This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json) Hash identifier: lAQJ1KgYW0rKR6tkpWYAcK99T7o3W9df+tLJgRXFI/g= Subject key identifier: FE:77:EE:15:4E:E0:17:93:E1:E6:9A:21:D9:66:86:BC:8F:B2:70:5F Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4 Certificate serial: 019B1A5FE19B7661FA128037E622C8C40E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft Manifest number: 1193 Signing time: Sun 14 Dec 2025 01:00:49 +0000 Manifest this update: Sun 14 Dec 2025 01:00:49 +0000 Manifest next update: Mon 15 Dec 2025 01:00:49 +0000 Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: CmxgPhoTq4jRTyI5APtZl/MYHs9kywYFDzTNVPdv14g=) 2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:e1:9b:76:61:fa:12:80:37:e6:22:c8:c4:0e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4 Validity Not Before: Dec 14 01:00:49 2025 GMT Not After : Dec 15 01:00:49 2025 GMT Subject: CN=fe77ee154ee01793e1e69a21d96686bc8fb2705f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:4e:98:0b:14:c1:ef:8f:56:68:56:d4:13: 93:7b:83:12:66:ec:9c:bc:bd:dd:72:f3:7a:0f:d1: 76:31:52:11:6e:16:13:cd:03:5e:f6:d1:d6:eb:04: 97:20:ed:9f:4b:07:b1:76:f8:6c:b2:8f:55:38:02: e2:82:96:c5:73:b1:f3:49:9d:b0:5f:c3:6a:e2:ed: 76:b9:a2:49:ca:95:e1:e4:52:db:bc:41:54:8a:a0: cb:97:26:dc:f1:dd:00:f1:a1:44:3a:91:95:9b:dd: e0:0f:b8:5d:57:f8:9b:b9:69:92:e2:b0:7d:22:c4: 99:82:93:8a:9c:ba:58:96:01:bf:1c:2d:01:b6:b1: e1:78:05:2e:fc:35:5d:9f:c9:fa:f6:3a:91:05:11: 70:fa:6f:d2:c4:24:a7:e3:ac:7f:fc:1c:de:4f:c4: 25:95:88:d3:1f:0e:ca:b2:14:36:52:07:a8:7e:e8: 76:99:98:15:d1:ee:3d:1e:31:f9:a3:f3:f4:4b:98: f9:1f:3a:3d:ea:da:d3:9d:4f:1a:86:f2:87:bf:cc: c5:ab:33:4f:82:a9:ec:4e:10:b2:41:c0:aa:33:14: 97:45:3b:ce:48:54:d0:36:ec:1e:f0:a7:f9:15:d0: 6d:d7:50:6e:a1:d6:53:b6:4b:50:25:e5:9b:ff:17: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:EE:15:4E:E0:17:93:E1:E6:9A:21:D9:66:86:BC:8F:B2:70:5F X509v3 Authority Key Identifier: keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:68:9f:b7:78:56:a0:10:e4:53:4a:9a:7d:b4:47:fe:8f:b6: ab:64:95:d5:69:45:d0:a6:d0:7a:be:2f:0e:46:31:8b:a2:0c: 96:85:83:bf:a2:ec:4c:f5:dd:4d:ce:b5:2f:45:3c:21:58:a3: da:6e:68:c4:d1:86:98:a6:c4:8b:f6:88:62:fd:ff:3b:bc:95: 2f:bb:c6:58:c9:e7:d2:fb:b5:16:4a:63:00:0b:9c:55:b4:67: 23:5d:41:05:1c:7a:9a:42:aa:c0:92:b4:3a:12:9d:1b:1e:e3: 7b:d5:77:fe:28:24:cf:9e:bc:b1:15:0a:45:94:67:c7:30:c3: 14:d9:0c:1d:8c:3f:c7:b8:f9:26:b9:a6:c4:42:60:6f:14:2e: da:7f:3f:02:ab:28:b6:c0:f3:4e:7f:a2:03:07:be:87:89:63: 64:22:8e:b7:68:de:d7:3c:31:a1:2e:bf:c6:f2:13:7e:33:eb: b1:bf:36:f9:b5:51:d4:39:a1:42:57:fe:f5:f9:bd:2e:02:c2: 38:f8:2e:44:14:13:68:00:24:33:06:56:00:84:53:6c:c6:e0: 28:e3:c3:de:26:b4:55:98:c4:f6:08:e3:b1:69:b4:a5:40:6d: 07:b3:dd:0a:55:56:66:b5:3e:e7:be:8a:1c:b0:4f:8e:5e:04: 8b:54:c9:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX+GbdmH6EoA35iLIxA4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5 NGM4YzQwHhcNMjUxMjE0MDEwMDQ5WhcNMjUxMjE1MDEwMDQ5WjAzMTEwLwYDVQQD EyhmZTc3ZWUxNTRlZTAxNzkzZTFlNjlhMjFkOTY2ODZiYzhmYjI3MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQdOmAsUwe+PVmhW1BOTe4MSZuyc vL3dcvN6D9F2MVIRbhYTzQNe9tHW6wSXIO2fSwexdvhsso9VOALigpbFc7HzSZ2w X8Nq4u12uaJJypXh5FLbvEFUiqDLlybc8d0A8aFEOpGVm93gD7hdV/ibuWmS4rB9 IsSZgpOKnLpYlgG/HC0BtrHheAUu/DVdn8n69jqRBRFw+m/SxCSn46x//BzeT8Ql lYjTHw7KshQ2Ugeofuh2mZgV0e49HjH5o/P0S5j5Hzo96trTnU8ahvKHv8zFqzNP gqnsThCyQcCqMxSXRTvOSFTQNuwe8Kf5FdBt11BuodZTtktQJeWb/xe8lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP537hVO4BeT4eaaIdlmhryPsnBfMB8GA1UdIwQY MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWift3hW oBDkU0qafbRH/o+2q2SV1WlF0KbQer4vDkYxi6IMloWDv6LsTPXdTc61L0U8IVij 2m5oxNGGmKbEi/aIYv3/O7yVL7vGWMnn0vu1FkpjAAucVbRnI11BBRx6mkKqwJK0 OhKdGx7je9V3/igkz568sRUKRZRnxzDDFNkMHYw/x7j5JrmmxEJgbxQu2n8/Aqso tsDzTn+iAwe+h4ljZCKOt2je1zwxoS6/xvITfjPrsb82+bVR1DmhQlf+9fm9LgLC OPguRBQTaAAkMwZWAIRTbMbgKOPD3ia0VZjE9gjjsWm0pUBtB7PdClVWZrU+576K HLBPjl4Ei1TJJw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:32 2025 by rpki-client