This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft File: jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json) Hash identifier: DqXhQ67UBhLPcCqLPDNyZVcA4+qWK/oxjYlh3g+NmaY= Subject key identifier: 31:87:72:D7:25:3D:78:E2:3D:2B:08:C2:69:68:F8:11:F9:03:E2:CF Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC Certificate issuer: /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc Certificate serial: 019B3AC6F34E5573EA29FD877508EDF87B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft Manifest number: 0799 Signing time: Sat 20 Dec 2025 08:01:15 +0000 Manifest this update: Sat 20 Dec 2025 08:01:15 +0000 Manifest next update: Sun 21 Dec 2025 08:01:15 +0000 Files and hashes: 1: WNAfVktzCh-XkfS8vtyy2T-YFD4.roa (hash: pclJnnbGzgCJ76LUPv7qCyNBmq4QLgEVSLKPKMx/MiI=) 2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: DC5Pv/fo76L94IyJsjF31X6FoqaZz36E86aHraFItjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f3:4e:55:73:ea:29:fd:87:75:08:ed:f8:7b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc Validity Not Before: Dec 20 08:01:15 2025 GMT Not After : Dec 21 08:01:15 2025 GMT Subject: CN=318772d7253d78e23d2b08c26968f811f903e2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:c2:d7:6f:f4:ee:e0:31:09:e6:e7:c0:d1: 71:28:17:a9:1f:2e:5e:e0:46:d8:c2:85:2d:ba:15: 0b:42:14:cc:0f:1e:00:f9:78:e9:ec:a5:da:dc:16: 74:f6:ed:98:d6:47:38:37:2f:04:8d:9a:0b:1a:cb: b6:2e:91:6a:d0:05:84:d7:df:b4:11:ec:ad:3c:c1: 03:e4:7c:14:72:86:e5:1f:5c:d0:a6:8f:37:e7:c3: f0:68:99:c5:3c:f9:df:46:f4:40:03:4a:fe:c9:e9: 3c:60:3a:4a:cb:cd:f5:4c:2d:7f:47:05:7d:e1:86: 73:c7:f9:6c:b2:c5:e0:dc:f1:88:12:29:0f:79:6b: 8f:39:16:77:58:8c:38:63:37:e1:1e:19:1c:c0:d6: bf:42:10:a1:ef:3b:89:fb:17:27:c7:17:2f:30:c9: d6:bc:a2:19:ec:04:5c:7c:57:16:d1:56:8b:0d:eb: 98:79:78:a4:69:44:33:32:ec:f8:f2:b7:6a:14:5d: bb:f0:e1:d5:2a:93:53:f9:26:f2:9c:5d:89:5c:20: b3:cd:92:b4:bf:f9:da:f6:98:1d:83:d1:74:b7:ba: f6:a3:b2:13:d2:d6:e8:a6:b1:0f:91:3f:db:a9:d3: 9e:0f:c0:49:35:3d:17:f3:64:30:7d:24:c8:e5:5a: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:87:72:D7:25:3D:78:E2:3D:2B:08:C2:69:68:F8:11:F9:03:E2:CF X509v3 Authority Key Identifier: keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ea:ca:e6:24:d6:1c:7a:85:8e:4e:9e:e7:75:53:68:c9:47: f7:1d:9e:ec:83:59:18:aa:c9:75:9e:38:05:a2:97:ea:fa:d4: a7:d9:fc:1b:72:1e:29:dc:7d:35:8e:94:9f:bc:b1:ae:14:1d: fb:a5:07:69:7e:f9:d6:e3:6a:80:06:3f:57:da:4d:df:34:5b: 9b:29:ab:93:e4:fa:72:85:1c:d4:58:e5:59:e9:27:a6:76:96: ac:a0:b4:9f:ba:e0:c3:2f:8b:e6:90:95:25:ad:6e:05:d5:47: 16:06:4e:97:27:f7:4e:00:98:b1:90:7a:75:72:2d:0b:2b:e5: f1:90:0a:6a:d7:bc:dd:13:b4:1a:45:ec:17:fa:32:69:5f:89: fa:58:2a:f8:a6:14:02:1e:49:58:7d:da:38:3d:be:44:a4:fd: 38:6f:15:ca:98:67:e1:fa:b0:ec:65:9c:c2:aa:20:74:77:bf: b8:ea:62:bc:dd:7a:e0:fc:18:3d:57:0c:30:b5:d6:02:6d:b8: 02:24:37:d6:28:85:fc:a3:fc:80:8c:97:f8:5d:0d:9e:5b:73: 6c:4a:b1:f0:3a:c1:8e:46:3c:73:a7:a0:cd:cd:31:61:75:f5: b4:08:2c:c6:2a:2e:03:d1:c3:74:ea:9f:f5:e4:45:e4:64:f0: 9f:66:a3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvNOVXPqKf2HdQjt+HuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2ZiNWY1Mjg0N2YyMTcwZTY3ZmNjMjVhZGYwYjVkNjg2 ZmZhZmMwHhcNMjUxMjIwMDgwMTE1WhcNMjUxMjIxMDgwMTE1WjAzMTEwLwYDVQQD EygzMTg3NzJkNzI1M2Q3OGUyM2QyYjA4YzI2OTY4ZjgxMWY5MDNlMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf3C12/07uAxCebnwNFxKBepHy5e 4EbYwoUtuhULQhTMDx4A+Xjp7KXa3BZ09u2Y1kc4Ny8EjZoLGsu2LpFq0AWE19+0 EeytPMED5HwUcoblH1zQpo8358PwaJnFPPnfRvRAA0r+yek8YDpKy831TC1/RwV9 4YZzx/lsssXg3PGIEikPeWuPORZ3WIw4YzfhHhkcwNa/QhCh7zuJ+xcnxxcvMMnW vKIZ7ARcfFcW0VaLDeuYeXikaUQzMuz48rdqFF278OHVKpNT+SbynF2JXCCzzZK0 v/na9pgdg9F0t7r2o7IT0tboprEPkT/bqdOeD8BJNT0X82QwfSTI5Voj/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGHctclPXjiPSsIwmlo+BH5A+LPMB8GA1UdIwQY MBaAFI5/tfUoR/IXDmf8wlrfC11ob/r8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYzc3MGUtNDFkYS00ZDM2LTk3ZTIt MTYxOGQ1ZWVhYWU4LzEvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hYzc3MGUtNDFkYS00ZDM2LTk3ZTItMTYxOGQ1ZWVhYWU4 LzEvam4tMTlTaEg4aGNPWl96Q1d0OExYV2h2LXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+rK5iTW HHqFjk6e53VTaMlH9x2e7INZGKrJdZ44BaKX6vrUp9n8G3IeKdx9NY6Un7yxrhQd +6UHaX751uNqgAY/V9pN3zRbmymrk+T6coUc1FjlWeknpnaWrKC0n7rgwy+L5pCV Ja1uBdVHFgZOlyf3TgCYsZB6dXItCyvl8ZAKate83RO0GkXsF/oyaV+J+lgq+KYU Ah5JWH3aOD2+RKT9OG8Vyphn4fqw7GWcwqogdHe/uOpivN164PwYPVcMMLXWAm24 AiQ31iiF/KP8gIyX+F0NnltzbEqx8DrBjkY8c6egzc0xYXX1tAgsxiouA9HDdOqf 9eRF5GTwn2ajlA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:07:46 2025 by rpki-client