This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json) Hash identifier: PnDChp6AqXeJCDVlBuucgVJTaFncb0IgkdEmfgp4dPI= Subject key identifier: F4:AE:8E:97:1D:32:2C:3D:73:32:3A:C2:AA:AF:65:90:13:F3:EA:3E Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Certificate serial: 019AF2765B146A7F60D5C5F6EDCDD3786320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: FfILJ/q2Y0FWGrRUmqx+gDFYkjb9WDy6gCWoeNzeldQ=) 2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5b:14:6a:7f:60:d5:c5:f6:ed:cd:d3:78:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=f4ae8e971d322c3d73323ac2aaaf659013f3ea3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:be:7f:a4:b4:cb:a5:27:4f:03:d9:3a:5a: c6:d9:72:ab:0d:af:0d:a2:f6:21:45:a7:28:c7:e6: 2c:3b:27:cb:7d:f5:e6:79:30:31:73:ab:35:ed:13: 1d:3d:cd:b8:be:2a:9a:80:db:ea:74:ae:ca:71:5a: e2:53:5a:34:1c:bd:77:3a:0a:40:83:59:8a:08:f9: d0:ff:34:1d:1f:1a:13:9a:b9:0d:8a:5b:d6:78:3b: 8b:84:21:e3:d5:2b:34:4c:1d:ea:a1:82:c8:5a:66: 5d:46:7f:7b:d8:13:ba:42:64:58:63:c7:e2:83:de: d9:ab:42:5b:bd:11:20:49:50:bb:7a:7b:38:1b:23: 5c:c5:3a:ff:70:11:67:51:29:92:92:af:55:05:fa: e5:a6:6a:13:18:8c:60:af:62:d3:bf:ee:d5:13:08: f4:1e:73:b2:7e:2b:21:0a:c5:37:8f:d1:d6:06:69: 77:f8:04:31:19:a2:c8:60:e0:62:8b:21:10:1d:5e: 72:ef:ae:78:2f:48:a1:05:6a:42:c7:ff:e4:b4:af: 92:16:e9:2b:88:de:dd:27:6a:25:95:32:f8:34:07: d4:c4:f7:c6:b9:e8:3c:21:9e:02:ee:98:66:46:7c: d9:be:a3:c6:a2:c2:b6:90:ba:e6:60:c3:10:bf:d8: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:8E:97:1D:32:2C:3D:73:32:3A:C2:AA:AF:65:90:13:F3:EA:3E X509v3 Authority Key Identifier: keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:96:6e:3c:62:e3:66:1d:2f:ac:1d:b8:72:94:7e:d6:73:29: d1:83:a8:c7:06:99:e7:5b:62:18:5f:c3:42:69:83:e9:3b:df: 06:17:6b:55:15:cd:47:77:8c:b1:20:79:a5:56:5e:58:fe:70: 70:2d:b6:f1:27:f4:99:06:12:59:f1:9c:c7:b0:6b:fe:ee:a3: b5:5b:99:00:e8:b9:93:6f:53:a2:ce:6c:76:44:ef:fe:c1:54: 65:a5:99:35:ed:15:f9:f1:df:2f:b3:0d:e9:69:35:21:25:7f: eb:22:31:fe:32:8a:a9:6e:bc:77:05:db:8f:c2:a0:05:a7:85: 7f:9b:04:d1:a4:18:7f:dd:c4:fc:8c:8a:39:8d:f0:df:f2:7b: 92:e6:7b:59:77:c4:ae:dc:05:5a:8e:94:aa:70:67:bf:df:1e: ab:5a:fb:1b:3b:66:d9:e9:66:1b:8a:24:d3:c2:00:4a:18:ec: a8:58:c2:aa:77:60:8c:8a:7b:db:f6:6e:c6:11:78:45:64:e5: 08:22:45:fe:74:8b:f0:b4:a6:64:a3:d4:5a:42:e2:f4:45:e3: 19:d4:98:7b:01:35:27:98:d7:91:58:42:cb:0e:0e:d1:24:40: 6b:ce:90:65:1d:e4:a1:48:a6:65:80:29:c1:e3:04:02:d6:a9: 8e:a5:58:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlsUan9g1cX27c3TeGMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDlkNjFmODNlMGQ3ZTgzMDhhNmNkZTRkZDMxNWRkNzU3 NTZjMDMwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EyhmNGFlOGU5NzFkMzIyYzNkNzMzMjNhYzJhYWFmNjU5MDEzZjNlYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCS+f6S0y6UnTwPZOlrG2XKrDa8N ovYhRacox+YsOyfLffXmeTAxc6s17RMdPc24viqagNvqdK7KcVriU1o0HL13OgpA g1mKCPnQ/zQdHxoTmrkNilvWeDuLhCHj1Ss0TB3qoYLIWmZdRn972BO6QmRYY8fi g97Zq0JbvREgSVC7ens4GyNcxTr/cBFnUSmSkq9VBfrlpmoTGIxgr2LTv+7VEwj0 HnOyfishCsU3j9HWBml3+AQxGaLIYOBiiyEQHV5y7654L0ihBWpCx//ktK+SFukr iN7dJ2ollTL4NAfUxPfGueg8IZ4C7phmRnzZvqPGosK2kLrmYMMQv9hq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSujpcdMiw9czI6wqqvZZAT8+o+MB8GA1UdIwQY MBaAFIzZ1h+D4NfoMIps3k3TFd11dWwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMt ZDJkNTc4NDNhMjdkLzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMtZDJkNTc4NDNhMjdk LzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJZuPGLj Zh0vrB24cpR+1nMp0YOoxwaZ51tiGF/DQmmD6TvfBhdrVRXNR3eMsSB5pVZeWP5w cC228Sf0mQYSWfGcx7Br/u6jtVuZAOi5k29Tos5sdkTv/sFUZaWZNe0V+fHfL7MN 6Wk1ISV/6yIx/jKKqW68dwXbj8KgBaeFf5sE0aQYf93E/IyKOY3w3/J7kuZ7WXfE rtwFWo6UqnBnv98eq1r7Gztm2elmG4ok08IAShjsqFjCqndgjIp72/ZuxhF4RWTl CCJF/nSL8LSmZKPUWkLi9EXjGdSYewE1J5jXkVhCyw4O0SRAa86QZR3koUimZYAp weMEAtapjqVYkA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:59 2025 by rpki-client