This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json) Hash identifier: 6lib9F2yWO671tPXv8QRQO3qHwKKj7Xa1Xu8fYWmeMI= Subject key identifier: 9E:AD:54:95:F2:36:BE:30:21:CD:F4:51:32:80:AD:3C:B9:3D:C4:7D Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98 Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98 Certificate serial: 019B766D6621E9F362A58B9A5E5DCABF760F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 22:00:39 +0000 Manifest this update: Wed 31 Dec 2025 22:00:39 +0000 Manifest next update: Thu 01 Jan 2026 22:00:39 +0000 Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: GjvRnFcMhrnpwRjxWJBRSa3PM00ile96W0N/wnjSC3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6d:66:21:e9:f3:62:a5:8b:9a:5e:5d:ca:bf:76:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98 Validity Not Before: Dec 31 22:00:39 2025 GMT Not After : Jan 1 22:00:39 2026 GMT Subject: CN=9ead5495f236be3021cdf4513280ad3cb93dc47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:c3:c1:09:0f:1d:0b:f4:48:87:1b:2f:1b: 1a:da:5d:95:9a:07:96:7a:75:ae:58:82:6e:a6:cd: 8b:7a:93:28:43:e9:b7:57:4d:ef:8f:fc:03:96:ad: 11:f3:df:6b:b7:75:2f:28:ee:29:a4:5b:a0:2f:6f: e8:d5:c8:37:c1:be:06:18:79:48:a6:05:7e:2e:15: 34:40:ed:b9:6c:c4:7c:b0:46:d5:b4:26:b4:66:a4: 8b:f6:6f:fe:22:87:dd:dd:23:83:77:04:2a:95:ec: 4d:12:9e:34:07:5b:91:1b:25:d4:72:6f:0d:4d:00: 1d:2e:19:a9:19:3e:a3:ff:45:d3:e4:a9:36:50:6e: 60:2f:73:8b:7a:f4:22:f0:38:e3:59:b7:31:9d:f7: b4:35:c9:99:12:49:87:b3:d1:ee:de:88:18:ce:de: 22:cf:08:e4:11:e9:a1:65:5f:24:d8:3a:74:b9:c4: b3:0a:72:26:04:b8:8b:eb:14:d7:9a:46:ce:b2:30: 12:8e:8e:ae:67:57:fe:d3:cd:d2:c8:b7:8a:48:30: 71:a3:35:1f:4a:88:3b:3c:29:b2:11:0f:b8:38:9d: 8d:bb:10:9c:54:25:73:fd:86:54:88:43:27:94:5a: 23:70:14:5d:52:ce:05:39:85:64:67:99:62:14:48: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AD:54:95:F2:36:BE:30:21:CD:F4:51:32:80:AD:3C:B9:3D:C4:7D X509v3 Authority Key Identifier: keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:2f:a3:fc:80:bc:92:89:df:5e:7a:65:b9:d6:b6:86:d4: d9:61:25:9c:57:16:31:e6:e8:01:06:d9:88:04:d8:2a:bd:61: 3a:b0:b3:59:be:14:b9:86:1c:65:11:8a:4e:3f:69:46:a1:d2: 3d:dd:c2:f8:fc:17:2f:f8:10:95:35:14:7f:9e:22:62:41:4f: 99:77:32:ad:6d:3d:15:c6:d8:44:e8:49:14:b1:9e:42:72:c9: c8:75:02:75:bb:b4:02:41:4a:82:52:c9:b0:7d:0e:bd:d6:93: 4c:90:6e:f1:e9:96:08:b7:40:71:5d:91:95:8b:11:a3:f2:48: e0:b3:34:09:8e:62:5d:30:69:6e:2d:06:ba:ea:7c:76:5a:4d: d1:22:ba:66:af:a2:23:96:7c:41:b2:62:d5:48:f4:f6:ff:a1: ed:e0:a7:4f:a0:66:aa:18:9c:e1:3c:9f:b5:81:5b:86:d6:bf: ec:e8:7f:8a:6e:84:37:56:2c:33:eb:86:17:aa:11:b7:d4:ac: e6:64:fc:8a:4b:37:cd:44:b6:d5:af:1d:bf:f0:ea:a5:03:25: 31:10:57:ce:88:46:c1:10:91:9d:7d:da:e6:c8:26:3d:88:3f: 2a:51:34:95:92:28:60:a0:5b:3c:4b:85:7f:8e:4d:d0:bc:31: 1a:af:09:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bWYh6fNipYuaXl3Kv3YPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWJlMWMwNmFmMTFmM2VlYzFkY2IxOTZiY2E4ZGU3YmYw OGZiOTgwHhcNMjUxMjMxMjIwMDM5WhcNMjYwMTAxMjIwMDM5WjAzMTEwLwYDVQQD Eyg5ZWFkNTQ5NWYyMzZiZTMwMjFjZGY0NTEzMjgwYWQzY2I5M2RjNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPnDwQkPHQv0SIcbLxsa2l2VmgeW enWuWIJups2LepMoQ+m3V03vj/wDlq0R899rt3UvKO4ppFugL2/o1cg3wb4GGHlI pgV+LhU0QO25bMR8sEbVtCa0ZqSL9m/+Iofd3SODdwQqlexNEp40B1uRGyXUcm8N TQAdLhmpGT6j/0XT5Kk2UG5gL3OLevQi8DjjWbcxnfe0NcmZEkmHs9Hu3ogYzt4i zwjkEemhZV8k2Dp0ucSzCnImBLiL6xTXmkbOsjASjo6uZ1f+083SyLeKSDBxozUf Sog7PCmyEQ+4OJ2NuxCcVCVz/YZUiEMnlFojcBRdUs4FOYVkZ5liFEh6PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6tVJXyNr4wIc30UTKArTy5PcR9MB8GA1UdIwQY MBaAFCcb4cBq8R8+7B3LGWvKjee/CPuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUt NDc0MjA3ZGFlZjQzLzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUtNDc0MjA3ZGFlZjQz LzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWcvo/yA vJKJ3156ZbnWtobU2WElnFcWMeboAQbZiATYKr1hOrCzWb4UuYYcZRGKTj9pRqHS Pd3C+PwXL/gQlTUUf54iYkFPmXcyrW09FcbYROhJFLGeQnLJyHUCdbu0AkFKglLJ sH0OvdaTTJBu8emWCLdAcV2RlYsRo/JI4LM0CY5iXTBpbi0Guup8dlpN0SK6Zq+i I5Z8QbJi1Uj09v+h7eCnT6Bmqhic4TyftYFbhta/7Oh/im6EN1YsM+uGF6oRt9Ss 5mT8iks3zUS21a8dv/DqpQMlMRBXzohGwRCRnX3a5sgmPYg/KlE0lZIoYKBbPEuF f45N0LwxGq8J3Q== -----END CERTIFICATE-----Generated at Thu Jan 1 01:02:14 2026 by rpki-client