This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json) Hash identifier: l17leiAP4BtEqjrPd0MLd/TRRGxzH14wb0CTy3P16b8= Subject key identifier: 7D:AD:47:1F:CD:C6:02:3E:32:AF:EF:7C:A8:60:6A:6B:0C:B0:ED:A8 Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51 Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51 Certificate serial: 019B4BF1AE955AD96974071955206D992AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft Manifest number: 15FA Signing time: Tue 23 Dec 2025 16:01:28 +0000 Manifest this update: Tue 23 Dec 2025 16:01:28 +0000 Manifest next update: Wed 24 Dec 2025 16:01:28 +0000 Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: ktgxAdvSumMezhbtPAIGFIlP5UfUkevKINBZLw8rhN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:ae:95:5a:d9:69:74:07:19:55:20:6d:99:2a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51 Validity Not Before: Dec 23 16:01:28 2025 GMT Not After : Dec 24 16:01:28 2025 GMT Subject: CN=7dad471fcdc6023e32afef7ca8606a6b0cb0eda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:95:ef:c9:7d:88:f3:70:f4:09:15:bd:cc: 02:6e:78:73:71:22:b6:a2:e8:c5:39:bc:55:c6:14: 5d:a4:30:38:d5:10:8b:00:60:96:d6:eb:a3:31:c2: 3f:e6:67:e8:e4:c2:38:c4:92:9f:79:5c:8c:ed:94: 19:ed:dc:e3:17:f7:fc:1e:49:a8:be:43:a1:0b:a1: 7e:d4:12:93:6b:92:c3:ae:b3:a0:47:b8:f9:ec:de: 2a:26:45:4e:f8:cc:20:33:40:f1:fd:d8:49:8a:71: 9b:25:2e:fd:c2:8e:ac:f7:e0:41:99:da:a8:86:07: b8:42:9c:6c:38:c1:4b:b0:6b:05:de:57:a8:47:d0: 49:a0:c6:be:88:d8:e1:f7:70:ab:b4:12:cd:5c:c0: 54:25:b1:e6:53:1f:eb:7e:57:ef:27:7f:28:10:c0: 83:d6:7a:a4:3c:6d:00:42:31:10:6a:a7:4d:95:86: 78:d4:c3:95:21:01:5e:ca:90:f8:eb:67:ae:f6:39: fd:80:29:03:e0:c8:48:c4:fa:d2:fd:f3:db:97:a9: 6f:14:76:ff:2e:a3:e9:4b:69:72:01:a0:eb:b9:22: 2a:37:bd:d5:91:f8:8b:71:42:15:0f:bd:ab:b0:7e: ab:e3:62:2e:3f:b1:35:3b:a6:4b:75:89:c8:d2:7c: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AD:47:1F:CD:C6:02:3E:32:AF:EF:7C:A8:60:6A:6B:0C:B0:ED:A8 X509v3 Authority Key Identifier: keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:32:0e:25:d5:37:cd:b0:a0:16:77:3f:26:3d:e4:2e:d6:14: 5e:e9:9d:76:36:6b:99:51:62:13:8c:14:0d:00:b5:76:dc:35: 35:97:cb:ec:db:a9:59:6e:1b:9c:bd:6c:83:56:9e:4f:9a:18: fa:a9:62:07:ec:cd:03:d3:e4:0e:2a:8b:cd:bc:e6:fa:9d:56: e5:b2:95:8d:86:57:5a:6c:93:bd:6e:db:9a:88:6d:be:07:3b: f7:f1:9c:e9:66:fa:e0:3e:76:55:fb:f5:9e:e3:15:08:b4:e9: 93:07:34:48:f4:86:16:b8:b5:51:20:ea:68:41:f5:d6:68:4a: 78:c3:c1:2e:5f:a7:02:bf:71:32:79:49:73:9d:6c:86:a1:d6: f8:be:71:fc:94:89:a2:a7:f7:9e:3d:a5:e4:9f:af:31:a6:b1: a1:eb:12:ca:83:c4:6a:1c:4b:9a:cf:10:23:35:82:0b:55:9d: dc:b1:25:e5:b1:73:3a:58:b3:c1:e3:d2:e4:e3:94:c0:44:ad: a8:df:95:96:83:66:ee:8e:08:23:8a:0d:fb:cf:55:b3:cd:79: 02:eb:45:f8:97:d1:39:ac:71:ba:6e:d0:89:5d:e2:6e:2e:ca: 66:51:8a:9e:dc:38:e9:37:25:7c:85:9a:0a:d5:d4:ed:1a:6d: af:db:e9:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8a6VWtlpdAcZVSBtmSrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2 MjBjNTEwHhcNMjUxMjIzMTYwMTI4WhcNMjUxMjI0MTYwMTI4WjAzMTEwLwYDVQQD Eyg3ZGFkNDcxZmNkYzYwMjNlMzJhZmVmN2NhODYwNmE2YjBjYjBlZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssiV78l9iPNw9AkVvcwCbnhzcSK2 oujFObxVxhRdpDA41RCLAGCW1uujMcI/5mfo5MI4xJKfeVyM7ZQZ7dzjF/f8Hkmo vkOhC6F+1BKTa5LDrrOgR7j57N4qJkVO+MwgM0Dx/dhJinGbJS79wo6s9+BBmdqo hge4QpxsOMFLsGsF3leoR9BJoMa+iNjh93CrtBLNXMBUJbHmUx/rflfvJ38oEMCD 1nqkPG0AQjEQaqdNlYZ41MOVIQFeypD462eu9jn9gCkD4MhIxPrS/fPbl6lvFHb/ LqPpS2lyAaDruSIqN73VkfiLcUIVD72rsH6r42IuP7E1O6ZLdYnI0nx0kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2tRx/NxgI+Mq/vfKhgamsMsO2oMB8GA1UdIwQY MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozIOJdU3 zbCgFnc/Jj3kLtYUXumddjZrmVFiE4wUDQC1dtw1NZfL7NupWW4bnL1sg1aeT5oY +qliB+zNA9PkDiqLzbzm+p1W5bKVjYZXWmyTvW7bmohtvgc79/Gc6Wb64D52Vfv1 nuMVCLTpkwc0SPSGFri1USDqaEH11mhKeMPBLl+nAr9xMnlJc51shqHW+L5x/JSJ oqf3nj2l5J+vMaaxoesSyoPEahxLms8QIzWCC1Wd3LEl5bFzOlizwePS5OOUwESt qN+VloNm7o4II4oN+89Vs815AutF+JfROaxxum7QiV3ibi7KZlGKntw46TclfIWa CtXU7Rptr9vp9w== -----END CERTIFICATE-----Generated at Tue Dec 23 20:46:03 2025 by rpki-client