This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json) Hash identifier: amLBofAE1lEj4v1vOJhUdXaq4ikCpzecMBfBhX+0Q+8= Subject key identifier: 93:36:3C:8C:BD:C1:6C:D5:A3:14:EB:4A:69:C9:41:48:54:11:8E:C8 Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Certificate serial: 019B3155711695065FF44B0B17F34AEC4B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft Manifest number: 1234 Signing time: Thu 18 Dec 2025 12:00:41 +0000 Manifest this update: Thu 18 Dec 2025 12:00:41 +0000 Manifest next update: Fri 19 Dec 2025 12:00:41 +0000 Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: IGBY07UBwqY3ZlLeS+7hYPnrXzY9BD13AeeniWVmoGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:71:16:95:06:5f:f4:4b:0b:17:f3:4a:ec:4b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Validity Not Before: Dec 18 12:00:41 2025 GMT Not After : Dec 19 12:00:41 2025 GMT Subject: CN=93363c8cbdc16cd5a314eb4a69c9414854118ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:20:5b:e6:e5:92:c6:b8:cc:1d:fb:b0:fe: 50:d6:8a:87:ad:59:17:25:a3:5c:b6:08:8e:51:22: a0:5b:e5:86:6a:94:b1:fb:b4:7a:37:3e:4a:a3:27: ed:0f:44:a6:64:aa:56:80:ac:e2:3c:4c:e8:2e:bb: a0:9d:48:bf:34:7c:b8:ba:66:84:8d:69:1e:4e:a2: 1c:6e:c0:84:bb:e9:35:f8:fc:f1:fd:e5:1e:8a:6d: 8e:0b:c7:d6:68:c2:95:20:48:b6:4b:f9:23:35:aa: 2f:4b:bf:52:e1:31:9b:40:48:0d:f8:53:81:ae:28: 48:a5:4a:91:98:a0:09:9d:0a:d2:5d:44:04:03:13: d0:91:74:a8:ce:3f:65:ca:30:8c:4c:d9:27:49:5d: 38:e0:44:40:13:d8:68:57:15:ea:f2:cd:7d:03:ab: 72:24:d8:bc:c0:d8:bc:f1:05:bc:73:af:89:31:0a: ce:98:78:62:9f:f5:c5:99:cd:8c:ad:81:88:3d:74: f4:5f:a7:ce:3c:1e:d1:9e:0d:e9:3f:19:6f:39:7e: ac:24:c6:86:26:0d:c0:bf:57:bb:cb:29:b0:05:54: f0:d3:1c:38:cf:b0:4b:a8:5d:9e:0a:6a:5c:ca:ef: df:f3:ac:41:2c:e1:a0:32:14:d3:ec:f8:12:2e:0e: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:36:3C:8C:BD:C1:6C:D5:A3:14:EB:4A:69:C9:41:48:54:11:8E:C8 X509v3 Authority Key Identifier: keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:91:62:90:70:4d:ae:16:51:13:ab:da:96:7a:e0:85:42:94: b7:28:f5:1d:46:67:5f:cb:b7:1d:6e:c3:0f:e7:57:be:1e:44: 09:02:0f:6b:8f:34:f0:c5:7f:39:73:0a:cb:97:ef:0c:e5:60: a7:d2:ad:0d:2e:e4:20:23:44:d5:a4:15:70:0b:85:ab:d6:00: 65:fa:24:ac:33:f3:39:b8:f4:2a:23:9a:1b:f2:94:7c:5a:83: fa:44:d5:4a:60:cd:2e:79:8b:2a:f2:aa:3b:e5:72:19:8c:5d: c9:8b:35:e8:40:37:aa:ec:bc:6a:f2:52:5f:68:e7:24:db:91: 99:59:bf:4b:6d:95:69:0c:0f:cc:e2:77:18:4b:d6:c2:d6:e4: 26:af:ec:2c:cc:2f:01:55:d4:87:d2:d8:d6:24:f8:04:6f:ed: 98:d2:92:e3:15:f2:e1:d4:c3:ae:06:91:63:82:bb:0d:9e:17: 0b:b5:30:5a:30:a5:4b:d0:c4:55:fb:81:48:ef:91:fa:2f:a6: c4:ae:06:7b:a6:41:b0:12:a5:66:10:13:97:64:e3:3b:36:be: 3f:b4:29:b0:8f:a7:7e:d6:8b:94:d4:83:f2:44:22:0b:fc:99: 32:68:56:be:1c:40:2e:20:c4:a5:b6:7f:2f:32:e4:b7:ff:4e: 8f:d2:2d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVXEWlQZf9EsLF/NK7EslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj ZTlkMjkwHhcNMjUxMjE4MTIwMDQxWhcNMjUxMjE5MTIwMDQxWjAzMTEwLwYDVQQD Eyg5MzM2M2M4Y2JkYzE2Y2Q1YTMxNGViNGE2OWM5NDE0ODU0MTE4ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu8gW+blksa4zB37sP5Q1oqHrVkX JaNctgiOUSKgW+WGapSx+7R6Nz5KoyftD0SmZKpWgKziPEzoLrugnUi/NHy4umaE jWkeTqIcbsCEu+k1+Pzx/eUeim2OC8fWaMKVIEi2S/kjNaovS79S4TGbQEgN+FOB rihIpUqRmKAJnQrSXUQEAxPQkXSozj9lyjCMTNknSV044ERAE9hoVxXq8s19A6ty JNi8wNi88QW8c6+JMQrOmHhin/XFmc2MrYGIPXT0X6fOPB7Rng3pPxlvOX6sJMaG Jg3Av1e7yymwBVTw0xw4z7BLqF2eCmpcyu/f86xBLOGgMhTT7PgSLg6WKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJM2PIy9wWzVoxTrSmnJQUhUEY7IMB8GA1UdIwQY MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ZFikHBN rhZRE6valnrghUKUtyj1HUZnX8u3HW7DD+dXvh5ECQIPa4808MV/OXMKy5fvDOVg p9KtDS7kICNE1aQVcAuFq9YAZfokrDPzObj0KiOaG/KUfFqD+kTVSmDNLnmLKvKq O+VyGYxdyYs16EA3quy8avJSX2jnJNuRmVm/S22VaQwPzOJ3GEvWwtbkJq/sLMwv AVXUh9LY1iT4BG/tmNKS4xXy4dTDrgaRY4K7DZ4XC7UwWjClS9DEVfuBSO+R+i+m xK4Ge6ZBsBKlZhATl2TjOza+P7QpsI+nftaLlNSD8kQiC/yZMmhWvhxALiDEpbZ/ LzLkt/9Oj9It2w== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:11 2025 by rpki-client