This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json) Hash identifier: rOOjBDP1B5ogHrTHX0vpEoCwXsiDXrlzdrptvJUdjo8= Subject key identifier: C7:33:2D:0E:63:44:41:77:E4:E7:17:16:DA:3E:16:F0:77:24:12:35 Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4 Certificate serial: 019B318C89C494A2FCF20B12FB02B8AC564B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft Manifest number: 119F Signing time: Thu 18 Dec 2025 13:00:52 +0000 Manifest this update: Thu 18 Dec 2025 13:00:52 +0000 Manifest next update: Fri 19 Dec 2025 13:00:52 +0000 Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: GOd5J5ZPtHeQPrVb97uOVN4zBCluB4aRA91shjNlfSg=) 2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:89:c4:94:a2:fc:f2:0b:12:fb:02:b8:ac:56:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4 Validity Not Before: Dec 18 13:00:52 2025 GMT Not After : Dec 19 13:00:52 2025 GMT Subject: CN=c7332d0e63444177e4e71716da3e16f077241235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:c2:61:4b:06:14:02:56:b2:f0:a4:1b:c7: 5b:dd:2e:23:6f:62:55:c0:ce:a5:cd:af:6d:56:22: e7:46:55:a6:62:57:6b:c1:e4:fe:c7:80:75:33:7e: a5:84:b2:91:6a:46:ae:30:0a:e1:e9:9e:c6:5d:76: 7d:0d:4f:ed:e7:2c:60:0b:bf:d6:f2:96:4f:87:2c: e1:a1:7b:51:8d:3b:52:41:32:27:2e:b0:28:bf:2d: df:c0:2f:d2:3a:ed:65:14:a1:b1:05:50:50:73:31: 2e:77:8f:20:3a:51:1e:3a:c9:17:29:01:b4:b8:79: 3e:8d:7a:39:58:bc:a4:87:6c:fe:23:90:0d:db:15: b1:69:ce:b8:3b:eb:53:19:cc:86:58:1f:43:91:f6: 64:2c:1c:d1:c7:05:28:3d:fb:9d:92:95:11:9c:c5: c2:7a:97:b0:60:80:4b:b9:c9:76:3b:ea:34:9f:c1: bd:a7:f5:56:2e:4b:86:f1:26:6c:ca:76:f4:10:5e: f8:e2:70:da:ac:8e:0d:fd:71:fe:12:93:98:47:7b: d3:79:81:ea:41:16:5f:df:35:3a:9a:e5:ed:df:bf: 7b:de:3d:92:87:74:cc:de:1f:cc:88:f7:fc:22:ec: 2a:f5:44:3a:96:6e:95:d9:de:50:2d:85:f3:3f:53: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:33:2D:0E:63:44:41:77:E4:E7:17:16:DA:3E:16:F0:77:24:12:35 X509v3 Authority Key Identifier: keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:26:00:51:7b:26:ec:ef:ca:1a:bd:2e:a2:04:a8:f9:bd:64: 1f:29:a9:5f:33:c1:86:19:44:22:fd:2d:e9:37:ab:6c:66:2c: 1a:25:ce:d5:f9:bb:df:60:ce:5f:80:e7:d0:36:b8:bf:ec:bb: eb:ed:49:18:5c:4b:12:f2:76:a6:32:d8:94:b8:6c:ca:6e:81: 1e:0a:a5:4e:8b:d9:be:0d:ab:e4:66:b8:e1:39:5c:19:26:f6: 9a:9b:23:1d:a4:b7:db:6e:f9:10:bd:05:8a:4c:79:86:17:ba: c3:0f:8c:d8:9c:5f:5f:de:7a:a6:47:e9:28:39:7a:d9:49:de: 67:11:57:97:28:fb:eb:38:43:85:43:8a:b2:61:7e:d9:d6:05: db:28:3c:08:85:86:e9:9b:b7:43:5c:a1:b1:c3:f0:78:6b:00: 0c:16:b0:2f:92:72:88:32:af:b1:4c:60:5d:71:1f:04:a2:1e: 56:e0:ed:cf:07:2a:a2:01:2f:ee:90:f1:9b:ca:2b:cc:89:00: 37:f2:bc:6d:05:59:e2:69:e9:68:db:c8:28:c7:0a:8e:59:ec: 33:b1:8e:74:2b:b2:41:de:69:6e:fd:82:a5:a6:0c:6a:1c:fb: ad:58:42:4c:9a:ba:59:24:85:7f:69:3f:33:50:60:4e:12:04: b7:e6:13:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjInElKL88gsS+wK4rFZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5 NGM4YzQwHhcNMjUxMjE4MTMwMDUyWhcNMjUxMjE5MTMwMDUyWjAzMTEwLwYDVQQD EyhjNzMzMmQwZTYzNDQ0MTc3ZTRlNzE3MTZkYTNlMTZmMDc3MjQxMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ETCYUsGFAJWsvCkG8db3S4jb2JV wM6lza9tViLnRlWmYldrweT+x4B1M36lhLKRakauMArh6Z7GXXZ9DU/t5yxgC7/W 8pZPhyzhoXtRjTtSQTInLrAovy3fwC/SOu1lFKGxBVBQczEud48gOlEeOskXKQG0 uHk+jXo5WLykh2z+I5AN2xWxac64O+tTGcyGWB9DkfZkLBzRxwUoPfudkpURnMXC epewYIBLucl2O+o0n8G9p/VWLkuG8SZsynb0EF744nDarI4N/XH+EpOYR3vTeYHq QRZf3zU6muXt37973j2Sh3TM3h/MiPf8Iuwq9UQ6lm6V2d5QLYXzP1PuewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMczLQ5jREF35OcXFto+FvB3JBI1MB8GA1UdIwQY MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiYAUXsm 7O/KGr0uogSo+b1kHympXzPBhhlEIv0t6TerbGYsGiXO1fm732DOX4Dn0Da4v+y7 6+1JGFxLEvJ2pjLYlLhsym6BHgqlTovZvg2r5Ga44TlcGSb2mpsjHaS32275EL0F ikx5hhe6ww+M2JxfX956pkfpKDl62UneZxFXlyj76zhDhUOKsmF+2dYF2yg8CIWG 6Zu3Q1yhscPweGsADBawL5JyiDKvsUxgXXEfBKIeVuDtzwcqogEv7pDxm8orzIkA N/K8bQVZ4mnpaNvIKMcKjlnsM7GOdCuyQd5pbv2CpaYMahz7rVhCTJq6WSSFf2k/ M1BgThIEt+YTlQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:01:07 2025 by rpki-client