This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json) Hash identifier: gLa7xlwv5wwJV1WfJoxIRRepTfh/jo3FiLhV0UtKVSc= Subject key identifier: 16:A2:CC:4C:4D:D0:CC:9D:69:A4:66:A8:E1:79:C8:2F:F2:52:0B:33 Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1 Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1 Certificate serial: 019B3C7DD32685B3CF2C52D841E987A2AA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:37 +0000 Manifest this update: Sat 20 Dec 2025 16:00:37 +0000 Manifest next update: Sun 21 Dec 2025 16:00:37 +0000 Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: 1Ejc7dsg/rlRHpgMmh8A6Ogk6biWtwZT6IS7E4mN+So=) 2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d3:26:85:b3:cf:2c:52:d8:41:e9:87:a2:aa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1 Validity Not Before: Dec 20 16:00:37 2025 GMT Not After : Dec 21 16:00:37 2025 GMT Subject: CN=16a2cc4c4dd0cc9d69a466a8e179c82ff2520b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:56:3c:83:21:b8:aa:54:6a:6d:9e:19:41: 4d:db:ea:e0:50:68:6d:37:54:c9:59:d7:ab:5d:a0: 9a:b9:d7:5b:12:19:04:eb:66:04:8e:69:f0:c3:9d: a7:41:40:2a:e2:de:b8:99:b2:1d:ad:ad:95:49:8c: ca:fd:a6:63:95:0f:1f:36:8f:a9:10:5c:71:68:9d: ba:7a:76:32:fa:8f:1f:62:73:2f:3b:a8:0d:4d:45: 12:a1:cf:9a:24:d7:f7:60:d1:62:53:0a:ac:6e:87: 40:53:71:e1:d2:43:cf:42:54:8e:9b:6d:92:3e:4a: 93:bf:01:a6:d7:c8:e5:25:d0:58:d9:61:26:cf:e3: 72:83:76:4f:8d:3a:78:f9:bc:fb:53:ae:95:f7:d0: ef:a7:c5:17:61:6c:f9:1a:72:b3:59:43:ae:d8:f1: ca:a2:e5:46:d0:87:be:94:be:4d:fe:f1:e8:12:e7: 9f:28:5d:74:27:ae:82:6f:88:e2:80:46:22:f1:71: 6f:7f:f0:5c:ef:5b:c9:67:6d:2f:da:7e:25:3b:36: 51:7e:2b:b2:ea:f1:bf:85:ed:5c:5b:f0:22:76:15: 9b:40:83:1e:02:ed:6c:af:af:e8:1c:80:9e:12:bc: c8:21:cb:99:9d:1c:55:6b:4b:5f:f9:a0:db:3a:7f: 78:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:CC:4C:4D:D0:CC:9D:69:A4:66:A8:E1:79:C8:2F:F2:52:0B:33 X509v3 Authority Key Identifier: keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:a9:5d:5e:aa:1b:a2:bf:09:c5:08:6b:ad:0d:99:f0:c2: c1:d1:ce:1d:a3:f4:70:73:9c:3c:3c:c0:ab:3f:bb:df:ce:f3: 2d:6b:3a:ef:59:d5:22:23:8e:bd:25:68:46:c5:54:00:84:60: 5b:54:84:c4:08:23:7b:79:b7:bf:b5:a1:bd:a8:60:e0:27:8f: 48:de:fb:3b:5a:86:94:00:ee:d7:5c:c8:f7:90:3d:2f:13:3d: 7e:c2:e1:74:9d:89:31:0d:92:46:0f:d2:ce:33:5f:f4:2f:d5: cc:16:5e:5c:0d:70:77:e6:9e:90:8f:cb:a1:b0:64:5a:f0:d5: b4:5d:de:fd:5f:b5:e8:6b:15:9d:49:87:b0:31:ca:4c:60:0b: 21:df:90:6b:af:d5:82:6b:98:98:97:fc:e4:a7:27:69:33:a5: 74:23:96:db:77:e5:ec:80:88:93:db:dd:06:f1:78:99:b7:65: f8:dc:44:c1:96:db:fa:f5:38:43:96:6b:b3:b7:76:26:c2:c0: b0:33:da:73:53:58:db:bd:54:34:e2:5f:3b:de:55:10:e5:84: 46:86:72:1c:6a:d3:28:5a:13:64:30:a5:cb:61:db:b4:2c:b3: d4:07:30:de:f3:7a:0f:c6:bb:12:87:11:f7:01:e6:7b:67:40: a7:8c:a0:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdMmhbPPLFLYQemHoqovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3 ZDAwZjEwHhcNMjUxMjIwMTYwMDM3WhcNMjUxMjIxMTYwMDM3WjAzMTEwLwYDVQQD EygxNmEyY2M0YzRkZDBjYzlkNjlhNDY2YThlMTc5YzgyZmYyNTIwYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfRWPIMhuKpUam2eGUFN2+rgUGht N1TJWderXaCauddbEhkE62YEjmnww52nQUAq4t64mbIdra2VSYzK/aZjlQ8fNo+p EFxxaJ26enYy+o8fYnMvO6gNTUUSoc+aJNf3YNFiUwqsbodAU3Hh0kPPQlSOm22S PkqTvwGm18jlJdBY2WEmz+Nyg3ZPjTp4+bz7U66V99Dvp8UXYWz5GnKzWUOu2PHK ouVG0Ie+lL5N/vHoEuefKF10J66Cb4jigEYi8XFvf/Bc71vJZ20v2n4lOzZRfiuy 6vG/he1cW/AidhWbQIMeAu1sr6/oHICeErzIIcuZnRxVa0tf+aDbOn94hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaizExN0MydaaRmqOF5yC/yUgszMB8GA1UdIwQY MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt MWMxZTg1MzJkNWIwLzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAipXV6q G6K/CcUIa60NmfDCwdHOHaP0cHOcPDzAqz+7387zLWs671nVIiOOvSVoRsVUAIRg W1SExAgje3m3v7Whvahg4CePSN77O1qGlADu11zI95A9LxM9fsLhdJ2JMQ2SRg/S zjNf9C/VzBZeXA1wd+aekI/LobBkWvDVtF3e/V+16GsVnUmHsDHKTGALId+Qa6/V gmuYmJf85KcnaTOldCOW23fl7ICIk9vdBvF4mbdl+NxEwZbb+vU4Q5Zrs7d2JsLA sDPac1NY271UNOJfO95VEOWERoZyHGrTKFoTZDCly2HbtCyz1Acw3vN6D8a7EocR 9wHme2dAp4ygtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:34 2025 by rpki-client