This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json) Hash identifier: bxLp6egJ7iKl2VQ/anxmZGYRPIduTxBRAF+Zb8PgGps= Subject key identifier: 1B:E1:A6:60:D6:F5:1E:E3:65:BF:A8:E3:59:79:1A:DC:0E:EA:7A:E6 Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Certificate serial: 019B55D06535BAB0492101F7AB21766A5187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft Manifest number: 0A86 Signing time: Thu 25 Dec 2025 14:01:19 +0000 Manifest this update: Thu 25 Dec 2025 14:01:19 +0000 Manifest next update: Fri 26 Dec 2025 14:01:19 +0000 Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=) 2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: pf9TDgXLhODc7JKTC9KBpMh+J8NNhBa5Z5sFy362J+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:65:35:ba:b0:49:21:01:f7:ab:21:76:6a:51:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Validity Not Before: Dec 25 14:01:19 2025 GMT Not After : Dec 26 14:01:19 2025 GMT Subject: CN=1be1a660d6f51ee365bfa8e359791adc0eea7ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:f7:70:44:2a:e4:70:40:52:a9:1b:00:36: 43:12:5d:c3:01:73:48:91:87:f5:13:2a:ff:2a:0e: ad:8a:13:aa:38:5f:5e:56:ab:38:39:93:e8:4a:ca: 30:14:c3:a1:ef:be:69:13:b8:f8:9e:4f:81:6f:3c: f5:b0:f0:3a:2c:3e:2d:86:6f:1e:22:cf:a9:62:b3: f1:5e:7c:27:12:fb:78:35:6f:e6:f5:76:c7:eb:b6: fc:cf:14:e6:72:23:45:fc:36:2f:2b:10:91:4a:24: 8f:28:42:64:2b:75:b1:05:bc:2e:86:e8:d6:30:ca: 68:2c:69:b9:83:c6:44:13:4d:7a:24:bb:7f:fc:31: 85:c7:b2:df:7d:0f:ac:c9:1c:cd:3d:5e:77:ee:04: f4:78:75:74:29:5f:c5:89:0f:8c:3b:c3:fe:dd:1b: d7:a8:27:ba:35:31:07:bb:92:45:5d:06:38:32:dc: aa:8e:4c:49:e2:2a:ca:c4:02:fb:be:60:19:e8:13: 7c:61:79:17:30:7e:c5:41:85:cc:67:cc:e7:88:5a: b1:cf:e4:7e:5f:8e:15:89:b9:4d:6c:89:58:06:aa: 6d:dc:19:38:0b:9f:74:9d:00:f3:c7:a8:b8:01:d4: e0:55:d2:02:a0:9a:32:a2:1c:4e:a4:7d:1b:f0:d3: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E1:A6:60:D6:F5:1E:E3:65:BF:A8:E3:59:79:1A:DC:0E:EA:7A:E6 X509v3 Authority Key Identifier: keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1d:42:7e:16:ff:8b:bb:3b:27:5d:a4:8f:6a:64:4b:42:4c: f4:3e:da:21:8e:d0:60:eb:1b:86:4a:e3:f6:20:32:ea:26:9b: ef:92:65:8a:01:4b:a4:61:a7:99:0e:bd:0b:21:c0:21:b1:6e: 29:33:e0:a7:57:54:12:26:fd:49:5a:17:ab:b4:0f:8c:74:b5: 8c:8c:01:39:1a:a0:92:a5:71:b4:7f:51:d4:e5:c9:9d:60:f2: 4b:7b:95:eb:9f:55:71:61:77:b7:af:20:89:54:cc:85:30:8b: dd:82:4a:ce:26:b3:2b:50:31:9c:a6:b1:7b:75:c9:35:1c:2d: 12:fe:58:1e:00:07:bc:50:cb:ab:e1:54:3b:53:14:7c:7d:f7: 61:ec:d2:38:fc:32:56:f9:1d:b1:95:da:86:da:28:c4:6e:00: 1f:e8:20:d0:f1:6f:26:fb:e9:15:03:95:c7:a9:04:1b:c2:57: 19:12:0d:72:59:9a:0c:81:5c:c2:8c:f6:fc:58:67:5b:ba:82: 7c:92:f1:40:e2:17:f0:cc:6b:33:04:e2:4b:bd:37:f8:45:b3: 76:cd:75:bd:54:52:4d:50:86:e6:79:0e:06:06:3e:a6:06:1d: 6f:fa:5b:4e:e6:91:cf:8e:9b:40:03:f5:43:25:5d:5c:f0:bb: a9:ca:e3:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0GU1urBJIQH3qyF2alGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAwM2M3YzY3N2NjM2JkNjg2MDMxNzY5OTJhM2ViZDAy ZjQ2Y2IwHhcNMjUxMjI1MTQwMTE5WhcNMjUxMjI2MTQwMTE5WjAzMTEwLwYDVQQD EygxYmUxYTY2MGQ2ZjUxZWUzNjViZmE4ZTM1OTc5MWFkYzBlZWE3YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6j3cEQq5HBAUqkbADZDEl3DAXNI kYf1Eyr/Kg6tihOqOF9eVqs4OZPoSsowFMOh775pE7j4nk+Bbzz1sPA6LD4thm8e Is+pYrPxXnwnEvt4NW/m9XbH67b8zxTmciNF/DYvKxCRSiSPKEJkK3WxBbwuhujW MMpoLGm5g8ZEE016JLt//DGFx7LffQ+syRzNPV537gT0eHV0KV/FiQ+MO8P+3RvX qCe6NTEHu5JFXQY4MtyqjkxJ4irKxAL7vmAZ6BN8YXkXMH7FQYXMZ8zniFqxz+R+ X44ViblNbIlYBqpt3Bk4C590nQDzx6i4AdTgVdICoJoyohxOpH0b8NPr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvhpmDW9R7jZb+o41l5GtwO6nrmMB8GA1UdIwQY MBaAFI5wA8fGd8w71oYDF2mSo+vQL0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMt ZjE3ZjAwNTYxMDhjLzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMtZjE3ZjAwNTYxMDhj LzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB1Cfhb/ i7s7J12kj2pkS0JM9D7aIY7QYOsbhkrj9iAy6iab75JligFLpGGnmQ69CyHAIbFu KTPgp1dUEib9SVoXq7QPjHS1jIwBORqgkqVxtH9R1OXJnWDyS3uV659VcWF3t68g iVTMhTCL3YJKziazK1AxnKaxe3XJNRwtEv5YHgAHvFDLq+FUO1MUfH33YezSOPwy VvkdsZXahtooxG4AH+gg0PFvJvvpFQOVx6kEG8JXGRINclmaDIFcwoz2/FhnW7qC fJLxQOIX8MxrMwTiS703+EWzds11vVRSTVCG5nkOBgY+pgYdb/pbTuaRz46bQAP1 QyVdXPC7qcrjxg== -----END CERTIFICATE-----Generated at Thu Dec 25 16:03:41 2025 by rpki-client