This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json) Hash identifier: kosjHb0YnjSYTu5Hq3Of5Blt3psz/1jxJgpgpTEXJEo= Subject key identifier: F3:09:2A:1B:2A:75:C8:85:F0:C9:FF:A8:58:F8:75:09:AE:6B:CA:48 Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab Certificate serial: 019B2C668EF06D28D79618BCCDBB156B531D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft Manifest number: 1457 Signing time: Wed 17 Dec 2025 13:01:17 +0000 Manifest this update: Wed 17 Dec 2025 13:01:17 +0000 Manifest next update: Thu 18 Dec 2025 13:01:17 +0000 Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: Z7p0zRJ0rEaDX8+HMOU4X4KEhL+sauzTdMkTkTWZf6c=) 2: JwgnOTRAlCXt1K7at1wAyMz7bd8.roa (hash: lBC8tzOboiP4jQAHCC/omLvaunl3BvP+L/B2M2ocu+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:8e:f0:6d:28:d7:96:18:bc:cd:bb:15:6b:53:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab Validity Not Before: Dec 17 13:01:17 2025 GMT Not After : Dec 18 13:01:17 2025 GMT Subject: CN=f3092a1b2a75c885f0c9ffa858f87509ae6bca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:11:0a:55:99:43:4f:b4:1e:fa:2c:e0:44: 1b:b6:e9:65:c4:02:d9:ac:44:07:0d:5f:a5:02:f6: 7d:c8:b4:4f:6c:82:4c:45:17:e5:36:81:3f:45:00: 23:93:0f:6a:1d:a5:a9:a8:cb:2a:ff:62:d5:18:0c: be:8b:84:d1:1e:c9:f4:14:83:55:f9:77:1c:77:84: 00:c4:d2:6d:b8:59:6a:59:d0:c4:8d:2a:5c:df:c6: 97:71:0d:2c:be:d0:9e:44:4b:7f:72:ef:e5:09:57: b1:18:7a:f4:e5:71:cd:5a:8c:de:d8:82:7b:39:5f: 53:ef:66:38:22:c6:6f:55:30:34:df:e9:71:de:34: 78:95:48:75:c0:90:92:61:78:3c:92:52:0d:92:46: ee:14:d3:7f:3c:a1:fc:06:32:b1:78:0d:60:ce:f6: c2:c1:c6:41:a2:70:e2:f8:3e:82:21:88:70:08:6b: a5:69:71:ce:09:e3:2d:3b:2f:e9:b2:6c:4a:ca:f7: 75:bd:f8:e0:a4:85:b1:12:65:ea:b4:13:a8:70:e7: bb:b4:e6:3f:3b:55:32:30:b5:3b:fb:7d:b3:0a:c0: a4:a5:d7:8b:29:00:b6:8d:7d:97:f0:ad:b4:e0:bd: c6:2d:04:b0:70:99:86:73:e1:dd:0d:ab:1a:90:f1: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:09:2A:1B:2A:75:C8:85:F0:C9:FF:A8:58:F8:75:09:AE:6B:CA:48 X509v3 Authority Key Identifier: keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:29:62:91:fc:27:52:38:21:48:9f:52:9f:70:ee:28:64:cf: 49:bb:b9:a9:6f:a9:80:4c:3f:0e:a4:87:21:c8:4f:2a:7c:8e: ad:ae:df:b1:04:3f:ba:c4:a6:48:08:18:de:af:52:a9:c0:7e: d2:a6:e1:6a:80:03:85:5b:04:67:b6:11:06:4c:ef:b8:4d:90: ca:50:6a:63:f9:2f:bd:29:4a:f4:1b:ba:13:72:76:40:2b:44: f4:8d:b5:79:78:0b:67:25:93:57:20:9a:0a:ce:42:44:c0:db: 0a:55:97:85:39:af:9a:c0:9c:ca:68:79:80:39:9f:a1:d1:a2: 88:02:4d:17:16:f3:39:63:e2:14:fd:52:69:fe:1c:b4:2e:41: f3:c2:b0:65:f9:c3:63:71:3a:51:66:43:99:3d:84:00:db:40: 53:92:12:0d:ca:6e:79:fc:3a:73:a2:c2:f1:40:11:de:97:b3: 2e:16:22:ad:fc:ea:ce:f2:73:e1:6f:b0:b9:f7:be:21:95:dd: a6:5c:e0:4f:87:88:fb:1f:51:0d:51:0b:a5:66:8f:56:8b:40: ab:4e:ca:d7:22:f8:1e:90:06:95:30:40:80:b3:b2:1f:11:64: 95:9e:98:1d:0e:71:0a:02:92:71:b2:f1:cb:5a:20:95:78:a4: bd:2f:ad:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZo7wbSjXlhi8zbsVa1MdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll OTVhYWIwHhcNMjUxMjE3MTMwMTE3WhcNMjUxMjE4MTMwMTE3WjAzMTEwLwYDVQQD EyhmMzA5MmExYjJhNzVjODg1ZjBjOWZmYTg1OGY4NzUwOWFlNmJjYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM0RClWZQ0+0Hvos4EQbtullxALZ rEQHDV+lAvZ9yLRPbIJMRRflNoE/RQAjkw9qHaWpqMsq/2LVGAy+i4TRHsn0FINV +Xccd4QAxNJtuFlqWdDEjSpc38aXcQ0svtCeREt/cu/lCVexGHr05XHNWoze2IJ7 OV9T72Y4IsZvVTA03+lx3jR4lUh1wJCSYXg8klINkkbuFNN/PKH8BjKxeA1gzvbC wcZBonDi+D6CIYhwCGulaXHOCeMtOy/psmxKyvd1vfjgpIWxEmXqtBOocOe7tOY/ O1UyMLU7+32zCsCkpdeLKQC2jX2X8K204L3GLQSwcJmGc+HdDasakPG/pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMJKhsqdciF8Mn/qFj4dQmua8pIMB8GA1UdIwQY MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgilikfwn UjghSJ9Sn3DuKGTPSbu5qW+pgEw/DqSHIchPKnyOra7fsQQ/usSmSAgY3q9SqcB+ 0qbhaoADhVsEZ7YRBkzvuE2QylBqY/kvvSlK9Bu6E3J2QCtE9I21eXgLZyWTVyCa Cs5CRMDbClWXhTmvmsCcymh5gDmfodGiiAJNFxbzOWPiFP1Saf4ctC5B88KwZfnD Y3E6UWZDmT2EANtAU5ISDcpuefw6c6LC8UAR3pezLhYirfzqzvJz4W+wufe+IZXd plzgT4eI+x9RDVELpWaPVotAq07K1yL4HpAGlTBAgLOyHxFklZ6YHQ5xCgKScbLx y1oglXikvS+tGA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:41:54 2025 by rpki-client