This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json) Hash identifier: Qk2yT8M3W5bykTPNDC7KBZvSFg7sYIOeVyB4ePbe5Vc= Subject key identifier: B2:1E:74:FB:03:DD:2C:48:35:98:4C:78:2A:DD:97:03:D0:74:5C:A5 Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Certificate serial: 019B36B44DD33752D47BAD7448B9FFAC6A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft Manifest number: 10B1 Signing time: Fri 19 Dec 2025 13:02:24 +0000 Manifest this update: Fri 19 Dec 2025 13:02:24 +0000 Manifest next update: Sat 20 Dec 2025 13:02:24 +0000 Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=) 2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: fyR7nNFY1kP78WFnEw5UrhSqFIXOWgg4YD5Rm6299KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:4d:d3:37:52:d4:7b:ad:74:48:b9:ff:ac:6a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1 Validity Not Before: Dec 19 13:02:24 2025 GMT Not After : Dec 20 13:02:24 2025 GMT Subject: CN=b21e74fb03dd2c4835984c782add9703d0745ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:0d:44:7b:91:5a:c6:b6:b7:87:cd:ca:68: a0:24:e2:01:e2:5e:75:19:d5:fb:25:9e:e9:4a:80: e8:f9:8f:a3:60:93:e3:c3:78:60:b4:9b:33:13:26: f6:fe:5d:53:23:de:d5:42:61:c5:be:f1:95:35:f5: 40:d0:bb:07:ee:8c:8b:1a:61:f8:26:b1:4e:97:7c: 75:99:40:7f:f4:79:20:71:79:4b:9e:75:99:c9:ce: a7:fb:dc:df:02:b0:f6:1c:8a:21:e6:ef:92:91:c8: 7b:03:7e:a3:d1:8b:9b:34:7c:72:70:22:17:13:d5: 98:83:da:31:df:9b:3e:51:24:7a:44:70:c2:95:1b: 8d:37:aa:12:f3:21:5f:e4:d2:3e:f7:05:8b:a4:f3: ac:d7:5b:85:18:60:1d:03:e7:02:a2:87:38:85:2e: 7e:54:2d:76:5b:07:f1:0a:94:ae:5d:6f:4e:07:15: 36:b9:66:02:4f:6b:b5:41:e7:49:a8:e8:d6:33:74: 20:17:4f:32:24:03:c1:bf:94:15:5d:73:75:a6:ac: ec:7e:3d:ed:6d:8e:60:e2:f9:10:96:09:ab:b3:57: 08:4d:0c:f6:01:7c:6e:ab:a3:95:34:b2:83:0e:5c: 8a:e9:01:fa:59:a4:bc:52:e5:1d:4f:cb:fd:56:69: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:74:FB:03:DD:2C:48:35:98:4C:78:2A:DD:97:03:D0:74:5C:A5 X509v3 Authority Key Identifier: keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:22:6a:8b:11:79:fc:4e:2a:86:81:ae:c4:07:2a:2c:c1:fe: 3f:48:82:0f:52:b8:31:e7:c0:01:1b:dd:d8:36:5f:24:ef:26: 40:63:18:bd:6f:ac:fe:36:4b:1c:f0:d3:cc:d0:95:76:39:58: 8b:90:6e:3f:b1:0a:5d:a9:f8:90:9c:d2:b6:8a:8d:d1:35:87: 24:6a:fc:5b:58:07:f5:e8:1a:c7:02:ba:f7:b3:f4:41:71:87: c7:02:c1:26:bc:3b:3e:29:71:7c:26:29:41:b6:7f:21:d5:b4: dc:36:1f:69:39:a4:7b:d4:f2:ac:5b:74:0c:4c:f0:b9:b3:14: c1:c8:12:50:1b:17:fe:a2:a1:4a:a3:48:53:3c:80:08:9a:fc: fc:5f:fc:10:5d:bb:50:c9:7f:e5:5e:fd:c5:c1:57:9a:2f:d7: a6:72:ba:60:14:20:6d:b4:af:30:9f:52:c0:1e:77:ae:50:f7: d0:69:d6:35:07:56:aa:1b:6f:e0:d6:37:7f:c8:d9:c8:36:03: 89:d0:fa:b8:01:03:be:a0:4f:4f:db:1c:7d:bf:b8:de:26:d9: 67:26:88:9e:e0:1c:3d:80:94:6f:7a:32:1e:a2:3a:88:dc:3d: 2b:b0:71:9e:7c:58:00:ba:b9:50:82:39:08:a4:ef:c9:a9:59: 50:c2:37:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tE3TN1LUe610SLn/rGouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh ZWQwYjEwHhcNMjUxMjE5MTMwMjI0WhcNMjUxMjIwMTMwMjI0WjAzMTEwLwYDVQQD EyhiMjFlNzRmYjAzZGQyYzQ4MzU5ODRjNzgyYWRkOTcwM2QwNzQ1Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv0NRHuRWsa2t4fNymigJOIB4l51 GdX7JZ7pSoDo+Y+jYJPjw3hgtJszEyb2/l1TI97VQmHFvvGVNfVA0LsH7oyLGmH4 JrFOl3x1mUB/9HkgcXlLnnWZyc6n+9zfArD2HIoh5u+Skch7A36j0YubNHxycCIX E9WYg9ox35s+USR6RHDClRuNN6oS8yFf5NI+9wWLpPOs11uFGGAdA+cCooc4hS5+ VC12WwfxCpSuXW9OBxU2uWYCT2u1QedJqOjWM3QgF08yJAPBv5QVXXN1pqzsfj3t bY5g4vkQlgmrs1cITQz2AXxuq6OVNLKDDlyK6QH6WaS8UuUdT8v9VmnhEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIedPsD3SxINZhMeCrdlwPQdFylMB8GA1UdIwQY MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSJqixF5 /E4qhoGuxAcqLMH+P0iCD1K4MefAARvd2DZfJO8mQGMYvW+s/jZLHPDTzNCVdjlY i5BuP7EKXan4kJzStoqN0TWHJGr8W1gH9egaxwK697P0QXGHxwLBJrw7PilxfCYp QbZ/IdW03DYfaTmke9TyrFt0DEzwubMUwcgSUBsX/qKhSqNIUzyACJr8/F/8EF27 UMl/5V79xcFXmi/XpnK6YBQgbbSvMJ9SwB53rlD30GnWNQdWqhtv4NY3f8jZyDYD idD6uAEDvqBPT9scfb+43ibZZyaInuAcPYCUb3oyHqI6iNw9K7BxnnxYALq5UII5 CKTvyalZUMI38Q== -----END CERTIFICATE-----Generated at Fri Dec 19 15:47:01 2025 by rpki-client