This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json) Hash identifier: UOhTBXM89+hXzRgvRL3hMr35W9QGR7y2JbEP7RjgE4g= Subject key identifier: 47:9F:3E:7E:D8:49:C6:EC:02:09:82:16:73:60:6E:61:D1:BE:8C:2B Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Certificate serial: 019B0E5BCD5FF91665B180F7E3825BB6C9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 17:00:55 +0000 Manifest this update: Thu 11 Dec 2025 17:00:55 +0000 Manifest next update: Fri 12 Dec 2025 17:00:55 +0000 Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=) 2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=) 3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: KkxotivtG6f+b8lkJus4nT89uoCzV/l4y0EGUsttR6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:cd:5f:f9:16:65:b1:80:f7:e3:82:5b:b6:c9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a Validity Not Before: Dec 11 17:00:55 2025 GMT Not After : Dec 12 17:00:55 2025 GMT Subject: CN=479f3e7ed849c6ec0209821673606e61d1be8c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:d6:89:55:e8:65:82:60:ae:74:c2:5f:7d: 79:f0:ac:ed:86:bf:41:11:ea:3e:05:6e:c4:56:34: da:dd:65:d2:6d:58:05:f6:b8:70:c4:ef:61:04:c9: 2c:f3:2a:19:a6:60:17:0a:e0:19:d6:f9:95:0b:74: d9:34:18:8e:ea:de:0d:c7:1b:08:96:3f:b8:cc:e9: 93:90:13:25:a5:a6:94:e9:86:5b:48:c0:ac:86:22: 72:a0:5b:2a:cb:a6:6d:0f:d1:d4:5f:cb:35:0e:66: d0:8c:26:97:7a:76:dd:33:29:a5:7b:9c:0d:b7:ed: 8b:81:f7:bb:7c:e2:e0:62:d5:58:5b:12:aa:ca:31: 30:6e:2f:bd:7f:96:08:af:fa:29:5f:da:89:da:1f: c4:90:b2:28:82:6e:b0:20:77:00:39:f3:46:a1:9b: a4:2f:10:6e:36:52:44:5d:44:95:18:95:85:32:6e: 0b:60:0b:a6:98:3f:39:83:f9:60:f2:d7:f9:36:75: 0f:74:89:56:bf:87:9d:03:f5:46:2a:a9:df:63:f2: bf:51:a2:3c:94:23:eb:c3:e6:da:83:1e:83:98:ca: 57:15:2d:ab:bc:09:42:a8:1b:c5:c4:d2:2b:ef:a9: 3a:62:f8:d3:86:e3:3a:57:19:4b:74:d8:c8:66:b2: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:3E:7E:D8:49:C6:EC:02:09:82:16:73:60:6E:61:D1:BE:8C:2B X509v3 Authority Key Identifier: keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:27:7a:c6:bd:dc:44:0c:36:a3:ed:96:39:fd:7e:e9:0b:be: 7f:5c:0f:c8:fe:4a:17:35:b2:38:e4:ab:fd:3f:c0:18:b3:97: 46:33:3d:1b:62:c2:0f:45:4a:fe:de:d1:18:70:40:7d:6c:5e: e0:e2:9f:2b:f9:27:19:d1:e6:70:88:ca:da:17:a6:45:f7:a1: 2a:28:db:54:88:84:27:70:8c:f8:98:e6:f3:dc:56:3c:71:b8: 74:b8:f8:23:0f:3c:a0:ca:28:ba:cc:69:52:f2:70:09:b9:24: 03:5f:81:4d:0d:82:4d:6c:9a:18:0e:5f:48:3e:f1:ee:0d:aa: 2f:a2:55:ae:f9:06:63:e0:ee:cf:26:b6:8c:e7:cd:d8:ae:80: a3:c4:b6:e1:2b:c9:20:32:b7:f0:5f:e6:0b:49:9a:62:e4:a2: e8:6a:a3:8a:ac:90:34:9c:77:2c:41:04:27:e8:ef:ff:ea:7e: 85:71:e6:6f:9c:05:38:62:0f:3a:56:12:d2:0a:07:39:66:39: f8:39:42:c8:82:2c:af:1f:e5:17:d9:43:4a:7f:43:98:a8:79: cf:78:75:7f:56:20:e1:bb:28:10:be:79:8b:ec:eb:13:0b:b0: 89:9c:2b:21:91:45:40:2f:5f:db:f9:b1:3c:19:e8:33:9c:80: 3b:1e:ee:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW81f+RZlsYD344Jbtsn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMGM3ZjJlYmFiN2M5NjExMWNhZTY4N2NlZGQxY2QyZTli Y2Q1NmEwHhcNMjUxMjExMTcwMDU1WhcNMjUxMjEyMTcwMDU1WjAzMTEwLwYDVQQD Eyg0NzlmM2U3ZWQ4NDljNmVjMDIwOTgyMTY3MzYwNmU2MWQxYmU4YzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsXWiVXoZYJgrnTCX3158Kzthr9B Eeo+BW7EVjTa3WXSbVgF9rhwxO9hBMks8yoZpmAXCuAZ1vmVC3TZNBiO6t4NxxsI lj+4zOmTkBMlpaaU6YZbSMCshiJyoFsqy6ZtD9HUX8s1DmbQjCaXenbdMymle5wN t+2Lgfe7fOLgYtVYWxKqyjEwbi+9f5YIr/opX9qJ2h/EkLIogm6wIHcAOfNGoZuk LxBuNlJEXUSVGJWFMm4LYAummD85g/lg8tf5NnUPdIlWv4edA/VGKqnfY/K/UaI8 lCPrw+bagx6DmMpXFS2rvAlCqBvFxNIr76k6YvjThuM6VxlLdNjIZrK0vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEefPn7YScbsAgmCFnNgbmHRvowrMB8GA1UdIwQY MBaAFIwMfy66t8lhEcrmh87dHNLpvNVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2Yt MjUxZDc0ZWQ3NzU0LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jNzYzODMtNTkxYy00Y2RlLWIyY2YtMjUxZDc0ZWQ3NzU0 LzEvakF4X0xycTN5V0VSeXVhSHp0MGMwdW04MVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyd6xr3c RAw2o+2WOf1+6Qu+f1wPyP5KFzWyOOSr/T/AGLOXRjM9G2LCD0VK/t7RGHBAfWxe 4OKfK/knGdHmcIjK2hemRfehKijbVIiEJ3CM+Jjm89xWPHG4dLj4Iw88oMoousxp UvJwCbkkA1+BTQ2CTWyaGA5fSD7x7g2qL6JVrvkGY+Duzya2jOfN2K6Ao8S24SvJ IDK38F/mC0maYuSi6GqjiqyQNJx3LEEEJ+jv/+p+hXHmb5wFOGIPOlYS0goHOWY5 +DlCyIIsrx/lF9lDSn9DmKh5z3h1f1Yg4bsoEL55i+zrEwuwiZwrIZFFQC9f2/mx PBnoM5yAOx7unQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:27 2025 by rpki-client