This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json) Hash identifier: KzJHxT9muaVZkd788TkUjUABvUGOCoVZunzPaKjFyqY= Subject key identifier: 23:47:B8:8B:58:0F:CC:57:A9:E0:96:7A:CA:79:73:8C:8B:8E:4C:4D Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37 Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37 Certificate serial: 019B066C9A7F302B6933E0564C6C91C7DDFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft Manifest number: 0463 Signing time: Wed 10 Dec 2025 04:02:19 +0000 Manifest this update: Wed 10 Dec 2025 04:02:19 +0000 Manifest next update: Thu 11 Dec 2025 04:02:19 +0000 Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=) 2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: cB3k5NcBU7KtY/3YInZyYuzGVPKi8J/6tsGvqfWPAEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:9a:7f:30:2b:69:33:e0:56:4c:6c:91:c7:dd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37 Validity Not Before: Dec 10 04:02:19 2025 GMT Not After : Dec 11 04:02:19 2025 GMT Subject: CN=2347b88b580fcc57a9e0967aca79738c8b8e4c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:9b:f5:e3:f8:b0:50:55:1a:bf:e3:07:ac: eb:0b:d1:a3:3e:e9:ff:7b:0b:05:67:43:0e:04:66: 7e:8d:20:22:d8:36:0f:39:4d:ca:f7:b6:f0:c3:a5: 57:9a:07:a3:f1:89:db:65:d0:3f:74:a2:70:a7:81: 49:c8:4b:9f:69:88:27:57:48:8d:94:2a:3f:cb:bd: ac:0f:5b:05:69:eb:66:06:9c:9a:36:3b:b2:80:4d: 3f:c7:1c:31:79:62:2d:a2:e6:00:9b:02:8e:1a:33: 27:85:52:90:19:53:cb:28:2e:63:aa:fe:a8:4a:01: cd:02:52:28:ff:3e:96:37:f2:d3:eb:3d:4e:2a:2a: 2a:ae:aa:d3:ff:16:2a:2e:52:b8:75:18:c5:0c:da: d5:8c:23:ff:4c:97:e3:48:6a:b2:74:e2:13:97:8d: 49:55:ba:43:30:93:e0:8b:32:1a:be:a7:56:5e:4a: fb:fb:50:9d:e8:26:39:f2:6f:48:9b:5e:2d:d5:44: 6a:97:8f:e5:8d:52:cd:28:a4:1a:55:3e:31:fd:54: bd:35:6c:6a:45:4f:ac:2b:df:bc:fb:71:e8:3f:7c: de:6d:67:a7:e9:6d:8b:0b:dc:eb:b9:20:70:cb:be: 38:3f:15:54:4f:e5:11:60:cd:82:53:a3:69:82:f4: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:B8:8B:58:0F:CC:57:A9:E0:96:7A:CA:79:73:8C:8B:8E:4C:4D X509v3 Authority Key Identifier: keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a1:0a:eb:b0:3a:36:54:15:bd:86:46:3a:e8:39:7e:2d:69: 60:d5:9a:ef:a9:5d:2a:30:44:eb:15:08:34:9d:82:15:43:8c: 3e:67:4e:bc:c5:81:a1:f1:5e:77:76:a2:87:c2:4b:de:c6:d8: 27:df:96:6d:ed:ac:a5:46:36:24:d1:59:c7:ea:6a:4a:5f:e4: 47:cf:5a:fa:de:6d:17:0d:9e:9d:0b:e9:2e:f8:f4:50:96:75: 19:4b:95:7e:72:b0:a7:21:df:da:c9:92:47:53:bb:fb:f2:60: ad:2b:ea:1c:11:e3:98:81:d3:94:18:ed:12:76:b0:20:cc:a2: e8:5f:d1:b4:9f:ce:84:e2:78:88:9b:03:f9:55:ee:bc:99:6d: b2:66:04:25:33:48:17:09:43:bb:48:60:f6:bf:b5:dd:c2:b6: 9f:41:aa:c7:ec:cc:4f:85:0e:c8:e2:69:3b:d4:de:2a:cd:fd: ff:38:67:89:89:55:15:0a:08:1f:24:f2:33:8b:30:1c:d0:01: 61:1d:4c:17:db:76:18:c5:9a:df:95:cf:70:6b:f2:57:33:6c: f8:90:ba:63:ca:e7:2c:3e:71:8a:33:eb:f3:b0:a7:05:2a:28: b9:2b:01:b1:8f:31:11:dd:86:2a:9b:61:12:f6:b8:f4:7a:eb: bb:ac:68:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbJp/MCtpM+BWTGyRx939MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMWE1MTk3ZDYzMjRlZWVkMjU2YjI2ODYxZTFhMjRhYzg2 MzVkMzcwHhcNMjUxMjEwMDQwMjE5WhcNMjUxMjExMDQwMjE5WjAzMTEwLwYDVQQD EygyMzQ3Yjg4YjU4MGZjYzU3YTllMDk2N2FjYTc5NzM4YzhiOGU0YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTub9eP4sFBVGr/jB6zrC9GjPun/ ewsFZ0MOBGZ+jSAi2DYPOU3K97bww6VXmgej8YnbZdA/dKJwp4FJyEufaYgnV0iN lCo/y72sD1sFaetmBpyaNjuygE0/xxwxeWItouYAmwKOGjMnhVKQGVPLKC5jqv6o SgHNAlIo/z6WN/LT6z1OKioqrqrT/xYqLlK4dRjFDNrVjCP/TJfjSGqydOITl41J VbpDMJPgizIavqdWXkr7+1Cd6CY58m9Im14t1URql4/ljVLNKKQaVT4x/VS9NWxq RU+sK9+8+3HoP3zebWen6W2LC9zruSBwy744PxVUT+URYM2CU6NpgvRviwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNHuItYD8xXqeCWesp5c4yLjkxNMB8GA1UdIwQY MBaAFI8aUZfWMk7u0layaGHhokrIY103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAt YTRkZTlkZmY1ZWQyLzEvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAtYTRkZTlkZmY1ZWQy LzEvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKEK67A6 NlQVvYZGOug5fi1pYNWa76ldKjBE6xUINJ2CFUOMPmdOvMWBofFed3aih8JL3sbY J9+Wbe2spUY2JNFZx+pqSl/kR89a+t5tFw2enQvpLvj0UJZ1GUuVfnKwpyHf2smS R1O7+/JgrSvqHBHjmIHTlBjtEnawIMyi6F/RtJ/OhOJ4iJsD+VXuvJltsmYEJTNI FwlDu0hg9r+13cK2n0Gqx+zMT4UOyOJpO9TeKs39/zhniYlVFQoIHyTyM4swHNAB YR1MF9t2GMWa35XPcGvyVzNs+JC6Y8rnLD5xijPr87CnBSoouSsBsY8xEd2GKpth Eva49Hrru6xoLQ== -----END CERTIFICATE-----Generated at Wed Dec 10 05:54:23 2025 by rpki-client