This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json) Hash identifier: KvgUTf3E7yJE5j8MjZZoI0zeGG5qG9k8TM+okXJXSPI= Subject key identifier: CA:CA:8B:2A:84:D9:DF:34:C6:AB:88:4C:06:71:FF:F6:27:CF:3C:E1 Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Certificate serial: 019B4A3A18B65B87142FAB690B01581855BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 08:01:19 +0000 Manifest this update: Tue 23 Dec 2025 08:01:19 +0000 Manifest next update: Wed 24 Dec 2025 08:01:19 +0000 Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: SG5jKDQuH3vSiFAQ9DWE3fhTg85ty0QrJ+iBFr3AdbU=) 2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=) 3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:3a:18:b6:5b:87:14:2f:ab:69:0b:01:58:18:55:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Validity Not Before: Dec 23 08:01:19 2025 GMT Not After : Dec 24 08:01:19 2025 GMT Subject: CN=caca8b2a84d9df34c6ab884c0671fff627cf3ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:0e:73:e7:94:8e:67:01:0c:3f:81:f4:29: 53:bd:ac:1c:06:f4:a4:2d:94:ea:f7:f7:04:36:99: 8e:cc:4b:af:ff:63:25:28:3d:fc:65:73:4f:f1:68: 1d:a0:ab:68:cb:91:14:30:6a:e3:2b:59:39:73:53: c1:52:b5:87:eb:43:3e:9f:21:c3:74:73:d7:b7:34: 3f:d8:d4:f6:ef:5f:ec:15:d7:c1:26:4b:8f:4b:7b: 60:69:30:e7:00:62:c1:99:bc:95:4a:e7:39:a0:4a: e4:04:b3:99:fb:0a:53:bb:e1:30:e4:bc:cd:ae:f6: 4b:fd:8c:be:b1:a9:7b:20:d5:0c:94:1b:42:d4:8f: 12:d1:1e:08:74:de:7f:03:c0:30:d1:f5:ea:17:73: 61:6f:6f:18:a3:b4:1a:8e:b8:d4:31:a3:f4:b7:b1: 4f:c7:09:a9:a9:83:58:eb:2b:98:71:58:db:a5:4f: d7:cb:db:f1:bf:fa:32:69:95:24:8d:11:f2:d0:df: c9:12:6d:02:c3:d7:c3:f4:3a:67:74:d3:3d:8f:43: af:62:83:98:06:ea:3b:6e:89:a3:11:ea:38:41:f9: 34:73:e0:7d:a9:56:ac:cb:3f:da:02:ca:18:90:9e: 54:87:64:d8:90:d8:76:8b:69:1a:0e:ff:ee:4e:ef: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:8B:2A:84:D9:DF:34:C6:AB:88:4C:06:71:FF:F6:27:CF:3C:E1 X509v3 Authority Key Identifier: keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bb:0e:bb:bf:e8:f7:09:53:b6:35:15:09:1d:4e:c5:24:d0: 4c:18:57:d6:28:b9:cf:6c:45:de:8f:bb:d4:e7:ca:5a:6d:d5: 47:ee:0b:f8:87:79:d5:b0:94:cc:cf:15:8f:92:a7:4c:24:09: 4a:13:da:66:e3:40:3a:30:51:89:7f:ea:26:54:b9:c9:78:a4: 48:44:52:81:a7:73:13:bc:13:bf:f2:78:51:c2:54:a5:a5:07: 5c:57:d3:ae:f8:68:71:b7:e0:58:d1:01:f6:57:57:be:db:13: 15:f3:67:fb:db:bb:0b:4b:41:af:df:16:65:f4:d7:c8:ce:8e: 01:26:8e:6f:b2:1d:56:26:63:93:f1:f0:49:a6:06:ad:61:d9: c6:64:36:0f:8f:c1:80:c7:77:bd:f0:8e:54:71:d0:b5:97:2f: 13:5e:6c:cd:f5:c8:b9:67:6a:18:fb:5f:30:3c:21:42:a5:1c: 60:8a:4f:b4:30:66:be:45:1f:cf:d8:0d:c7:38:99:06:dc:33: 4f:9d:05:cc:0f:69:33:fc:a5:83:57:1d:e0:10:8d:ca:5d:1b: 02:70:33:02:91:ad:d4:0b:24:99:d4:4b:31:65:1a:52:df:f1: 55:9b:bf:15:10:0c:7c:5a:bb:bf:b6:76:1a:ae:6a:82:72:52: 12:39:18:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOhi2W4cUL6tpCwFYGFW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWQ4NDM2OWMxNTUwNTVhZDliZDViNDcxNTU4ZDNmYTdi MTA5ZDIwHhcNMjUxMjIzMDgwMTE5WhcNMjUxMjI0MDgwMTE5WjAzMTEwLwYDVQQD EyhjYWNhOGIyYTg0ZDlkZjM0YzZhYjg4NGMwNjcxZmZmNjI3Y2YzY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE0Oc+eUjmcBDD+B9ClTvawcBvSk LZTq9/cENpmOzEuv/2MlKD38ZXNP8WgdoKtoy5EUMGrjK1k5c1PBUrWH60M+nyHD dHPXtzQ/2NT271/sFdfBJkuPS3tgaTDnAGLBmbyVSuc5oErkBLOZ+wpTu+Ew5LzN rvZL/Yy+sal7INUMlBtC1I8S0R4IdN5/A8Aw0fXqF3Nhb28Yo7QajrjUMaP0t7FP xwmpqYNY6yuYcVjbpU/Xy9vxv/oyaZUkjRHy0N/JEm0Cw9fD9DpndNM9j0OvYoOY Buo7bomjEeo4Qfk0c+B9qVasyz/aAsoYkJ5Uh2TYkNh2i2kaDv/uTu+JNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrKiyqE2d80xquITAZx//YnzzzhMB8GA1UdIwQY MBaAFCcdhDacFVBVrZvVtHFVjT+nsQnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjIt OTE0OTRhYzNiNmQ1LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjItOTE0OTRhYzNiNmQ1 LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbsOu7/o 9wlTtjUVCR1OxSTQTBhX1ii5z2xF3o+71OfKWm3VR+4L+Id51bCUzM8Vj5KnTCQJ ShPaZuNAOjBRiX/qJlS5yXikSERSgadzE7wTv/J4UcJUpaUHXFfTrvhocbfgWNEB 9ldXvtsTFfNn+9u7C0tBr98WZfTXyM6OASaOb7IdViZjk/HwSaYGrWHZxmQ2D4/B gMd3vfCOVHHQtZcvE15szfXIuWdqGPtfMDwhQqUcYIpPtDBmvkUfz9gNxziZBtwz T50FzA9pM/ylg1cd4BCNyl0bAnAzApGt1AskmdRLMWUaUt/xVZu/FRAMfFq7v7Z2 Gq5qgnJSEjkYDw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:19:07 2025 by rpki-client