This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft File: jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json) Hash identifier: W1quP6ZA71yQZleq52gS8hPQyTzpjNL4tLl3UZnyBhA= Subject key identifier: 14:D2:35:5B:C1:89:F7:BF:35:19:CA:DE:01:3C:E2:16:DE:05:C4:B8 Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b Certificate serial: 019B435BAAE61775DFCA7BE49CF7BD564566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 00:00:39 +0000 Manifest this update: Mon 22 Dec 2025 00:00:39 +0000 Manifest next update: Tue 23 Dec 2025 00:00:39 +0000 Files and hashes: 1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=) 2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: 9XMXYDcBEBhuIa4YhvnD0U8qTaQ6RSkxgXPFtQVhRS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:aa:e6:17:75:df:ca:7b:e4:9c:f7:bd:56:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b Validity Not Before: Dec 22 00:00:39 2025 GMT Not After : Dec 23 00:00:39 2025 GMT Subject: CN=14d2355bc189f7bf3519cade013ce216de05c4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:4a:85:06:6e:c5:34:69:e1:8c:f7:a5:f5: b1:3a:49:0c:9a:00:af:07:13:0a:ae:2c:dd:47:73: 69:da:6e:dc:d4:18:15:b5:e4:2a:11:34:f6:23:e4: c2:5e:8f:b8:b9:1f:e5:1d:6e:27:28:bb:48:ea:e5: 92:ae:ab:89:d0:15:85:89:49:7b:6a:d5:3b:02:38: 20:0d:e0:4a:55:c9:c5:c3:44:70:e1:bf:88:35:8d: 88:f8:ea:b3:a7:0a:18:f3:45:df:69:ab:dc:ee:a7: cc:f5:32:16:3c:57:06:fc:95:26:a3:a9:22:37:d6: 4a:c1:61:a7:db:59:33:3a:c0:48:e3:f3:fe:10:a6: 12:58:76:ee:f1:0f:8b:4c:8f:8e:ab:5f:b7:cb:6f: 95:0a:64:1c:71:17:de:0e:cf:c5:87:a9:06:56:90: 1a:0e:57:03:44:83:09:4f:d3:b7:f8:f5:11:09:db: 42:87:2c:be:be:36:e5:b5:c4:6e:7d:5b:b8:65:a2: 4f:42:ca:6b:c7:29:0c:1e:3a:33:68:71:48:85:71: 39:c5:1f:7b:98:f3:5a:13:5a:95:08:13:18:0d:4c: 42:61:25:e7:7c:e7:28:71:f1:07:d9:a6:f6:6f:5b: cb:92:fc:ca:59:dd:d0:de:1a:ce:2f:04:16:7a:fd: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D2:35:5B:C1:89:F7:BF:35:19:CA:DE:01:3C:E2:16:DE:05:C4:B8 X509v3 Authority Key Identifier: keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c6:5c:f4:9a:08:10:e9:7f:75:f6:1a:56:c1:ca:41:a6:c4: 50:dc:d1:ec:97:5c:d9:d3:52:36:c3:bb:1d:d0:cf:d6:2d:03: 78:13:74:62:d5:f6:54:51:0d:24:38:a7:69:de:ba:13:20:70: e5:6e:e0:dc:09:90:22:93:49:c5:4f:6d:53:93:00:db:d4:fa: 16:01:d7:67:a2:df:8e:f5:74:50:d1:28:06:eb:10:13:d1:b5: ea:7f:25:2f:22:f8:97:de:c8:08:e8:fc:6d:1d:3d:aa:09:6d: a4:26:9d:88:75:f9:05:8e:19:bf:c6:89:4a:e0:f0:7b:0c:a8: 75:72:5f:4a:e3:ab:49:79:81:14:02:fc:c6:d2:53:35:24:62: 8b:3b:84:91:17:5e:25:e3:4f:76:92:95:85:b5:18:f1:19:d9: 40:9f:64:bb:67:5f:0b:37:5c:e0:7b:b6:64:5e:89:aa:24:19: b0:7c:1a:c3:27:70:3e:34:12:bd:27:c0:43:cd:97:e5:34:0a: 01:d7:c2:05:92:a0:64:33:de:0c:f0:e5:bb:14:ce:f7:24:1b: 35:53:91:4a:a5:6e:67:2a:ec:0e:3b:9e:e1:3a:2a:83:02:95: d7:a1:a0:7b:56:be:db:3f:24:5b:62:b0:3d:e8:37:70:30:a4: 01:7a:df:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW6rmF3XfynvknPe9VkVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2FlZTM1NTlmY2MzMWJmZWQ3N2VlY2U4Yjc0NzljOGU4 NTZhNWIwHhcNMjUxMjIyMDAwMDM5WhcNMjUxMjIzMDAwMDM5WjAzMTEwLwYDVQQD EygxNGQyMzU1YmMxODlmN2JmMzUxOWNhZGUwMTNjZTIxNmRlMDVjNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ5KhQZuxTRp4Yz3pfWxOkkMmgCv BxMKrizdR3Np2m7c1BgVteQqETT2I+TCXo+4uR/lHW4nKLtI6uWSrquJ0BWFiUl7 atU7AjggDeBKVcnFw0Rw4b+INY2I+OqzpwoY80Xfaavc7qfM9TIWPFcG/JUmo6ki N9ZKwWGn21kzOsBI4/P+EKYSWHbu8Q+LTI+Oq1+3y2+VCmQccRfeDs/Fh6kGVpAa DlcDRIMJT9O3+PURCdtChyy+vjbltcRufVu4ZaJPQsprxykMHjozaHFIhXE5xR97 mPNaE1qVCBMYDUxCYSXnfOcocfEH2ab2b1vLkvzKWd3Q3hrOLwQWev1pBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTSNVvBife/NRnK3gE84hbeBcS4MB8GA1UdIwQY MBaAFI567jVZ/MMb/td+7Oi3R5yOhWpbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct OTExNjBiYjRjNjU5LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5 LzEvam5ydU5Wbjh3eHYtMTM3czZMZEhuSTZGYWxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsZc9JoI EOl/dfYaVsHKQabEUNzR7Jdc2dNSNsO7HdDP1i0DeBN0YtX2VFENJDinad66EyBw 5W7g3AmQIpNJxU9tU5MA29T6FgHXZ6LfjvV0UNEoBusQE9G16n8lLyL4l97ICOj8 bR09qgltpCadiHX5BY4Zv8aJSuDwewyodXJfSuOrSXmBFAL8xtJTNSRiizuEkRde JeNPdpKVhbUY8RnZQJ9ku2dfCzdc4Hu2ZF6JqiQZsHwawydwPjQSvSfAQ82X5TQK AdfCBZKgZDPeDPDluxTO9yQbNVORSqVuZyrsDjue4ToqgwKV16Gge1a+2z8kW2Kw Peg3cDCkAXrfuw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:31:01 2025 by rpki-client