This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json) Hash identifier: EBrBT4Ql4tTjdnUnml2vpcAdqm1DRV41pwEt0yZCx6c= Subject key identifier: 42:FD:AE:BE:BA:81:99:E9:A9:AD:7B:E4:87:F8:1B:05:9F:D0:9C:29 Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Certificate serial: 019B3D911F80C79B1ECF23A41432B80B7C88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft Manifest number: 01E6 Signing time: Sat 20 Dec 2025 21:01:19 +0000 Manifest this update: Sat 20 Dec 2025 21:01:19 +0000 Manifest next update: Sun 21 Dec 2025 21:01:19 +0000 Files and hashes: 1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=) 2: RsBRFW0brdHssKPUQSOMEanQNL8.roa (hash: kh/CbUN8p8XDXB2+pjKcCH50DNAToul6qsyjyLvsIbg=) 3: ZxM4wURmy8vS679u-WqAm5TpqRo.roa (hash: rBXB7y06bQsdKzgtd1Z8p6o286XkP+fDEEAT1wMN/OI=) 4: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=) 5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: QJ7cQKxN2DvSld2k0cJgAy9seTGkiHRXOv5i375FHwM=) 6: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:1f:80:c7:9b:1e:cf:23:a4:14:32:b8:0b:7c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Validity Not Before: Dec 20 21:01:19 2025 GMT Not After : Dec 21 21:01:19 2025 GMT Subject: CN=42fdaebeba8199e9a9ad7be487f81b059fd09c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:dd:5a:32:29:f1:23:fd:7a:b9:f6:39:37: 23:27:83:dd:ad:aa:87:b1:ab:dc:0e:93:3d:82:07: 0e:5e:c4:97:65:6f:55:46:8d:a3:ee:85:96:b0:cf: 47:85:1a:89:ee:57:fc:86:9e:e0:fe:bc:fa:0b:f1: 2d:14:91:9a:ec:6c:d5:fd:c0:7b:fc:f3:d3:e3:d9: 94:ee:cb:74:3d:27:b4:21:e9:be:83:71:2f:a8:30: 8a:0a:45:6f:a9:24:89:a5:7e:3a:91:c5:3c:18:5c: 0a:87:4b:f7:d7:67:ba:41:03:d5:8a:b8:46:ef:40: 42:21:0e:f7:fd:ff:c6:7e:8d:e0:ed:06:c8:2a:8b: 24:f6:d6:12:e0:b9:40:ec:cd:eb:ff:70:63:ed:47: 93:ce:49:5b:5a:f2:8f:28:9b:68:47:94:22:7d:2e: 6e:bb:52:29:dc:e3:8c:99:f5:47:95:02:44:8a:28: be:f4:33:dd:ae:b7:59:c4:44:84:7b:2c:42:c3:26: 5d:8a:71:b6:ec:e9:ec:d7:17:45:c9:97:58:9f:55: 1b:a7:08:ec:3c:74:5d:19:98:01:40:3c:bb:a1:29: e5:83:f8:fc:ab:51:6e:3b:ee:93:89:33:ac:9e:1b: 9c:e0:33:05:24:52:e4:f9:05:35:9d:0a:2a:ab:77: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:AE:BE:BA:81:99:E9:A9:AD:7B:E4:87:F8:1B:05:9F:D0:9C:29 X509v3 Authority Key Identifier: keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b8:55:7a:a3:0b:3d:cc:04:e0:ec:c8:9c:2a:60:1a:20:6a: 76:7f:53:49:7e:19:2e:c7:dc:64:32:fb:ce:6e:bd:90:12:22: 1b:9e:22:e7:b7:ab:e6:f1:f9:0f:84:5c:b4:f4:65:68:93:53: eb:81:4f:ee:d6:77:fa:2e:32:90:6a:49:1b:21:94:cc:da:ef: 64:fe:62:2b:04:55:2a:fc:03:91:07:9f:1e:73:29:14:e6:52: c6:d3:ed:b7:6e:92:3f:f2:d8:5d:d4:ba:b9:dc:0d:bf:08:fa: 26:12:57:0e:88:31:d7:a9:84:7d:ff:fd:91:bc:53:73:2e:d6: 26:02:c2:fc:eb:b5:7d:f7:47:d7:f6:9d:38:f7:3d:5c:55:7b: 15:8d:fa:a1:82:5c:33:b9:01:b8:89:41:a3:38:11:8f:be:87: f8:4c:98:34:a9:a1:87:91:32:c1:7d:08:eb:69:ca:be:96:28: a5:85:6b:b7:7e:70:7a:e8:b1:b4:de:e5:df:94:a1:fe:7f:60: ab:f1:d6:e7:c2:1f:85:41:0a:ef:9b:2d:a1:ae:10:40:75:76: ef:be:cc:e2:08:69:48:e0:2c:a9:3c:0a:aa:b8:cd:63:15:6e: dd:40:6a:fd:42:63:1a:f9:4c:f0:b2:f6:05:22:65:aa:29:c6: 24:26:e6:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kR+Ax5sezyOkFDK4C3yIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw OTg1ZjEwHhcNMjUxMjIwMjEwMTE5WhcNMjUxMjIxMjEwMTE5WjAzMTEwLwYDVQQD Eyg0MmZkYWViZWJhODE5OWU5YTlhZDdiZTQ4N2Y4MWIwNTlmZDA5YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbHdWjIp8SP9ern2OTcjJ4PdraqH savcDpM9ggcOXsSXZW9VRo2j7oWWsM9HhRqJ7lf8hp7g/rz6C/EtFJGa7GzV/cB7 /PPT49mU7st0PSe0Iem+g3EvqDCKCkVvqSSJpX46kcU8GFwKh0v312e6QQPVirhG 70BCIQ73/f/Gfo3g7QbIKosk9tYS4LlA7M3r/3Bj7UeTzklbWvKPKJtoR5QifS5u u1Ip3OOMmfVHlQJEiii+9DPdrrdZxESEeyxCwyZdinG27Ons1xdFyZdYn1Ubpwjs PHRdGZgBQDy7oSnlg/j8q1FuO+6TiTOsnhuc4DMFJFLk+QU1nQoqq3f7LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL9rr66gZnpqa175If4GwWf0JwpMB8GA1UdIwQY MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt NDk0NzEzYTk5NjNhLzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbhVeqML PcwE4OzInCpgGiBqdn9TSX4ZLsfcZDL7zm69kBIiG54i57er5vH5D4RctPRlaJNT 64FP7tZ3+i4ykGpJGyGUzNrvZP5iKwRVKvwDkQefHnMpFOZSxtPtt26SP/LYXdS6 udwNvwj6JhJXDogx16mEff/9kbxTcy7WJgLC/Ou1ffdH1/adOPc9XFV7FY36oYJc M7kBuIlBozgRj76H+EyYNKmhh5EywX0I62nKvpYopYVrt35weuixtN7l35Sh/n9g q/HW58IfhUEK75stoa4QQHV2777M4ghpSOAsqTwKqrjNYxVu3UBq/UJjGvlM8LL2 BSJlqinGJCbmWw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:12 2025 by rpki-client