This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json) Hash identifier: LFcgqGWlRDGwdpk2qZT/DIJLxajsukUdHw+8V0VD7o4= Subject key identifier: 0A:5C:BF:4A:9D:06:9B:D4:CC:87:9C:46:08:7A:4C:81:46:53:36:4C Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3 Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3 Certificate serial: 019B5A8849B040A32DB2B8B87943DF530422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft Manifest number: 04E8 Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: 9E60tTTkvhMr06AGTJ56aVhQHjAuXgkyiP1n2/4KvQE=) 2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:49:b0:40:a3:2d:b2:b8:b8:79:43:df:53:04:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=0a5cbf4a9d069bd4cc879c46087a4c814653364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:67:5c:7a:d3:45:34:ce:2a:d9:2c:c4:4b:f3: 0d:d1:df:4e:28:8d:37:83:4b:91:6b:16:57:88:94: 04:cc:26:a7:30:02:8d:7c:ae:e9:80:0e:fa:4a:22: b4:2e:2e:f3:96:64:16:e9:06:ab:32:06:7e:c2:9a: a5:d6:93:14:6b:6a:69:88:5c:f0:eb:90:48:65:4f: ad:4f:1c:eb:5e:4a:c0:64:b1:cc:1d:45:68:46:9f: e4:f3:73:42:96:e8:65:8f:e5:19:b8:c6:24:21:3f: 49:83:91:bf:30:f6:d6:ba:54:4e:fa:63:8d:8f:85: f7:17:b1:ea:c9:11:83:45:91:35:7b:6d:9a:f2:9c: 28:2d:f7:2b:7b:ea:e0:b3:27:cb:ca:ad:8b:ff:9b: be:f4:a8:20:86:7e:e1:d3:4b:0e:da:49:27:33:f5: 7b:d9:71:aa:65:37:5c:d1:b3:9e:b1:68:c7:8e:e3: 4d:36:84:b5:2d:25:57:83:5b:b2:9c:7d:ee:ed:94: 1c:11:b8:17:8a:7d:88:f8:b3:15:40:59:8a:53:a2: 82:99:73:d1:98:ac:fa:8f:51:a8:4b:45:a0:56:4a: 6b:34:df:f0:36:8d:f1:53:ef:6c:50:a7:ae:88:4b: 16:01:e1:5c:c8:04:ef:7b:a1:0e:47:49:dd:7f:c3: 71:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:BF:4A:9D:06:9B:D4:CC:87:9C:46:08:7A:4C:81:46:53:36:4C X509v3 Authority Key Identifier: keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e6:88:ff:60:ef:bc:cf:d7:dd:ba:d2:1d:ea:53:b1:14:79: 11:3c:6c:cd:24:94:4e:47:e4:ca:ee:46:74:80:dd:9a:46:38: 2d:fe:d3:81:db:64:80:2f:63:ac:d9:ad:30:1d:4d:b6:0d:0e: 52:fd:56:f5:a3:ff:c9:a6:7a:3e:ab:61:ba:ae:7b:ba:ff:9e: 58:a2:47:98:38:df:ff:0e:9f:7d:f7:7b:24:92:1f:42:d8:2d: a8:c2:6a:6e:6a:71:ba:f5:2b:16:ea:d0:21:df:24:e8:68:c9: af:64:a2:8e:59:69:93:27:0a:a0:db:d9:72:d1:0d:d4:c8:a8: 39:31:db:58:e0:ff:47:9a:92:84:2f:bc:9f:27:f2:d1:1a:33: 0b:1c:19:f5:2e:11:48:bd:7c:72:9c:bb:f8:17:86:00:db:1d: 67:c4:0e:cc:5d:20:37:3d:03:b6:c0:f3:ce:04:ca:d6:8e:29: 24:45:24:98:6c:c2:2b:65:68:fc:fd:fb:17:fc:72:2a:78:b4: 09:94:ba:6a:54:f3:8b:8f:6c:d9:c4:4c:98:c6:2f:49:92:c6: 6d:c1:86:70:6e:36:96:cd:8b:9d:75:fc:f4:2a:2a:63:4b:57: e6:d0:15:f5:69:7a:ac:c0:d5:30:8c:f3:1d:1b:35:e4:6f:8d: 8b:05:af:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEmwQKMtsri4eUPfUwQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTg5YWI1M2YzMmVmZjY1NzI2ZmQ0OWQwOGQ0MmZmODEy YzZkYjMwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD EygwYTVjYmY0YTlkMDY5YmQ0Y2M4NzljNDYwODdhNGM4MTQ2NTMzNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2dcetNFNM4q2SzES/MN0d9OKI03 g0uRaxZXiJQEzCanMAKNfK7pgA76SiK0Li7zlmQW6QarMgZ+wpql1pMUa2ppiFzw 65BIZU+tTxzrXkrAZLHMHUVoRp/k83NCluhlj+UZuMYkIT9Jg5G/MPbWulRO+mON j4X3F7HqyRGDRZE1e22a8pwoLfcre+rgsyfLyq2L/5u+9Kgghn7h00sO2kknM/V7 2XGqZTdc0bOesWjHjuNNNoS1LSVXg1uynH3u7ZQcEbgXin2I+LMVQFmKU6KCmXPR mKz6j1GoS0WgVkprNN/wNo3xU+9sUKeuiEsWAeFcyATve6EOR0ndf8NxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApcv0qdBpvUzIecRgh6TIFGUzZMMB8GA1UdIwQY MBaAFCcYmrU/Mu/2Vyb9SdCNQv+BLG2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYt NTA3MDI1OGRiZjJmLzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYtNTA3MDI1OGRiZjJm LzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeaI/2Dv vM/X3brSHepTsRR5ETxszSSUTkfkyu5GdIDdmkY4Lf7TgdtkgC9jrNmtMB1Ntg0O Uv1W9aP/yaZ6Pqthuq57uv+eWKJHmDjf/w6fffd7JJIfQtgtqMJqbmpxuvUrFurQ Id8k6GjJr2SijllpkycKoNvZctEN1MioOTHbWOD/R5qShC+8nyfy0RozCxwZ9S4R SL18cpy7+BeGANsdZ8QOzF0gNz0DtsDzzgTK1o4pJEUkmGzCK2Vo/P37F/xyKni0 CZS6alTzi49s2cRMmMYvSZLGbcGGcG42ls2LnXX89CoqY0tX5tAV9Wl6rMDVMIzz HRs15G+NiwWvcA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:19 2025 by rpki-client