This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json) Hash identifier: Jtk3WHNe2AuX5YqBJ/1uSpIJrxLmw3V52aA6Vp+FLQk= Subject key identifier: 03:7C:E5:C6:19:2B:D4:54:D5:99:B9:9D:A4:A9:0A:7A:B1:46:BA:F7 Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Certificate serial: 019B36EA2C51022E6D53FB43FBF508CD2955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft Manifest number: 0A76 Signing time: Fri 19 Dec 2025 14:01:14 +0000 Manifest this update: Fri 19 Dec 2025 14:01:14 +0000 Manifest next update: Sat 20 Dec 2025 14:01:14 +0000 Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=) 2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: vP5pYCzxIRktR/oyYJ6vrx6WhNyYbFQLczcPvejbpCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:2c:51:02:2e:6d:53:fb:43:fb:f5:08:cd:29:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb Validity Not Before: Dec 19 14:01:14 2025 GMT Not After : Dec 20 14:01:14 2025 GMT Subject: CN=037ce5c6192bd454d599b99da4a90a7ab146baf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:18:09:6b:de:4d:a5:f8:6e:2d:7b:2a:ce: bb:02:fd:59:af:d3:fd:7d:62:82:d8:b4:24:68:b4: 54:f9:47:80:cf:fe:6c:29:99:dd:b8:e6:44:7d:5c: c1:eb:ae:78:20:e6:20:23:99:5b:7f:8d:ad:6b:b4: c5:1f:f2:38:4c:06:b3:16:c5:56:55:27:4e:90:49: a9:03:f8:c8:df:09:f3:6f:af:4d:5d:4b:58:a4:a5: b2:34:54:a2:40:d0:3f:ab:be:9a:ca:1b:87:ab:e1: 5e:50:26:5a:f5:88:c5:2a:27:c0:70:a3:0d:90:f8: 36:9b:8f:f4:e6:51:bd:d4:c3:9e:0c:aa:1e:4d:eb: 99:b5:a3:53:2a:29:30:f8:da:01:02:6f:91:38:84: 56:82:e3:33:5d:99:7f:1e:bc:65:a2:46:9a:ae:74: 8e:7b:33:01:92:e8:86:83:36:29:61:fe:51:fb:1d: a0:42:e2:92:cd:02:5a:1c:b7:65:6b:df:53:38:9a: cc:21:00:2d:22:20:1b:b4:c5:fa:ed:dd:ee:ae:85: ba:67:98:23:22:ca:03:ca:b2:65:2a:b1:15:3d:09: db:fd:5a:05:d3:ee:5f:d8:67:59:97:12:20:ec:75: f9:53:63:4c:dd:70:e4:5e:dc:ca:c1:6d:30:67:3a: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7C:E5:C6:19:2B:D4:54:D5:99:B9:9D:A4:A9:0A:7A:B1:46:BA:F7 X509v3 Authority Key Identifier: keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:97:10:ce:b4:ee:94:b9:40:a1:90:d6:ee:f9:f2:ae:b7:53: 10:c0:af:ba:e9:30:c4:b2:84:51:38:d8:3f:df:8c:84:1a:d0: 5e:60:48:24:6e:b5:b0:bb:0e:ed:11:66:ee:71:20:33:b5:41: 5f:59:cf:e1:ee:4f:49:55:34:79:2f:86:1d:97:d1:30:82:2d: ec:36:74:29:f7:0b:c6:e1:24:47:8e:a5:8e:65:db:74:ba:ef: 9d:a3:5c:8e:d8:cf:c0:81:24:04:c5:b5:dc:56:f1:d7:aa:db: 18:e7:c7:e0:38:97:22:d5:58:23:48:cc:84:a3:82:c3:1d:af: d0:19:26:41:90:ef:cd:48:6e:d8:e3:b2:bf:a0:12:33:7f:66: f9:fc:cd:66:a3:65:d7:e4:94:81:4e:ed:9d:40:bf:d4:c8:3c: ec:c4:46:07:3f:68:d5:38:03:9e:df:6e:66:41:4e:00:d8:b7: 55:53:9f:77:17:0f:2f:6b:36:15:a7:30:44:3e:71:4e:42:c9: 44:9b:b7:ed:39:59:95:0b:ec:e6:31:77:93:0b:06:57:0d:54: 4b:ef:3e:81:6f:2e:c7:da:5d:1d:cc:90:37:63:42:e2:02:92: 56:95:35:86:b8:58:39:b6:29:0a:f1:e1:88:4e:0f:55:41:ec: 57:1c:63:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26ixRAi5tU/tD+/UIzSlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAwM2M3YzY3N2NjM2JkNjg2MDMxNzY5OTJhM2ViZDAy ZjQ2Y2IwHhcNMjUxMjE5MTQwMTE0WhcNMjUxMjIwMTQwMTE0WjAzMTEwLwYDVQQD EygwMzdjZTVjNjE5MmJkNDU0ZDU5OWI5OWRhNGE5MGE3YWIxNDZiYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyocYCWveTaX4bi17Ks67Av1Zr9P9 fWKC2LQkaLRU+UeAz/5sKZnduOZEfVzB6654IOYgI5lbf42ta7TFH/I4TAazFsVW VSdOkEmpA/jI3wnzb69NXUtYpKWyNFSiQNA/q76ayhuHq+FeUCZa9YjFKifAcKMN kPg2m4/05lG91MOeDKoeTeuZtaNTKikw+NoBAm+ROIRWguMzXZl/HrxlokaarnSO ezMBkuiGgzYpYf5R+x2gQuKSzQJaHLdla99TOJrMIQAtIiAbtMX67d3uroW6Z5gj IsoDyrJlKrEVPQnb/VoF0+5f2GdZlxIg7HX5U2NM3XDkXtzKwW0wZzq1/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAN85cYZK9RU1Zm5naSpCnqxRrr3MB8GA1UdIwQY MBaAFI5wA8fGd8w71oYDF2mSo+vQL0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMt ZjE3ZjAwNTYxMDhjLzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMtZjE3ZjAwNTYxMDhj LzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpcQzrTu lLlAoZDW7vnyrrdTEMCvuukwxLKEUTjYP9+MhBrQXmBIJG61sLsO7RFm7nEgM7VB X1nP4e5PSVU0eS+GHZfRMIIt7DZ0KfcLxuEkR46ljmXbdLrvnaNcjtjPwIEkBMW1 3Fbx16rbGOfH4DiXItVYI0jMhKOCwx2v0BkmQZDvzUhu2OOyv6ASM39m+fzNZqNl 1+SUgU7tnUC/1Mg87MRGBz9o1TgDnt9uZkFOANi3VVOfdxcPL2s2FacwRD5xTkLJ RJu37TlZlQvs5jF3kwsGVw1US+8+gW8ux9pdHcyQN2NC4gKSVpU1hrhYObYpCvHh iE4PVUHsVxxjsg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:10:05 2025 by rpki-client