This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json) Hash identifier: M15QWXKp2TXxVsBQWyZDC2GG/39RVfQC9nMK0+cyJkk= Subject key identifier: 5C:EF:C3:3D:83:F5:D5:B2:29:A1:29:5D:36:D7:E5:76:A3:56:86:00 Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Certificate serial: 019B33B1F56E1183A3ACD612AE79DB06406F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft Manifest number: 08ED Signing time: Thu 18 Dec 2025 23:00:59 +0000 Manifest this update: Thu 18 Dec 2025 23:00:59 +0000 Manifest next update: Fri 19 Dec 2025 23:00:59 +0000 Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: df1ytnPvP+6SKf8VDDgoPMIYSV42oNGYjZJtoE0QCRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:f5:6e:11:83:a3:ac:d6:12:ae:79:db:06:40:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Validity Not Before: Dec 18 23:00:59 2025 GMT Not After : Dec 19 23:00:59 2025 GMT Subject: CN=5cefc33d83f5d5b229a1295d36d7e576a3568600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:18:8b:0a:96:b2:8c:fb:ac:c0:74:3c:31:bb: c6:92:2a:ca:4a:30:7e:0d:70:db:75:1b:ac:59:91: 7e:28:cb:ce:6c:10:47:0b:2a:c6:c2:ff:99:44:0a: b3:25:22:3a:4d:bf:9b:5c:19:e3:cd:48:cb:aa:b9: c2:c9:bb:74:3e:6d:47:de:62:39:f5:0a:55:e8:17: f7:89:8a:a5:2e:d0:83:8d:91:8c:55:69:47:33:a6: 99:34:d4:3a:7c:76:3f:6a:9d:09:f2:72:e9:d6:ee: 15:59:87:00:81:2c:fe:8b:5b:a8:09:96:be:8a:70: ba:cc:34:62:73:89:7f:00:88:42:78:d7:d1:66:3f: 65:4e:de:21:37:e3:23:c7:54:a4:e9:5d:0c:79:73: 61:f7:4c:38:92:1c:cd:4c:ee:96:3d:73:e0:8f:d5: 5b:fd:b5:f4:95:e9:61:fc:59:60:9d:34:61:8a:db: de:14:f0:b1:40:ec:bb:fd:22:8c:59:b8:d7:1d:24: 99:da:c4:0b:e9:0a:a2:b4:e0:4a:80:49:a4:c7:f1: 41:56:9e:b3:cf:86:c4:57:fd:ae:f4:c8:4a:0b:9e: ac:64:c1:82:56:40:bd:4f:48:56:e4:43:ec:9f:35: fc:2f:93:28:ea:37:c5:5c:70:5d:0f:5c:23:fd:c3: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EF:C3:3D:83:F5:D5:B2:29:A1:29:5D:36:D7:E5:76:A3:56:86:00 X509v3 Authority Key Identifier: keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:ad:c5:7e:94:fd:ed:60:ae:47:e3:ec:14:81:3b:42:62: 20:a0:cc:d8:04:c4:5d:c5:b4:fd:d2:81:3e:c3:f4:30:e9:d8: c1:8c:53:54:21:00:59:61:01:1f:88:88:26:c2:bb:09:37:91: b3:a1:73:d3:46:41:e4:61:ca:d7:6b:be:f8:ad:b7:99:68:3f: 61:84:27:c2:f7:9d:7b:36:02:ac:42:8d:34:49:2d:f1:9d:4a: 1d:a1:2f:a1:28:c4:0c:a6:fe:cf:97:31:75:c5:49:9f:02:50: 56:97:6a:76:50:35:33:7a:4e:56:3f:88:c1:a0:78:b4:06:2c: e3:e7:25:32:93:d2:81:f7:36:38:4e:f8:8d:12:67:f3:38:56: f7:d7:6c:6a:dc:a1:16:9b:c6:fb:d1:9e:6d:ec:37:17:4f:5b: ef:ce:35:d3:ff:f0:1a:e9:fa:51:98:8e:4d:34:90:8b:c5:27: d3:ff:bc:51:36:1e:ef:d4:e7:8a:3f:36:c4:1d:4f:9e:89:96: 5a:db:91:21:79:b0:88:13:d8:20:89:99:df:6d:80:73:0a:9d: 06:d3:7e:89:10:0b:81:92:cc:62:1d:fa:1b:9e:5d:b6:e8:c4: 8a:d9:98:c3:1e:80:e4:c0:81:b5:ce:1e:39:17:56:94:64:9d: 92:c4:d8:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsfVuEYOjrNYSrnnbBkBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWE0MDM4YmRlYjE4OTI0MmYyOGY5ZDg1YzQwZWM0ZDdk MzIxZWIwHhcNMjUxMjE4MjMwMDU5WhcNMjUxMjE5MjMwMDU5WjAzMTEwLwYDVQQD Eyg1Y2VmYzMzZDgzZjVkNWIyMjlhMTI5NWQzNmQ3ZTU3NmEzNTY4NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xiLCpayjPuswHQ8MbvGkirKSjB+ DXDbdRusWZF+KMvObBBHCyrGwv+ZRAqzJSI6Tb+bXBnjzUjLqrnCybt0Pm1H3mI5 9QpV6Bf3iYqlLtCDjZGMVWlHM6aZNNQ6fHY/ap0J8nLp1u4VWYcAgSz+i1uoCZa+ inC6zDRic4l/AIhCeNfRZj9lTt4hN+Mjx1Sk6V0MeXNh90w4khzNTO6WPXPgj9Vb /bX0lelh/FlgnTRhitveFPCxQOy7/SKMWbjXHSSZ2sQL6QqitOBKgEmkx/FBVp6z z4bEV/2u9MhKC56sZMGCVkC9T0hW5EPsnzX8L5Mo6jfFXHBdD1wj/cNiIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzvwz2D9dWyKaEpXTbX5XajVoYAMB8GA1UdIwQY MBaAFCcaQDi96xiSQvKPnYXEDsTX0yHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzct ODg2MmM3NDI5NDI1LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzctODg2MmM3NDI5NDI1 LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbutxX6U /e1grkfj7BSBO0JiIKDM2ATEXcW0/dKBPsP0MOnYwYxTVCEAWWEBH4iIJsK7CTeR s6Fz00ZB5GHK12u++K23mWg/YYQnwvedezYCrEKNNEkt8Z1KHaEvoSjEDKb+z5cx dcVJnwJQVpdqdlA1M3pOVj+IwaB4tAYs4+clMpPSgfc2OE74jRJn8zhW99dsatyh FpvG+9Gebew3F09b78410//wGun6UZiOTTSQi8Un0/+8UTYe79Tnij82xB1PnomW WtuRIXmwiBPYIImZ322AcwqdBtN+iRALgZLMYh36G55dtujEitmYwx6A5MCBtc4e ORdWlGSdksTYlg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:28:45 2025 by rpki-client