This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json) Hash identifier: ygq/uJV/wFR2d8HLyp7WF+HC//X48qPGCyKI1urFh+s= Subject key identifier: DD:FD:AB:AB:89:52:58:A8:CA:49:32:4C:FC:0C:A8:A5:DF:87:31:02 Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Certificate serial: 019B55CFA62B0F4F6D43631A7854BDA02E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 14:00:30 +0000 Manifest this update: Thu 25 Dec 2025 14:00:30 +0000 Manifest next update: Fri 26 Dec 2025 14:00:30 +0000 Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=) 2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=) 3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: yB1QIY0Yo/IHnqPyOJV8ek9VVv8Ra/+KoF9Fw1Tm8E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:cf:a6:2b:0f:4f:6d:43:63:1a:78:54:bd:a0:2e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Validity Not Before: Dec 25 14:00:30 2025 GMT Not After : Dec 26 14:00:30 2025 GMT Subject: CN=ddfdabab895258a8ca49324cfc0ca8a5df873102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:21:8f:23:e1:58:b7:58:4c:b7:ce:dd:df: 5a:ad:9e:bf:d0:56:39:ef:e3:f0:6c:05:2d:34:30: a0:2b:1b:ec:65:27:19:d9:3d:fe:a5:40:ff:df:96: 19:53:d1:d2:35:ea:2b:87:fc:3f:b2:40:98:0c:bf: 25:05:ca:2c:9c:04:7e:89:b2:a0:fc:db:fc:b0:49: f1:1d:18:f8:99:e1:82:59:74:f4:d7:89:02:7c:02: 50:90:3f:b4:31:c3:30:e9:af:e1:e7:e6:ca:d9:a4: 07:69:1d:aa:01:fc:ec:44:ad:24:7b:4c:66:ef:bf: 26:fa:d4:1c:61:3b:1c:33:42:10:63:d4:d3:c9:49: 55:42:78:64:3a:e6:18:dd:01:f2:93:3b:04:d5:d3: 9b:f4:e5:7e:36:28:a0:0e:8c:b3:49:4a:15:35:6e: 64:84:71:40:77:ad:e8:ed:f4:33:1c:c4:7a:cd:19: 6d:94:18:4f:cf:08:71:60:84:82:56:15:9e:d5:eb: 77:d1:fb:43:95:1f:4e:07:4e:7c:ab:67:a9:93:ed: 6f:e6:ed:d1:51:e6:14:f4:20:48:4b:69:2b:af:35: 69:08:34:ac:89:f0:cf:ae:0d:c2:8b:2a:52:17:20: b7:cd:58:32:80:de:39:37:1b:83:39:c7:7f:90:e9: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:AB:AB:89:52:58:A8:CA:49:32:4C:FC:0C:A8:A5:DF:87:31:02 X509v3 Authority Key Identifier: keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:de:ed:1a:df:77:e1:30:0a:4f:36:ff:64:a1:b5:49:bb:6e: 04:67:f8:ee:c3:33:e1:5c:be:0e:09:e3:5d:82:6d:b0:42:d6: 86:30:52:b7:be:fd:a2:d0:73:80:9c:bc:01:4a:0f:cb:3b:97: b8:b2:e6:06:98:dc:a1:1e:e2:09:56:39:bc:8f:3a:f9:2d:ea: 85:f7:83:6a:cc:ac:86:b1:f3:5d:a6:1d:bb:c9:9b:e0:14:46: 7d:e7:07:8d:59:83:4b:1f:d9:38:17:b9:ed:16:a2:ad:1d:35: a2:c0:e8:29:65:4e:88:fc:cf:81:e3:0e:9b:2c:47:73:d8:52: eb:fb:d8:c9:f3:1b:79:1e:f6:ba:03:7d:e0:78:c2:25:8c:06: 4e:30:d9:73:ff:8f:a5:dc:9f:9b:05:cd:de:5e:8e:1a:9f:51: 82:b1:eb:ae:6a:8e:fc:03:c7:9a:9d:07:99:17:b9:e4:ed:10: 4d:bf:c2:dc:c6:94:ca:3c:2b:04:02:6d:c4:7f:65:a2:4b:8b: cf:dd:cf:21:35:3a:44:f8:75:a5:01:26:10:0a:27:ba:62:f1: 93:ae:ac:1e:80:74:8b:dc:82:aa:1c:46:58:69:fe:44:a8:87: 92:19:8e:7c:db:00:8d:3f:65:3b:40:10:a0:a7:ac:5a:17:5f: ba:04:5d:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVz6YrD09tQ2MaeFS9oC5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli Y2Q1NmEwHhcNMjUxMjI1MTQwMDMwWhcNMjUxMjI2MTQwMDMwWjAzMTEwLwYDVQQD EyhkZGZkYWJhYjg5NTI1OGE4Y2E0OTMyNGNmYzBjYThhNWRmODczMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN4hjyPhWLdYTLfO3d9arZ6/0FY5 7+PwbAUtNDCgKxvsZScZ2T3+pUD/35YZU9HSNeorh/w/skCYDL8lBcosnAR+ibKg /Nv8sEnxHRj4meGCWXT014kCfAJQkD+0McMw6a/h5+bK2aQHaR2qAfzsRK0ke0xm 778m+tQcYTscM0IQY9TTyUlVQnhkOuYY3QHykzsE1dOb9OV+NiigDoyzSUoVNW5k hHFAd63o7fQzHMR6zRltlBhPzwhxYISCVhWe1et30ftDlR9OB058q2epk+1v5u3R UeYU9CBIS2krrzVpCDSsifDPrg3CiypSFyC3zVgygN45NxuDOcd/kOkORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN39q6uJUlioykkyTPwMqKXfhzECMB8GA1UdIwQY MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0 LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft7tGt93 4TAKTzb/ZKG1SbtuBGf47sMz4Vy+DgnjXYJtsELWhjBSt779otBzgJy8AUoPyzuX uLLmBpjcoR7iCVY5vI86+S3qhfeDasyshrHzXaYdu8mb4BRGfecHjVmDSx/ZOBe5 7RairR01osDoKWVOiPzPgeMOmyxHc9hS6/vYyfMbeR72ugN94HjCJYwGTjDZc/+P pdyfmwXN3l6OGp9RgrHrrmqO/APHmp0HmRe55O0QTb/C3MaUyjwrBAJtxH9lokuL z93PITU6RPh1pQEmEAonumLxk66sHoB0i9yCqhxGWGn+RKiHkhmOfNsAjT9lO0AQ oKesWhdfugRdYQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:10 2025 by rpki-client