This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json) Hash identifier: y5U/hF8ufUf9dLnOxPYXslfJ6ji+06kTneC/sfDeNDQ= Subject key identifier: 64:C4:4A:4E:0A:2B:08:18:79:24:42:A0:93:A7:2D:3D:C3:BC:80:80 Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Certificate serial: 019B341F7EB32AE7DE49B1AD979D3EFF7C08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 01:00:37 +0000 Manifest this update: Fri 19 Dec 2025 01:00:37 +0000 Manifest next update: Sat 20 Dec 2025 01:00:37 +0000 Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: 64CgUKOCDyuQup3pNzhole+LRaD2dppdzIWjIf8sIck=) 2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:7e:b3:2a:e7:de:49:b1:ad:97:9d:3e:ff:7c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03 Validity Not Before: Dec 19 01:00:37 2025 GMT Not After : Dec 20 01:00:37 2025 GMT Subject: CN=64c44a4e0a2b0818792442a093a72d3dc3bc8080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:d6:c2:66:52:72:ce:7d:58:61:94:4e:d8: e9:1d:f0:eb:99:24:3d:56:04:41:e4:b3:45:14:c4: dc:d9:d1:e8:04:5b:49:25:a2:85:52:f1:03:08:e2: ea:a2:ca:c2:9f:f4:45:e3:ff:f2:c8:b2:fd:74:0b: a3:cc:04:23:3e:b3:c8:d4:2e:20:4b:a1:c8:d2:0c: 9a:06:75:dc:33:2c:a3:29:37:30:2d:c1:38:20:3c: 0c:77:6b:bd:5a:99:b0:51:4b:7f:f0:70:6d:5b:13: 57:39:ff:ec:10:fe:d5:d1:8e:bc:5b:99:b2:2c:19: 67:a7:f0:5e:71:76:f2:ce:c4:ec:e0:d7:7a:03:bf: 9c:74:fa:a7:de:05:f2:38:a6:1d:d3:d1:ef:00:a4: 19:86:ae:e1:7f:1b:35:95:42:6b:d0:38:80:8b:ba: e2:a9:d0:51:63:76:32:8c:75:3e:c7:2f:8a:3e:97: 68:63:2a:2f:9b:e2:f3:04:58:e0:ac:c1:bf:41:f6: d0:73:9a:6a:a8:23:2a:6a:db:d8:1e:db:8b:24:ed: 20:5a:33:68:d2:e9:b6:94:ae:66:60:3e:a0:5d:54: b0:14:56:0d:86:e5:83:3f:e2:c5:84:7c:67:f2:e3: 68:27:c8:6e:d5:cd:a4:16:09:69:a8:bf:07:08:e4: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:4A:4E:0A:2B:08:18:79:24:42:A0:93:A7:2D:3D:C3:BC:80:80 X509v3 Authority Key Identifier: keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:ca:fc:5e:96:cb:d7:e0:f0:5e:4c:5c:2a:a2:9a:19:eb: ed:cc:4e:29:75:f1:14:e9:01:6f:e2:e5:b4:ed:de:b9:99:f0: 8a:04:a7:46:0f:d4:bb:71:77:c9:84:a9:fa:90:fd:99:71:b6: 0a:cf:5c:f4:66:30:d9:31:55:4a:32:5b:ad:e2:d5:9f:dc:6d: c0:f3:fe:4b:33:e0:7b:e5:ce:a0:c5:69:ef:d7:b6:0c:8a:96: 75:62:97:82:72:2f:09:20:3e:50:eb:c5:e2:12:72:63:84:aa: 52:3a:54:3b:ef:06:41:45:a7:c7:32:de:2b:3e:16:73:bd:d6: f0:61:51:80:11:95:ca:da:87:fa:81:65:5e:8f:d2:06:ec:f4: a0:0b:7e:d7:72:68:30:f5:0f:d2:24:94:df:7a:33:a3:5b:66: ea:17:3f:c0:0e:d2:89:34:4f:bd:60:97:a3:13:ee:10:e1:cd: ae:a4:53:f5:fd:78:a2:61:1e:63:79:c6:6e:ee:9a:0b:f1:8c: 4f:68:f3:c0:67:aa:31:cc:58:f3:ee:bd:76:55:bd:19:c7:23: 73:1e:fd:eb:aa:63:9d:36:cd:c8:37:d7:49:3d:11:68:83:b1: 2f:7c:84:5e:20:2f:22:61:60:ac:17:8c:8a:55:ef:f3:80:a2: 5a:ad:92:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H36zKufeSbGtl50+/3wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDlkNjFmODNlMGQ3ZTgzMDhhNmNkZTRkZDMxNWRkNzU3 NTZjMDMwHhcNMjUxMjE5MDEwMDM3WhcNMjUxMjIwMDEwMDM3WjAzMTEwLwYDVQQD Eyg2NGM0NGE0ZTBhMmIwODE4NzkyNDQyYTA5M2E3MmQzZGMzYmM4MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTPWwmZScs59WGGUTtjpHfDrmSQ9 VgRB5LNFFMTc2dHoBFtJJaKFUvEDCOLqosrCn/RF4//yyLL9dAujzAQjPrPI1C4g S6HI0gyaBnXcMyyjKTcwLcE4IDwMd2u9WpmwUUt/8HBtWxNXOf/sEP7V0Y68W5my LBlnp/BecXbyzsTs4Nd6A7+cdPqn3gXyOKYd09HvAKQZhq7hfxs1lUJr0DiAi7ri qdBRY3YyjHU+xy+KPpdoYyovm+LzBFjgrMG/QfbQc5pqqCMqatvYHtuLJO0gWjNo 0um2lK5mYD6gXVSwFFYNhuWDP+LFhHxn8uNoJ8hu1c2kFglpqL8HCOTGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTESk4KKwgYeSRCoJOnLT3DvICAMB8GA1UdIwQY MBaAFIzZ1h+D4NfoMIps3k3TFd11dWwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMt ZDJkNTc4NDNhMjdkLzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84NmM5NDYtMTRjYi00OTM1LTg4ZTMtZDJkNTc4NDNhMjdk LzEvak5uV0g0UGcxLWd3aW16ZVRkTVYzWFYxYkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQXK/F6W y9fg8F5MXCqimhnr7cxOKXXxFOkBb+LltO3euZnwigSnRg/Uu3F3yYSp+pD9mXG2 Cs9c9GYw2TFVSjJbreLVn9xtwPP+SzPge+XOoMVp79e2DIqWdWKXgnIvCSA+UOvF 4hJyY4SqUjpUO+8GQUWnxzLeKz4Wc73W8GFRgBGVytqH+oFlXo/SBuz0oAt+13Jo MPUP0iSU33ozo1tm6hc/wA7SiTRPvWCXoxPuEOHNrqRT9f14omEeY3nGbu6aC/GM T2jzwGeqMcxY8+69dlW9Gccjcx7966pjnTbNyDfXST0RaIOxL3yEXiAvImFgrBeM ilXv84CiWq2Shw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:32:36 2025 by rpki-client