This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json) Hash identifier: YnwcQDIEnUNAXIXvGMcI080ul5i8eFR1t2OYvpqSasU= Subject key identifier: BE:90:6F:78:A9:02:C4:FC:5F:29:58:A9:50:F0:18:87:5E:43:83:7B Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Certificate serial: 019B4F2929053E05D8D4D247E413DF1BA3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 07:00:56 +0000 Manifest this update: Wed 24 Dec 2025 07:00:56 +0000 Manifest next update: Thu 25 Dec 2025 07:00:56 +0000 Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: bH1V1Vt47TWeQB9gkQYCnYqGI1o+hPFEoKq0J15N/nA=) 2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:29:05:3e:05:d8:d4:d2:47:e4:13:df:1b:a3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Validity Not Before: Dec 24 07:00:56 2025 GMT Not After : Dec 25 07:00:56 2025 GMT Subject: CN=be906f78a902c4fc5f2958a950f018875e43837b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:5e:59:47:12:31:9c:d4:89:b7:fe:89:59: d5:e2:ea:33:fb:08:53:84:39:8a:64:c7:2b:f5:0f: b8:10:ec:84:9e:49:ef:69:74:35:cb:69:9d:09:9f: 17:d4:5e:1f:ee:9a:10:e8:b8:e7:62:1a:7a:df:2d: 67:8b:7e:27:29:69:1c:99:61:bd:8f:c8:f3:0a:52: 3f:9b:55:88:87:c1:c9:85:84:b5:f1:74:2b:48:f4: 56:91:4f:fc:82:38:34:29:03:b4:4b:cb:13:e0:c6: 82:d2:35:5b:b0:7b:68:d3:44:99:eb:c6:98:d1:70: 88:7f:26:1c:19:7f:7e:c0:d6:f5:74:89:bb:2d:00: f5:9a:67:67:cc:93:e6:4c:3f:76:d4:0f:bf:ad:1b: 7d:3a:07:ee:e5:6d:47:56:b2:29:ec:cb:a6:ac:c2: 3d:c5:8d:4b:ce:b7:b5:97:2f:ec:08:ae:64:4f:2a: 7a:11:e1:82:7b:4d:ca:e9:21:d5:5e:54:7d:7f:11: 26:11:bf:a7:5f:ec:d2:ba:53:53:2a:cf:d1:4b:46: bd:3e:19:cc:97:9a:bc:60:73:ac:84:73:c2:7c:51: cb:92:bd:68:53:fc:01:99:80:75:56:0a:93:e9:59: 5f:a3:f0:c0:93:af:13:c2:6e:88:9f:b6:0e:a3:44: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:90:6F:78:A9:02:C4:FC:5F:29:58:A9:50:F0:18:87:5E:43:83:7B X509v3 Authority Key Identifier: keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:4b:16:c1:1c:94:77:7a:73:a3:ed:9b:af:b2:5c:34:17:d9: 5d:0d:63:d2:76:75:73:68:8f:48:67:42:0d:5c:b0:3c:cf:f3: 1d:0c:85:6e:e9:d3:65:f7:6c:e6:f6:8a:30:e2:da:b1:35:3b: 11:df:33:5f:9e:ad:10:11:ff:81:5b:f1:f8:ce:0d:2a:e0:e0: dd:39:d9:17:8f:9b:d5:12:58:03:91:33:7c:68:6b:27:6a:c5: 2c:2a:53:0e:df:06:2d:90:c1:33:ef:71:a7:19:ca:55:23:49: c0:73:68:5e:7c:f6:68:9e:f4:c0:45:6b:83:f4:0a:ed:b7:38: 08:ef:d4:1c:ec:bf:f5:5c:0d:e5:7b:dd:8c:2a:b0:98:e4:46: 6e:1a:ca:26:81:91:cb:af:b3:3a:86:1e:56:ea:f8:0b:0b:34: 94:ba:bc:7e:32:9b:5e:fe:9d:84:48:10:ec:93:c7:c8:9b:b9: 0c:8f:88:e7:22:17:2f:08:76:92:20:db:70:b2:46:41:35:ac: 5e:cf:0f:d6:c0:49:bd:55:31:1d:21:33:e6:6e:9d:76:8f:3c: 20:8c:ac:a0:7d:1a:bb:70:6e:1d:17:a2:41:3e:ba:55:e5:ad: f9:19:eb:e3:54:b8:c9:17:39:74:6d:33:3d:13:1f:67:cc:53: 0f:0d:82:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKSkFPgXY1NJH5BPfG6P9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx MWY5N2UwHhcNMjUxMjI0MDcwMDU2WhcNMjUxMjI1MDcwMDU2WjAzMTEwLwYDVQQD EyhiZTkwNmY3OGE5MDJjNGZjNWYyOTU4YTk1MGYwMTg4NzVlNDM4MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbNeWUcSMZzUibf+iVnV4uoz+whT hDmKZMcr9Q+4EOyEnknvaXQ1y2mdCZ8X1F4f7poQ6LjnYhp63y1ni34nKWkcmWG9 j8jzClI/m1WIh8HJhYS18XQrSPRWkU/8gjg0KQO0S8sT4MaC0jVbsHto00SZ68aY 0XCIfyYcGX9+wNb1dIm7LQD1mmdnzJPmTD921A+/rRt9Ogfu5W1HVrIp7MumrMI9 xY1Lzre1ly/sCK5kTyp6EeGCe03K6SHVXlR9fxEmEb+nX+zSulNTKs/RS0a9PhnM l5q8YHOshHPCfFHLkr1oU/wBmYB1VgqT6Vlfo/DAk68Twm6In7YOo0RygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6Qb3ipAsT8XylYqVDwGIdeQ4N7MB8GA1UdIwQY MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt MGQwNTAzNThlNjU2LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2 LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUsWwRyU d3pzo+2br7JcNBfZXQ1j0nZ1c2iPSGdCDVywPM/zHQyFbunTZfds5vaKMOLasTU7 Ed8zX56tEBH/gVvx+M4NKuDg3TnZF4+b1RJYA5EzfGhrJ2rFLCpTDt8GLZDBM+9x pxnKVSNJwHNoXnz2aJ70wEVrg/QK7bc4CO/UHOy/9VwN5XvdjCqwmORGbhrKJoGR y6+zOoYeVur4Cws0lLq8fjKbXv6dhEgQ7JPHyJu5DI+I5yIXLwh2kiDbcLJGQTWs Xs8P1sBJvVUxHSEz5m6ddo88IIysoH0au3BuHReiQT66VeWt+Rnr41S4yRc5dG0z PRMfZ8xTDw2CHQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:10:38 2025 by rpki-client