This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json) Hash identifier: C8TkQJkjdvbB93pokChtAhip6xPxoEWJVtVmmKi11WQ= Subject key identifier: C4:FC:80:F2:B8:AE:94:6D:92:FB:58:8B:0F:31:3E:6C:CC:65:53:C4 Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05 Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205 Certificate serial: 019B3BD910738B597BF560D35DDB37B9193C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft Manifest number: 01AA Signing time: Sat 20 Dec 2025 13:00:39 +0000 Manifest this update: Sat 20 Dec 2025 13:00:39 +0000 Manifest next update: Sun 21 Dec 2025 13:00:39 +0000 Files and hashes: 1: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: OJKL1yLn8VUmQ28bt55yfhtthRyuXoF0xJAwleq3pZU=) 2: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (hash: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:10:73:8b:59:7b:f5:60:d3:5d:db:37:b9:19:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205 Validity Not Before: Dec 20 13:00:39 2025 GMT Not After : Dec 21 13:00:39 2025 GMT Subject: CN=c4fc80f2b8ae946d92fb588b0f313e6ccc6553c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:ad:36:92:b3:e2:e6:f6:94:d4:83:1d:ce: e1:77:13:69:4a:14:a1:74:0f:62:83:e2:68:7e:e9: e5:4e:fe:e4:95:8f:d4:37:89:2e:eb:26:cc:8c:2e: e3:ad:57:6e:35:53:61:5f:f7:0f:6e:2e:09:71:50: 2c:af:d2:e5:e3:10:7c:23:6b:ae:ae:24:f6:f7:54: 0b:e2:bf:c6:50:90:a6:ad:06:db:b4:c4:7c:e8:40: fc:a2:d2:eb:9d:6d:09:5c:55:66:6a:20:ae:6a:11: 22:75:68:30:00:2d:d7:13:3f:62:a4:17:ca:cd:ce: 93:c7:bc:56:9a:5f:33:5b:20:56:d5:40:96:30:e5: e5:97:a4:e3:93:8e:b4:5e:73:6c:7f:41:9d:d6:fb: 60:6f:92:e4:e6:8d:b9:0e:84:a0:2a:40:fd:a5:73: 3a:5d:c2:42:0c:ec:1f:ec:2f:b7:2e:11:c6:55:fd: 7e:06:52:a8:3f:46:dd:02:e9:29:88:86:3a:34:e9: 1f:6c:54:ea:7f:14:1e:03:88:af:58:81:5f:e2:65: 84:8a:82:29:48:9a:d7:41:32:30:53:df:fa:44:52: 37:e1:56:38:19:9b:7a:f8:52:53:8d:cf:c6:e2:15: 24:d0:e8:40:95:09:85:34:b9:59:3d:7a:91:f8:51: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:80:F2:B8:AE:94:6D:92:FB:58:8B:0F:31:3E:6C:CC:65:53:C4 X509v3 Authority Key Identifier: keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:30:2c:40:1c:bd:07:2a:71:ba:f6:a7:52:6f:62:52:d7:4a: 2c:9c:ea:d5:1e:76:25:a7:29:15:26:f2:ef:8d:1d:8e:fb:d0: 16:a6:bc:e4:23:75:4a:72:19:25:65:f9:c4:44:44:d1:a4:86: 02:93:23:30:4b:a6:7c:14:e8:5e:9f:3c:09:d1:f0:15:03:98: 5e:83:96:a5:eb:05:4e:1a:8c:04:36:2a:b3:9d:49:a2:c6:5e: 91:11:ef:cc:6d:70:ca:a8:dc:c3:c2:1e:89:bf:fd:72:9a:90: 9c:9c:a2:a5:fb:be:b5:d0:72:05:c4:71:48:af:22:b0:f0:f4: 13:07:41:96:4f:11:47:f7:9e:04:2a:7b:09:6c:21:93:68:b3: 0c:8a:59:ca:0d:b2:9e:93:38:ee:a6:e4:80:57:df:f8:4e:e9: 1a:b7:17:9f:c6:08:93:64:0c:83:17:df:62:c0:0f:eb:61:59: ef:5a:f5:2d:d5:e8:8d:f2:f5:c5:7f:d0:f1:92:3b:69:82:db: d3:31:cc:b5:7b:43:02:8e:f6:69:c8:d4:d8:3c:d5:e6:f0:17: 4c:a4:68:16:96:f7:0d:29:00:da:52:bc:cf:5c:e0:36:40:3c: 3c:a3:64:84:30:49:0d:6d:9d:b6:13:27:31:fc:eb:70:17:c1: 1a:c1:b7:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RBzi1l79WDTXds3uRk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0 ZTgyMDUwHhcNMjUxMjIwMTMwMDM5WhcNMjUxMjIxMTMwMDM5WjAzMTEwLwYDVQQD EyhjNGZjODBmMmI4YWU5NDZkOTJmYjU4OGIwZjMxM2U2Y2NjNjU1M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5+tNpKz4ub2lNSDHc7hdxNpShSh dA9ig+JofunlTv7klY/UN4ku6ybMjC7jrVduNVNhX/cPbi4JcVAsr9Ll4xB8I2uu riT291QL4r/GUJCmrQbbtMR86ED8otLrnW0JXFVmaiCuahEidWgwAC3XEz9ipBfK zc6Tx7xWml8zWyBW1UCWMOXll6Tjk460XnNsf0Gd1vtgb5Lk5o25DoSgKkD9pXM6 XcJCDOwf7C+3LhHGVf1+BlKoP0bdAukpiIY6NOkfbFTqfxQeA4ivWIFf4mWEioIp SJrXQTIwU9/6RFI34VY4GZt6+FJTjc/G4hUk0OhAlQmFNLlZPXqR+FFuuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT8gPK4rpRtkvtYiw8xPmzMZVPEMB8GA1UdIwQY MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2 LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzAsQBy9 BypxuvanUm9iUtdKLJzq1R52JacpFSby740djvvQFqa85CN1SnIZJWX5xERE0aSG ApMjMEumfBToXp88CdHwFQOYXoOWpesFThqMBDYqs51JosZekRHvzG1wyqjcw8Ie ib/9cpqQnJyipfu+tdByBcRxSK8isPD0EwdBlk8RR/eeBCp7CWwhk2izDIpZyg2y npM47qbkgFff+E7pGrcXn8YIk2QMgxffYsAP62FZ71r1LdXojfL1xX/Q8ZI7aYLb 0zHMtXtDAo72acjU2DzV5vAXTKRoFpb3DSkA2lK8z1zgNkA8PKNkhDBJDW2dthMn MfzrcBfBGsG3kA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:35:16 2025 by rpki-client