This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json) Hash identifier: f9mnOfNwfpnm3BiUrl2fttSUQVwlBZ46402teoxIGq8= Subject key identifier: D3:89:C1:F2:EB:E5:C4:D4:F2:DA:FA:09:C5:AB:67:67:8D:61:8D:22 Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67 Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67 Certificate serial: 019B6AD79A1B276AD06794D56C76DD94A04D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft Manifest number: 07A4 Signing time: Mon 29 Dec 2025 16:01:13 +0000 Manifest this update: Mon 29 Dec 2025 16:01:13 +0000 Manifest next update: Tue 30 Dec 2025 16:01:13 +0000 Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: ChLDjEslnZbTY0fQOvdAUPkkz75rNUciOhrThEO/stA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:9a:1b:27:6a:d0:67:94:d5:6c:76:dd:94:a0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67 Validity Not Before: Dec 29 16:01:13 2025 GMT Not After : Dec 30 16:01:13 2025 GMT Subject: CN=d389c1f2ebe5c4d4f2dafa09c5ab67678d618d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:1f:34:6f:f3:fd:a5:93:14:21:fa:76:5a: a6:3b:b3:34:8b:5e:d6:98:62:3a:be:3e:02:e7:f7: 27:d1:b4:5b:b1:05:65:6f:85:84:88:bf:07:70:21: 49:f1:e7:e7:14:bb:d7:4b:ea:b9:31:29:2f:c1:ed: 52:34:9b:d9:ef:b0:30:97:e3:cd:0e:25:11:1b:4e: e0:c9:5d:22:4b:b3:ea:16:6c:57:4c:97:0e:3d:e9: 15:c3:bd:56:0a:19:6e:4b:93:80:b9:41:36:cc:22: 99:30:93:5c:2d:3c:6e:19:d8:0a:f4:34:9c:a2:74: 26:dd:29:dc:a8:e8:87:fe:68:f3:80:80:24:15:47: 02:11:f3:81:ec:bd:11:c4:e6:4d:ee:cb:87:ef:9d: 1e:f7:44:7a:8a:21:7c:83:bb:3d:66:29:39:26:ef: 36:11:97:76:0b:ad:a6:d8:41:c8:89:b5:9a:0a:a1: 77:80:cd:b1:a7:5c:4f:31:44:9b:f2:aa:ea:8f:e3: 70:44:db:a3:3f:34:40:34:bd:74:64:5d:79:a6:0c: 06:05:58:30:b4:eb:98:d5:54:66:ff:fb:63:af:51: b6:4b:b2:c7:88:0e:04:31:a0:1d:7c:2b:b8:d9:2f: aa:10:33:10:07:ac:ed:a2:14:2f:11:e2:33:f0:7b: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:C1:F2:EB:E5:C4:D4:F2:DA:FA:09:C5:AB:67:67:8D:61:8D:22 X509v3 Authority Key Identifier: keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3c:eb:d7:63:ef:07:52:32:aa:88:d2:2d:9e:3d:f2:a4:75: 47:2c:1a:19:34:ee:a5:7d:09:eb:47:40:f6:86:00:e3:09:dc: 7b:7f:35:21:25:58:47:10:50:7c:2c:99:24:0a:06:3d:08:83: f7:e1:d1:34:32:e5:86:4e:bf:4e:d0:1c:de:37:90:39:8d:4d: a0:65:5d:4c:94:e4:a1:52:97:76:d4:2c:1c:6e:d9:b6:c7:04: f6:f2:1c:b0:e2:d5:bb:9c:c8:b7:43:26:54:31:e7:ca:a0:2c: bb:45:9e:4e:11:16:9c:c1:8a:98:0f:ee:c6:55:9f:35:f6:1c: 7d:69:55:bd:28:24:e8:7f:96:25:6f:7f:db:3f:3f:d6:b0:c3: a0:67:b1:00:27:0d:7b:e5:b6:ef:e8:1b:b2:30:ee:c5:47:09: 50:13:76:b9:b8:ef:2d:b1:a4:ee:4c:f1:46:8e:da:4b:7c:85: 22:71:07:ed:40:44:82:8c:17:20:64:7b:32:86:b2:6d:98:32: 44:30:17:7f:d0:87:91:5d:cf:bd:13:d2:e3:19:64:95:ba:c9: 4f:91:33:fe:55:2e:71:72:17:19:62:6c:e8:39:e0:05:6f:ed: 7c:0e:f0:92:1b:0e:92:c2:ad:d8:70:2d:12:26:18:4d:8b:be: 9d:01:b3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq15obJ2rQZ5TVbHbdlKBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZTI3MWExZDQ0N2U0MTA2MzBmYWMzYTY0MDZlMDRhODMw NjdjNjcwHhcNMjUxMjI5MTYwMTEzWhcNMjUxMjMwMTYwMTEzWjAzMTEwLwYDVQQD EyhkMzg5YzFmMmViZTVjNGQ0ZjJkYWZhMDljNWFiNjc2NzhkNjE4ZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hEfNG/z/aWTFCH6dlqmO7M0i17W mGI6vj4C5/cn0bRbsQVlb4WEiL8HcCFJ8efnFLvXS+q5MSkvwe1SNJvZ77Awl+PN DiURG07gyV0iS7PqFmxXTJcOPekVw71WChluS5OAuUE2zCKZMJNcLTxuGdgK9DSc onQm3SncqOiH/mjzgIAkFUcCEfOB7L0RxOZN7suH750e90R6iiF8g7s9Zik5Ju82 EZd2C62m2EHIibWaCqF3gM2xp1xPMUSb8qrqj+NwRNujPzRANL10ZF15pgwGBVgw tOuY1VRm//tjr1G2S7LHiA4EMaAdfCu42S+qEDMQB6ztohQvEeIz8HsZ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOJwfLr5cTU8tr6CcWrZ2eNYY0iMB8GA1UdIwQY MBaAFJficaHUR+QQYw+sOmQG4EqDBnxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEt NWZmMjYyYWM4N2JhLzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iOTQ5NjctZGFjMi00MzU1LWE0ZjEtNWZmMjYyYWM4N2Jh LzEvbC1KeG9kUkg1QkJqRDZ3NlpBYmdTb01HZkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljzr12Pv B1IyqojSLZ498qR1RywaGTTupX0J60dA9oYA4wnce381ISVYRxBQfCyZJAoGPQiD 9+HRNDLlhk6/TtAc3jeQOY1NoGVdTJTkoVKXdtQsHG7ZtscE9vIcsOLVu5zIt0Mm VDHnyqAsu0WeThEWnMGKmA/uxlWfNfYcfWlVvSgk6H+WJW9/2z8/1rDDoGexACcN e+W27+gbsjDuxUcJUBN2ubjvLbGk7kzxRo7aS3yFInEH7UBEgowXIGR7MoaybZgy RDAXf9CHkV3PvRPS4xlklbrJT5Ez/lUucXIXGWJs6DngBW/tfA7wkhsOksKt2HAt EiYYTYu+nQGzYA== -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:44 2025 by rpki-client