This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json) Hash identifier: csyYBHBzf00AhUdAwzbJfR5oQIZjuBPWcxKND2jhLeo= Subject key identifier: 6F:B7:41:8D:EA:AE:D3:A4:02:17:62:8F:AD:57:9B:A1:DF:FF:58:C0 Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Certificate serial: 019B5607177B1C06446D6C9D25078E83874C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft Manifest number: 1247 Signing time: Thu 25 Dec 2025 15:01:03 +0000 Manifest this update: Thu 25 Dec 2025 15:01:03 +0000 Manifest next update: Fri 26 Dec 2025 15:01:03 +0000 Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: C6IcDP2fbwrnDZrrL3LrP5QIkjSllCjw0AFFAwdlA8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:17:7b:1c:06:44:6d:6c:9d:25:07:8e:83:87:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Validity Not Before: Dec 25 15:01:03 2025 GMT Not After : Dec 26 15:01:03 2025 GMT Subject: CN=6fb7418deaaed3a40217628fad579ba1dfff58c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:cb:b7:18:d8:cc:9c:78:7e:0f:32:c1:70: d6:24:4d:87:33:49:a9:da:f3:e9:07:c4:1d:9c:eb: 8c:89:7e:43:bf:51:7a:4c:c3:67:ba:48:26:66:ff: f6:02:ed:15:ca:04:ae:28:ac:f9:a5:c2:0e:80:1d: 81:99:11:f1:3c:43:78:7c:21:9f:f6:be:ed:23:87: d2:11:bc:fc:c2:9e:cb:53:15:09:fd:93:46:83:e4: b5:1b:f4:0b:42:8c:fe:47:89:fa:1f:e1:a2:ba:6f: 3a:0a:2b:d4:b4:5c:40:fa:38:01:55:b8:72:31:c0: e9:dd:15:ad:4f:f9:71:83:09:ed:1a:fe:3c:ed:7e: ea:f4:d1:f3:42:bd:df:3f:e4:12:77:7b:7e:62:14: ad:b1:41:53:43:7f:c4:d8:45:ea:e9:2d:61:f4:96: df:a9:a0:44:4f:7c:ad:77:0c:f0:3a:45:3b:2d:14: aa:d5:cb:6a:0e:b3:d9:ec:6f:2e:6e:c5:3a:2c:98: 82:3c:e3:67:80:03:00:e2:bd:01:c8:c5:d6:1a:0a: 71:c5:5e:52:d5:d4:e4:c7:a7:22:b2:5a:6c:d4:1a: c2:19:88:ef:91:42:bc:11:c1:4c:b4:a5:97:94:0b: 4e:0d:94:c7:fc:5d:4c:3a:95:2f:5a:37:31:ba:df: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B7:41:8D:EA:AE:D3:A4:02:17:62:8F:AD:57:9B:A1:DF:FF:58:C0 X509v3 Authority Key Identifier: keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:71:cc:47:62:23:51:46:2b:11:8b:fb:69:f4:36:23:fa:26: a0:77:89:1d:b4:66:ec:aa:0c:18:85:ec:b8:4b:16:e3:0c:ae: c2:a2:90:95:f5:b1:86:ac:b1:6e:27:15:bb:c3:8b:03:92:ec: 54:c6:9b:4e:c5:f7:6e:63:b8:47:e1:6f:74:56:98:f0:5d:51: fd:46:70:3d:9a:a9:2d:8c:2d:99:b0:c5:be:a4:d6:80:aa:34: f9:f6:2c:c5:ae:51:3a:41:28:98:6e:c2:19:76:0d:1d:5a:3e: 9b:03:50:82:92:07:e5:c3:9a:93:fd:0a:7d:a8:e9:61:b2:73: 08:5e:92:96:2a:db:f9:cd:8b:d6:b5:4d:3d:6b:e3:ba:76:63: 6a:32:92:9c:cb:37:cd:cf:2d:a7:b6:7c:25:cb:28:68:cf:6b: 66:fb:04:8f:ea:36:6a:ad:e1:97:75:a0:ec:51:e5:58:7d:a8: 2c:5d:a5:a1:70:74:e1:f5:3e:7a:d5:8d:bd:85:e0:a1:db:5e: 9c:ef:63:b2:e0:42:48:96:75:93:5f:34:14:10:fd:ae:a0:6a: 51:e4:70:0b:8a:cb:51:19:a0:de:8e:45:ca:13:8c:8f:08:3f: 99:a6:31:59:09:ba:46:2b:c3:8b:03:f9:38:a7:d0:49:3f:35: 9b:dd:a1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBxd7HAZEbWydJQeOg4dMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj ZTlkMjkwHhcNMjUxMjI1MTUwMTAzWhcNMjUxMjI2MTUwMTAzWjAzMTEwLwYDVQQD Eyg2ZmI3NDE4ZGVhYWVkM2E0MDIxNzYyOGZhZDU3OWJhMWRmZmY1OGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseTLtxjYzJx4fg8ywXDWJE2HM0mp 2vPpB8QdnOuMiX5Dv1F6TMNnukgmZv/2Au0VygSuKKz5pcIOgB2BmRHxPEN4fCGf 9r7tI4fSEbz8wp7LUxUJ/ZNGg+S1G/QLQoz+R4n6H+Gium86CivUtFxA+jgBVbhy McDp3RWtT/lxgwntGv487X7q9NHzQr3fP+QSd3t+YhStsUFTQ3/E2EXq6S1h9Jbf qaBET3ytdwzwOkU7LRSq1ctqDrPZ7G8ubsU6LJiCPONngAMA4r0ByMXWGgpxxV5S 1dTkx6cislps1BrCGYjvkUK8EcFMtKWXlAtODZTH/F1MOpUvWjcxut8hvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+3QY3qrtOkAhdij61Xm6Hf/1jAMB8GA1UdIwQY MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXHMR2Ij UUYrEYv7afQ2I/omoHeJHbRm7KoMGIXsuEsW4wyuwqKQlfWxhqyxbicVu8OLA5Ls VMabTsX3bmO4R+FvdFaY8F1R/UZwPZqpLYwtmbDFvqTWgKo0+fYsxa5ROkEomG7C GXYNHVo+mwNQgpIH5cOak/0KfajpYbJzCF6Slirb+c2L1rVNPWvjunZjajKSnMs3 zc8tp7Z8JcsoaM9rZvsEj+o2aq3hl3Wg7FHlWH2oLF2loXB04fU+etWNvYXgodte nO9jsuBCSJZ1k180FBD9rqBqUeRwC4rLURmg3o5FyhOMjwg/maYxWQm6RivDiwP5 OKfQST81m92hGg== -----END CERTIFICATE-----Generated at Thu Dec 25 19:38:57 2025 by rpki-client