This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json) Hash identifier: LAtVWP98NB0qxq5+H3mqS7Rs6oyWQdAmrlMLEgQRvc0= Subject key identifier: E3:57:B6:05:AA:0E:24:9C:D1:72:FC:FF:F3:A3:E8:7D:E3:03:74:BE Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Certificate serial: 019AF12D3168443B181CDA0406EE0AEDEA32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft Manifest number: 108D Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=) 2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: ML7EbY7CJVK3tVtMPSGJrvy5+ATJnqhTv06Ma5KZd6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:31:68:44:3b:18:1c:da:04:06:ee:0a:ed:ea:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=e357b605aa0e249cd172fcfff3a3e87de30374be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:2a:98:cc:37:0e:26:47:0d:8e:72:51:a6: 66:1a:3f:40:9a:15:cb:1e:3c:16:60:3c:e8:8f:1e: a0:26:b2:c6:75:fc:99:b3:35:9f:6b:0f:44:84:98: 85:c2:6d:a0:b3:25:ad:3e:0b:d3:a4:6b:99:68:2d: 64:af:50:08:32:29:93:1a:9b:4f:40:86:c0:76:73: c8:e0:c5:93:53:00:35:4f:f9:a2:e4:d7:7a:90:62: b6:f6:72:f2:10:b8:11:d0:15:5d:a8:a8:c7:49:05: 97:a7:a7:05:3d:d7:38:be:d4:56:d6:5f:29:45:9f: 56:2f:69:8a:63:d8:d7:48:e7:15:6a:a2:b6:b7:fe: c9:8c:0a:c8:19:13:4a:cd:be:5a:ad:b8:05:61:18: 2a:f4:f5:d2:ee:67:15:be:ec:e7:b6:61:d7:df:0c: c9:66:e8:0c:d2:6f:f8:c3:08:0c:a2:cc:60:f1:39: 63:98:83:18:02:7b:62:e9:f8:e6:8f:2b:9f:b9:62: b2:82:9d:66:1f:31:d1:18:c5:73:a0:4d:f2:69:dd: 76:4e:31:07:56:0a:92:02:38:47:aa:f1:d9:13:db: 45:b5:4f:c8:94:53:75:c4:da:ce:31:ea:3e:a8:94: fa:57:ba:7f:a2:ca:14:d2:9c:9e:dd:66:5e:74:40: fb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:57:B6:05:AA:0E:24:9C:D1:72:FC:FF:F3:A3:E8:7D:E3:03:74:BE X509v3 Authority Key Identifier: keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:60:fb:cf:bc:b7:9b:00:7d:4d:43:19:dc:ef:95:8a:7b:57: 50:ab:3a:56:d9:9c:5f:d0:dc:ab:0c:46:bc:a1:7a:71:5f:17: 56:72:67:f6:d2:62:08:5d:af:bd:aa:8b:26:40:95:d5:e9:25: c8:72:82:36:5f:0f:d2:c8:f0:46:b3:85:ea:e0:33:2c:d2:84: f0:39:a6:fb:50:d2:5b:8b:15:2f:9b:b0:59:81:40:42:1e:d8: 43:f3:18:6b:76:ec:49:68:77:14:4c:ac:e5:ce:49:76:27:56: 9e:98:57:fa:0c:1f:b0:3d:12:7b:0d:16:ef:b7:0b:9a:90:a4: 01:33:e5:a8:71:da:dd:42:81:f7:93:bf:92:fc:78:ff:98:1d: 6a:74:b9:5c:48:6f:cc:3b:5d:38:23:43:59:df:ca:ba:e6:33: 4c:63:5f:8e:3f:6f:1f:12:50:06:cf:f7:35:33:7c:8e:47:31: 1a:39:c7:54:b3:49:35:01:18:ad:b3:6f:4b:3c:00:f4:2a:7b: e8:95:d9:65:51:9f:6f:ae:44:42:23:b7:cd:82:ca:26:4d:1e: 99:33:cd:1b:56:af:40:97:a7:9e:ce:c8:e6:74:0d:9e:79:85: 6d:2e:b9:cf:fd:02:42:09:fb:77:0c:c1:cd:f2:b6:e9:fd:41: d1:a8:ba:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTFoRDsYHNoEBu4K7eoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh ZWQwYjEwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD EyhlMzU3YjYwNWFhMGUyNDljZDE3MmZjZmZmM2EzZTg3ZGUzMDM3NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYsqmMw3DiZHDY5yUaZmGj9AmhXL HjwWYDzojx6gJrLGdfyZszWfaw9EhJiFwm2gsyWtPgvTpGuZaC1kr1AIMimTGptP QIbAdnPI4MWTUwA1T/mi5Nd6kGK29nLyELgR0BVdqKjHSQWXp6cFPdc4vtRW1l8p RZ9WL2mKY9jXSOcVaqK2t/7JjArIGRNKzb5arbgFYRgq9PXS7mcVvuzntmHX3wzJ ZugM0m/4wwgMosxg8TljmIMYAnti6fjmjyufuWKygp1mHzHRGMVzoE3yad12TjEH VgqSAjhHqvHZE9tFtU/IlFN1xNrOMeo+qJT6V7p/osoU0pye3WZedED7wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONXtgWqDiSc0XL8//Oj6H3jA3S+MB8GA1UdIwQY MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomD7z7y3 mwB9TUMZ3O+VintXUKs6VtmcX9DcqwxGvKF6cV8XVnJn9tJiCF2vvaqLJkCV1ekl yHKCNl8P0sjwRrOF6uAzLNKE8Dmm+1DSW4sVL5uwWYFAQh7YQ/MYa3bsSWh3FEys 5c5JdidWnphX+gwfsD0Sew0W77cLmpCkATPlqHHa3UKB95O/kvx4/5gdanS5XEhv zDtdOCNDWd/KuuYzTGNfjj9vHxJQBs/3NTN8jkcxGjnHVLNJNQEYrbNvSzwA9Cp7 6JXZZVGfb65EQiO3zYLKJk0emTPNG1avQJenns7I5nQNnnmFbS65z/0CQgn7dwzB zfK26f1B0ai65w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:40 2025 by rpki-client