This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json) Hash identifier: GD7Nz6Fo8FcmjQ7Xo3fhsv1wxQULKrC1rFQfF2d2Y8M= Subject key identifier: BA:5B:10:1B:7E:B4:B4:0E:AB:80:2E:6F:E8:5A:5E:B4:2D:FE:DB:2B Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Certificate serial: 019B3AFE0F0736E6F00AF4D885CB41ED9AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft Manifest number: 1239 Signing time: Sat 20 Dec 2025 09:01:27 +0000 Manifest this update: Sat 20 Dec 2025 09:01:27 +0000 Manifest next update: Sun 21 Dec 2025 09:01:27 +0000 Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 8rRSALnxBrkalv3vfeheUdIap6V7HJrmfsVrZ42NXZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:0f:07:36:e6:f0:0a:f4:d8:85:cb:41:ed:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Validity Not Before: Dec 20 09:01:27 2025 GMT Not After : Dec 21 09:01:27 2025 GMT Subject: CN=ba5b101b7eb4b40eab802e6fe85a5eb42dfedb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:4e:54:f7:a4:22:e4:d5:81:71:13:da:c6: 7e:dd:ec:8a:55:7d:a6:d7:0b:84:87:5e:73:58:67: ab:7f:9f:ea:3e:90:5a:79:61:2e:22:cb:73:54:7a: 66:dd:b0:82:dd:87:3c:29:00:09:0e:9f:1e:23:8e: 7e:13:b1:31:dd:11:eb:28:45:7d:a9:05:81:1c:29: 7a:5e:6c:d7:89:2d:a2:ee:bf:90:31:61:e7:8c:74: 8c:d6:6e:b5:e3:b0:35:27:98:d2:d1:f1:be:f5:01: 9b:be:ac:44:a3:b1:36:ec:f5:7f:92:12:4d:9f:79: 63:17:1b:09:0f:f6:b2:02:f6:84:80:b2:73:0e:7a: 60:ee:68:80:b4:4a:a9:20:1b:28:71:0c:78:2a:a5: a1:95:82:c1:c1:fb:1b:11:75:20:e1:79:d2:86:d3: 56:d5:98:01:ba:f5:82:99:57:b2:fe:1c:87:fa:19: fe:3e:6a:47:e6:2e:da:bf:1b:80:38:83:67:46:9f: 2f:d7:17:50:18:64:56:ce:65:2c:66:a4:ef:e5:aa: 63:10:dc:c5:38:a1:fc:27:01:96:48:f0:25:dd:63: d9:8b:7d:f5:af:a3:65:7e:14:31:bc:08:0a:69:0a: 03:f1:9b:da:3b:8a:5e:8e:92:4b:f0:61:c7:e5:5e: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5B:10:1B:7E:B4:B4:0E:AB:80:2E:6F:E8:5A:5E:B4:2D:FE:DB:2B X509v3 Authority Key Identifier: keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:56:66:cd:46:03:7a:6a:38:3a:5f:ed:b5:5f:ad:e4:23:35: 78:bc:e5:3a:7d:72:24:b5:8e:f5:57:80:81:57:53:20:68:74: b5:d8:f6:8e:21:06:38:48:93:54:3e:bd:db:d5:69:68:e2:f0: af:f5:bb:e7:43:07:da:21:1a:9b:7a:93:ff:76:11:83:cb:31: 2f:38:3b:bf:92:87:70:65:54:4c:f9:94:59:72:c8:e5:57:85: 63:cc:6e:8b:eb:8f:af:31:34:f9:c4:37:19:a5:67:26:1a:47: 86:33:d5:6a:70:10:91:6b:08:e6:22:fc:d6:ee:e2:99:a4:7e: 51:6e:6d:45:b7:fc:06:22:31:67:b2:0a:74:45:9f:7d:54:2b: 5b:3c:0d:0e:de:2e:ad:44:25:35:b4:ff:87:8a:96:c6:95:a7: 0c:0c:a7:29:5e:91:87:c2:49:c8:13:e9:3e:ab:f3:9d:0b:8e: 2e:87:11:2d:30:b4:ad:92:98:50:49:87:26:98:0d:53:53:1f: 43:d4:99:c2:6d:81:c1:2c:fb:f9:7e:5a:cb:a0:35:e5:75:d5: 8b:b9:c2:b1:e0:36:ea:a9:0a:cb:bd:4f:b8:fa:58:48:28:0d: e0:f1:05:85:03:60:40:ad:c9:71:9c:f1:ca:84:1f:22:99:d6: c8:33:86:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/g8HNubwCvTYhctB7Zq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj ZTlkMjkwHhcNMjUxMjIwMDkwMTI3WhcNMjUxMjIxMDkwMTI3WjAzMTEwLwYDVQQD EyhiYTViMTAxYjdlYjRiNDBlYWI4MDJlNmZlODVhNWViNDJkZmVkYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37dOVPekIuTVgXET2sZ+3eyKVX2m 1wuEh15zWGerf5/qPpBaeWEuIstzVHpm3bCC3Yc8KQAJDp8eI45+E7Ex3RHrKEV9 qQWBHCl6XmzXiS2i7r+QMWHnjHSM1m6147A1J5jS0fG+9QGbvqxEo7E27PV/khJN n3ljFxsJD/ayAvaEgLJzDnpg7miAtEqpIBsocQx4KqWhlYLBwfsbEXUg4XnShtNW 1ZgBuvWCmVey/hyH+hn+PmpH5i7avxuAOINnRp8v1xdQGGRWzmUsZqTv5apjENzF OKH8JwGWSPAl3WPZi331r6NlfhQxvAgKaQoD8ZvaO4pejpJL8GHH5V6DEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpbEBt+tLQOq4Aub+haXrQt/tsrMB8GA1UdIwQY MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVZmzUYD emo4Ol/ttV+t5CM1eLzlOn1yJLWO9VeAgVdTIGh0tdj2jiEGOEiTVD6929VpaOLw r/W750MH2iEam3qT/3YRg8sxLzg7v5KHcGVUTPmUWXLI5VeFY8xui+uPrzE0+cQ3 GaVnJhpHhjPVanAQkWsI5iL81u7imaR+UW5tRbf8BiIxZ7IKdEWffVQrWzwNDt4u rUQlNbT/h4qWxpWnDAynKV6Rh8JJyBPpPqvznQuOLocRLTC0rZKYUEmHJpgNU1Mf Q9SZwm2BwSz7+X5ay6A15XXVi7nCseA26qkKy71PuPpYSCgN4PEFhQNgQK3JcZzx yoQfIpnWyDOGjg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:21 2025 by rpki-client