This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json) Hash identifier: RDXSP2/oe4YmGP+0carGaCtYLdPyB0AY82thF/StnzE= Subject key identifier: 60:B2:59:9D:C4:FA:CD:76:A6:22:D5:6B:F8:E3:08:CD:B1:6C:78:8B Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98 Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98 Certificate serial: 019B59768F68EB906E6AEE0A966DA1244343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:01:40 +0000 Manifest this update: Fri 26 Dec 2025 07:01:40 +0000 Manifest next update: Sat 27 Dec 2025 07:01:40 +0000 Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: Oe2KKpjOV70WUS5Iy3wc50P3wmVU+L/WP9SahS5lQ2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:8f:68:eb:90:6e:6a:ee:0a:96:6d:a1:24:43:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98 Validity Not Before: Dec 26 07:01:40 2025 GMT Not After : Dec 27 07:01:40 2025 GMT Subject: CN=60b2599dc4facd76a622d56bf8e308cdb16c788b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:31:d2:9a:41:a0:00:fc:9d:99:f1:8f:d3: a3:ed:24:19:80:2b:7d:30:ad:77:d9:aa:a3:a5:df: 60:d0:5a:00:d4:09:bf:e8:47:c3:8a:1a:8c:d6:41: 1a:08:cc:fe:f3:7c:fb:c1:b9:63:ea:c6:46:34:d1: 78:7d:22:81:fb:71:b0:a3:db:c2:6b:a2:45:fa:cf: 29:84:62:8f:78:ae:b5:35:9e:49:1d:34:75:af:db: b6:26:1f:2e:fa:55:61:f3:ce:71:1d:44:1f:e0:c7: 64:3c:8e:d5:c8:d3:fc:2a:ea:fe:aa:fc:d0:a7:17: 13:9f:57:b1:25:b9:a0:b6:88:d5:d5:d4:f3:30:61: 9f:56:ed:af:79:aa:fe:08:c3:b2:2b:9e:4d:78:dc: a3:26:13:99:19:56:9e:4e:a9:fc:96:59:cd:66:ad: f8:28:bb:91:2a:5a:86:aa:97:88:29:05:5e:8e:30: e3:ac:a2:9e:e9:a5:42:5f:8a:a1:d5:73:78:03:d6: 3b:05:20:bc:36:82:8d:a5:72:e7:02:30:4c:be:c5: 88:d1:43:56:d1:17:98:b9:45:c5:fc:4e:bd:82:29: 79:a9:9c:23:a2:95:b6:bf:89:92:3a:92:9b:bd:be: ac:5e:9a:17:20:a7:c5:93:91:0a:a4:c5:9c:8a:0d: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B2:59:9D:C4:FA:CD:76:A6:22:D5:6B:F8:E3:08:CD:B1:6C:78:8B X509v3 Authority Key Identifier: keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a1:a3:be:c5:65:7a:b8:6e:a4:41:83:cf:f7:74:0f:1a:ed: 02:88:27:8c:12:66:15:c7:4c:15:d5:3d:52:48:ec:45:7e:79: 70:c6:09:6b:17:de:9d:e9:6f:c2:e5:a0:b8:d6:67:1d:d6:d0: 3c:ae:b5:f8:83:b1:e8:41:d6:ea:e7:85:ab:5f:5c:02:59:90: 3b:b2:f3:ff:39:38:b5:64:f5:f2:9e:53:1b:90:a7:4e:70:f5: 93:e2:1d:57:44:a8:2a:db:bb:73:10:09:33:0b:94:b7:b0:c7: 77:cd:4e:b2:b1:09:6d:7c:c5:42:43:1f:49:75:59:a2:68:08: e5:61:44:d6:a8:0c:07:ac:b7:41:a0:76:79:93:df:db:87:27: bc:b8:8d:d8:f0:c1:86:36:cc:2b:a2:17:54:9e:b4:57:9f:be: ee:ee:d1:9b:ce:f4:61:6b:c6:85:ed:b8:6d:88:c6:a2:7b:c6: 33:c0:cb:af:5e:af:ad:1d:fc:83:49:b5:7a:73:c0:fd:60:17: 38:c8:47:f5:c9:e7:f6:3a:68:b0:0f:c6:62:66:b2:b4:63:3d: d7:36:7b:ac:44:92:bb:69:8f:56:3e:28:76:bb:fe:05:ea:39: 33:6a:7a:56:c8:8e:00:b1:49:5d:ad:1d:77:50:01:ca:68:cf: 72:4f:5a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdo9o65Buau4Klm2hJENDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWJlMWMwNmFmMTFmM2VlYzFkY2IxOTZiY2E4ZGU3YmYw OGZiOTgwHhcNMjUxMjI2MDcwMTQwWhcNMjUxMjI3MDcwMTQwWjAzMTEwLwYDVQQD Eyg2MGIyNTk5ZGM0ZmFjZDc2YTYyMmQ1NmJmOGUzMDhjZGIxNmM3ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiUx0ppBoAD8nZnxj9Oj7SQZgCt9 MK132aqjpd9g0FoA1Am/6EfDihqM1kEaCMz+83z7wblj6sZGNNF4fSKB+3Gwo9vC a6JF+s8phGKPeK61NZ5JHTR1r9u2Jh8u+lVh885xHUQf4MdkPI7VyNP8Kur+qvzQ pxcTn1exJbmgtojV1dTzMGGfVu2vear+CMOyK55NeNyjJhOZGVaeTqn8llnNZq34 KLuRKlqGqpeIKQVejjDjrKKe6aVCX4qh1XN4A9Y7BSC8NoKNpXLnAjBMvsWI0UNW 0ReYuUXF/E69gil5qZwjopW2v4mSOpKbvb6sXpoXIKfFk5EKpMWcig2QEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCyWZ3E+s12piLVa/jjCM2xbHiLMB8GA1UdIwQY MBaAFCcb4cBq8R8+7B3LGWvKjee/CPuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUt NDc0MjA3ZGFlZjQzLzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUtNDc0MjA3ZGFlZjQz LzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKGjvsVl erhupEGDz/d0DxrtAognjBJmFcdMFdU9UkjsRX55cMYJaxfenelvwuWguNZnHdbQ PK61+IOx6EHW6ueFq19cAlmQO7Lz/zk4tWT18p5TG5CnTnD1k+IdV0SoKtu7cxAJ MwuUt7DHd81OsrEJbXzFQkMfSXVZomgI5WFE1qgMB6y3QaB2eZPf24cnvLiN2PDB hjbMK6IXVJ60V5++7u7Rm870YWvGhe24bYjGonvGM8DLr16vrR38g0m1enPA/WAX OMhH9cnn9jposA/GYmaytGM91zZ7rESSu2mPVj4odrv+Beo5M2p6VsiOALFJXa0d d1ABymjPck9aXw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:05 2025 by rpki-client