This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json) Hash identifier: 1SDq9FVCtKHM/s1upOQKbeR7wb4QSGVvOc5to9SU6d0= Subject key identifier: 0A:75:29:45:9C:26:77:A7:32:8A:59:52:F5:56:58:12:91:CA:30:21 Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9 Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9 Certificate serial: 019B085B694C744A2794364CADB55C2144DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft Manifest number: 0E54 Signing time: Wed 10 Dec 2025 13:02:46 +0000 Manifest this update: Wed 10 Dec 2025 13:02:46 +0000 Manifest next update: Thu 11 Dec 2025 13:02:46 +0000 Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: BPHM2heQc8MnfUyLNUkquKJk2W32BiFZwf84j1NUeO4=) 2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5b:69:4c:74:4a:27:94:36:4c:ad:b5:5c:21:44:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9 Validity Not Before: Dec 10 13:02:46 2025 GMT Not After : Dec 11 13:02:46 2025 GMT Subject: CN=0a7529459c2677a7328a5952f556581291ca3021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:ca:b5:80:67:9b:03:87:94:f7:09:15:54: c4:14:6f:f2:22:66:36:b4:d9:f3:c0:88:b6:59:40: ba:ec:ba:52:90:e4:4b:f3:b5:9b:08:60:32:86:20: e2:23:8a:c4:8f:96:d2:35:55:7d:99:af:0a:cf:aa: a4:d4:9f:46:58:96:c0:60:ea:46:fb:0c:36:e3:14: 51:1c:55:14:a1:86:f1:3c:c6:b6:f7:cd:b2:6d:d0: 8a:5c:8a:5e:a9:20:a3:88:cc:ad:61:0d:db:8d:fd: 34:a8:5b:27:fe:51:0f:89:bc:1a:8d:2f:c4:37:3e: 8d:f5:20:93:78:da:b7:8f:d7:55:bd:b9:98:aa:87: b2:ef:c9:7e:9f:ce:2e:6f:72:10:73:96:5e:fe:ee: e9:86:65:d1:f2:ad:75:43:f2:cf:d8:cb:d7:b3:a6: fa:cc:42:67:7a:6b:a1:73:61:e0:9b:72:c2:77:f3: 64:39:99:97:51:c9:99:41:dc:da:da:e3:66:47:be: 88:12:a5:65:bb:b8:e3:71:9c:96:28:0c:00:94:56: 85:0f:d0:b9:dc:91:ce:52:0d:b8:bb:1b:24:07:4d: cd:f5:45:c3:fe:b1:14:e9:d8:cc:df:20:0a:a5:5d: a3:b3:43:06:50:d5:3a:30:c2:9f:89:c6:e7:a6:00: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:75:29:45:9C:26:77:A7:32:8A:59:52:F5:56:58:12:91:CA:30:21 X509v3 Authority Key Identifier: keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ee:5f:38:30:7d:3d:83:67:0d:8e:45:55:5a:80:c1:bc:ec: 1b:e2:f4:85:ed:01:49:6c:0b:7a:66:0b:73:44:2a:73:35:0b: 40:1f:2c:f3:f4:9d:9b:9d:fc:33:16:bd:1d:1a:28:a1:48:8a: 33:ab:49:de:7b:55:24:9c:8f:ba:c4:a4:99:43:95:0a:a5:96: 7a:69:aa:11:f1:94:1d:92:7c:3e:95:29:b6:06:81:ca:70:76: 5b:72:6c:6e:9e:12:b8:e0:92:34:83:9f:68:6e:f0:6e:a7:06: a3:fe:3d:d4:3b:97:e9:c7:6e:93:14:8d:dd:15:e0:42:61:ef: 96:4b:3a:15:9f:5c:b0:6e:bd:4c:26:24:92:b0:52:ad:4c:c8: bc:ec:d9:00:09:c0:17:57:71:1c:3a:03:0d:25:55:76:a1:88: 3d:e6:3b:e9:0a:aa:90:f1:e4:57:40:5a:2d:b7:38:5b:68:cd: df:81:04:c4:31:c7:1c:10:e0:60:8f:a4:bd:46:1c:20:65:07: c3:34:20:84:d2:38:de:72:3e:e6:ee:d1:61:a2:73:b2:bf:14: 5d:50:90:83:a3:e9:e3:01:ab:cb:22:16:9a:b8:67:ed:30:5a: 9b:c3:21:0d:9d:fb:d8:42:ea:a9:58:48:49:ad:ec:77:92:dd: dc:a9:17:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIW2lMdEonlDZMrbVcIUTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk NzNiZDkwHhcNMjUxMjEwMTMwMjQ2WhcNMjUxMjExMTMwMjQ2WjAzMTEwLwYDVQQD EygwYTc1Mjk0NTljMjY3N2E3MzI4YTU5NTJmNTU2NTgxMjkxY2EzMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkDKtYBnmwOHlPcJFVTEFG/yImY2 tNnzwIi2WUC67LpSkORL87WbCGAyhiDiI4rEj5bSNVV9ma8Kz6qk1J9GWJbAYOpG +ww24xRRHFUUoYbxPMa2982ybdCKXIpeqSCjiMytYQ3bjf00qFsn/lEPibwajS/E Nz6N9SCTeNq3j9dVvbmYqoey78l+n84ub3IQc5Ze/u7phmXR8q11Q/LP2MvXs6b6 zEJnemuhc2Hgm3LCd/NkOZmXUcmZQdza2uNmR76IEqVlu7jjcZyWKAwAlFaFD9C5 3JHOUg24uxskB03N9UXD/rEU6djM3yAKpV2js0MGUNU6MMKficbnpgCniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp1KUWcJnenMopZUvVWWBKRyjAhMB8GA1UdIwQY MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt NGIwOWJkOGVkMDRhLzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe5fODB9 PYNnDY5FVVqAwbzsG+L0he0BSWwLemYLc0QqczULQB8s8/Sdm538Mxa9HRoooUiK M6tJ3ntVJJyPusSkmUOVCqWWemmqEfGUHZJ8PpUptgaBynB2W3Jsbp4SuOCSNIOf aG7wbqcGo/491DuX6cdukxSN3RXgQmHvlks6FZ9csG69TCYkkrBSrUzIvOzZAAnA F1dxHDoDDSVVdqGIPeY76QqqkPHkV0BaLbc4W2jN34EExDHHHBDgYI+kvUYcIGUH wzQghNI43nI+5u7RYaJzsr8UXVCQg6Pp4wGryyIWmrhn7TBam8MhDZ372ELqqVhI Sa3sd5Ld3KkXtA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:18 2025 by rpki-client