This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json) Hash identifier: jdQyQF/WjJKSqF80zZ/UqDYhG+TZlNMI94ePLNXrQm4= Subject key identifier: 22:5F:CE:7E:3D:BF:D9:AD:EB:DD:4C:6C:F4:E5:D5:7F:6A:11:14:50 Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Certificate serial: 019B39EAA9391C3FF51F07C0EDA462F2AFC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 04:00:38 +0000 Manifest this update: Sat 20 Dec 2025 04:00:38 +0000 Manifest next update: Sun 21 Dec 2025 04:00:38 +0000 Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: 7TbwjxrbgW6M3F7ldVA5THbtgZHSWvovSsL39sa9Ong=) 2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:a9:39:1c:3f:f5:1f:07:c0:ed:a4:62:f2:af:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Validity Not Before: Dec 20 04:00:38 2025 GMT Not After : Dec 21 04:00:38 2025 GMT Subject: CN=225fce7e3dbfd9adebdd4c6cf4e5d57f6a111450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:56:46:c5:59:66:5f:be:28:20:78:30:f5: 05:2b:3a:e0:1c:53:11:eb:c9:9f:32:4f:2a:d7:1e: 62:47:16:59:d3:6c:62:f0:33:f3:b8:37:09:91:f3: b8:08:32:93:28:70:86:c0:e1:e6:b5:36:43:9d:18: ba:df:1e:a4:dd:03:3c:a6:83:73:90:54:c4:fd:68: 67:a2:5d:17:4b:8b:8a:76:a5:76:70:9a:3b:8b:3c: d1:3c:bf:50:26:40:fa:90:88:35:65:e1:e2:50:95: 09:9e:a8:06:2d:53:bd:28:6e:0c:7e:87:1b:6a:a6: f5:42:31:0d:99:72:7b:20:98:a7:90:15:59:0e:b5: 3c:e3:43:63:15:48:bb:bf:7b:64:b1:a9:6a:86:20: c9:5b:68:fa:9a:fd:c0:cb:8c:3d:73:c2:f2:f7:0f: b4:31:9b:cf:c8:16:47:be:a4:3f:bd:54:5a:c5:4e: 47:7d:07:7e:35:6c:48:1a:af:46:f8:b6:a3:cd:29: 81:e0:65:c8:39:78:dd:27:cf:9a:f0:fd:ad:e5:75: 7b:d4:76:27:de:27:d6:29:83:38:e4:76:39:aa:69: e0:c4:70:e7:d5:0c:8d:ff:a5:94:2b:62:dd:8f:9e: b7:85:15:58:c9:b1:61:c4:85:84:70:d1:07:6f:93: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:CE:7E:3D:BF:D9:AD:EB:DD:4C:6C:F4:E5:D5:7F:6A:11:14:50 X509v3 Authority Key Identifier: keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:40:52:9f:82:dc:20:2c:31:82:23:a5:da:e2:ea:d3:a5:77: f5:b6:95:fb:ad:cc:92:4e:f5:1a:76:3f:eb:64:e2:a6:71:bd: de:6f:23:24:25:ba:f8:12:98:af:11:41:11:a5:77:fc:b9:4b: a8:00:5c:2a:91:7c:27:2c:a7:3d:d7:11:b2:c2:8c:cb:dc:b8: 95:bc:8f:d8:73:bf:81:c3:d4:f8:14:7b:5d:97:d3:1a:11:05: f8:8c:31:93:b7:2c:75:08:f8:ca:94:c4:15:ba:b0:20:17:65: 7f:e7:f0:68:19:ba:78:ed:17:cf:a9:02:05:86:e6:99:d2:5e: 55:e1:54:ec:af:5a:73:28:cd:b8:27:a7:16:1e:2d:73:bd:4a: 2d:4b:2f:8b:ca:b0:01:19:e8:b8:18:55:3b:5c:9e:00:dd:1f: 44:d8:db:19:2c:24:a1:b3:79:92:ec:b4:0a:56:a1:fc:0d:06: f7:6e:b1:0d:7d:cd:10:6d:8f:d6:45:49:f4:f1:d9:59:29:75: 3d:35:02:6b:1d:12:a1:7c:f5:0b:ed:ea:dd:80:dc:f0:7f:ec: 78:86:44:80:96:9f:d1:47:2e:ed:1f:c2:6a:5f:85:97:55:29: 9a:eb:8f:e2:f1:83:b0:c1:8f:88:31:73:67:aa:ee:16:6d:41: 9d:d7:1f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56qk5HD/1HwfA7aRi8q/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDlkNjFmODNlMGQ3ZTgzMDhhNmNkZTRkZDMxNWRkNzU3 NTZjMDMwHhcNMjUxMjIwMDQwMDM4WhcNMjUxMjIxMDQwMDM4WjAzMTEwLwYDVQQD EygyMjVmY2U3ZTNkYmZkOWFkZWJkZDRjNmNmNGU1ZDU3ZjZhMTExNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2dWRsVZZl++KCB4MPUFKzrgHFMR 68mfMk8q1x5iRxZZ02xi8DPzuDcJkfO4CDKTKHCGwOHmtTZDnRi63x6k3QM8poNz kFTE/Whnol0XS4uKdqV2cJo7izzRPL9QJkD6kIg1ZeHiUJUJnqgGLVO9KG4Mfocb aqb1QjENmXJ7IJinkBVZDrU840NjFUi7v3tksalqhiDJW2j6mv3Ay4w9c8Ly9w+0 MZvPyBZHvqQ/vVRaxU5HfQd+NWxIGq9G+LajzSmB4GXIOXjdJ8+a8P2t5XV71HYn 3ifWKYM45HY5qmngxHDn1QyN/6WUK2Ldj563hRVYybFhxIWEcNEHb5PcrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJfzn49v9mt691MbPTl1X9qERRQMB8GA1UdIwQY MBaAFIzZ1h+D4NfoMIps3k3TFd11dWwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMt ZDJkNTc4NDNhMjdkLzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMtZDJkNTc4NDNhMjdk LzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkBSn4Lc ICwxgiOl2uLq06V39baV+63Mkk71GnY/62TipnG93m8jJCW6+BKYrxFBEaV3/LlL qABcKpF8JyynPdcRssKMy9y4lbyP2HO/gcPU+BR7XZfTGhEF+Iwxk7csdQj4ypTE FbqwIBdlf+fwaBm6eO0Xz6kCBYbmmdJeVeFU7K9acyjNuCenFh4tc71KLUsvi8qw ARnouBhVO1yeAN0fRNjbGSwkobN5kuy0Clah/A0G926xDX3NEG2P1kVJ9PHZWSl1 PTUCax0SoXz1C+3q3YDc8H/seIZEgJaf0Ucu7R/Cal+Fl1UpmuuP4vGDsMGPiDFz Z6ruFm1BndcfKA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:52:12 2025 by rpki-client