This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json) Hash identifier: Tci1exdS70inj52gg/fxHbBTB03xNhKQsxn1gKjIF74= Subject key identifier: A5:AB:EA:21:35:7D:BE:5B:D9:5B:22:C3:97:D7:87:02:9B:49:1E:5F Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Certificate serial: 019B3EA34666309DE61D1504A65D2F528568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 02:00:46 +0000 Manifest this update: Sun 21 Dec 2025 02:00:46 +0000 Manifest next update: Mon 22 Dec 2025 02:00:46 +0000 Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: c89SERKWC8AjbdUbUOp+iTH0/gTgGKEbpo0LFOEufHY=) 2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=) 3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:46:66:30:9d:e6:1d:15:04:a6:5d:2f:52:85:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Validity Not Before: Dec 21 02:00:46 2025 GMT Not After : Dec 22 02:00:46 2025 GMT Subject: CN=a5abea21357dbe5bd95b22c397d787029b491e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:49:b6:0c:f0:97:1e:48:78:d5:64:f4:fb: 8b:28:0d:49:76:7d:75:78:88:47:9d:f3:e2:5a:3c: 94:ef:27:39:93:74:5c:68:1a:57:03:52:43:c5:3f: f9:f2:af:36:c3:74:be:28:f4:29:b2:bf:46:08:a4: 4b:ee:93:ec:fe:6f:d2:5c:02:2e:99:65:88:22:e4: 5f:bc:f3:bc:95:a2:25:71:21:e1:7a:13:16:7f:2e: a1:cc:37:8e:78:6d:e3:5b:39:7e:ce:5f:02:0f:d6: e8:f9:69:e5:0e:6e:9c:1b:c6:21:8f:8d:e1:fa:22: 32:5c:ce:c9:58:44:0d:4d:c4:3f:41:4e:b7:7f:49: 47:93:ff:11:7b:21:97:e4:00:70:43:0b:74:a0:92: 18:25:5a:a2:c4:1f:26:cd:f3:ae:69:25:8c:af:a1: 1b:6f:de:cf:01:c1:42:4f:f4:5d:13:f3:55:0a:3f: a0:32:cd:ce:11:0c:b4:83:39:60:be:84:4e:41:ec: c6:c5:b9:6f:79:60:2c:63:05:a4:06:af:f2:4e:9c: 28:0f:e1:8c:c5:0a:67:cb:de:b3:52:02:73:e9:d0: 24:63:4a:44:cb:d3:54:85:99:69:7a:46:91:f5:0c: 3d:ce:08:24:33:f5:1c:28:de:2d:32:9d:41:48:da: ed:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AB:EA:21:35:7D:BE:5B:D9:5B:22:C3:97:D7:87:02:9B:49:1E:5F X509v3 Authority Key Identifier: keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b1:cc:62:9f:43:00:58:72:4c:c2:16:9d:31:6f:89:40:e0: 46:2d:58:bf:7c:9f:d5:0b:ef:c6:59:0d:f1:c3:51:51:4a:ca: 63:a1:7c:74:55:2c:a1:2c:be:a4:da:f1:27:ba:9b:75:87:9b: e6:95:fe:43:36:ec:d6:52:68:d6:12:b1:25:05:3f:49:07:71: 12:47:79:55:f1:e5:72:6a:9c:9a:d1:f8:fb:4e:8e:69:f5:f3: c4:8a:ea:e7:fb:99:2f:56:98:47:ff:7e:3e:64:5a:b9:ed:b5: c0:1c:42:3b:7a:29:8f:59:bb:86:d9:a9:a8:5b:c4:35:b0:97: 0d:b6:a3:fe:14:91:f2:59:b8:fe:d3:76:ef:59:a7:d8:36:85: 1a:41:3a:2c:26:56:28:bd:1e:f2:64:61:d9:72:75:94:ea:4c: bb:f1:ab:c7:d5:7a:a0:0e:c2:c5:77:e5:ac:27:d3:83:3f:cc: 0b:eb:50:39:43:a2:56:7d:b8:79:f3:49:5f:e9:39:97:63:03: f1:2b:cd:f8:93:2a:36:fd:fa:13:0d:74:31:29:71:f2:eb:cc: fe:66:3f:7f:bd:5b:f1:eb:b0:96:07:db:bc:a4:82:b6:50:ef: 8a:ae:14:fe:1a:0e:85:ee:be:b4:b8:fd:6a:67:42:58:1c:1f: 6b:1c:61:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o0ZmMJ3mHRUEpl0vUoVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWQ4NDM2OWMxNTUwNTVhZDliZDViNDcxNTU4ZDNmYTdi MTA5ZDIwHhcNMjUxMjIxMDIwMDQ2WhcNMjUxMjIyMDIwMDQ2WjAzMTEwLwYDVQQD EyhhNWFiZWEyMTM1N2RiZTViZDk1YjIyYzM5N2Q3ODcwMjliNDkxZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iRJtgzwlx5IeNVk9PuLKA1Jdn11 eIhHnfPiWjyU7yc5k3RcaBpXA1JDxT/58q82w3S+KPQpsr9GCKRL7pPs/m/SXAIu mWWIIuRfvPO8laIlcSHhehMWfy6hzDeOeG3jWzl+zl8CD9bo+WnlDm6cG8Yhj43h +iIyXM7JWEQNTcQ/QU63f0lHk/8ReyGX5ABwQwt0oJIYJVqixB8mzfOuaSWMr6Eb b97PAcFCT/RdE/NVCj+gMs3OEQy0gzlgvoROQezGxblveWAsYwWkBq/yTpwoD+GM xQpny96zUgJz6dAkY0pEy9NUhZlpekaR9Qw9zggkM/UcKN4tMp1BSNrtMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWr6iE1fb5b2Vsiw5fXhwKbSR5fMB8GA1UdIwQY MBaAFCcdhDacFVBVrZvVtHFVjT+nsQnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjIt OTE0OTRhYzNiNmQ1LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjItOTE0OTRhYzNiNmQ1 LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbHMYp9D AFhyTMIWnTFviUDgRi1Yv3yf1QvvxlkN8cNRUUrKY6F8dFUsoSy+pNrxJ7qbdYeb 5pX+Qzbs1lJo1hKxJQU/SQdxEkd5VfHlcmqcmtH4+06OafXzxIrq5/uZL1aYR/9+ PmRaue21wBxCO3opj1m7htmpqFvENbCXDbaj/hSR8lm4/tN271mn2DaFGkE6LCZW KL0e8mRh2XJ1lOpMu/Grx9V6oA7CxXflrCfTgz/MC+tQOUOiVn24efNJX+k5l2MD 8SvN+JMqNv36Ew10MSlx8uvM/mY/f71b8euwlgfbvKSCtlDviq4U/hoOhe6+tLj9 amdCWBwfaxxhKg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:40 2025 by rpki-client