This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft File: jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json) Hash identifier: b2hSLVnm5dRptRzLHvL60zuNanLKRQsYrpV1vku+x54= Subject key identifier: 8F:F0:2B:11:C9:F4:EB:FF:F7:76:24:0B:2E:A8:1B:C6:F9:EC:36:B7 Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88 Certificate issuer: /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88 Certificate serial: 019B5F41527BE805DDE4AB429B5D28D15816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft Manifest number: 179D Signing time: Sat 27 Dec 2025 10:01:14 +0000 Manifest this update: Sat 27 Dec 2025 10:01:14 +0000 Manifest next update: Sun 28 Dec 2025 10:01:14 +0000 Files and hashes: 1: YcUFbLW8Ja687zOtqcOEs1JkusI.roa (hash: jVuy+dZTj6fKKPTMd+qmk6LWIWDCVPbDfAfYyWjJE2U=) 2: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: KsL7tvT9eA7NyS6zFaT9t5Iq+AZvy1OfwWIJ7AbFPLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:52:7b:e8:05:dd:e4:ab:42:9b:5d:28:d1:58:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88 Validity Not Before: Dec 27 10:01:14 2025 GMT Not After : Dec 28 10:01:14 2025 GMT Subject: CN=8ff02b11c9f4ebfff776240b2ea81bc6f9ec36b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:d3:56:8e:d6:0f:d1:64:b0:10:f9:6f:c7: 9f:57:bd:ec:62:4b:1d:94:82:37:02:65:e7:f8:b5: 05:02:b6:f5:2a:a1:aa:89:d4:51:a4:1d:9b:c1:be: 5f:84:78:6b:98:99:ca:14:ec:25:76:94:f0:a8:3a: e4:35:19:18:87:b6:6b:f3:34:21:bb:b9:52:45:07: 81:a7:92:80:dd:d2:a7:1d:aa:a3:8f:a4:27:f3:33: 0d:53:50:15:be:cb:fb:13:d3:dc:42:d3:56:64:49: ad:78:9d:17:5b:87:a0:68:5f:c1:e6:34:f3:14:ec: 40:6b:d6:87:8a:77:ab:e3:0c:91:79:d0:6f:d0:ed: 7a:cb:cb:32:5d:2c:76:17:f6:4f:76:c5:18:cb:31: 9e:44:db:e0:78:3d:9c:e3:95:bc:06:56:ab:e2:cc: 03:95:77:86:c2:66:ef:17:fd:35:23:ed:b3:b2:be: 84:ce:64:ff:c0:fc:15:ff:e1:39:8c:48:32:8d:dc: e2:a1:46:5d:62:00:dd:ee:02:a0:e7:b2:84:6c:3a: 3b:17:5d:44:13:b3:a4:fa:d8:43:cc:bc:e1:c5:b8: 8d:d6:ae:75:e9:4b:ab:21:cf:90:9e:d2:7e:33:2e: 04:f5:93:a0:b3:55:26:da:40:fc:07:d7:3d:2c:9a: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F0:2B:11:C9:F4:EB:FF:F7:76:24:0B:2E:A8:1B:C6:F9:EC:36:B7 X509v3 Authority Key Identifier: keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:be:73:b8:c0:c2:c3:2a:3c:0c:29:1b:06:d1:11:16:e2:95: 60:06:6f:35:92:99:7d:0a:aa:8d:e4:db:16:77:e2:29:d5:04: d2:14:2d:19:06:f3:8f:dc:d6:75:75:97:29:25:2b:76:9a:f5: 62:c1:b5:12:93:0a:d2:62:ff:85:89:62:06:fb:b9:83:73:f9: 6e:be:3d:93:3f:ff:1f:48:42:35:4d:6c:b7:ef:ea:bf:1a:b7: 3b:c6:ba:da:a3:9e:82:32:40:a5:f5:04:51:28:f6:ee:d4:a9: a4:44:87:71:f3:d4:c2:41:fc:dd:41:14:e4:92:77:6d:cd:16: a7:04:f5:22:1c:02:54:38:44:e5:ea:c4:10:73:52:33:2f:82: f5:d6:db:72:fe:dc:63:fc:e7:79:67:e4:fa:3a:e5:9a:d1:3b: 92:81:67:1d:9f:fd:e1:82:63:27:27:48:2f:41:6f:45:9f:d5: 51:48:49:d2:bf:2a:30:37:59:5a:bc:1d:02:2e:87:ab:37:92: 5a:d7:41:f8:c0:95:0c:0a:24:2c:d8:2a:64:e6:7c:de:82:90: 7b:ad:eb:6c:3e:38:c6:d3:30:d1:0a:2a:2f:de:fe:96:bf:40: 70:b6:79:8b:83:c5:85:f8:1f:66:1b:7a:50:3a:fa:be:89:71: ed:5d:9d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQVJ76AXd5KtCm10o0VgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMmM3M2ZhMTcwYzNhYjllYzQzNGQxZjI5ZDNkYmRlNzky MGJmODgwHhcNMjUxMjI3MTAwMTE0WhcNMjUxMjI4MTAwMTE0WjAzMTEwLwYDVQQD Eyg4ZmYwMmIxMWM5ZjRlYmZmZjc3NjI0MGIyZWE4MWJjNmY5ZWMzNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+7TVo7WD9FksBD5b8efV73sYksd lII3AmXn+LUFArb1KqGqidRRpB2bwb5fhHhrmJnKFOwldpTwqDrkNRkYh7Zr8zQh u7lSRQeBp5KA3dKnHaqjj6Qn8zMNU1AVvsv7E9PcQtNWZEmteJ0XW4egaF/B5jTz FOxAa9aHiner4wyRedBv0O16y8syXSx2F/ZPdsUYyzGeRNvgeD2c45W8Blar4swD lXeGwmbvF/01I+2zsr6EzmT/wPwV/+E5jEgyjdzioUZdYgDd7gKg57KEbDo7F11E E7Ok+thDzLzhxbiN1q516UurIc+QntJ+My4E9ZOgs1Um2kD8B9c9LJr0PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/wKxHJ9Ov/93YkCy6oG8b57Da3MB8GA1UdIwQY MBaAFI4sc/oXDDq57ENNHynT2955IL+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMt ZmVlMTJiZmQzYmQxLzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMtZmVlMTJiZmQzYmQx LzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN75zuMDC wyo8DCkbBtERFuKVYAZvNZKZfQqqjeTbFnfiKdUE0hQtGQbzj9zWdXWXKSUrdpr1 YsG1EpMK0mL/hYliBvu5g3P5br49kz//H0hCNU1st+/qvxq3O8a62qOegjJApfUE USj27tSppESHcfPUwkH83UEU5JJ3bc0WpwT1IhwCVDhE5erEEHNSMy+C9dbbcv7c Y/zneWfk+jrlmtE7koFnHZ/94YJjJydIL0FvRZ/VUUhJ0r8qMDdZWrwdAi6HqzeS WtdB+MCVDAokLNgqZOZ83oKQe63rbD44xtMw0QoqL97+lr9AcLZ5i4PFhfgfZht6 UDr6volx7V2daA== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:07 2025 by rpki-client