This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json) Hash identifier: g+/+szo0d6GDvdoStThWTB43DEIfIDYOnaHQb7HuT2Q= Subject key identifier: 15:62:E0:8E:36:31:93:BB:EC:AE:D4:D4:6F:9E:B3:52:11:ED:D1:6E Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24 Certificate serial: 019AF2091561C132CBABD7AD8A7300056094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft Manifest number: 0131 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: FjU0H7vPdjT4WlcuRh8u9jonq80.roa (hash: FVDMMIfr/P3OKDJ02oDTFPsyvxmI1cgf33doeyF5iQw=) 2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: piyK1TWu4Av08He41uo57dYa5Z8C5fUo69P4tu4zV2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:15:61:c1:32:cb:ab:d7:ad:8a:73:00:05:60:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24 Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=1562e08e363193bbecaed4d46f9eb35211edd16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:b1:7b:04:e9:f8:c4:b3:11:b1:e6:ee:55: f0:33:4b:fa:cc:72:c0:ac:a5:76:3e:a2:bd:ea:f8: 90:2b:07:47:4f:49:2b:e5:56:bc:22:36:ec:db:09: 96:a5:0e:07:3f:bd:2e:9d:10:0d:6f:ab:b7:1c:b3: aa:95:e0:78:51:9d:be:59:8c:d8:31:2d:3c:61:f9: 9b:ff:9c:b3:ef:e9:4c:c0:4f:ea:6a:94:5f:ef:11: b8:68:55:00:6b:0e:d4:c1:6f:d4:6d:bc:c1:6e:59: ac:a4:2c:90:c6:36:dd:b8:a2:ba:6d:18:a7:5c:e5: 89:2e:b6:81:7e:a0:d2:1d:86:1a:98:8d:de:41:41: a8:ca:a5:43:56:2f:76:7d:2d:ee:41:f6:a8:39:d5: e9:c2:8e:ed:aa:3c:dd:b5:84:4f:f5:a1:6b:a6:11: 4d:82:42:53:49:5b:9c:72:65:45:8a:68:11:8a:a4: 17:e3:c6:ca:dd:df:d4:72:a1:fc:85:e1:f9:44:7a: 92:ee:86:28:c6:a5:b5:9f:3c:86:c8:c7:87:e9:2e: 18:0b:2f:15:b7:58:7c:6e:dd:c8:33:98:e2:f9:11: 94:c2:7e:6a:01:93:a8:96:f0:8a:54:0d:11:5f:14: db:0f:7a:35:10:3d:a8:1f:82:d2:9e:d4:29:a5:23: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:62:E0:8E:36:31:93:BB:EC:AE:D4:D4:6F:9E:B3:52:11:ED:D1:6E X509v3 Authority Key Identifier: keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b0:66:d4:01:5b:88:34:a5:32:41:65:af:90:ff:b9:21:82: 3b:d4:d5:78:c4:be:78:6b:18:17:0d:c4:43:ff:84:1b:53:15: 19:ce:a3:3c:a8:69:24:4c:a8:60:4b:2e:6e:0c:1b:56:2b:03: 8d:36:15:b1:2d:5f:2c:62:e8:c6:fa:25:5f:84:78:70:96:b6: 91:c5:7a:0b:31:8d:54:21:7e:7a:d8:60:f2:2a:3a:fb:02:e1: 9f:49:3f:15:cc:6a:0f:b8:49:1b:3c:02:c3:15:bb:ea:86:15: ef:93:a1:0a:18:3a:84:ae:6c:ea:c9:90:ea:15:c5:03:d7:ed: e7:6d:ea:59:46:cd:16:17:49:98:22:ef:c4:92:6c:b3:ea:73: 03:a4:97:84:0b:2f:7d:c4:37:7b:da:16:ed:d3:2a:37:03:d3: 12:fe:09:ac:7e:f0:58:58:ae:23:85:3e:56:d3:62:cc:5e:f6: d1:69:8f:5b:21:b2:ee:3e:c8:af:47:5c:cd:33:51:ee:24:25: 9b:a0:3e:f2:6e:59:d1:fd:b0:70:8a:fb:f3:46:78:86:d9:ec: e7:2c:04:de:64:89:ff:37:6a:b3:4d:54:88:3c:54:b6:fc:2b: 3a:81:66:02:bf:f4:ff:81:04:f9:0d:cb:2e:2b:28:32:54:89: 63:cd:33:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRVhwTLLq9etinMABWCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzljZWY0NThkZTUwMzkyZTNjMDJiNjkxODJmMzRjNjAx NDhkMjQwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EygxNTYyZTA4ZTM2MzE5M2JiZWNhZWQ0ZDQ2ZjllYjM1MjExZWRkMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrGxewTp+MSzEbHm7lXwM0v6zHLA rKV2PqK96viQKwdHT0kr5Va8Ijbs2wmWpQ4HP70unRANb6u3HLOqleB4UZ2+WYzY MS08Yfmb/5yz7+lMwE/qapRf7xG4aFUAaw7UwW/UbbzBblmspCyQxjbduKK6bRin XOWJLraBfqDSHYYamI3eQUGoyqVDVi92fS3uQfaoOdXpwo7tqjzdtYRP9aFrphFN gkJTSVuccmVFimgRiqQX48bK3d/UcqH8heH5RHqS7oYoxqW1nzyGyMeH6S4YCy8V t1h8bt3IM5ji+RGUwn5qAZOolvCKVA0RXxTbD3o1ED2oH4LSntQppSPSIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVi4I42MZO77K7U1G+es1IR7dFuMB8GA1UdIwQY MBaAFI55zvRY3lA5LjwCtpGC80xgFI0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMt Y2MxMjA4MTQ4NzI5LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMtY2MxMjA4MTQ4NzI5 LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLBm1AFb iDSlMkFlr5D/uSGCO9TVeMS+eGsYFw3EQ/+EG1MVGc6jPKhpJEyoYEsubgwbVisD jTYVsS1fLGLoxvolX4R4cJa2kcV6CzGNVCF+ethg8io6+wLhn0k/FcxqD7hJGzwC wxW76oYV75OhChg6hK5s6smQ6hXFA9ft523qWUbNFhdJmCLvxJJss+pzA6SXhAsv fcQ3e9oW7dMqNwPTEv4JrH7wWFiuI4U+VtNizF720WmPWyGy7j7Ir0dczTNR7iQl m6A+8m5Z0f2wcIr780Z4htns5ywE3mSJ/zdqs01UiDxUtvwrOoFmAr/0/4EE+Q3L LisoMlSJY80zhg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:04 2025 by rpki-client