This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json) Hash identifier: hTgaqgPZvxN1LgjLFrK3LSA9Lghxxn2zNDura0/mBN4= Subject key identifier: 5B:90:29:E1:6A:30:24:A5:4C:CF:8A:EA:E0:E6:55:62:7E:70:A4:AE Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Certificate serial: 019AF5414172D90954C8F38F6AC383B5D8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft Manifest number: 0A54 Signing time: Sat 06 Dec 2025 20:01:25 +0000 Manifest this update: Sat 06 Dec 2025 20:01:25 +0000 Manifest next update: Sun 07 Dec 2025 20:01:25 +0000 Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=) 2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: 37YKsDU8Jt74npUt9nWgKxc0DwSGtpiOjWLqIsc/l3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:41:72:d9:09:54:c8:f3:8f:6a:c3:83:b5:d8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Validity Not Before: Dec 6 20:01:25 2025 GMT Not After : Dec 7 20:01:25 2025 GMT Subject: CN=5b9029e16a3024a54ccf8aeae0e655627e70a4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:1d:91:09:b6:dc:1b:ba:34:c7:87:b2:8b: f1:10:2b:24:07:38:ac:b6:9a:c0:85:82:ad:41:80: 41:57:dd:fc:4b:84:6c:d4:b7:6f:5f:e2:a2:51:2c: da:1e:cb:06:e9:19:fe:27:fd:60:d7:30:bf:60:25: a1:8f:06:f1:1b:50:4b:e2:1b:7d:5b:d6:66:41:9d: 7c:50:b7:1c:de:a1:6f:d7:ad:6e:b7:ac:76:37:8c: ef:fa:e4:2a:92:a9:b8:ec:14:b8:a6:59:ab:8c:39: 00:52:91:02:6b:82:4a:ec:da:bb:a3:95:5d:42:8c: 51:b6:17:26:b8:8f:1f:d4:ae:82:0e:2b:f5:1e:4b: e5:5e:02:9c:e8:df:dd:5a:43:7d:28:81:dc:5a:72: 07:53:88:af:1d:bf:0b:98:4a:f1:4d:f3:b1:03:ad: 04:72:0b:6f:a2:08:2d:54:9d:6d:0f:b0:ea:33:54: 0e:44:56:ac:f9:d1:49:e6:bf:e7:74:7c:9d:c5:0d: 50:c0:14:3e:d6:c3:60:a4:fa:4f:c6:23:c1:53:04: 11:31:74:93:44:6c:23:dd:96:95:2e:ea:5a:34:69: a2:41:58:ad:b6:da:69:bf:01:b3:a3:0c:0a:a2:78: f0:90:b7:66:92:62:4b:73:23:9f:7a:91:fb:08:51: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:29:E1:6A:30:24:A5:4C:CF:8A:EA:E0:E6:55:62:7E:70:A4:AE X509v3 Authority Key Identifier: keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:2d:b0:ed:67:34:57:cb:3c:72:7f:54:30:d1:81:f9:c3: 20:9e:be:29:65:46:45:2b:e1:28:af:eb:22:b1:85:05:0a:11: 19:6b:d2:31:56:06:03:f4:53:b7:e8:12:11:4f:86:ec:3a:26: 07:3a:92:f1:58:c6:6c:be:f3:51:14:b8:a9:01:01:6d:6c:e9: 2b:aa:2e:bf:4a:60:38:e2:84:e9:8a:56:dc:14:59:2a:db:99: ad:ab:e2:e3:2c:57:a3:59:86:3a:80:82:11:b9:15:21:02:67: dc:7b:81:8d:a9:1b:9d:28:d6:1b:34:2f:aa:f9:b8:10:cf:ad: 02:e6:52:30:56:7f:18:f1:42:d6:e7:2c:d2:6f:be:f0:95:cf: f2:eb:31:b8:64:49:db:05:cf:d2:ef:7d:40:e0:07:7c:62:02: 3f:0f:df:b3:6d:9f:57:3d:30:1c:67:d8:18:e5:6e:47:c0:6e: a2:40:66:2c:4c:23:aa:64:5f:ac:fa:89:b5:d5:7e:ec:ab:89: 4c:78:35:57:e4:ad:23:97:58:c5:82:10:b8:95:94:02:6b:4b: a6:e8:43:8d:5f:98:b4:39:77:63:75:76:52:60:85:ef:c3:17: fc:70:1d:2f:33:ba:19:54:91:91:9e:92:9e:e0:8a:1c:42:43: cb:2b:28:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QUFy2QlUyPOPasODtdj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAwM2M3YzY3N2NjM2JkNjg2MDMxNzY5OTJhM2ViZDAy ZjQ2Y2IwHhcNMjUxMjA2MjAwMTI1WhcNMjUxMjA3MjAwMTI1WjAzMTEwLwYDVQQD Eyg1YjkwMjllMTZhMzAyNGE1NGNjZjhhZWFlMGU2NTU2MjdlNzBhNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnwdkQm23Bu6NMeHsovxECskBzis tprAhYKtQYBBV938S4Rs1LdvX+KiUSzaHssG6Rn+J/1g1zC/YCWhjwbxG1BL4ht9 W9ZmQZ18ULcc3qFv161ut6x2N4zv+uQqkqm47BS4plmrjDkAUpECa4JK7Nq7o5Vd QoxRthcmuI8f1K6CDiv1HkvlXgKc6N/dWkN9KIHcWnIHU4ivHb8LmErxTfOxA60E cgtvoggtVJ1tD7DqM1QORFas+dFJ5r/ndHydxQ1QwBQ+1sNgpPpPxiPBUwQRMXST RGwj3ZaVLupaNGmiQVitttppvwGzowwKonjwkLdmkmJLcyOfepH7CFGCqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuQKeFqMCSlTM+K6uDmVWJ+cKSuMB8GA1UdIwQY MBaAFI5wA8fGd8w71oYDF2mSo+vQL0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMt ZjE3ZjAwNTYxMDhjLzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMtZjE3ZjAwNTYxMDhj LzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD8tsO1n NFfLPHJ/VDDRgfnDIJ6+KWVGRSvhKK/rIrGFBQoRGWvSMVYGA/RTt+gSEU+G7Dom BzqS8VjGbL7zURS4qQEBbWzpK6ouv0pgOOKE6YpW3BRZKtuZravi4yxXo1mGOoCC EbkVIQJn3HuBjakbnSjWGzQvqvm4EM+tAuZSMFZ/GPFC1ucs0m++8JXP8usxuGRJ 2wXP0u99QOAHfGICPw/fs22fVz0wHGfYGOVuR8BuokBmLEwjqmRfrPqJtdV+7KuJ THg1V+StI5dYxYIQuJWUAmtLpuhDjV+YtDl3Y3V2UmCF78MX/HAdLzO6GVSRkZ6S nuCKHEJDyysoaQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:09 2025 by rpki-client