This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json) Hash identifier: Rx34c8XP4B6ZZDEx00WbB4TJSjfhqIVpwh7NLhy/RfQ= Subject key identifier: 94:73:EA:7A:66:23:CD:98:CE:46:05:3F:38:2E:24:D2:A2:C2:55:17 Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Certificate serial: 019B3CEC4CE447924C639C9069B7D9ECC3BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft Manifest number: 07FB Signing time: Sat 20 Dec 2025 18:01:17 +0000 Manifest this update: Sat 20 Dec 2025 18:01:17 +0000 Manifest next update: Sun 21 Dec 2025 18:01:17 +0000 Files and hashes: 1: QkwgvOARZ0WArMcZyBkhE2Jb76g.roa (hash: ToI6x0zU+v+8pQ6FvMmC9PVdbpiMYXQKPnaPxXzGxiA=) 2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: WsJc5kQNe+VP6GRX/pHxlGmKpYP9lRyWctm3vTCSfEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:4c:e4:47:92:4c:63:9c:90:69:b7:d9:ec:c3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Validity Not Before: Dec 20 18:01:17 2025 GMT Not After : Dec 21 18:01:17 2025 GMT Subject: CN=9473ea7a6623cd98ce46053f382e24d2a2c25517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:6e:5e:d1:e7:9e:57:10:d5:fe:54:15:0e: 3f:16:ec:38:ed:b2:d7:8a:04:57:7b:60:1f:83:1e: 99:49:30:9e:de:63:3e:c3:b0:54:77:70:ae:d8:64: c2:39:71:19:e8:e0:0e:64:4d:49:b1:bb:79:34:94: 21:af:a1:c8:aa:41:d1:7c:e0:0c:ef:3b:bd:6b:d1: 3a:14:bb:b3:9d:dc:5c:4d:23:20:fc:89:d6:85:6f: c9:a7:39:6b:9b:f8:ef:20:f8:57:53:f6:cc:e7:fb: 20:8b:0c:fa:30:f6:85:d5:39:8b:bf:e3:49:08:5c: 2f:89:25:b3:3f:4e:99:13:e6:d4:04:61:cf:37:1c: 38:03:cd:5f:6f:07:ba:20:9d:8d:db:2e:e7:a9:e1: 18:8a:95:5b:78:67:2e:1d:d3:c9:b0:3a:af:f5:31: 95:a6:2e:91:4c:15:3c:5f:46:c3:dd:b9:2f:76:7b: 14:ec:0e:d6:35:c5:1b:d2:30:df:73:99:84:5a:bf: 6e:27:d9:a9:aa:f0:3f:9a:83:40:35:74:b2:2d:b3: 33:d7:8d:03:23:e5:f2:ca:ff:b2:a0:32:5c:5b:bb: ca:52:f7:1b:9a:b5:b2:ec:2f:fd:ef:a5:f1:28:c6: 0d:b9:3d:cd:a0:3e:5f:9e:f5:82:7f:93:08:55:7c: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:73:EA:7A:66:23:CD:98:CE:46:05:3F:38:2E:24:D2:A2:C2:55:17 X509v3 Authority Key Identifier: keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f2:3e:e9:cc:ac:e8:d8:3b:e6:2b:0f:e3:90:8e:45:8a:94: 0b:8a:6c:b4:1e:23:7b:f1:ae:25:32:22:4b:a6:46:f2:31:ba: dc:ce:d9:78:70:aa:69:fb:f2:f5:32:49:e6:28:5f:1a:8e:91: 7b:8f:e7:ec:d3:f6:84:5d:e1:57:08:4e:d0:00:3f:5f:7b:ae: 77:63:dd:6c:ee:c2:42:a6:fc:8d:12:a2:a6:d0:8d:cd:50:28: db:20:da:20:da:de:8b:04:6f:ad:70:72:93:65:b4:be:32:f9: 28:e8:90:25:97:95:1f:72:9d:6b:0d:bd:c1:4f:6f:54:ff:65: ea:12:3d:6f:01:51:eb:59:b7:9f:90:56:94:a5:0b:b7:1d:7b: 65:26:f5:2e:89:86:60:49:d0:02:90:d3:e7:ca:20:b4:b8:42: c3:1e:c5:2c:b1:92:2e:cb:01:44:cb:72:c1:81:ea:30:f5:15: ca:18:5d:7f:cc:37:b5:67:7e:a6:e7:2f:d1:0b:3b:c2:a9:70: 35:0c:c6:64:29:7f:a8:d9:60:ce:43:df:33:42:ee:14:cd:75: 46:22:7c:37:ee:64:ca:4d:22:b1:37:a7:8d:c6:ee:ff:b6:59: 57:a7:83:cd:31:72:1a:18:c0:80:32:73:34:2b:40:c9:d1:c5: 5c:e3:a9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87EzkR5JMY5yQabfZ7MO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh ODJiYjIwHhcNMjUxMjIwMTgwMTE3WhcNMjUxMjIxMTgwMTE3WjAzMTEwLwYDVQQD Eyg5NDczZWE3YTY2MjNjZDk4Y2U0NjA1M2YzODJlMjRkMmEyYzI1NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPtuXtHnnlcQ1f5UFQ4/Fuw47bLX igRXe2Afgx6ZSTCe3mM+w7BUd3Cu2GTCOXEZ6OAOZE1Jsbt5NJQhr6HIqkHRfOAM 7zu9a9E6FLuzndxcTSMg/InWhW/Jpzlrm/jvIPhXU/bM5/sgiwz6MPaF1TmLv+NJ CFwviSWzP06ZE+bUBGHPNxw4A81fbwe6IJ2N2y7nqeEYipVbeGcuHdPJsDqv9TGV pi6RTBU8X0bD3bkvdnsU7A7WNcUb0jDfc5mEWr9uJ9mpqvA/moNANXSyLbMz140D I+Xyyv+yoDJcW7vKUvcbmrWy7C/976XxKMYNuT3NoD5fnvWCf5MIVXweowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRz6npmI82YzkYFPzguJNKiwlUXMB8GA1UdIwQY MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt N2JhZmRlNGM0YjI0LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0 LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPI+6cys 6Ng75isP45CORYqUC4pstB4je/GuJTIiS6ZG8jG63M7ZeHCqafvy9TJJ5ihfGo6R e4/n7NP2hF3hVwhO0AA/X3uud2PdbO7CQqb8jRKiptCNzVAo2yDaINreiwRvrXBy k2W0vjL5KOiQJZeVH3Kdaw29wU9vVP9l6hI9bwFR61m3n5BWlKULtx17ZSb1LomG YEnQApDT58ogtLhCwx7FLLGSLssBRMtywYHqMPUVyhhdf8w3tWd+pucv0Qs7wqlw NQzGZCl/qNlgzkPfM0LuFM11RiJ8N+5kyk0isTenjcbu/7ZZV6eDzTFyGhjAgDJz NCtAydHFXOOpWA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:49 2025 by rpki-client