12F055FCC114337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft Manifest number: 1435 Signing time: Tue 23 Dec 2025 02:00:57 +0000 Manifest this update: Tue 23 Dec 2025 02:00:57 +0000 Manifest next update: Wed 24 Dec 2025 02:00:57 +0000 Files and hashes: 1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=) 2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: Lt8HkHkLxKXmvWJDRJCeUYk0Y+byZjylglz8sAp3eWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:29:21:30:c6:8d:06:e1:2f:05:5f:cc:11:43:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Validity Not Before: Dec 23 02:00:57 2025 GMT Not After : Dec 24 02:00:57 2025 GMT Subject: CN=26071db6f30dc901bcb0450b9b1022c3011399f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:db:e5:af:68:78:7d:8a:1d:6d:cf:63:77: 42:7d:39:09:c5:6c:8f:27:cf:55:0a:3b:4f:0a:54: fb:ca:fe:ab:71:92:f3:ff:68:53:33:c4:ad:ef:0d: 52:90:c0:6e:6b:1d:22:8e:45:5d:68:6c:6f:71:4d: c2:e6:1e:73:8f:77:76:4f:fa:b4:82:6f:d6:13:da: 91:0d:b1:b8:9f:6a:37:73:5d:e4:d4:1f:1f:61:0a: 33:d5:91:86:e1:2c:9b:cf:69:33:59:6b:97:05:66: f8:93:34:b4:ad:c8:a5:a6:b1:15:3b:4c:2c:9d:7e: 85:f0:9c:b6:76:19:d7:bc:26:61:d8:ce:33:a3:26: be:a1:2b:3e:61:95:d2:2c:68:91:04:b8:f9:4b:f4: c9:a3:f1:cf:fe:ff:ca:f2:23:1e:59:0c:65:ac:a0: fe:14:51:a0:02:26:30:ff:5a:66:11:5c:40:60:7e: 55:4d:db:62:e2:f9:f2:58:b4:80:42:27:f5:af:6e: 1c:c3:25:09:27:4e:4b:a1:53:cc:92:c6:3d:32:da: d7:a8:67:d5:2b:26:8d:55:8a:08:1e:65:99:48:b6: 9b:60:8b:5e:95:3d:a5:f4:15:bc:72:2f:49:13:78: e5:26:00:d2:8b:a3:ed:6f:5b:53:4e:c9:c3:c3:d7: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:07:1D:B6:F3:0D:C9:01:BC:B0:45:0B:9B:10:22:C3:01:13:99:F2 X509v3 Authority Key Identifier: keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:2e:7b:67:cd:4b:ce:b6:7e:fb:fd:1a:11:7f:e3:d8:94:b3: 10:89:82:38:41:6a:e3:00:09:4a:cb:45:1d:95:a6:f7:81:29: 9e:3b:a2:b3:16:19:c4:03:02:ab:22:4d:c0:35:63:9f:aa:ff: 46:0a:9a:ba:77:52:7b:64:fe:0f:df:7e:4e:45:9f:a4:d5:75: 61:ae:1e:03:cd:bc:3b:0e:c2:b2:fa:ee:6c:fa:22:61:90:71: 30:d6:1e:1a:d1:b0:2d:48:54:18:63:a3:d5:e9:cc:f7:f7:d9: 6d:6b:22:07:c4:89:10:9c:46:90:50:6d:8d:14:12:61:5f:cb: fa:f3:d5:7c:3f:fd:d4:39:2a:80:f1:d0:c1:44:7e:13:2b:f6: 73:bd:9b:53:48:18:4c:c3:dc:2d:e1:bc:68:62:4e:7b:e1:a5: 92:d0:9f:75:de:29:d2:1a:ff:7d:ca:64:a7:18:e8:14:18:21: e9:96:cf:17:ab:83:fa:48:28:2f:7e:53:a8:2e:0f:8c:5b:ec: f4:09:49:13:00:7d:7d:3e:13:63:34:1b:9c:da:28:f8:82:4f: 86:5c:1f:1e:d7:2c:e7:0b:9d:20:e7:65:1d:8f:9a:19:ec:fb: a5:3c:c6:61:9a:ea:41:03:05:39:1c:0e:78:5a:45:63:b9:ba: f5:1e:b2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8CkhMMaNBuEvBV/MEUM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2JhZDZhZTQ5MTY0M2QwNzVlMjFjYmE4NTllZjI4ZTI2 ZTNjNzkwHhcNMjUxMjIzMDIwMDU3WhcNMjUxMjI0MDIwMDU3WjAzMTEwLwYDVQQD EygyNjA3MWRiNmYzMGRjOTAxYmNiMDQ1MGI5YjEwMjJjMzAxMTM5OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7b5a9oeH2KHW3PY3dCfTkJxWyP J89VCjtPClT7yv6rcZLz/2hTM8St7w1SkMBuax0ijkVdaGxvcU3C5h5zj3d2T/q0 gm/WE9qRDbG4n2o3c13k1B8fYQoz1ZGG4Sybz2kzWWuXBWb4kzS0rcilprEVO0ws nX6F8Jy2dhnXvCZh2M4zoya+oSs+YZXSLGiRBLj5S/TJo/HP/v/K8iMeWQxlrKD+ FFGgAiYw/1pmEVxAYH5VTdti4vnyWLSAQif1r24cwyUJJ05LoVPMksY9MtrXqGfV KyaNVYoIHmWZSLabYItelT2l9BW8ci9JE3jlJgDSi6Ptb1tTTsnDw9eq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYHHbbzDckBvLBFC5sQIsMBE5nyMB8GA1UdIwQY MBaAFIw7rWrkkWQ9B14hy6hZ7yjibjx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2Mt NTBkODk1ZDRhZTIzLzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2MtNTBkODk1ZDRhZTIz LzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyi57Z81L zrZ++/0aEX/j2JSzEImCOEFq4wAJSstFHZWm94EpnjuisxYZxAMCqyJNwDVjn6r/ RgqaundSe2T+D99+TkWfpNV1Ya4eA828Ow7CsvrubPoiYZBxMNYeGtGwLUhUGGOj 1enM9/fZbWsiB8SJEJxGkFBtjRQSYV/L+vPVfD/91DkqgPHQwUR+Eyv2c72bU0gY TMPcLeG8aGJOe+GlktCfdd4p0hr/fcpkpxjoFBgh6ZbPF6uD+kgoL35TqC4PjFvs 9AlJEwB9fT4TYzQbnNoo+IJPhlwfHtcs5wudIOdlHY+aGez7pTzGYZrqQQMFORwO eFpFY7m69R6yJw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:13:59 2025 by rpki-client