This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json) Hash identifier: IK11c7WYLSCYH9gWcg5r/1IxdLxDEDR5tpiqqaF2yow= Subject key identifier: 3A:A7:85:AA:0C:D0:0A:7F:E1:A9:A0:6F:BF:2D:8C:53:07:3C:29:5B Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Certificate serial: 019B692032B5FF152C4F1B5BBFDEAA010DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 08:01:15 +0000 Manifest this update: Mon 29 Dec 2025 08:01:15 +0000 Manifest next update: Tue 30 Dec 2025 08:01:15 +0000 Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=) 2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=) 3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: eGgOWAoPyZD15UF9KCzsIkAvJqodwOHUbO/3bAU9Wf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:20:32:b5:ff:15:2c:4f:1b:5b:bf:de:aa:01:0d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Validity Not Before: Dec 29 08:01:15 2025 GMT Not After : Dec 30 08:01:15 2025 GMT Subject: CN=3aa785aa0cd00a7fe1a9a06fbf2d8c53073c295b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:ef:2d:7a:f6:3c:2a:37:b5:1d:74:15:fd: a6:41:81:13:49:08:c8:9a:e4:19:73:fc:db:56:df: 10:d2:ae:92:df:c7:51:aa:7b:bb:ed:41:59:e1:e4: f1:03:19:1a:ce:54:a1:72:5d:d2:41:a5:2e:4c:65: 2c:98:bf:fe:ff:54:0e:b6:e0:7f:ba:15:5e:8c:14: a0:c6:cb:77:1a:02:39:ed:2c:87:b8:3b:7a:72:06: f1:d1:54:32:6b:21:fb:bf:c0:20:7c:72:0e:1d:c1: 02:bb:05:be:ea:63:07:f3:52:88:20:7a:f5:ac:20: 74:11:84:2a:ea:78:9f:75:44:6b:85:31:9e:7d:02: 35:2a:96:78:f2:46:5b:b9:51:a0:e0:62:74:0b:ce: 91:e6:14:7a:42:04:7d:7b:25:5d:82:ae:22:a5:df: 95:bc:b8:7e:ed:f8:4b:50:58:46:c3:40:0b:e2:16: e9:42:71:bb:4b:eb:b6:c5:11:87:c3:2e:48:2a:bf: 7d:a3:28:47:d9:2d:a9:b7:80:f3:fd:23:7a:62:06: 7c:b1:7b:1b:84:d1:73:2e:e0:56:e0:33:b2:b4:af: b2:eb:ac:54:b1:a6:f5:80:64:c3:57:c8:9b:9b:1e: be:fa:83:63:88:58:ef:ea:e6:59:f0:56:dc:49:a4: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A7:85:AA:0C:D0:0A:7F:E1:A9:A0:6F:BF:2D:8C:53:07:3C:29:5B X509v3 Authority Key Identifier: keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3d:69:f7:6f:cc:2a:94:b8:cf:b9:b2:fa:de:e2:8a:e0:ad: b8:41:74:92:f9:d9:6f:cd:ca:05:16:be:2d:ba:d4:02:8c:6a: 77:0c:a5:cb:46:2b:30:77:9a:c1:41:fb:20:a5:d9:23:3e:2e: 89:5a:d6:56:ae:6d:63:fa:1e:03:d5:6a:5b:17:05:08:72:0f: 8b:40:32:9a:6f:3b:54:ec:76:fe:e6:89:54:73:fe:f7:4c:41: 63:64:c0:c9:6c:69:ec:cb:6a:66:43:ee:29:69:be:9f:41:e6: dd:1f:92:53:2f:59:91:23:f4:f5:c4:8a:c0:48:b6:40:2a:f7: 88:59:b5:92:d3:64:49:12:90:71:f2:42:db:f2:44:e8:b4:d6: 9c:5c:4c:b7:2b:68:62:22:50:23:19:4a:0b:aa:e3:b5:7e:19: 1c:89:6a:2b:a4:6d:20:bb:76:ac:cd:e8:ba:c2:57:d2:59:04: 8a:8b:d5:e0:67:42:e6:c2:2b:c5:bc:87:4a:d0:1e:40:71:05: 5b:0b:55:60:50:3a:de:c3:89:6b:5c:91:86:d8:42:19:08:bc: 59:3e:b7:a5:2d:45:e0:6c:f6:af:9d:cf:8b:c4:b8:1e:22:52: 1d:ee:9e:ba:1d:93:72:cb:ba:d3:58:67:73:3d:53:a8:a2:0f: 53:c9:67:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpIDK1/xUsTxtbv96qAQ37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli Y2Q1NmEwHhcNMjUxMjI5MDgwMTE1WhcNMjUxMjMwMDgwMTE1WjAzMTEwLwYDVQQD EygzYWE3ODVhYTBjZDAwYTdmZTFhOWEwNmZiZjJkOGM1MzA3M2MyOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsejvLXr2PCo3tR10Ff2mQYETSQjI muQZc/zbVt8Q0q6S38dRqnu77UFZ4eTxAxkazlShcl3SQaUuTGUsmL/+/1QOtuB/ uhVejBSgxst3GgI57SyHuDt6cgbx0VQyayH7v8AgfHIOHcECuwW+6mMH81KIIHr1 rCB0EYQq6nifdURrhTGefQI1KpZ48kZbuVGg4GJ0C86R5hR6QgR9eyVdgq4ipd+V vLh+7fhLUFhGw0AL4hbpQnG7S+u2xRGHwy5IKr99oyhH2S2pt4Dz/SN6YgZ8sXsb hNFzLuBW4DOytK+y66xUsab1gGTDV8ibmx6++oNjiFjv6uZZ8FbcSaQwUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqnhaoM0Ap/4amgb78tjFMHPClbMB8GA1UdIwQY MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0 LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZz1p92/M KpS4z7my+t7iiuCtuEF0kvnZb83KBRa+LbrUAoxqdwyly0YrMHeawUH7IKXZIz4u iVrWVq5tY/oeA9VqWxcFCHIPi0Aymm87VOx2/uaJVHP+90xBY2TAyWxp7MtqZkPu KWm+n0Hm3R+SUy9ZkSP09cSKwEi2QCr3iFm1ktNkSRKQcfJC2/JE6LTWnFxMtyto YiJQIxlKC6rjtX4ZHIlqK6RtILt2rM3ousJX0lkEiovV4GdC5sIrxbyHStAeQHEF WwtVYFA63sOJa1yRhthCGQi8WT63pS1F4Gz2r53Pi8S4HiJSHe6euh2Tcsu601hn cz1TqKIPU8lnPA== -----END CERTIFICATE-----Generated at Mon Dec 29 13:25:46 2025 by rpki-client