This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json) Hash identifier: KgWcCd9Fs8e+FhiCvqLRceNNQA+bzae+amsAXmCBtQU= Subject key identifier: 43:E7:2C:53:D6:B0:4E:D3:E7:49:77:2E:6E:2E:AB:B0:CF:BF:6E:E9 Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Certificate serial: 019B3532E71F0D19D69B3164CEC0DD2EA0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft Manifest number: 1236 Signing time: Fri 19 Dec 2025 06:01:26 +0000 Manifest this update: Fri 19 Dec 2025 06:01:26 +0000 Manifest next update: Sat 20 Dec 2025 06:01:26 +0000 Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: PnqLKJfXzsHnx6fudtFpUQQsZFmZcgWwLqAoVRVTR9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:e7:1f:0d:19:d6:9b:31:64:ce:c0:dd:2e:a0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Validity Not Before: Dec 19 06:01:26 2025 GMT Not After : Dec 20 06:01:26 2025 GMT Subject: CN=43e72c53d6b04ed3e749772e6e2eabb0cfbf6ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:01:73:1d:a6:a6:b3:2f:ca:4c:50:68:70:b2: fd:b5:ca:ae:ff:aa:35:c2:b9:e1:90:d6:09:a1:61: 93:87:bf:3e:62:35:0a:07:c9:03:dd:7e:85:80:76: 29:ae:0a:02:d5:68:48:0d:7a:a8:12:a4:a2:1f:e2: 2e:08:50:47:dc:fe:f3:3d:eb:2c:32:72:58:2f:c0: 6d:d4:48:32:38:93:cb:fe:09:43:a9:51:ec:7d:5c: 89:f1:cc:41:b3:f8:1e:6f:af:0f:ed:f0:d5:7a:29: a5:d5:1f:11:d7:df:df:b5:c3:af:f4:96:fe:5f:57: eb:d1:16:c6:e9:85:71:dc:1d:c7:ce:6a:e4:31:f4: 77:db:d6:9a:16:50:d4:71:0d:8a:82:7c:99:df:0b: 61:42:ed:96:48:aa:eb:3e:ae:ed:af:bf:ad:84:43: 10:25:66:8a:86:ba:07:79:96:e4:fd:70:e9:31:e6: f1:d1:b8:88:1a:c8:f8:77:26:36:34:0f:f1:1b:b6: e6:8c:9a:25:47:12:87:6f:0f:05:50:47:9f:a8:43: 98:33:f9:24:7d:ed:0e:3e:42:c4:66:aa:4f:47:9f: 9d:03:b3:e7:52:7d:89:2f:c2:61:33:a1:47:9b:b7: e6:ba:33:ad:84:8e:be:0c:de:59:97:b0:56:ff:e5: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:2C:53:D6:B0:4E:D3:E7:49:77:2E:6E:2E:AB:B0:CF:BF:6E:E9 X509v3 Authority Key Identifier: keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:3a:4f:0f:d6:e5:dc:26:ac:42:89:f4:7b:9d:db:4c:8c:0e: b8:c8:62:d0:a9:48:1f:5e:20:08:2d:83:83:c4:d7:f4:0a:b5: 17:84:6d:7b:97:ab:91:13:5a:40:c5:42:ab:56:f4:d8:6e:a8: 4b:92:51:3b:92:c4:d2:ff:37:45:b4:e2:bc:34:b1:50:37:8d: 6c:fa:f1:f6:3b:9d:59:9f:9b:51:03:bb:2f:56:a9:af:d1:ee: d4:db:a3:6f:da:28:ff:fa:69:33:bb:19:ba:7a:7f:48:34:f7: ca:83:6d:6a:15:63:ca:2e:ba:0f:2b:8a:3f:16:5b:e4:74:82: c5:11:b0:20:f6:a8:1f:57:78:56:74:21:ec:fd:f8:7f:fc:b7: 31:6d:bd:e1:17:4b:a8:95:be:64:ba:ba:86:1b:97:6b:4a:45: 0a:40:f1:b6:2a:e1:50:55:42:65:6a:ea:d8:10:ef:31:cd:76: fc:5e:69:ca:38:79:ee:1c:59:bc:58:ef:98:3a:62:d7:6d:4a: 53:57:df:7f:e2:ee:3b:fe:8f:3b:f3:b7:26:ad:e7:46:24:32: 68:9e:7a:61:53:4b:71:9f:b6:77:b2:48:1e:af:19:9a:19:77: 0f:e2:68:91:26:af:af:38:89:67:64:65:2e:fc:72:34:02:14: 80:c6:86:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MucfDRnWmzFkzsDdLqDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj ZTlkMjkwHhcNMjUxMjE5MDYwMTI2WhcNMjUxMjIwMDYwMTI2WjAzMTEwLwYDVQQD Eyg0M2U3MmM1M2Q2YjA0ZWQzZTc0OTc3MmU2ZTJlYWJiMGNmYmY2ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswFzHaamsy/KTFBocLL9tcqu/6o1 wrnhkNYJoWGTh78+YjUKB8kD3X6FgHYprgoC1WhIDXqoEqSiH+IuCFBH3P7zPess MnJYL8Bt1EgyOJPL/glDqVHsfVyJ8cxBs/geb68P7fDVeiml1R8R19/ftcOv9Jb+ X1fr0RbG6YVx3B3HzmrkMfR329aaFlDUcQ2KgnyZ3wthQu2WSKrrPq7tr7+thEMQ JWaKhroHeZbk/XDpMebx0biIGsj4dyY2NA/xG7bmjJolRxKHbw8FUEefqEOYM/kk fe0OPkLEZqpPR5+dA7PnUn2JL8JhM6FHm7fmujOthI6+DN5Zl7BW/+VW6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPnLFPWsE7T50l3Lm4uq7DPv27pMB8GA1UdIwQY MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITpPD9bl 3CasQon0e53bTIwOuMhi0KlIH14gCC2Dg8TX9Aq1F4Rte5erkRNaQMVCq1b02G6o S5JRO5LE0v83RbTivDSxUDeNbPrx9judWZ+bUQO7L1apr9Hu1Nujb9oo//ppM7sZ unp/SDT3yoNtahVjyi66DyuKPxZb5HSCxRGwIPaoH1d4VnQh7P34f/y3MW294RdL qJW+ZLq6hhuXa0pFCkDxtirhUFVCZWrq2BDvMc12/F5pyjh57hxZvFjvmDpi121K U1fff+LuO/6PO/O3Jq3nRiQyaJ56YVNLcZ+2d7JIHq8Zmhl3D+JokSavrziJZ2Rl LvxyNAIUgMaGNw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:16:50 2025 by rpki-client