This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft File: jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json) Hash identifier: 9HQGxmlzAU89uTOV9Pp8WmhtTZGDKaj17ZrTVtsQlgI= Subject key identifier: BF:D1:26:5D:B8:A6:9C:C6:9C:FB:CC:3A:F7:B8:AF:09:2D:85:D3:71 Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16 Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916 Certificate serial: 019B3C46E820AB9F9804B1A0CAF8F7B6F4E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft Manifest number: 0D8E Signing time: Sat 20 Dec 2025 15:00:38 +0000 Manifest this update: Sat 20 Dec 2025 15:00:38 +0000 Manifest next update: Sun 21 Dec 2025 15:00:38 +0000 Files and hashes: 1: YzWNeQoNIDqjyGCk746jvrBM23k.roa (hash: zjvc7yggWtt0zDSCwKp/MBGW7ImHpfGU+2REQ6ZUwRI=) 2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: sTF1i9kF+MF664tIKer9HNBZva+5uXRQN/nier/elkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e8:20:ab:9f:98:04:b1:a0:ca:f8:f7:b6:f4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916 Validity Not Before: Dec 20 15:00:38 2025 GMT Not After : Dec 21 15:00:38 2025 GMT Subject: CN=bfd1265db8a69cc69cfbcc3af7b8af092d85d371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:ee:c9:0c:5f:4a:ab:24:b0:91:83:84:bf: 88:a6:3f:70:25:ab:9c:a3:67:b1:51:17:20:bd:3b: b8:c3:eb:20:d9:f1:04:7d:ac:a0:c6:4f:bd:b5:ea: 36:59:58:78:b7:d4:7d:ca:51:d8:da:13:6e:5a:b1: 06:1c:b0:87:33:89:3e:2e:86:a6:18:26:d5:1f:76: 99:31:7a:e7:d2:1b:2d:ce:71:d9:05:25:f0:59:97: 1c:2b:5f:c4:55:38:fc:c9:0b:2b:b2:b4:cb:b4:72: d9:1e:ba:ad:a3:f2:92:24:d7:69:8e:f4:df:0d:95: 44:26:4c:e7:6a:3b:97:ed:4b:db:e4:5b:3b:e6:0c: f1:04:86:42:08:fa:34:f2:78:73:21:92:ee:4d:8b: d8:24:64:0f:5b:20:68:10:b0:c7:bc:fb:a5:cb:fb: 08:73:19:f3:ab:36:46:1c:5d:40:fe:fc:d9:11:57: 83:81:ab:2f:72:8c:75:87:3b:66:a9:cc:f8:37:9c: 00:a4:21:a8:4f:2a:55:a7:37:d2:4f:a1:85:b9:a5: 98:83:04:e1:22:ad:0f:25:b0:ef:14:fc:66:4e:be: 18:b1:b2:10:03:78:55:96:b8:6a:0a:50:c6:0f:32: 4d:d5:b4:dd:75:c1:0a:3c:f7:79:74:26:7e:01:0e: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D1:26:5D:B8:A6:9C:C6:9C:FB:CC:3A:F7:B8:AF:09:2D:85:D3:71 X509v3 Authority Key Identifier: keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:1f:56:aa:1a:9a:f1:1f:9e:19:21:f7:91:fe:75:18:54: 2f:83:7f:97:4d:a8:70:29:ea:7b:17:b2:60:fd:42:84:8e:b3: 33:82:87:77:7c:17:8c:f7:c3:26:19:b6:63:ef:2c:5d:7a:6a: fb:ab:33:f2:f6:e7:1c:11:9e:3a:d6:45:46:da:54:a6:d8:d5: 9e:1c:b0:87:03:b3:e6:d4:2d:66:55:a8:fd:ec:a2:a7:74:58: cb:16:31:07:e2:48:ac:cb:98:9d:5c:31:b5:ce:fd:a8:89:35: 6d:97:80:9b:a1:fe:fe:f8:33:5d:b4:84:a5:b8:df:15:b6:d0: 47:25:fe:47:2d:45:20:5e:d1:97:d4:83:26:c4:51:11:b5:33: d3:3d:f5:40:b8:f5:c3:fc:88:f3:bf:4c:bb:55:e4:35:64:a4: dc:83:09:12:c6:95:4b:0e:f2:3f:cf:11:04:98:80:06:3f:d1: 3b:25:21:f4:a5:55:02:11:21:9b:b8:7a:34:b7:a4:34:bc:29: 3c:8d:39:2b:66:61:5d:a1:30:f1:ac:26:b9:c3:90:cf:39:48: 3c:90:34:c2:e9:3b:63:f2:e3:ec:fc:c5:db:f9:02:71:6d:39: 05:aa:06:2f:16:b6:3a:36:65:f2:69:fb:a1:24:d2:43:8a:b7: 82:ef:e8:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Ruggq5+YBLGgyvj3tvTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl ZjY5MTYwHhcNMjUxMjIwMTUwMDM4WhcNMjUxMjIxMTUwMDM4WjAzMTEwLwYDVQQD EyhiZmQxMjY1ZGI4YTY5Y2M2OWNmYmNjM2FmN2I4YWYwOTJkODVkMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnuyQxfSqsksJGDhL+Ipj9wJauc o2exURcgvTu4w+sg2fEEfaygxk+9teo2WVh4t9R9ylHY2hNuWrEGHLCHM4k+Loam GCbVH3aZMXrn0hstznHZBSXwWZccK1/EVTj8yQsrsrTLtHLZHrqto/KSJNdpjvTf DZVEJkznajuX7Uvb5Fs75gzxBIZCCPo08nhzIZLuTYvYJGQPWyBoELDHvPuly/sI cxnzqzZGHF1A/vzZEVeDgasvcox1hztmqcz4N5wApCGoTypVpzfST6GFuaWYgwTh Iq0PJbDvFPxmTr4YsbIQA3hVlrhqClDGDzJN1bTddcEKPPd5dCZ+AQ5gPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/RJl24ppzGnPvMOve4rwkthdNxMB8GA1UdIwQY MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt OTNkMGIwMGU3ZTA0LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0 LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOIfVqoa mvEfnhkh95H+dRhUL4N/l02ocCnqexeyYP1ChI6zM4KHd3wXjPfDJhm2Y+8sXXpq +6sz8vbnHBGeOtZFRtpUptjVnhywhwOz5tQtZlWo/eyip3RYyxYxB+JIrMuYnVwx tc79qIk1bZeAm6H+/vgzXbSEpbjfFbbQRyX+Ry1FIF7Rl9SDJsRREbUz0z31QLj1 w/yI879Mu1XkNWSk3IMJEsaVSw7yP88RBJiABj/ROyUh9KVVAhEhm7h6NLekNLwp PI05K2ZhXaEw8awmucOQzzlIPJA0wuk7Y/Lj7PzF2/kCcW05BaoGLxa2OjZl8mn7 oSTSQ4q3gu/oPw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:02 2025 by rpki-client