This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft File: jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json) Hash identifier: Eng+vXsZGSSSbHg2dS53yfxMHeMgD/Ej8+8BlQCNjFI= Subject key identifier: 64:93:E5:82:3D:E9:E5:C0:97:C9:E0:73:C1:B3:04:7A:FC:FF:C7:B3 Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Certificate serial: 019B3D59CBE412D0AAB457A3E1C567C2EC4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft Manifest number: 142F Signing time: Sat 20 Dec 2025 20:00:53 +0000 Manifest this update: Sat 20 Dec 2025 20:00:53 +0000 Manifest next update: Sun 21 Dec 2025 20:00:53 +0000 Files and hashes: 1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=) 2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: +dzCQaJcC3ZlS+vjpK4olUgSIK0KaWozTy6G1uC9604=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:cb:e4:12:d0:aa:b4:57:a3:e1:c5:67:c2:ec:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79 Validity Not Before: Dec 20 20:00:53 2025 GMT Not After : Dec 21 20:00:53 2025 GMT Subject: CN=6493e5823de9e5c097c9e073c1b3047afcffc7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:e8:93:e8:9a:fe:e5:1f:f5:35:1e:17:8c: ec:c1:95:0c:bb:d7:fb:18:25:5b:f4:7b:ad:3d:2a: c6:6d:4c:fc:b3:64:0f:53:88:7a:be:72:95:4c:34: 09:f3:df:f1:fd:89:0e:1f:c9:39:a6:a7:90:24:f3: e6:39:8d:6e:48:14:a8:be:8f:10:c2:56:a4:b9:25: 9e:5c:e0:b1:ca:73:e0:ba:a8:ed:dd:c1:ee:58:ed: c0:54:38:e9:0d:c8:06:cb:09:1b:24:c7:06:ca:6c: c6:84:e7:22:3a:89:70:e5:73:a6:4f:39:e7:55:9c: 0a:d0:19:7d:af:4b:72:9c:e8:cd:3d:03:de:0b:41: 56:eb:42:53:bc:f1:b3:1d:0d:b2:2b:52:0d:95:fd: 1c:aa:69:11:11:4e:bf:c5:18:7f:c8:21:59:2f:84: 8d:05:e2:54:a5:e2:81:d2:da:91:8a:2b:8e:30:c6: a8:b1:8a:62:79:be:84:9e:6d:c6:6b:ba:c6:4a:33: e1:9e:83:60:d4:a5:74:77:c5:86:87:7a:e8:ac:99: ac:b1:33:5d:d1:c7:6c:21:be:a8:3d:59:dd:89:84: d7:b7:ba:cf:53:18:9e:41:73:22:02:78:3b:dc:f2: ae:54:ba:44:85:c7:39:74:7d:0b:c7:cd:77:0b:32: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:93:E5:82:3D:E9:E5:C0:97:C9:E0:73:C1:B3:04:7A:FC:FF:C7:B3 X509v3 Authority Key Identifier: keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:a2:c8:39:ec:47:83:e7:0c:d3:9d:85:f6:4a:ad:03:e1:4e: ec:15:11:9c:58:b7:73:3f:b7:0f:ad:5c:41:ef:7e:3c:44:de: 59:bd:8c:99:11:ae:ab:d6:b8:a6:c3:0b:11:65:73:0f:86:67: ca:b5:6d:cf:12:66:47:59:f8:b5:46:cf:81:ce:26:c3:03:26: 96:5d:7c:e7:52:82:7d:9b:20:2f:a0:48:0e:5b:31:56:5b:43: 27:3f:fb:5a:22:4f:a4:66:d2:b8:52:87:7c:00:e5:78:59:93: f4:c5:fc:d4:ef:d9:22:03:fb:47:bf:e2:c5:4c:be:78:0b:bf: fa:45:b3:ed:56:d3:71:0b:bb:04:02:b0:0b:a0:24:54:70:4c: c5:85:9c:91:e6:b5:2f:15:42:eb:e2:89:cd:99:d4:ee:f8:1c: 1f:f3:91:04:ba:61:e7:67:bc:28:4f:18:96:e5:6c:da:f4:df: c1:a2:e8:bf:63:17:a0:5f:b7:a5:19:66:5c:49:8e:e8:fb:2c: 4f:46:81:70:4a:2a:b2:aa:13:7b:bc:b3:cc:c6:6a:30:31:97: 1d:b1:f6:24:8d:1a:e7:3c:e9:c6:74:cf:c4:08:49:c8:86:ab: 02:4f:b1:7a:4e:d0:a5:23:6d:42:d5:fa:86:4f:8e:31:70:2b: 33:d4:25:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WcvkEtCqtFej4cVnwuxKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjM2JhZDZhZTQ5MTY0M2QwNzVlMjFjYmE4NTllZjI4ZTI2 ZTNjNzkwHhcNMjUxMjIwMjAwMDUzWhcNMjUxMjIxMjAwMDUzWjAzMTEwLwYDVQQD Eyg2NDkzZTU4MjNkZTllNWMwOTdjOWUwNzNjMWIzMDQ3YWZjZmZjN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1/ok+ia/uUf9TUeF4zswZUMu9f7 GCVb9HutPSrGbUz8s2QPU4h6vnKVTDQJ89/x/YkOH8k5pqeQJPPmOY1uSBSovo8Q wlakuSWeXOCxynPguqjt3cHuWO3AVDjpDcgGywkbJMcGymzGhOciOolw5XOmTznn VZwK0Bl9r0tynOjNPQPeC0FW60JTvPGzHQ2yK1INlf0cqmkREU6/xRh/yCFZL4SN BeJUpeKB0tqRiiuOMMaosYpieb6Enm3Ga7rGSjPhnoNg1KV0d8WGh3rorJmssTNd 0cdsIb6oPVndiYTXt7rPUxieQXMiAng73PKuVLpEhcc5dH0Lx813CzJFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGST5YI96eXAl8ngc8GzBHr8/8ezMB8GA1UdIwQY MBaAFIw7rWrkkWQ9B14hy6hZ7yjibjx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2Mt NTBkODk1ZDRhZTIzLzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hZWY4YTQtMjhjOC00YTk2LTllY2MtNTBkODk1ZDRhZTIz LzEvakR1dGF1U1JaRDBIWGlITHFGbnZLT0p1UEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzaLIOexH g+cM052F9kqtA+FO7BURnFi3cz+3D61cQe9+PETeWb2MmRGuq9a4psMLEWVzD4Zn yrVtzxJmR1n4tUbPgc4mwwMmll1851KCfZsgL6BIDlsxVltDJz/7WiJPpGbSuFKH fADleFmT9MX81O/ZIgP7R7/ixUy+eAu/+kWz7VbTcQu7BAKwC6AkVHBMxYWckea1 LxVC6+KJzZnU7vgcH/ORBLph52e8KE8YluVs2vTfwaLov2MXoF+3pRlmXEmO6Pss T0aBcEoqsqoTe7yzzMZqMDGXHbH2JI0a5zzpxnTPxAhJyIarAk+xek7QpSNtQtX6 hk+OMXArM9QlIw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:46 2025 by rpki-client