This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json) Hash identifier: W2JB/qKZW/BQMoZRck0BaCgOOhXGcwNAxHScyVndCO0= Subject key identifier: 15:03:9E:B5:D3:C2:7C:F4:FC:74:DE:A2:15:6D:7A:FD:AF:69:8A:4A Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Certificate serial: 019B3BA27DA23C208216A240C70B08D24A3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft Manifest number: 0E2F Signing time: Sat 20 Dec 2025 12:01:03 +0000 Manifest this update: Sat 20 Dec 2025 12:01:03 +0000 Manifest next update: Sun 21 Dec 2025 12:01:03 +0000 Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: qWD1cT2VfSFsgFwWbJ4sctuBCpm0cLbBkeof/f9RReM=) 2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:7d:a2:3c:20:82:16:a2:40:c7:0b:08:d2:4a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Validity Not Before: Dec 20 12:01:03 2025 GMT Not After : Dec 21 12:01:03 2025 GMT Subject: CN=15039eb5d3c27cf4fc74dea2156d7afdaf698a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:06:a2:8c:d5:c4:cd:de:6a:2e:8c:08:ce: 54:10:95:8f:16:8f:83:7d:75:36:f8:95:fc:fd:52: e4:75:78:67:e8:c3:ff:3d:a7:e7:52:13:9b:8a:da: 34:38:e1:0f:02:d9:f5:f4:37:39:cc:ce:fa:80:57: b5:9c:50:87:03:a5:33:9b:62:87:44:c9:1d:6c:a1: cd:38:c3:75:b4:4a:83:ac:e3:8a:50:c3:b7:36:ed: f6:1a:f9:1b:44:0e:f7:e5:7b:85:c9:5f:a9:5a:d6: 62:50:91:ac:a3:15:4a:48:24:9a:0f:5f:08:ea:5f: 8a:71:b8:17:06:a1:13:32:26:5e:db:15:d6:c1:6a: ab:d1:30:2e:e5:54:e8:61:c1:38:c9:f4:34:e8:99: 75:dc:ec:d4:24:4d:0e:4f:52:eb:3b:a3:a8:15:b5: eb:b0:28:f0:f0:6b:49:45:8b:ca:f3:bc:8c:e5:e3: f2:33:23:cb:54:8d:60:9c:96:3f:f1:e5:f0:d7:93: b3:eb:de:fb:40:46:6a:81:3a:6f:8f:bd:8b:5c:76: 96:a6:f2:b4:f1:59:b7:dc:f1:3f:7a:e5:5e:e6:04: d9:b1:f6:15:14:65:0c:07:e7:5d:a9:31:6d:7b:ef: 26:ba:3f:22:f0:f1:e2:c8:03:19:d9:75:39:c0:c2: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:03:9E:B5:D3:C2:7C:F4:FC:74:DE:A2:15:6D:7A:FD:AF:69:8A:4A X509v3 Authority Key Identifier: keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4e:82:96:4a:2e:98:66:32:fe:e1:5e:7a:df:65:5a:22:88: dc:e0:88:25:1e:6b:1c:bf:a5:ba:ba:ad:6f:fc:92:fe:c9:31: 05:85:2e:af:dc:a7:54:8d:ec:57:f1:83:4d:72:a4:3b:d3:e4: 2e:21:60:d2:a1:0c:53:47:cc:45:b8:9d:f1:fd:d3:e2:1f:c5: c8:d2:20:d7:15:bf:7f:ab:ca:72:4d:7f:84:6b:48:86:14:3f: 0c:b2:8e:b7:ba:1d:b1:aa:fe:c8:70:b4:48:28:c4:b5:90:41: 6e:93:29:cc:b8:06:aa:b2:6b:b4:58:24:29:3c:c8:65:91:48: ee:3c:ab:91:aa:cf:b5:10:b9:d2:f8:78:ea:1b:4a:89:2e:d8: dd:76:3d:93:91:11:88:f3:bb:dd:fc:0d:3a:fa:27:17:58:0d: 04:ef:e9:7d:56:98:1a:fb:cc:53:84:9c:c0:c5:fe:36:71:48: e4:f2:2c:7c:dd:27:31:2f:66:bd:ca:6c:2f:62:8b:90:59:7e: e1:c6:3c:ba:66:36:13:69:e0:73:59:39:35:11:28:6e:7f:83: c0:f4:6f:e5:3c:9f:93:fc:b3:66:39:f2:15:4a:80:04:c0:38: f1:8e:fb:b8:17:35:16:c4:59:90:b4:55:40:33:1b:79:72:9a: 31:55:a5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7on2iPCCCFqJAxwsI0ko/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy NzFmMjQwHhcNMjUxMjIwMTIwMTAzWhcNMjUxMjIxMTIwMTAzWjAzMTEwLwYDVQQD EygxNTAzOWViNWQzYzI3Y2Y0ZmM3NGRlYTIxNTZkN2FmZGFmNjk4YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXQGoozVxM3eai6MCM5UEJWPFo+D fXU2+JX8/VLkdXhn6MP/PafnUhObito0OOEPAtn19Dc5zM76gFe1nFCHA6Uzm2KH RMkdbKHNOMN1tEqDrOOKUMO3Nu32GvkbRA735XuFyV+pWtZiUJGsoxVKSCSaD18I 6l+KcbgXBqETMiZe2xXWwWqr0TAu5VToYcE4yfQ06Jl13OzUJE0OT1LrO6OoFbXr sCjw8GtJRYvK87yM5ePyMyPLVI1gnJY/8eXw15Oz6977QEZqgTpvj72LXHaWpvK0 8Vm33PE/euVe5gTZsfYVFGUMB+ddqTFte+8muj8i8PHiyAMZ2XU5wMLOmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUDnrXTwnz0/HTeohVtev2vaYpKMB8GA1UdIwQY MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2 LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL06Clkou mGYy/uFeet9lWiKI3OCIJR5rHL+lurqtb/yS/skxBYUur9ynVI3sV/GDTXKkO9Pk LiFg0qEMU0fMRbid8f3T4h/FyNIg1xW/f6vKck1/hGtIhhQ/DLKOt7odsar+yHC0 SCjEtZBBbpMpzLgGqrJrtFgkKTzIZZFI7jyrkarPtRC50vh46htKiS7Y3XY9k5ER iPO73fwNOvonF1gNBO/pfVaYGvvMU4ScwMX+NnFI5PIsfN0nMS9mvcpsL2KLkFl+ 4cY8umY2E2ngc1k5NREobn+DwPRv5Tyfk/yzZjnyFUqABMA48Y77uBc1FsRZkLRV QDMbeXKaMVWl1A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:31 2025 by rpki-client