This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json) Hash identifier: k6vRpaD/QD6hHVi/goxZgivTy5UN8vf+0AfOvWSbdbY= Subject key identifier: A4:CB:9C:3D:F0:11:07:DD:61:10:2C:B3:03:AD:E5:94:56:99:4B:C5 Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Certificate serial: 019B72598F198444F700FDC0DE3F0FF9D6F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft Manifest number: 0A9F Signing time: Wed 31 Dec 2025 03:00:30 +0000 Manifest this update: Wed 31 Dec 2025 03:00:30 +0000 Manifest next update: Thu 01 Jan 2026 03:00:30 +0000 Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: GjSldl80Hpr7H/+qAUvfydwzZU0OWjTXM3CuHRO8nrQ=) 2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:59:8f:19:84:44:f7:00:fd:c0:de:3f:0f:f9:d6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Validity Not Before: Dec 31 03:00:30 2025 GMT Not After : Jan 1 03:00:30 2026 GMT Subject: CN=a4cb9c3df01107dd61102cb303ade59456994bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:09:a1:ed:31:76:dd:38:c1:ac:00:9b:05: 58:ea:3a:b5:16:e0:a2:19:3d:8e:7a:fc:a6:94:8b: c6:f6:53:c0:ed:af:56:da:90:cd:60:3d:d6:8d:fa: cd:9b:80:cd:50:ce:84:cc:64:a1:c3:b4:a6:55:40: b4:13:64:bc:3f:f7:25:81:2b:c3:0f:d3:64:13:66: 27:ec:bd:c5:8b:de:3e:38:e1:f6:5a:d0:a9:d1:60: fb:7e:6c:7e:bd:3e:95:6c:72:93:dc:8f:70:ec:2f: 30:77:62:8f:51:b8:f4:5d:6b:e5:48:2c:22:d2:e9: 4e:d9:fe:3d:fc:46:d4:1d:81:95:a0:46:2d:80:68: d4:9a:13:1f:f0:48:71:e3:f9:31:72:60:01:8f:eb: c6:8b:24:41:00:84:40:95:0e:cc:ac:53:7c:db:9f: 02:b0:b9:d6:61:d7:0d:a6:db:8a:24:60:6a:68:b4: 41:73:e6:af:b5:6b:51:a6:96:78:74:04:cc:1a:a0: 2c:b5:a8:4c:52:b3:db:c8:ac:c6:eb:2a:b4:75:ad: 36:34:88:7c:60:bf:35:7d:42:86:0f:14:f3:a8:37: 3a:ea:a2:d7:f5:db:e3:26:cb:c6:ac:d3:f1:32:4f: 81:43:df:3d:9f:4d:c5:f3:ba:34:da:75:cf:c7:09: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:9C:3D:F0:11:07:DD:61:10:2C:B3:03:AD:E5:94:56:99:4B:C5 X509v3 Authority Key Identifier: keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:be:3b:98:41:10:b9:d2:96:e3:f2:27:e6:9a:a6:00:10:ca: 3c:68:bc:0a:72:5a:c0:0a:d5:e1:43:6a:3e:2a:ce:17:22:ff: 03:35:0a:07:08:76:e4:99:fb:7b:02:71:26:74:2d:a5:6d:50: 15:10:bf:ae:10:12:a0:0a:7c:f0:0c:02:f8:39:ec:75:bd:f3: c7:dc:1b:50:e5:f6:8c:4c:d9:80:27:9d:d7:93:60:55:0b:74: 5d:5c:8a:e8:95:02:4e:12:dd:c6:66:30:30:5a:02:09:ad:0c: ae:53:43:cf:a7:3d:ca:8f:2d:32:5d:2c:98:2a:32:24:5f:48: c2:36:48:32:0d:ea:1b:33:aa:7d:ef:8c:b9:26:e3:19:1c:41: 4b:32:e0:fc:f9:f5:71:ba:6c:55:7c:99:0f:46:05:63:0b:6e: 60:0b:e9:9c:5e:d4:31:6d:30:04:c3:08:57:22:7b:9a:4c:de: 38:66:f7:27:bc:33:1b:74:4a:88:52:f7:b7:5c:b2:3d:a5:07: 21:6c:7d:61:4a:42:1a:9a:aa:33:26:2e:0b:67:65:e4:a7:c9: 5e:f6:fa:75:b3:6b:a8:1b:c3:09:99:ec:39:d1:87:8d:c8:cf: cd:66:98:de:92:2c:c8:49:64:a2:47:70:28:d6:e0:32:59:16: af:4b:1f:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyWY8ZhET3AP3A3j8P+dbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk YTAwZjAwHhcNMjUxMjMxMDMwMDMwWhcNMjYwMTAxMDMwMDMwWjAzMTEwLwYDVQQD EyhhNGNiOWMzZGYwMTEwN2RkNjExMDJjYjMwM2FkZTU5NDU2OTk0YmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSgJoe0xdt04wawAmwVY6jq1FuCi GT2OevymlIvG9lPA7a9W2pDNYD3WjfrNm4DNUM6EzGShw7SmVUC0E2S8P/clgSvD D9NkE2Yn7L3Fi94+OOH2WtCp0WD7fmx+vT6VbHKT3I9w7C8wd2KPUbj0XWvlSCwi 0ulO2f49/EbUHYGVoEYtgGjUmhMf8Ehx4/kxcmABj+vGiyRBAIRAlQ7MrFN8258C sLnWYdcNptuKJGBqaLRBc+avtWtRppZ4dATMGqAstahMUrPbyKzG6yq0da02NIh8 YL81fUKGDxTzqDc66qLX9dvjJsvGrNPxMk+BQ989n03F87o02nXPxwm1TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTLnD3wEQfdYRAsswOt5ZRWmUvFMB8GA1UdIwQY MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb47mEEQ udKW4/In5pqmABDKPGi8CnJawArV4UNqPirOFyL/AzUKBwh25Jn7ewJxJnQtpW1Q FRC/rhASoAp88AwC+Dnsdb3zx9wbUOX2jEzZgCed15NgVQt0XVyK6JUCThLdxmYw MFoCCa0MrlNDz6c9yo8tMl0smCoyJF9IwjZIMg3qGzOqfe+MuSbjGRxBSzLg/Pn1 cbpsVXyZD0YFYwtuYAvpnF7UMW0wBMMIVyJ7mkzeOGb3J7wzG3RKiFL3t1yyPaUH IWx9YUpCGpqqMyYuC2dl5KfJXvb6dbNrqBvDCZnsOdGHjcjPzWaY3pIsyElkokdw KNbgMlkWr0sfAQ== -----END CERTIFICATE-----Generated at Wed Dec 31 08:48:40 2025 by rpki-client