This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json) Hash identifier: h9cQ5rlilNxYZwBZavIxgAjabDfEPOGryKPyua4xLEw= Subject key identifier: 57:68:E7:7D:94:3C:41:E5:06:9B:A1:38:79:45:50:11:ED:5A:3D:10 Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Certificate serial: 019B3EA36EF4054416B13D7882FCB24BC47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:56 +0000 Manifest this update: Sun 21 Dec 2025 02:00:56 +0000 Manifest next update: Mon 22 Dec 2025 02:00:56 +0000 Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=) 2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=) 3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: IHBzv8sROpB+WOdw3mzjkJYzVI7u6b4R8B80lnoC4m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:6e:f4:05:44:16:b1:3d:78:82:fc:b2:4b:c4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Validity Not Before: Dec 21 02:00:56 2025 GMT Not After : Dec 22 02:00:56 2025 GMT Subject: CN=5768e77d943c41e5069ba13879455011ed5a3d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:54:c3:58:b7:73:ee:1b:ef:ce:22:3f:d6: d1:76:56:c6:c9:5b:e4:cb:10:32:60:d7:44:2d:2a: d7:ba:d8:d6:6a:22:16:37:94:96:bb:38:35:70:14: 40:c5:ff:48:c6:1d:d0:a1:ef:1c:bf:fe:07:b5:95: 58:22:01:6c:a4:0c:1e:4b:73:09:72:df:9f:e3:6c: 20:b6:ef:ad:b0:87:54:3d:49:4f:25:f5:b7:68:21: 59:cc:72:68:1b:a7:1c:40:48:1f:d6:36:02:3a:06: 3d:0d:2a:ef:e5:44:c1:45:9f:7f:87:ec:ae:33:b8: 56:a1:80:75:e8:40:b0:fa:d9:89:07:f4:b6:8c:23: 4b:58:74:2c:a8:b4:30:15:e5:c9:3f:a2:2c:9b:38: 7a:f4:75:44:fb:43:cb:3b:c1:ba:1b:72:08:f0:eb: 24:d6:ad:29:40:e1:90:3c:42:2d:86:76:ac:eb:d1: 0e:7a:13:1d:b6:b2:01:be:bd:37:59:fe:b2:cd:b4: d6:45:c3:bc:c0:58:b3:07:67:bb:f8:4b:78:ff:71: 55:cf:74:d8:7f:b4:8f:0d:60:a6:9d:8a:61:ab:a0: ae:e9:dc:34:8d:03:49:e6:3a:c1:8a:1d:6c:d8:48: 3b:35:81:32:80:6f:57:9f:f2:13:da:78:b9:00:06: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:E7:7D:94:3C:41:E5:06:9B:A1:38:79:45:50:11:ED:5A:3D:10 X509v3 Authority Key Identifier: keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a9:dd:80:7e:98:78:00:ea:88:a3:dc:f4:43:8a:0c:35:3b: 3a:8d:0c:c6:3f:87:b9:6e:0d:39:21:c6:b7:7e:a4:aa:85:a2: 9d:a5:7c:5c:56:cf:3c:6a:2b:1b:0a:4a:2d:3a:a0:2e:b4:3a: ff:0c:dd:cb:c4:72:ce:95:62:84:6b:33:f8:ea:d9:7b:ac:cb: 3a:71:69:88:82:15:83:40:a0:ac:5e:67:2e:70:ad:61:3b:8f: 4a:28:74:76:85:03:9a:0f:7c:7c:a7:5b:a2:7b:cc:b9:28:22: 15:65:75:fe:9b:13:5c:41:c4:40:8e:ab:d8:49:48:df:5e:98: d0:62:54:d3:cc:f4:7b:a7:51:fb:51:ee:cc:5d:e6:76:12:9f: 87:35:08:56:6e:17:cb:61:fc:6a:e8:f0:30:50:94:a1:2e:7c: 4f:51:8a:97:a6:c9:cc:c0:2b:12:3e:d6:ef:33:f6:5a:e2:fe: 61:90:39:6f:41:10:0b:6f:5b:7f:bf:68:82:62:07:f0:7f:4c: 4c:ba:d3:7e:6e:b4:5f:27:dd:91:be:34:1b:ef:93:17:5c:dc: 87:44:07:6f:f3:4c:a8:b6:5c:4d:6b:e6:94:6d:af:11:f6:9f: 70:c4:f3:a4:82:b7:62:a9:6f:22:77:df:69:1d:ff:61:29:fc: 29:62:01:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o270BUQWsT14gvyyS8R/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli Y2Q1NmEwHhcNMjUxMjIxMDIwMDU2WhcNMjUxMjIyMDIwMDU2WjAzMTEwLwYDVQQD Eyg1NzY4ZTc3ZDk0M2M0MWU1MDY5YmExMzg3OTQ1NTAxMWVkNWEzZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwpUw1i3c+4b784iP9bRdlbGyVvk yxAyYNdELSrXutjWaiIWN5SWuzg1cBRAxf9Ixh3Qoe8cv/4HtZVYIgFspAweS3MJ ct+f42wgtu+tsIdUPUlPJfW3aCFZzHJoG6ccQEgf1jYCOgY9DSrv5UTBRZ9/h+yu M7hWoYB16ECw+tmJB/S2jCNLWHQsqLQwFeXJP6Ismzh69HVE+0PLO8G6G3II8Osk 1q0pQOGQPEIthnas69EOehMdtrIBvr03Wf6yzbTWRcO8wFizB2e7+Et4/3FVz3TY f7SPDWCmnYphq6Cu6dw0jQNJ5jrBih1s2Eg7NYEygG9Xn/IT2ni5AAb/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdo532UPEHlBpuhOHlFUBHtWj0QMB8GA1UdIwQY MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0 LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABandgH6Y eADqiKPc9EOKDDU7Oo0Mxj+HuW4NOSHGt36kqoWinaV8XFbPPGorGwpKLTqgLrQ6 /wzdy8RyzpVihGsz+OrZe6zLOnFpiIIVg0CgrF5nLnCtYTuPSih0doUDmg98fKdb onvMuSgiFWV1/psTXEHEQI6r2ElI316Y0GJU08z0e6dR+1HuzF3mdhKfhzUIVm4X y2H8aujwMFCUoS58T1GKl6bJzMArEj7W7zP2WuL+YZA5b0EQC29bf79ogmIH8H9M TLrTfm60Xyfdkb40G++TF1zch0QHb/NMqLZcTWvmlG2vEfafcMTzpIK3YqlvInff aR3/YSn8KWIBDw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:40:37 2025 by rpki-client