This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft File: jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json) Hash identifier: nPOUrHqtS4lQ6pE4rWeSbfO2nIIBxKiF1ATP+1wf9uQ= Subject key identifier: 16:9E:41:2B:87:CA:14:52:13:6D:31:96:4A:8D:40:4D:ED:6D:65:8F Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc Certificate serial: 019AF1647BFF4354A053169CB7C751DFF547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft Manifest number: 0773 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=) 2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: GjDvIjHjCS9JUnSnfU97KqiKMEkXeNLsB1sIAjc79Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7b:ff:43:54:a0:53:16:9c:b7:c7:51:df:f5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=169e412b87ca1452136d31964a8d404ded6d658f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7b:d9:17:e0:58:b2:72:25:e7:ab:a3:45:e3: e6:a2:88:f2:8a:25:d5:a8:db:ba:99:d1:6e:b3:24: 21:e9:93:81:a1:53:fe:77:02:9e:5c:c3:6e:09:f3: 4d:59:3f:42:d8:09:5f:58:70:37:d1:21:06:b8:ee: 20:a4:15:5e:49:a2:41:e8:7b:3a:22:58:7e:32:2d: 3a:1f:a3:79:0f:fb:9c:e1:ef:f2:32:9a:c7:58:b6: 13:51:3d:b6:e2:f3:57:cf:aa:2d:18:17:52:eb:a4: 81:d8:49:9f:2b:fc:79:5f:23:79:00:8a:7a:6f:9b: 57:60:87:8e:aa:07:a0:49:1f:da:9f:ca:5e:74:ff: 02:b1:a8:89:c3:e2:6f:29:d5:ae:fc:70:22:52:59: 05:5b:60:0d:be:08:0b:51:44:79:2a:10:73:91:51: 9b:b7:78:bc:43:36:c8:fc:77:b3:67:7c:93:33:6d: e9:15:5f:dd:96:ce:ce:a7:ab:e3:99:fc:d1:15:24: fd:e3:da:72:8f:ab:7a:18:06:04:c6:22:bf:0b:a8: ea:af:e1:9d:c8:4b:ee:02:71:fb:e6:40:72:b4:d8: 03:67:e4:01:bc:f1:4b:f2:8c:32:46:0b:4e:fd:a2: fa:21:04:11:dd:05:2d:5a:0b:3c:fe:7e:ba:2d:9d: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:41:2B:87:CA:14:52:13:6D:31:96:4A:8D:40:4D:ED:6D:65:8F X509v3 Authority Key Identifier: keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:69:bf:61:13:ad:5d:f4:fd:54:19:27:17:b4:a5:21:c0:8e: 25:60:93:46:cd:01:a4:08:2b:ce:aa:87:23:24:d5:f4:a6:f1: af:f7:fc:37:65:54:c9:10:ce:f0:10:85:e4:53:fc:b8:54:bc: 5e:79:75:07:31:05:d5:23:fb:82:fe:6f:cd:db:ee:59:0c:a8: 4c:0b:5a:fb:ca:f7:80:84:f5:ad:ab:c5:8a:54:96:95:e5:c0: 1a:8e:e3:61:c2:f1:00:50:1e:42:ce:fb:0a:1b:d7:46:d2:4e: 73:1b:a5:84:6d:6d:0f:63:9c:13:7d:6b:7c:d4:8a:ed:3a:6a: 1f:cf:12:09:f9:3d:f4:f7:0f:b2:1b:aa:23:0d:f5:52:e1:08: 74:3f:4e:b1:24:05:fd:52:6c:8e:13:0d:bb:5f:bd:55:bd:22: d9:b6:67:36:b9:9a:98:a7:a5:8b:22:44:17:4c:1f:fb:1b:53: ae:d2:08:10:35:c6:a7:6a:83:27:7e:fd:07:08:07:e6:a0:ab: ee:7e:83:1b:b5:6e:65:dc:0a:26:30:c6:36:44:2f:bc:38:24: 16:69:38:26:22:9c:3f:e4:c2:b7:38:b0:ae:40:88:e8:a9:bc: ef:88:b9:84:bf:ad:c5:11:a5:dc:7f:33:f3:5a:58:bd:27:e4: 88:24:1b:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHv/Q1SgUxact8dR3/VHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2ZiNWY1Mjg0N2YyMTcwZTY3ZmNjMjVhZGYwYjVkNjg2 ZmZhZmMwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EygxNjllNDEyYjg3Y2ExNDUyMTM2ZDMxOTY0YThkNDA0ZGVkNmQ2NThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XvZF+BYsnIl56ujRePmoojyiiXV qNu6mdFusyQh6ZOBoVP+dwKeXMNuCfNNWT9C2AlfWHA30SEGuO4gpBVeSaJB6Hs6 Ilh+Mi06H6N5D/uc4e/yMprHWLYTUT224vNXz6otGBdS66SB2EmfK/x5XyN5AIp6 b5tXYIeOqgegSR/an8pedP8CsaiJw+JvKdWu/HAiUlkFW2ANvggLUUR5KhBzkVGb t3i8QzbI/HezZ3yTM23pFV/dls7Op6vjmfzRFST949pyj6t6GAYExiK/C6jqr+Gd yEvuAnH75kBytNgDZ+QBvPFL8owyRgtO/aL6IQQR3QUtWgs8/n66LZ3T/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaeQSuHyhRSE20xlkqNQE3tbWWPMB8GA1UdIwQY MBaAFI5/tfUoR/IXDmf8wlrfC11ob/r8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYzc3MGUtNDFkYS00ZDM2LTk3ZTIt MTYxOGQ1ZWVhYWU4LzEvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hYzc3MGUtNDFkYS00ZDM2LTk3ZTItMTYxOGQ1ZWVhYWU4 LzEvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2m/YROt XfT9VBknF7SlIcCOJWCTRs0BpAgrzqqHIyTV9Kbxr/f8N2VUyRDO8BCF5FP8uFS8 Xnl1BzEF1SP7gv5vzdvuWQyoTAta+8r3gIT1ravFilSWleXAGo7jYcLxAFAeQs77 ChvXRtJOcxulhG1tD2OcE31rfNSK7TpqH88SCfk99PcPshuqIw31UuEIdD9OsSQF /VJsjhMNu1+9Vb0i2bZnNrmamKeliyJEF0wf+xtTrtIIEDXGp2qDJ379BwgH5qCr 7n6DG7VuZdwKJjDGNkQvvDgkFmk4JiKcP+TCtziwrkCI6Km874i5hL+txRGl3H8z 81pYvSfkiCQbvA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:40 2025 by rpki-client