This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json) Hash identifier: ODqQh8IT26mgjXBra+/I9zCscsT5XgsTNcE02HkoFJs= Subject key identifier: B9:B9:9F:60:3B:37:5E:23:DD:04:DA:5F:39:D8:53:5E:4F:6D:55:A8 Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Certificate serial: 019B3C7F622538FE464005EF12713DCE82D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft Manifest number: 10B4 Signing time: Sat 20 Dec 2025 16:02:19 +0000 Manifest this update: Sat 20 Dec 2025 16:02:19 +0000 Manifest next update: Sun 21 Dec 2025 16:02:19 +0000 Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=) 2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 5UPGyYL6I662N2jt/9Q45aMeY7xEkGjO3+uQh9rzFUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:62:25:38:fe:46:40:05:ef:12:71:3d:ce:82:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Validity Not Before: Dec 20 16:02:19 2025 GMT Not After : Dec 21 16:02:19 2025 GMT Subject: CN=b9b99f603b375e23dd04da5f39d8535e4f6d55a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:06:6c:e6:6f:e0:69:6c:32:76:3a:40:55: f2:5f:3f:d6:99:0b:5f:81:fe:e6:28:32:30:7e:ee: 85:a6:c2:44:e4:fe:d7:c6:48:56:ee:9d:52:15:81: 1e:f9:14:2d:c4:23:69:e2:5c:4f:ad:e8:61:ae:10: 8a:9b:45:4e:07:03:3d:86:58:56:86:f6:53:ed:8a: b1:ea:3a:d1:e7:d7:75:fa:79:96:d4:c2:17:f2:c8: fc:17:08:1e:08:3f:28:9a:67:3f:e7:bb:c5:25:96: d1:db:d4:30:d0:14:40:71:d2:93:59:a2:1a:35:89: cb:4f:4f:9b:40:38:37:73:18:79:de:1e:7e:f9:58: 04:95:36:38:e2:f4:bf:c8:2a:89:82:c1:9b:48:b8: 54:62:de:33:cf:84:73:65:7e:a6:48:84:a3:5b:db: 10:64:ed:b0:82:d5:e2:42:07:c3:1d:31:d1:d2:48: 12:a2:f7:a7:74:5b:63:b7:06:ea:12:9c:6a:c3:9c: a9:35:bb:53:ef:66:9f:2e:d6:74:f9:64:a7:06:34: 4c:43:e8:79:a1:4a:2e:9d:83:a4:c5:47:7f:7c:50: ce:72:3b:88:1d:a2:a1:65:cb:08:02:11:68:2c:ab: b0:b2:54:ef:da:91:78:cd:11:b2:48:91:a1:b4:63: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B9:9F:60:3B:37:5E:23:DD:04:DA:5F:39:D8:53:5E:4F:6D:55:A8 X509v3 Authority Key Identifier: keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:83:32:a7:b1:f5:70:2c:92:28:3e:fa:e9:77:84:10:af:09: 9b:48:97:85:2d:a3:05:09:62:2e:8b:ed:c5:3c:f1:b4:10:ad: 53:f9:04:a7:e2:7d:bc:d4:be:3d:65:5a:fe:d9:9e:ae:a2:85: ba:65:65:c7:82:3f:73:6b:a2:b4:b7:06:8b:02:1e:1c:92:ac: d7:82:09:7f:dd:a7:85:52:7e:b6:2a:94:f2:1e:b9:e7:3e:a0: b5:e7:f3:f9:d3:24:01:86:f0:7f:40:ea:d0:56:f0:40:f6:57: 97:7b:33:46:c0:04:f4:b9:b6:87:e8:4d:1d:6f:4e:ec:62:dd: a9:e8:95:e6:71:04:b5:0e:67:f5:83:96:a1:26:ee:b4:b0:a4: 78:4e:c6:79:39:5a:8e:19:9e:b1:1d:0a:0d:f5:98:ef:bb:8e: f5:e7:fe:8f:32:15:f0:41:28:86:f1:08:32:74:af:50:89:f9: c2:af:de:0e:ef:0e:48:34:cf:05:4c:06:0b:cd:ab:01:1a:5e: 33:b3:57:cf:94:d7:54:97:1c:81:03:72:8f:c7:0c:9e:7f:79: 49:f8:32:85:5f:38:ff:28:e8:b4:44:e5:82:16:30:1d:b5:9b: 84:2c:5a:52:86:90:7e:a1:c5:5f:f5:e5:27:f2:7c:81:3b:4c: bc:12:53:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2IlOP5GQAXvEnE9zoLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh ZWQwYjEwHhcNMjUxMjIwMTYwMjE5WhcNMjUxMjIxMTYwMjE5WjAzMTEwLwYDVQQD EyhiOWI5OWY2MDNiMzc1ZTIzZGQwNGRhNWYzOWQ4NTM1ZTRmNmQ1NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQAGbOZv4GlsMnY6QFXyXz/WmQtf gf7mKDIwfu6FpsJE5P7XxkhW7p1SFYEe+RQtxCNp4lxPrehhrhCKm0VOBwM9hlhW hvZT7Yqx6jrR59d1+nmW1MIX8sj8FwgeCD8ommc/57vFJZbR29Qw0BRAcdKTWaIa NYnLT0+bQDg3cxh53h5++VgElTY44vS/yCqJgsGbSLhUYt4zz4RzZX6mSISjW9sQ ZO2wgtXiQgfDHTHR0kgSovendFtjtwbqEpxqw5ypNbtT72afLtZ0+WSnBjRMQ+h5 oUounYOkxUd/fFDOcjuIHaKhZcsIAhFoLKuwslTv2pF4zRGySJGhtGNsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLm5n2A7N14j3QTaXznYU15PbVWoMB8GA1UdIwQY MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4Myp7H1 cCySKD766XeEEK8Jm0iXhS2jBQliLovtxTzxtBCtU/kEp+J9vNS+PWVa/tmerqKF umVlx4I/c2uitLcGiwIeHJKs14IJf92nhVJ+tiqU8h655z6gtefz+dMkAYbwf0Dq 0FbwQPZXl3szRsAE9Lm2h+hNHW9O7GLdqeiV5nEEtQ5n9YOWoSbutLCkeE7GeTla jhmesR0KDfWY77uO9ef+jzIV8EEohvEIMnSvUIn5wq/eDu8OSDTPBUwGC82rARpe M7NXz5TXVJccgQNyj8cMnn95SfgyhV84/yjotETlghYwHbWbhCxaUoaQfqHFX/Xl J/J8gTtMvBJTdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:49:16 2025 by rpki-client