This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft File: jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json) Hash identifier: yYAAcavh0HJN0H8VDJeim+Bg/hNUVSOW7DYwf7wA32c= Subject key identifier: C0:0F:C7:C8:F3:8F:CB:A2:08:AA:EF:DE:64:46:1B:49:08:2E:3E:1D Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b Certificate serial: 019AF23FE8B1DB6E39B7259E534A9CAA1AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=) 2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: gjL3bsJNjGDKnjqHBmV0I4p2rGqzW2aWInqMWTbV8GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e8:b1:db:6e:39:b7:25:9e:53:4a:9c:aa:1a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=c00fc7c8f38fcba208aaefde64461b49082e3e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:2a:97:d5:03:52:22:fb:a5:93:dc:99:68: 06:d8:19:95:c6:97:a6:86:1b:6d:5f:02:d3:f8:0f: af:7f:34:85:bb:da:ae:a2:b7:9c:14:6e:22:1a:78: 24:88:91:cb:16:e5:d4:d3:bb:f1:03:3e:4d:2f:81: ac:34:2c:16:7b:1e:05:4b:9a:88:ab:36:53:54:30: bd:2f:56:e8:2a:2e:2d:97:c3:92:20:88:c2:26:74: fe:24:6c:17:04:dc:87:3d:51:89:53:8c:90:a8:28: 16:a4:2c:30:cb:91:b9:2d:5b:2a:c3:34:d9:90:38: 43:05:db:7f:07:8a:50:91:ea:35:34:8c:a3:bf:78: 1e:e3:40:8e:82:c1:26:6e:1a:97:2e:6e:c2:88:2a: 68:f5:66:4b:6d:5d:4f:7c:39:fb:e8:37:e8:d9:82: 26:ce:f9:47:29:2d:7d:1d:9b:57:9c:ab:75:1b:33: b7:ad:31:47:f7:7f:ba:e3:72:25:0b:72:33:8b:10: 60:dc:4d:3c:96:32:a1:7d:58:71:ba:fc:dd:40:3c: 2c:72:1b:3c:7d:3a:68:37:49:28:5f:90:26:ad:a9: 07:e7:b5:74:72:d5:be:ce:e5:bd:cc:72:59:c0:c7: 24:f2:f0:9a:59:01:c9:17:dd:1b:c5:68:23:7e:f4: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:C7:C8:F3:8F:CB:A2:08:AA:EF:DE:64:46:1B:49:08:2E:3E:1D X509v3 Authority Key Identifier: keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8c:60:b2:78:81:b8:2a:02:70:c7:1b:61:94:7b:f3:9a:b0: 5d:95:ca:be:f9:cb:c8:dc:a0:63:c3:24:0a:50:f7:16:50:91: 36:db:8d:fb:1f:79:89:ba:a4:81:50:82:80:4e:31:d0:42:60: d5:3c:fa:e1:69:8a:15:6c:3b:af:fa:06:4e:de:28:90:de:b3: 61:41:35:6b:96:0e:26:9e:2d:6b:80:c7:5d:5e:2d:cd:4b:f7: e1:a7:3a:94:42:bc:2d:fb:02:8d:4f:98:d1:2f:c0:7d:15:18: 94:05:93:40:81:81:fd:1e:09:82:91:48:38:c0:a6:20:50:0b: b2:5e:d3:44:51:66:bd:0a:b0:2d:16:3f:77:5c:91:ae:b6:06: fb:a8:94:87:56:e7:8b:9b:04:c9:cf:cd:79:4c:b1:75:84:38: f6:3c:ee:d8:cd:db:fd:14:3d:cf:f9:0b:b1:b3:ba:8d:bd:1e: a3:39:e0:15:48:f1:4a:e9:2f:2b:b1:22:d8:13:4a:ec:29:bd: d2:9a:24:7e:eb:14:43:e4:22:59:54:fc:3f:d1:f7:6a:3e:c0: 5e:86:78:82:f6:b0:e6:c5:42:31:92:cc:cf:33:d7:d3:ad:b3: d7:ca:ee:0d:73:c9:cc:bc:bb:ba:5e:80:9c:87:44:de:b0:6e: f0:88:cd:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+ix2245tyWeU0qcqhqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2FlZTM1NTlmY2MzMWJmZWQ3N2VlY2U4Yjc0NzljOGU4 NTZhNWIwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EyhjMDBmYzdjOGYzOGZjYmEyMDhhYWVmZGU2NDQ2MWI0OTA4MmUzZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumIql9UDUiL7pZPcmWgG2BmVxpem hhttXwLT+A+vfzSFu9quorecFG4iGngkiJHLFuXU07vxAz5NL4GsNCwWex4FS5qI qzZTVDC9L1boKi4tl8OSIIjCJnT+JGwXBNyHPVGJU4yQqCgWpCwwy5G5LVsqwzTZ kDhDBdt/B4pQkeo1NIyjv3ge40COgsEmbhqXLm7CiCpo9WZLbV1PfDn76Dfo2YIm zvlHKS19HZtXnKt1GzO3rTFH93+643IlC3IzixBg3E08ljKhfVhxuvzdQDwschs8 fTpoN0koX5AmrakH57V0ctW+zuW9zHJZwMck8vCaWQHJF90bxWgjfvTrKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAPx8jzj8uiCKrv3mRGG0kILj4dMB8GA1UdIwQY MBaAFI567jVZ/MMb/td+7Oi3R5yOhWpbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct OTExNjBiYjRjNjU5LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5 LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIxgsniB uCoCcMcbYZR785qwXZXKvvnLyNygY8MkClD3FlCRNtuN+x95ibqkgVCCgE4x0EJg 1Tz64WmKFWw7r/oGTt4okN6zYUE1a5YOJp4ta4DHXV4tzUv34ac6lEK8LfsCjU+Y 0S/AfRUYlAWTQIGB/R4JgpFIOMCmIFALsl7TRFFmvQqwLRY/d1yRrrYG+6iUh1bn i5sEyc/NeUyxdYQ49jzu2M3b/RQ9z/kLsbO6jb0eozngFUjxSukvK7Ei2BNK7Cm9 0pokfusUQ+QiWVT8P9H3aj7AXoZ4gvaw5sVCMZLMzzPX062z18ruDXPJzLy7ul6A nIdE3rBu8IjNDg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:10 2025 by rpki-client