This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft File: jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json) Hash identifier: iXr/DRvKUr66wtyaIzl6t1ek3GF3LgCHc0n8LQ6OD7Q= Subject key identifier: 48:DC:D1:33:66:E5:96:01:47:7F:4F:55:9B:95:98:CC:FC:A3:DD:27 Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 Certificate issuer: /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Certificate serial: 019B59E3E96A12C6A02A724ED43810AD5940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft Manifest number: 080A Signing time: Fri 26 Dec 2025 09:01:07 +0000 Manifest this update: Fri 26 Dec 2025 09:01:07 +0000 Manifest next update: Sat 27 Dec 2025 09:01:07 +0000 Files and hashes: 1: QkwgvOARZ0WArMcZyBkhE2Jb76g.roa (hash: ToI6x0zU+v+8pQ6FvMmC9PVdbpiMYXQKPnaPxXzGxiA=) 2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: 32h7bMV59M8f022HkmlufMU5OKrPZ6VX6rsjhg6KDTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:e9:6a:12:c6:a0:2a:72:4e:d4:38:10:ad:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2 Validity Not Before: Dec 26 09:01:07 2025 GMT Not After : Dec 27 09:01:07 2025 GMT Subject: CN=48dcd13366e59601477f4f559b9598ccfca3dd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:8c:24:90:30:ad:d7:c2:de:22:36:30:0a: b5:29:4b:60:42:fd:38:6d:fe:61:6e:aa:0c:a3:72: 37:f1:79:8f:e3:e6:67:04:94:6b:1f:77:f3:78:13: 54:b9:cb:99:c1:92:ce:d7:af:55:90:d7:cf:d8:10: d5:e1:5b:53:5c:38:53:f3:62:a0:d9:29:c5:d7:be: 34:eb:80:2a:2c:c8:28:4c:7c:27:23:bd:29:88:ca: ea:ff:42:68:61:13:a9:b6:59:53:8e:c8:92:fc:a5: de:b3:da:8f:b6:b4:af:ff:ab:99:8a:0a:fc:09:65: 9e:53:06:33:ba:b2:53:4a:1c:76:45:8a:c3:f7:bf: a2:6a:a7:50:88:f0:b1:b3:3f:82:c1:82:7c:25:c0: e2:6a:42:de:c8:5a:49:26:e0:21:aa:e7:b0:f2:ca: c4:1d:f1:f9:4e:64:86:9e:0d:67:40:25:f9:1b:80: 62:64:95:e0:3c:92:8e:b3:54:ac:16:57:02:cd:87: b4:7c:b8:f3:82:0f:74:09:5e:86:3f:12:4a:5a:40: 75:5e:98:e2:32:64:18:0e:0c:15:64:e1:d2:83:aa: 1c:87:9c:f8:63:a0:0f:2c:29:66:41:9c:e6:e0:0d: 48:e4:4f:ae:70:cf:1b:2b:a8:9a:f2:6f:f8:39:7f: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DC:D1:33:66:E5:96:01:47:7F:4F:55:9B:95:98:CC:FC:A3:DD:27 X509v3 Authority Key Identifier: keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ef:e5:c0:82:48:97:54:35:a1:64:82:4c:d5:fc:34:17:d7: 49:d8:c7:3d:52:5d:28:00:00:3a:a4:84:62:22:65:38:c8:a2: 72:73:50:54:07:0c:45:98:0d:d1:cc:2c:63:5b:38:07:88:fb: d2:eb:9b:fe:54:bf:c1:f0:a1:d3:19:bf:79:74:8f:57:da:56: b4:df:ec:b9:d7:b2:93:65:5e:9c:fc:d5:6c:96:7b:b1:d2:61: 65:08:99:85:78:e7:d4:a1:d7:bc:6d:26:89:64:1a:d9:04:19: 6e:5f:34:b5:57:1d:b4:2a:d4:ee:ea:6c:fa:75:a1:e4:9a:11: 12:9a:68:17:20:23:41:22:34:4d:20:9c:93:55:6c:6d:c8:79: e0:66:80:6b:4e:bf:02:3b:0c:0f:bb:17:72:57:b9:86:b2:35: 02:1d:68:3c:95:ae:4f:8b:ae:f6:2c:e3:35:e2:54:2a:5c:d4: 58:20:d0:0a:be:a0:a2:5f:85:09:fd:ac:93:ce:2a:27:a1:3e: 68:6e:31:a0:77:03:e1:16:a7:03:c6:c5:a8:64:2c:ce:b0:af: 80:6f:32:bf:d5:b2:c5:92:55:21:e3:60:0a:23:17:02:72:d9: 38:ac:65:af:b3:18:3d:48:58:9c:d1:97:10:fd:99:43:57:80: 39:e7:e0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+lqEsagKnJO1DgQrVlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMGFkYmEyNjA0OTM0NzM4YzdjOTY5MmEwYjNhYjdiMzBh ODJiYjIwHhcNMjUxMjI2MDkwMTA3WhcNMjUxMjI3MDkwMTA3WjAzMTEwLwYDVQQD Eyg0OGRjZDEzMzY2ZTU5NjAxNDc3ZjRmNTU5Yjk1OThjY2ZjYTNkZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nyMJJAwrdfC3iI2MAq1KUtgQv04 bf5hbqoMo3I38XmP4+ZnBJRrH3fzeBNUucuZwZLO169VkNfP2BDV4VtTXDhT82Kg 2SnF174064AqLMgoTHwnI70piMrq/0JoYROptllTjsiS/KXes9qPtrSv/6uZigr8 CWWeUwYzurJTShx2RYrD97+iaqdQiPCxsz+CwYJ8JcDiakLeyFpJJuAhquew8srE HfH5TmSGng1nQCX5G4BiZJXgPJKOs1SsFlcCzYe0fLjzgg90CV6GPxJKWkB1Xpji MmQYDgwVZOHSg6och5z4Y6APLClmQZzm4A1I5E+ucM8bK6ia8m/4OX8o4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjc0TNm5ZYBR39PVZuVmMz8o90nMB8GA1UdIwQY MBaAFI8K26JgSTRzjHyWkqCzq3swqCuyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEt N2JhZmRlNGM0YjI0LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83YTg1YzktYzU4YS00ZjhlLTgzYjEtN2JhZmRlNGM0YjI0 LzEvandyYm9tQkpOSE9NZkphU29MT3JlekNvSzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+/lwIJI l1Q1oWSCTNX8NBfXSdjHPVJdKAAAOqSEYiJlOMiicnNQVAcMRZgN0cwsY1s4B4j7 0uub/lS/wfCh0xm/eXSPV9pWtN/sudeyk2VenPzVbJZ7sdJhZQiZhXjn1KHXvG0m iWQa2QQZbl80tVcdtCrU7ups+nWh5JoREppoFyAjQSI0TSCck1Vsbch54GaAa06/ AjsMD7sXcle5hrI1Ah1oPJWuT4uu9izjNeJUKlzUWCDQCr6gol+FCf2sk84qJ6E+ aG4xoHcD4RanA8bFqGQszrCvgG8yv9WyxZJVIeNgCiMXAnLZOKxlr7MYPUhYnNGX EP2ZQ1eAOefghg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client