This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json) Hash identifier: Ba81RWJCruQ2WsgrKsran0lSawieGTqoy2EmP/nW0Is= Subject key identifier: 7A:33:E9:EA:5F:5D:0C:B8:CE:F9:2E:B5:01:CA:56:EE:1A:47:3F:FD Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0 Certificate serial: 019B10B7D5420D167A8EBCB27D3B6B76E465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft Manifest number: 17B7 Signing time: Fri 12 Dec 2025 04:00:41 +0000 Manifest this update: Fri 12 Dec 2025 04:00:41 +0000 Manifest next update: Sat 13 Dec 2025 04:00:41 +0000 Files and hashes: 1: J8HqZbweBSBfotj9M3AMH0o24CY.roa (hash: KkFoXwUHnXFgQiJUTdylT6bFXV0tnmXRuocNWtuhH7k=) 2: M8LXMZl36E9x_u1hgBXprwim-Xo.roa (hash: jfo88yC1004DLH8yvbxNuNrVELZRrvbkyGohjnl520k=) 3: aXs8DBYHqH16kFI25mAmO1bJxx4.roa (hash: d1LoCC9lmf7ZBBsN52kpeKsNgpbykeADMERL6qdd4Bg=) 4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: ZLYMflwRYPxQYwAif/0g7bJJKqBbLYJ3zuC6IyVSuwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b7:d5:42:0d:16:7a:8e:bc:b2:7d:3b:6b:76:e4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0 Validity Not Before: Dec 12 04:00:41 2025 GMT Not After : Dec 13 04:00:41 2025 GMT Subject: CN=7a33e9ea5f5d0cb8cef92eb501ca56ee1a473ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2a:32:89:a4:0c:d7:89:27:39:ce:1c:b6:fa: 27:ef:61:b2:1a:58:6a:b2:cc:df:dd:f8:3a:cf:75: 86:cc:7b:49:a3:e1:57:4b:c0:93:8a:9d:18:04:5d: f5:cb:72:48:de:f8:4e:94:68:1d:2a:f2:f5:86:b2: ae:79:86:60:19:da:90:4f:48:2d:79:9b:e5:c5:5d: c6:68:db:05:f3:7f:64:c6:35:80:6b:37:02:4b:97: 0c:87:a7:53:18:d0:9a:61:40:da:51:cb:92:f2:44: 43:45:a5:40:4d:c6:03:a9:fb:44:96:01:7a:bc:8d: 54:65:1a:67:bf:e2:55:3d:4f:bc:59:c2:90:b8:e9: de:31:2d:a0:c1:df:41:dc:91:1a:f4:78:33:df:d1: b0:8e:9f:d5:73:25:ec:86:7e:aa:43:c0:a2:52:26: 5d:0b:ea:35:f0:fb:c8:d8:0c:8e:8f:0c:50:81:e4: a3:c1:06:b9:ed:7c:8e:dc:9d:c2:87:3c:34:85:0c: 16:5c:dc:12:53:59:ca:3d:85:a3:45:55:b7:d0:06: 01:f3:09:c3:c2:59:35:21:70:c9:e3:b3:d6:ed:30: 4d:16:73:38:d8:89:57:14:af:33:d0:ee:08:bc:c1: 39:41:5d:e1:b3:d8:fa:70:84:61:79:78:3e:e8:41: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:33:E9:EA:5F:5D:0C:B8:CE:F9:2E:B5:01:CA:56:EE:1A:47:3F:FD X509v3 Authority Key Identifier: keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:73:0f:59:c0:32:d7:51:42:91:86:63:88:3a:38:45:4d:b7: d5:84:42:38:68:b3:eb:5f:fd:ad:f3:ed:b4:8a:7b:f5:27:88: f4:7c:34:11:c4:77:11:22:e5:8b:43:dc:a1:88:ae:e6:de:8c: 73:af:bb:d6:d8:13:ab:c8:d2:ad:f8:6e:35:7f:c6:25:c5:75: d6:5b:86:74:a0:3e:bd:e3:35:d2:25:4a:32:14:50:87:17:83: 5d:a5:f7:eb:a8:99:31:2d:aa:da:9a:4a:42:8d:21:83:70:c1: ea:5f:b3:e0:c1:68:fc:c4:84:9c:c5:a3:2b:f6:77:55:6b:5d: 42:bc:6c:f1:44:53:e3:30:96:2b:11:b9:92:83:d4:bb:3f:4e: 4b:ff:89:c3:fc:8a:17:d2:f4:fb:53:34:11:66:57:77:f2:00: 92:c8:74:64:da:7d:9b:3f:f0:ee:b8:50:cf:0a:e3:04:7f:cf: 16:fe:03:0b:76:f7:ce:bf:0d:e0:4b:9f:8b:ad:a3:9c:c2:ca: b3:46:37:f3:aa:a7:91:b8:a3:34:4f:48:58:08:e7:98:3f:29: dc:20:98:7a:a5:a0:8e:73:65:72:8e:a3:91:d8:51:99:87:75: 70:46:9c:dc:0a:18:12:1c:6f:91:f9:e8:39:83:fb:7f:9d:f5: 63:7c:36:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQt9VCDRZ6jryyfTtrduRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx NzgzZDAwHhcNMjUxMjEyMDQwMDQxWhcNMjUxMjEzMDQwMDQxWjAzMTEwLwYDVQQD Eyg3YTMzZTllYTVmNWQwY2I4Y2VmOTJlYjUwMWNhNTZlZTFhNDczZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yoyiaQM14knOc4ctvon72GyGlhq sszf3fg6z3WGzHtJo+FXS8CTip0YBF31y3JI3vhOlGgdKvL1hrKueYZgGdqQT0gt eZvlxV3GaNsF839kxjWAazcCS5cMh6dTGNCaYUDaUcuS8kRDRaVATcYDqftElgF6 vI1UZRpnv+JVPU+8WcKQuOneMS2gwd9B3JEa9Hgz39Gwjp/VcyXshn6qQ8CiUiZd C+o18PvI2AyOjwxQgeSjwQa57XyO3J3Chzw0hQwWXNwSU1nKPYWjRVW30AYB8wnD wlk1IXDJ47PW7TBNFnM42IlXFK8z0O4IvME5QV3hs9j6cIRheXg+6EHfGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoz6epfXQy4zvkutQHKVu4aRz/9MB8GA1UdIwQY MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt NjI2NTUyMWY2ZGY3LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3 LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHMPWcAy 11FCkYZjiDo4RU231YRCOGiz61/9rfPttIp79SeI9Hw0EcR3ESLli0PcoYiu5t6M c6+71tgTq8jSrfhuNX/GJcV11luGdKA+veM10iVKMhRQhxeDXaX366iZMS2q2ppK Qo0hg3DB6l+z4MFo/MSEnMWjK/Z3VWtdQrxs8URT4zCWKxG5koPUuz9OS/+Jw/yK F9L0+1M0EWZXd/IAksh0ZNp9mz/w7rhQzwrjBH/PFv4DC3b3zr8N4Eufi62jnMLK s0Y386qnkbijNE9IWAjnmD8p3CCYeqWgjnNlco6jkdhRmYd1cEac3AoYEhxvkfno OYP7f531Y3w2ZQ== -----END CERTIFICATE-----Generated at Fri Dec 12 11:30:10 2025 by rpki-client