This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json) Hash identifier: zc5u98btabCLnCNjzm7VJ54Rg5BHOTQuFJtsfSXKBns= Subject key identifier: 96:3F:8B:F4:C2:51:10:A6:5B:FB:57:89:56:76:78:12:E6:46:B7:25 Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Certificate serial: 019B3FB5FC43F15749E05388C4639AF22DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft Manifest number: 155F Signing time: Sun 21 Dec 2025 07:00:49 +0000 Manifest this update: Sun 21 Dec 2025 07:00:49 +0000 Manifest next update: Mon 22 Dec 2025 07:00:49 +0000 Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=) 2: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (hash: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=) 3: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: 1T5kTs92gANcLoBZGiwCceBq4bYFnXkbEJUN8RJ1p1I=) 4: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:fc:43:f1:57:49:e0:53:88:c4:63:9a:f2:2d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Validity Not Before: Dec 21 07:00:49 2025 GMT Not After : Dec 22 07:00:49 2025 GMT Subject: CN=963f8bf4c25110a65bfb578956767812e646b725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:86:97:c5:2c:c2:cc:3b:7a:1f:50:b9:0f: da:32:ed:74:88:de:b7:29:66:a9:38:fa:ff:6a:ce: 10:a4:57:1d:3f:17:35:92:c6:93:64:51:28:d5:59: ea:b4:37:e6:c3:56:55:2b:a5:ce:be:36:a6:8d:e4: 61:49:41:b9:9f:11:12:18:80:27:5c:ef:5e:db:32: 7a:38:96:72:7d:bc:51:31:ab:42:45:b0:86:d4:c2: 90:7c:4b:6a:91:cf:63:0a:b3:ab:86:4c:7f:3f:57: 6c:f0:b5:53:ea:eb:92:12:b4:91:87:63:b3:db:bf: 4a:d5:ae:2a:a8:0f:9a:e9:4f:c8:c7:b0:15:48:76: aa:84:98:18:15:80:bb:2a:75:79:09:c9:1a:08:a7: e8:f0:d4:1e:b2:2a:33:c1:e1:2d:d8:68:70:bb:4a: bd:f8:3d:d1:60:d5:d7:a8:71:1a:a7:ac:3d:0d:64: 90:a8:3b:11:6a:31:ed:54:11:5b:52:53:80:a6:0f: 68:a1:56:de:35:bf:ee:29:cd:28:87:80:ba:df:d1: 64:fd:52:20:50:85:de:b3:89:25:f7:71:03:3f:60: cd:a3:09:4b:2a:3a:92:77:32:c0:03:f2:e6:98:2d: ea:cd:01:d1:3c:a7:c1:f1:73:45:56:99:cc:7c:7a: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3F:8B:F4:C2:51:10:A6:5B:FB:57:89:56:76:78:12:E6:46:B7:25 X509v3 Authority Key Identifier: keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:44:cd:57:73:65:ad:3a:aa:16:f1:43:e2:10:06:a9:3d:97: 34:2b:d9:80:23:23:21:e3:11:70:c0:fa:1d:f3:ed:e1:65:13: b8:9d:dc:5b:74:e3:3c:22:e9:35:b1:57:d0:03:6a:34:72:04: 2a:2f:9e:a2:50:17:55:c8:0d:1e:f2:ca:2f:7a:da:63:20:11: b1:95:d5:d8:b4:4f:d5:fd:f4:35:54:df:c8:69:6a:40:21:0d: c2:95:b6:31:c4:95:71:fb:d0:81:22:24:86:b7:6d:88:3a:d9: eb:10:0a:e3:c3:3a:35:5b:29:1d:26:ad:24:f6:7b:20:4f:28: 43:7f:c9:8e:8c:2d:a9:9f:5f:10:ee:d0:82:da:2e:48:6e:81: 1e:2e:7f:34:54:95:41:a0:f4:4b:ed:c7:1c:3c:48:27:26:2b: 68:cd:c7:37:fa:d6:86:cd:55:b1:0f:a1:e9:75:7f:0f:bb:be: f2:f1:5f:43:4e:46:7a:56:0d:45:6b:70:d2:f0:59:20:61:b0: 1d:80:f7:00:bf:4d:fb:05:cb:19:e7:3c:9d:c3:7c:ee:f0:73: 7a:4d:a5:f4:cd:9e:cc:bc:ec:3a:34:ff:89:21:48:ed:ff:05: 54:77:35:d3:d8:03:b4:72:ec:1e:f5:b0:9c:5d:48:de:f3:c7: 06:82:6d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfxD8VdJ4FOIxGOa8i3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk YWM3ODQwHhcNMjUxMjIxMDcwMDQ5WhcNMjUxMjIyMDcwMDQ5WjAzMTEwLwYDVQQD Eyg5NjNmOGJmNGMyNTExMGE2NWJmYjU3ODk1Njc2NzgxMmU2NDZiNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1eGl8Uswsw7eh9QuQ/aMu10iN63 KWapOPr/as4QpFcdPxc1ksaTZFEo1VnqtDfmw1ZVK6XOvjamjeRhSUG5nxESGIAn XO9e2zJ6OJZyfbxRMatCRbCG1MKQfEtqkc9jCrOrhkx/P1ds8LVT6uuSErSRh2Oz 279K1a4qqA+a6U/Ix7AVSHaqhJgYFYC7KnV5CckaCKfo8NQesiozweEt2Ghwu0q9 +D3RYNXXqHEap6w9DWSQqDsRajHtVBFbUlOApg9ooVbeNb/uKc0oh4C639Fk/VIg UIXes4kl93EDP2DNowlLKjqSdzLAA/LmmC3qzQHRPKfB8XNFVpnMfHqDOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY/i/TCURCmW/tXiVZ2eBLmRrclMB8GA1UdIwQY MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt YWYzMzRhMGExZTkzLzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARETNV3Nl rTqqFvFD4hAGqT2XNCvZgCMjIeMRcMD6HfPt4WUTuJ3cW3TjPCLpNbFX0ANqNHIE Ki+eolAXVcgNHvLKL3raYyARsZXV2LRP1f30NVTfyGlqQCENwpW2McSVcfvQgSIk hrdtiDrZ6xAK48M6NVspHSatJPZ7IE8oQ3/JjowtqZ9fEO7QgtouSG6BHi5/NFSV QaD0S+3HHDxIJyYraM3HN/rWhs1VsQ+h6XV/D7u+8vFfQ05GelYNRWtw0vBZIGGw HYD3AL9N+wXLGec8ncN87vBzek2l9M2ezLzsOjT/iSFI7f8FVHc109gDtHLsHvWw nF1I3vPHBoJt5A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:47 2025 by rpki-client