This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json) Hash identifier: 8CRTJYbhezzH/+zuQ+SL5GcJzTh32Qkd06vQrTt6UcY= Subject key identifier: B6:0C:82:78:F7:3D:77:87:BA:DD:60:FC:41:52:93:A9:85:6E:5C:6A Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2 Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2 Certificate serial: 019B50E09C7C40F3E7F195AB770FC81B978A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft Manifest number: 089A Signing time: Wed 24 Dec 2025 15:00:55 +0000 Manifest this update: Wed 24 Dec 2025 15:00:55 +0000 Manifest next update: Thu 25 Dec 2025 15:00:55 +0000 Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: Chf50KolaQ2rV5zCszOF3ImaHg5gRHN/WrS/MdBNf/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:9c:7c:40:f3:e7:f1:95:ab:77:0f:c8:1b:97:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2 Validity Not Before: Dec 24 15:00:55 2025 GMT Not After : Dec 25 15:00:55 2025 GMT Subject: CN=b60c8278f73d7787badd60fc415293a9856e5c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:8f:a4:5a:d8:55:e0:c8:2a:48:f3:6e:5e: 96:c9:a7:21:13:f3:90:36:f9:97:18:41:f3:12:df: 72:bb:36:c4:99:64:07:b1:53:4b:18:d3:bc:97:75: e9:6e:ec:1d:f3:29:89:4f:0e:d5:ad:fe:77:72:78: 22:e5:45:aa:30:b5:69:31:9e:ba:3e:e0:25:3b:07: ba:72:26:29:4a:c6:30:fa:5f:94:92:b3:ca:0a:18: b2:5d:17:8f:90:de:ba:0a:e7:67:3c:15:f5:d1:70: f4:a5:c8:2f:85:7e:1e:b9:e4:5c:ff:06:c2:a0:27: cf:dd:ec:33:71:bc:d0:15:f1:30:1a:75:2b:58:35: 28:4c:a2:4f:3f:b5:ea:57:a0:71:22:93:d8:8f:21: 15:1d:12:6d:04:13:0e:8b:6a:c4:f1:00:e5:c7:0f: 75:af:f3:68:2c:d0:26:97:17:31:65:59:db:d2:d4: e1:b8:8d:0a:cc:6d:28:11:ee:63:f6:0e:99:c0:40: 11:1d:83:48:3b:bd:fc:c5:63:c3:fc:25:31:0f:5d: 4b:a1:b3:05:29:80:35:06:b4:28:36:d2:4e:0b:e6: c7:ee:90:7a:9a:59:e8:e9:50:0f:bc:5a:d2:0e:bb: 14:de:a5:6a:47:9d:51:81:4e:c3:d6:52:88:4b:e4: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:82:78:F7:3D:77:87:BA:DD:60:FC:41:52:93:A9:85:6E:5C:6A X509v3 Authority Key Identifier: keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:1c:de:1b:a5:e9:fa:67:f5:a7:6b:aa:54:ff:b2:ea:66: 20:57:f6:f9:41:7f:f0:9b:2f:13:a6:81:2a:ab:52:32:8b:b1: 50:ca:75:56:58:b4:ad:ba:1a:53:98:71:6e:e8:7d:e4:da:55: 89:ea:1d:90:bf:f1:4c:0d:ba:47:3b:d6:bb:45:00:e3:1b:36: 00:0a:41:d9:f3:e5:3c:8a:62:37:6a:a3:a7:fb:f0:84:7a:65: 5f:3e:12:c1:77:c9:65:2f:e8:ae:fc:c4:df:13:6f:d2:2e:47: 7c:0b:6e:0a:8a:7b:10:83:20:ea:b6:89:04:1a:cd:de:d3:07: e3:71:e3:08:c7:6c:5f:77:9c:0b:da:ec:f6:92:f6:f4:6a:2d: 93:31:c2:ec:c2:14:78:8c:1b:c2:68:ca:17:da:5d:5c:71:dc: ac:03:70:93:37:9f:40:f7:f3:08:d6:f4:e4:0d:e1:a0:d4:24: fa:d2:65:08:f0:f0:f6:97:ad:25:a1:d0:64:c6:b4:ce:67:00: c8:68:d9:f6:53:e2:ed:bd:60:ff:a5:10:47:4a:46:42:fb:27: c9:b9:0b:19:e7:a4:87:b5:38:56:b8:f1:32:b5:95:2c:cc:30: 53:09:83:65:50:66:9d:39:8c:83:df:3d:82:4f:b1:9b:65:ab: 3c:a2:f1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4Jx8QPPn8ZWrdw/IG5eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZGIyOTM1ZDlkZDBkNTg1YjY1NTExODc2NGMwMWM2ZDc2 Zjc0YzIwHhcNMjUxMjI0MTUwMDU1WhcNMjUxMjI1MTUwMDU1WjAzMTEwLwYDVQQD EyhiNjBjODI3OGY3M2Q3Nzg3YmFkZDYwZmM0MTUyOTNhOTg1NmU1YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA6PpFrYVeDIKkjzbl6WyachE/OQ NvmXGEHzEt9yuzbEmWQHsVNLGNO8l3Xpbuwd8ymJTw7Vrf53cngi5UWqMLVpMZ66 PuAlOwe6ciYpSsYw+l+UkrPKChiyXRePkN66CudnPBX10XD0pcgvhX4eueRc/wbC oCfP3ewzcbzQFfEwGnUrWDUoTKJPP7XqV6BxIpPYjyEVHRJtBBMOi2rE8QDlxw91 r/NoLNAmlxcxZVnb0tThuI0KzG0oEe5j9g6ZwEARHYNIO738xWPD/CUxD11LobMF KYA1BrQoNtJOC+bH7pB6mlno6VAPvFrSDrsU3qVqR51RgU7D1lKIS+TSBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYMgnj3PXeHut1g/EFSk6mFblxqMB8GA1UdIwQY MBaAFIzbKTXZ3Q1YW2VRGHZMAcbXb3TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEt NTQ1NmUxNWQ0NjcxLzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEtNTQ1NmUxNWQ0Njcx LzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ20c3hul 6fpn9adrqlT/supmIFf2+UF/8JsvE6aBKqtSMouxUMp1Vli0rboaU5hxbuh95NpV ieodkL/xTA26RzvWu0UA4xs2AApB2fPlPIpiN2qjp/vwhHplXz4SwXfJZS/orvzE 3xNv0i5HfAtuCop7EIMg6raJBBrN3tMH43HjCMdsX3ecC9rs9pL29GotkzHC7MIU eIwbwmjKF9pdXHHcrANwkzefQPfzCNb05A3hoNQk+tJlCPDw9petJaHQZMa0zmcA yGjZ9lPi7b1g/6UQR0pGQvsnybkLGeekh7U4VrjxMrWVLMwwUwmDZVBmnTmMg989 gk+xm2WrPKLxxQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:30:47 2025 by rpki-client