This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft File: mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json) Hash identifier: mHsfJ5cfh3VEmtgUIOxcL4RhTCQLoJba1GB998hwFr4= Subject key identifier: CA:A6:A0:FA:CF:28:0B:9B:A3:F5:44:79:A2:60:D3:B2:BC:4E:EA:FD Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62 Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62 Certificate serial: 019B4EF259219A3E0351D38366C6BA106C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 06:01:03 +0000 Manifest this update: Wed 24 Dec 2025 06:01:03 +0000 Manifest next update: Thu 25 Dec 2025 06:01:03 +0000 Files and hashes: 1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: fyp9s5utfdGfSKbfcnZIJam1u2uaFr+8Vot8PeQT45Y=) 2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:59:21:9a:3e:03:51:d3:83:66:c6:ba:10:6c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62 Validity Not Before: Dec 24 06:01:03 2025 GMT Not After : Dec 25 06:01:03 2025 GMT Subject: CN=caa6a0facf280b9ba3f54479a260d3b2bc4eeafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:47:15:a8:70:a6:79:60:ee:42:74:7a:9e: ba:83:97:37:73:91:44:9e:37:76:86:f1:b9:f9:7e: 66:53:0a:59:90:28:73:0c:91:a5:bf:02:96:0c:9b: 3e:15:ec:9d:fd:5f:b1:db:92:55:0d:0e:4a:7f:ce: 55:a7:d8:b6:b7:09:f0:f4:91:75:b8:9a:71:b9:2a: 74:a8:73:fb:ea:65:9d:30:92:40:e7:89:13:35:79: 31:8f:cd:95:3f:ff:cd:bf:4c:d8:be:47:cd:e8:d2: 57:41:c8:cd:67:ab:f7:09:60:78:d2:ab:57:c1:10: 12:db:04:ba:64:ad:77:31:42:03:a4:ea:b4:3b:b6: c3:43:8e:e0:41:2c:10:a3:62:6b:f7:bd:7d:0f:72: 88:49:3e:95:23:37:42:27:5c:af:8d:19:ca:be:19: c6:50:dc:4b:23:24:ff:79:a4:60:5a:af:49:5b:7f: 90:7f:de:30:22:89:ec:a0:a2:35:69:60:af:3c:82: 29:72:ee:4e:70:96:ca:3b:1f:35:5e:cf:21:ce:18: 23:fe:1d:ed:50:c0:0d:81:d1:a1:01:2c:90:98:a0: 52:42:ab:d6:3a:9c:ce:04:3d:e0:86:7c:bc:2d:e8: a0:f8:b6:c2:c6:1e:2d:83:3a:85:c9:c3:6c:df:1e: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:A0:FA:CF:28:0B:9B:A3:F5:44:79:A2:60:D3:B2:BC:4E:EA:FD X509v3 Authority Key Identifier: keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:f1:15:49:98:0d:2c:3b:24:d0:95:29:7c:fe:9e:84:1e: 7c:44:80:d8:8d:5a:98:f5:05:a2:12:35:32:cb:d8:97:e4:25: 2d:91:51:79:9f:b8:f9:c7:9a:fe:69:30:d6:37:e5:72:c6:8f: d6:88:dd:17:4b:29:95:b8:1b:f1:16:8d:96:c2:8e:bd:14:d5: b7:82:20:7d:ae:05:93:34:5c:88:64:c6:2a:8c:c5:b5:99:ee: 83:b3:15:cc:9c:a2:d8:13:8e:19:5d:3f:f1:4a:41:70:3f:df: 2b:bb:3f:e0:87:4f:92:0f:c8:2e:ad:22:56:f6:5b:22:23:3e: 7c:fe:a1:99:88:34:36:e2:7d:c2:cf:63:04:5a:08:60:cf:d0: c1:ac:76:cf:a1:ac:e5:9e:00:30:5b:6b:55:fa:71:2b:cd:8e: 2c:04:8b:91:80:ab:0d:00:81:0a:ba:ed:45:56:fd:b8:ff:e4: fa:18:ba:7d:e2:19:6d:18:b1:c3:66:fa:9f:4c:fb:b8:a0:73: 23:2c:3c:63:1c:73:00:5b:3d:8b:7d:b5:49:48:a5:1e:62:6c: 96:73:30:26:b8:2d:5b:07:66:eb:02:ac:f5:8d:bd:33:a1:8f: 50:71:ec:50:41:64:0c:74:00:57:69:8d:73:22:38:7b:98:82: ac:c8:3a:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8lkhmj4DUdODZsa6EGwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OWJhZGZkMmExN2ZjYTNiOTM1YTM2OGUyZTAzYWQ1NmQ2 ZTNiNjIwHhcNMjUxMjI0MDYwMTAzWhcNMjUxMjI1MDYwMTAzWjAzMTEwLwYDVQQD EyhjYWE2YTBmYWNmMjgwYjliYTNmNTQ0NzlhMjYwZDNiMmJjNGVlYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDNHFahwpnlg7kJ0ep66g5c3c5FE njd2hvG5+X5mUwpZkChzDJGlvwKWDJs+Feyd/V+x25JVDQ5Kf85Vp9i2twnw9JF1 uJpxuSp0qHP76mWdMJJA54kTNXkxj82VP//Nv0zYvkfN6NJXQcjNZ6v3CWB40qtX wRAS2wS6ZK13MUIDpOq0O7bDQ47gQSwQo2Jr9719D3KIST6VIzdCJ1yvjRnKvhnG UNxLIyT/eaRgWq9JW3+Qf94wIonsoKI1aWCvPIIpcu5OcJbKOx81Xs8hzhgj/h3t UMANgdGhASyQmKBSQqvWOpzOBD3ghny8Leig+LbCxh4tgzqFycNs3x5w2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqmoPrPKAubo/VEeaJg07K8Tur9MB8GA1UdIwQY MBaAFJibrf0qF/yjuTWjaOLgOtVtbjtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQt YTYyODUwZmVlYmI1LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82ODgwMDctMmIyNC00NGI5LTgwZjQtYTYyODUwZmVlYmI1 LzEvbUp1dF9Tb1hfS081TmFObzR1QTYxVzF1TzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYrxFUmY DSw7JNCVKXz+noQefESA2I1amPUFohI1MsvYl+QlLZFReZ+4+cea/mkw1jflcsaP 1ojdF0splbgb8RaNlsKOvRTVt4Igfa4FkzRciGTGKozFtZnug7MVzJyi2BOOGV0/ 8UpBcD/fK7s/4IdPkg/ILq0iVvZbIiM+fP6hmYg0NuJ9ws9jBFoIYM/Qwax2z6Gs 5Z4AMFtrVfpxK82OLASLkYCrDQCBCrrtRVb9uP/k+hi6feIZbRixw2b6n0z7uKBz Iyw8YxxzAFs9i321SUilHmJslnMwJrgtWwdm6wKs9Y29M6GPUHHsUEFkDHQAV2mN cyI4e5iCrMg6og== -----END CERTIFICATE-----Generated at Wed Dec 24 11:54:20 2025 by rpki-client