This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json) Hash identifier: G0LQ7gsyCPgtjXIe7P6dx+5Yt0AnRpXlnvFM6I5Mgho= Subject key identifier: 3A:94:06:5F:60:0C:B5:EC:48:39:90:EF:9D:72:C2:A4:02:E0:07:91 Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Certificate serial: 019B37FC78E168F4DE4BFB873897E80DEC6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 19:00:51 +0000 Manifest this update: Fri 19 Dec 2025 19:00:51 +0000 Manifest next update: Sat 20 Dec 2025 19:00:51 +0000 Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: 6XfJKXXEIomJqdfiHiHYNQELY8mkzv2NrFdxLKGnQqM=) 2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:78:e1:68:f4:de:4b:fb:87:38:97:e8:0d:ec:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e Validity Not Before: Dec 19 19:00:51 2025 GMT Not After : Dec 20 19:00:51 2025 GMT Subject: CN=3a94065f600cb5ec483990ef9d72c2a402e00791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:db:f9:59:94:16:f3:11:f2:e4:40:50:a6: 7c:7a:bd:56:1b:59:74:a0:dc:27:77:f5:6a:29:cc: ca:07:da:a1:1e:48:73:36:ff:df:e6:75:3d:f1:dc: 4a:e2:8e:11:98:38:46:6c:4b:a8:4f:21:de:b1:6a: ca:35:d8:f3:e6:e6:82:22:0f:6d:1d:e5:3b:49:26: d4:19:bd:46:9e:1e:ff:58:f4:a3:9e:a9:8e:2d:bf: 89:bf:7f:f7:a1:5c:6d:9b:b6:1d:4a:e2:e1:4f:b3: 0f:fc:6a:a4:5c:94:07:38:69:ba:73:1c:1a:c8:c4: 03:69:e2:a8:19:91:ba:f2:c3:1c:41:c6:b6:ef:ba: 4f:5b:de:36:d8:26:03:3e:c4:2a:a4:cc:25:66:8f: 83:46:10:6c:30:ba:d8:5f:bd:47:3b:86:9d:6d:f8: 11:e7:0a:8c:da:d8:73:27:7d:f6:5e:9b:97:10:94: 80:e1:29:c4:44:51:3c:13:87:f8:1a:75:8f:41:e8: fb:3d:7b:03:2e:db:44:14:9d:f7:e9:ee:c8:10:12: d7:8d:fd:87:8c:9b:f0:3a:01:2d:35:3e:76:e3:c7: 6b:d0:ca:2a:65:cd:8a:33:cc:dd:98:3f:2d:b2:93: 53:97:3c:a9:14:c0:53:7e:33:c6:f6:6b:9e:05:dd: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:06:5F:60:0C:B5:EC:48:39:90:EF:9D:72:C2:A4:02:E0:07:91 X509v3 Authority Key Identifier: keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:bc:c9:d0:69:e2:2d:73:fa:e9:c1:8f:ea:d1:f2:34:db:94: 6f:7c:f7:12:33:f3:13:73:aa:6c:d0:69:28:a2:cb:b3:98:e6: fe:4c:cd:72:3e:38:f4:d7:a5:5e:e5:aa:6d:93:ff:a3:37:07: d4:8c:c1:50:3b:18:48:be:99:de:f7:d9:68:ba:29:aa:1c:a8: 59:26:25:4f:ba:68:50:cb:bb:97:8a:a2:0e:ed:36:41:a5:d1: f0:28:cd:fa:5e:33:2a:d3:e4:1e:cf:9a:2b:85:f6:82:13:42: 00:a2:01:85:8d:0c:bf:49:0b:f8:03:d1:a2:d4:69:bd:7e:84: 89:f6:64:8b:5d:13:c6:4f:04:9a:1a:97:18:3d:92:af:26:32: d8:2a:dc:78:0a:07:3b:c1:58:77:89:06:1a:37:00:6e:8a:60: d2:96:ed:0c:82:e1:6e:6a:e5:a5:30:0c:b7:d6:63:09:45:5f: ed:58:72:a5:d0:61:c0:28:c8:09:24:92:59:90:65:25:84:50: 64:e2:d9:55:30:52:cd:c4:41:4f:66:07:f2:f5:02:c5:44:5e: b1:7b:ef:60:6f:47:08:4f:13:38:52:98:75:9f:6b:e7:d5:93: 3d:96:42:68:b1:2b:b1:e3:83:22:ff:46:25:df:68:2a:8c:aa: 89:f8:c5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/HjhaPTeS/uHOJfoDexqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx MWY5N2UwHhcNMjUxMjE5MTkwMDUxWhcNMjUxMjIwMTkwMDUxWjAzMTEwLwYDVQQD EygzYTk0MDY1ZjYwMGNiNWVjNDgzOTkwZWY5ZDcyYzJhNDAyZTAwNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHXb+VmUFvMR8uRAUKZ8er1WG1l0 oNwnd/VqKczKB9qhHkhzNv/f5nU98dxK4o4RmDhGbEuoTyHesWrKNdjz5uaCIg9t HeU7SSbUGb1Gnh7/WPSjnqmOLb+Jv3/3oVxtm7YdSuLhT7MP/GqkXJQHOGm6cxwa yMQDaeKoGZG68sMcQca277pPW9422CYDPsQqpMwlZo+DRhBsMLrYX71HO4adbfgR 5wqM2thzJ332XpuXEJSA4SnERFE8E4f4GnWPQej7PXsDLttEFJ336e7IEBLXjf2H jJvwOgEtNT5248dr0MoqZc2KM8zdmD8tspNTlzypFMBTfjPG9mueBd3qdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqUBl9gDLXsSDmQ751ywqQC4AeRMB8GA1UdIwQY MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt MGQwNTAzNThlNjU2LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2 LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLzJ0Gni LXP66cGP6tHyNNuUb3z3EjPzE3OqbNBpKKLLs5jm/kzNcj449NelXuWqbZP/ozcH 1IzBUDsYSL6Z3vfZaLopqhyoWSYlT7poUMu7l4qiDu02QaXR8CjN+l4zKtPkHs+a K4X2ghNCAKIBhY0Mv0kL+APRotRpvX6EifZki10Txk8EmhqXGD2SryYy2CrceAoH O8FYd4kGGjcAbopg0pbtDILhbmrlpTAMt9ZjCUVf7VhypdBhwCjICSSSWZBlJYRQ ZOLZVTBSzcRBT2YH8vUCxUResXvvYG9HCE8TOFKYdZ9r59WTPZZCaLErseODIv9G Jd9oKoyqifjFdw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:39:01 2025 by rpki-client