This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json) Hash identifier: 40I7OtNCEWFFEADyVjolsUI6jEqtFREyRe50shEAnAo= Subject key identifier: 11:BC:9E:8D:86:12:2A:8F:3C:4C:60:1B:F1:80:E8:12:6F:76:DA:B5 Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Certificate serial: 019B43933667E211E905343B8465FC1F6234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 01:01:19 +0000 Manifest this update: Mon 22 Dec 2025 01:01:19 +0000 Manifest next update: Tue 23 Dec 2025 01:01:19 +0000 Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: oj+oZWNJm06dh2hJmRjFQDNT2srqHWeuZnSqi85oTHY=) 2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:36:67:e2:11:e9:05:34:3b:84:65:fc:1f:62:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Validity Not Before: Dec 22 01:01:19 2025 GMT Not After : Dec 23 01:01:19 2025 GMT Subject: CN=11bc9e8d86122a8f3c4c601bf180e8126f76dab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:56:35:72:38:a5:92:79:76:36:3a:f9:d8: 00:f4:93:0c:7a:e9:4b:c3:39:37:d8:0b:63:79:8d: a1:ae:45:a2:3f:64:4c:59:2b:9e:bf:a3:f3:14:46: 11:8d:49:fa:be:d8:5b:e1:cc:73:fe:cc:e8:40:49: 37:07:1d:65:3a:33:3d:17:f7:a3:36:90:6a:f5:ad: 15:3a:f8:4b:a0:8f:03:5c:eb:0e:31:50:80:84:40: 0e:ab:49:d3:97:ad:a1:bc:fa:16:2e:15:00:00:4a: e8:c1:ae:16:06:20:1b:c5:30:6b:72:f5:c4:46:29: 9e:38:ff:4a:ab:10:98:0c:33:bb:22:ee:d9:8d:09: 44:83:4a:ed:1d:6c:a5:0e:17:a7:71:8f:90:02:f7: ed:b7:8e:4a:15:d0:45:87:57:68:68:67:0e:d2:e1: ea:6f:b6:82:f1:b4:cd:69:88:b1:23:d3:a0:13:81: 1a:33:1b:f5:9f:70:0d:b0:92:c5:be:8e:1e:5c:3d: 19:2b:48:b4:7f:5c:46:d2:8a:84:f0:93:b5:6f:b6: ad:b5:e8:ab:3b:e0:e2:cc:99:b8:b1:f2:90:13:4b: 6f:14:37:29:b6:22:c2:39:26:2b:82:d4:e8:65:27: c9:51:07:7e:b8:fd:8f:93:42:21:83:36:c6:0a:c1: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:9E:8D:86:12:2A:8F:3C:4C:60:1B:F1:80:E8:12:6F:76:DA:B5 X509v3 Authority Key Identifier: keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0c:38:fc:b3:63:ca:18:17:53:97:81:eb:3d:db:e0:80:f2: 12:1d:f5:b5:36:0f:24:24:02:94:4e:b3:49:64:da:fe:87:24: 8b:da:d4:23:51:4c:e9:44:93:11:1d:39:1b:67:63:dd:43:64: 41:37:e1:d6:9a:5a:32:13:fc:3e:0a:32:7a:78:e2:fc:4e:a7: 6a:a7:82:f1:85:6a:df:10:37:61:5d:2f:ba:30:5a:5c:99:1e: a1:0c:1d:90:5d:20:aa:04:17:52:97:36:6f:11:2a:aa:6b:cf: 21:80:d7:03:59:62:e6:46:76:68:c4:80:23:ba:a8:13:c1:90: d3:93:38:24:c3:e6:c0:71:bd:78:44:e0:01:16:1e:8f:63:51: f4:ae:e7:b4:21:45:72:d1:70:f0:f0:fd:a2:d2:c1:36:7c:57: 20:81:65:d5:a1:73:9f:fc:2e:fb:55:8d:5b:98:a6:54:63:72: 5a:2a:3b:7c:8b:18:53:11:3c:ae:8a:96:27:78:96:ef:53:55: 08:70:8f:7e:14:d5:6e:3a:32:69:c4:40:88:e5:85:fc:d4:26: 5b:23:53:1f:a2:0a:40:8b:1a:aa:6d:8d:c1:e6:a5:e2:a7:6e: e2:4c:69:e4:10:aa:a1:c2:60:d3:be:86:ed:fa:2f:3d:8b:77: 1e:b2:2d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzZn4hHpBTQ7hGX8H2I0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx MWY5N2UwHhcNMjUxMjIyMDEwMTE5WhcNMjUxMjIzMDEwMTE5WjAzMTEwLwYDVQQD EygxMWJjOWU4ZDg2MTIyYThmM2M0YzYwMWJmMTgwZTgxMjZmNzZkYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVZWNXI4pZJ5djY6+dgA9JMMeulL wzk32AtjeY2hrkWiP2RMWSuev6PzFEYRjUn6vthb4cxz/szoQEk3Bx1lOjM9F/ej NpBq9a0VOvhLoI8DXOsOMVCAhEAOq0nTl62hvPoWLhUAAErowa4WBiAbxTBrcvXE RimeOP9KqxCYDDO7Iu7ZjQlEg0rtHWylDhencY+QAvftt45KFdBFh1doaGcO0uHq b7aC8bTNaYixI9OgE4EaMxv1n3ANsJLFvo4eXD0ZK0i0f1xG0oqE8JO1b7atteir O+DizJm4sfKQE0tvFDcptiLCOSYrgtToZSfJUQd+uP2Pk0IhgzbGCsE6LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG8no2GEiqPPExgG/GA6BJvdtq1MB8GA1UdIwQY MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt MGQwNTAzNThlNjU2LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2 LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAw4/LNj yhgXU5eB6z3b4IDyEh31tTYPJCQClE6zSWTa/ocki9rUI1FM6USTER05G2dj3UNk QTfh1ppaMhP8Pgoyenji/E6naqeC8YVq3xA3YV0vujBaXJkeoQwdkF0gqgQXUpc2 bxEqqmvPIYDXA1li5kZ2aMSAI7qoE8GQ05M4JMPmwHG9eETgARYej2NR9K7ntCFF ctFw8PD9otLBNnxXIIFl1aFzn/wu+1WNW5imVGNyWio7fIsYUxE8roqWJ3iW71NV CHCPfhTVbjoyacRAiOWF/NQmWyNTH6IKQIsaqm2Nweal4qdu4kxp5BCqocJg076G 7fovPYt3HrItqw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:58:57 2025 by rpki-client