This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft File: JNnaT_sbttJz3hutXbvw0f9H8M8.mft (raw, json) Hash identifier: eDa4cnqoi9ueAMeGm3G9GucFY71YxAx7nInydPimpDA= Subject key identifier: 20:6D:82:EE:53:42:15:0F:83:FD:F6:BC:60:4C:EA:A5:F5:C6:45:0E Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Certificate serial: 019AF4D2A1C8692CBC97FF554B4706613C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft Manifest number: 0ABA Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: JNnaT_sbttJz3hutXbvw0f9H8M8.crl (hash: zCdppEYnwg055nBW9EWf2jiHFo5aCq+tM2HimDjQ8NI=) 2: Src3e8VuS0hETCVSGIFEjeLOMa8.roa (hash: njCoKOW4dwM2EVWN+8GygMrZoisLQ05lRLtnj2idXYo=) 3: bsjqTGHnHTlXLQDwHt42FrTQ4XI.roa (hash: 5TEmTF9QMkO+GoOlxcIQi8LSgW81Et7TXh9cCxjR0Vw=) 4: j-4nIPBb-aq6CAJ-W9Awbtdt9qo.roa (hash: PgliSI3WojfBCbzjo5JeNJIiPKE+MF/2WuUVaa/wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a1:c8:69:2c:bc:97:ff:55:4b:47:06:61:3c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=206d82ee5342150f83fdf6bc604ceaa5f5c6450e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:8d:3a:ce:99:8e:35:e6:0e:fb:60:ad:00: a5:18:e9:fc:32:d1:31:8f:bd:25:58:68:e7:c4:bf: d8:d3:a6:84:ef:13:c1:26:1e:d2:b8:f7:4a:97:2e: 98:88:ad:ab:ab:97:67:6d:71:8f:bd:35:d1:6f:cf: 09:ad:8f:0a:03:0b:59:7a:75:1d:fe:ac:2d:63:52: af:09:6e:69:5b:d7:52:db:09:51:a7:41:5d:2d:f7: 62:dc:85:a4:2f:e0:d2:19:6f:59:ac:53:4c:50:1b: 3c:88:15:19:a0:8c:fc:45:50:17:02:f7:10:a6:19: 66:8f:2c:34:d0:5c:76:67:11:65:9b:8a:d9:e4:5b: e5:82:38:01:22:f0:5d:f2:79:15:83:93:b1:b8:8a: 74:33:8f:f4:81:0e:7a:7d:50:cf:d5:be:6f:d1:1f: df:eb:02:8b:3f:44:12:01:4e:12:9d:91:0d:fe:e3: 93:ad:af:be:6b:47:bf:80:1f:f9:31:35:7d:26:9f: 0c:a2:42:1c:21:f0:87:60:be:c4:d9:3e:54:84:68: bd:14:9d:94:4a:22:b2:46:1d:b1:ea:62:24:f4:a6: a5:9d:5d:82:f5:13:6b:be:c0:88:af:c0:a0:3a:87: 16:b5:f9:21:e9:34:d1:44:0b:b7:b5:ff:78:ee:ac: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6D:82:EE:53:42:15:0F:83:FD:F6:BC:60:4C:EA:A5:F5:C6:45:0E X509v3 Authority Key Identifier: keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ec:b6:dd:e5:88:3b:11:fd:0d:ca:47:8a:eb:21:83:3f:20: da:a5:b4:d5:8a:d8:08:33:db:13:7d:4d:c4:9c:fe:8d:ac:24: 8a:35:5a:90:ed:af:6b:6d:5d:b6:f1:c7:2d:78:00:10:03:e3: 1c:cf:ed:3c:6d:44:b4:57:80:26:1d:30:39:d7:36:ce:0b:3e: ee:cb:93:86:a8:d2:0d:5c:87:95:fe:80:5c:66:56:0a:eb:59: 7a:08:e6:ef:7c:15:04:bc:0b:40:49:7d:60:c1:ef:01:5f:60: ce:99:ba:40:ab:33:11:e1:37:6c:d6:71:b8:2f:31:90:3b:1b: 25:e6:3d:e7:3e:ec:35:f6:75:c9:a2:53:11:3c:74:21:cf:93: 4a:38:5a:9e:38:14:4b:f0:5c:04:49:aa:9a:bd:16:24:d3:58: 75:ed:c5:f4:39:15:9f:84:c8:ab:e5:0d:89:99:8b:1e:3b:09: 7e:c6:b3:ce:58:c5:10:1d:64:e5:b9:30:3b:46:92:24:17:b9: f4:f8:52:d4:51:1b:b5:01:9b:59:e9:99:46:39:5d:83:1f:2e: d3:9b:4e:4b:b1:21:62:66:9e:51:43:13:d0:2b:e1:28:57:be: b8:58:65:e8:a9:bc:18:b2:c7:0c:d7:68:30:2a:ed:9d:eb:39: 4e:cd:35:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qHIaSy8l/9VS0cGYTxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0 N2YwY2YwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD EygyMDZkODJlZTUzNDIxNTBmODNmZGY2YmM2MDRjZWFhNWY1YzY0NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgqNOs6ZjjXmDvtgrQClGOn8MtEx j70lWGjnxL/Y06aE7xPBJh7SuPdKly6YiK2rq5dnbXGPvTXRb88JrY8KAwtZenUd /qwtY1KvCW5pW9dS2wlRp0FdLfdi3IWkL+DSGW9ZrFNMUBs8iBUZoIz8RVAXAvcQ phlmjyw00Fx2ZxFlm4rZ5FvlgjgBIvBd8nkVg5OxuIp0M4/0gQ56fVDP1b5v0R/f 6wKLP0QSAU4SnZEN/uOTra++a0e/gB/5MTV9Jp8MokIcIfCHYL7E2T5UhGi9FJ2U SiKyRh2x6mIk9KalnV2C9RNrvsCIr8CgOocWtfkh6TTRRAu3tf947qyGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBtgu5TQhUPg/32vGBM6qX1xkUOMB8GA1UdIwQY MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt OGEwM2E3YzFmZTliLzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+y23eWI OxH9DcpHiushgz8g2qW01YrYCDPbE31NxJz+jawkijVakO2va21dtvHHLXgAEAPj HM/tPG1EtFeAJh0wOdc2zgs+7suThqjSDVyHlf6AXGZWCutZegjm73wVBLwLQEl9 YMHvAV9gzpm6QKszEeE3bNZxuC8xkDsbJeY95z7sNfZ1yaJTETx0Ic+TSjhanjgU S/BcBEmqmr0WJNNYde3F9DkVn4TIq+UNiZmLHjsJfsazzljFEB1k5bkwO0aSJBe5 9PhS1FEbtQGbWemZRjldgx8u05tOS7EhYmaeUUMT0CvhKFe+uFhl6Km8GLLHDNdo MCrtnes5Ts01jw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:22 2025 by rpki-client