This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json) Hash identifier: yyDVRfMTUnJmXOlvP80Sj3NTPOJsGKUd8vp4JpWFSMY= Subject key identifier: 93:5E:2C:3B:C2:77:F9:B4:D6:A5:EF:97:DF:5C:8F:B9:45:76:15:CB Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab Certificate serial: 019B19164FD7C537A6EEDF334B7C93AB1F48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft Manifest number: 144D Signing time: Sat 13 Dec 2025 19:00:51 +0000 Manifest this update: Sat 13 Dec 2025 19:00:51 +0000 Manifest next update: Sun 14 Dec 2025 19:00:51 +0000 Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: SpNenOfhrqPwTntwsTVGtI8eBzutFBwr/EhoW3njN9E=) 2: JwgnOTRAlCXt1K7at1wAyMz7bd8.roa (hash: lBC8tzOboiP4jQAHCC/omLvaunl3BvP+L/B2M2ocu+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:4f:d7:c5:37:a6:ee:df:33:4b:7c:93:ab:1f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab Validity Not Before: Dec 13 19:00:51 2025 GMT Not After : Dec 14 19:00:51 2025 GMT Subject: CN=935e2c3bc277f9b4d6a5ef97df5c8fb9457615cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:8b:f1:b6:24:ce:aa:eb:be:36:76:e0:68: 94:4b:de:33:f1:fb:ca:18:ea:82:61:8c:f3:be:f1: 3a:b3:24:69:e5:b6:59:e9:9a:8c:0e:75:88:b0:33: 53:bd:07:11:83:ac:f8:f4:dc:61:7d:fc:64:cc:26: af:8c:a5:88:45:3a:6c:0d:78:83:db:41:f5:b7:30: c9:ba:a0:33:89:d0:78:45:6d:34:7c:e2:b4:f4:94: 5d:5b:3a:dc:42:e4:c5:55:a3:7e:18:5d:c3:ab:2c: 2c:48:b3:8f:1a:42:77:f0:2f:5a:ab:ad:27:f6:2e: dd:77:00:98:6d:25:8e:e2:c7:33:c4:36:6f:06:3b: 59:8e:61:bb:5f:b3:66:db:38:06:df:ab:b5:1d:ba: dd:f0:ee:74:e5:fc:a5:8e:99:23:61:a9:7e:16:61: ce:98:03:ab:47:13:82:6f:56:10:15:63:a8:16:0a: 95:d3:0c:c4:f8:bb:4a:53:7a:42:fb:00:a2:b5:24: 1d:47:f4:95:ab:4a:dc:53:2d:66:13:1d:62:c4:28: 4d:60:d2:f0:6c:d7:7a:aa:f0:8c:4d:a2:bf:ca:1f: 51:c4:eb:11:4f:e6:0b:3d:24:12:7f:f5:f9:84:e1: 95:29:34:96:62:08:99:e5:c9:89:f0:46:ad:b2:ad: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5E:2C:3B:C2:77:F9:B4:D6:A5:EF:97:DF:5C:8F:B9:45:76:15:CB X509v3 Authority Key Identifier: keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:59:bb:5d:d1:c4:00:c4:77:53:93:21:5b:2c:29:ce:8c:90: 74:cf:2e:b8:a5:2c:5a:05:36:71:95:a2:1a:4f:aa:8a:d9:1a: eb:6b:24:fe:de:19:db:bf:56:d7:22:73:7e:78:f4:42:92:d1: a7:23:c3:16:20:26:fd:0b:56:83:53:18:11:b5:c3:3f:26:04: 35:d3:48:23:07:98:f3:a2:36:69:12:8f:0e:03:20:de:7a:47: b9:e2:2d:04:90:be:f9:6a:11:40:68:32:0a:b8:ab:b0:7f:cf: f3:88:ef:30:b2:e0:41:33:ad:19:14:ad:e9:fb:e6:da:b5:ca: 70:e6:a1:03:5c:67:83:d9:b9:90:d4:d9:5e:50:18:9e:68:01: 70:69:a3:23:b8:5a:fa:ac:6c:1a:28:5a:e8:1a:b1:4d:74:96: 7a:cf:01:26:a2:7e:86:1b:e1:f3:58:d9:8b:1c:a6:4d:1e:ba: ee:2e:89:a0:29:e0:2b:36:4f:d8:97:00:9d:a5:57:78:f6:00: 74:ef:4d:3b:81:f0:86:3c:5a:ff:dd:50:db:3d:ff:8a:b3:d3: b2:f3:b9:d0:98:dc:2d:84:5d:1e:cd:20:25:f6:03:ef:aa:74: 1d:bd:dc:37:e4:eb:4a:3a:2b:cf:8a:03:17:35:2d:ca:ea:b5: 2e:bf:81:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFk/XxTem7t8zS3yTqx9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll OTVhYWIwHhcNMjUxMjEzMTkwMDUxWhcNMjUxMjE0MTkwMDUxWjAzMTEwLwYDVQQD Eyg5MzVlMmMzYmMyNzdmOWI0ZDZhNWVmOTdkZjVjOGZiOTQ1NzYxNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIuL8bYkzqrrvjZ24GiUS94z8fvK GOqCYYzzvvE6syRp5bZZ6ZqMDnWIsDNTvQcRg6z49NxhffxkzCavjKWIRTpsDXiD 20H1tzDJuqAzidB4RW00fOK09JRdWzrcQuTFVaN+GF3DqywsSLOPGkJ38C9aq60n 9i7ddwCYbSWO4sczxDZvBjtZjmG7X7Nm2zgG36u1Hbrd8O505fyljpkjYal+FmHO mAOrRxOCb1YQFWOoFgqV0wzE+LtKU3pC+wCitSQdR/SVq0rcUy1mEx1ixChNYNLw bNd6qvCMTaK/yh9RxOsRT+YLPSQSf/X5hOGVKTSWYgiZ5cmJ8Eatsq1WqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNeLDvCd/m01qXvl99cj7lFdhXLMB8GA1UdIwQY MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1m7XdHE AMR3U5MhWywpzoyQdM8uuKUsWgU2cZWiGk+qitka62sk/t4Z279W1yJzfnj0QpLR pyPDFiAm/QtWg1MYEbXDPyYENdNIIweY86I2aRKPDgMg3npHueItBJC++WoRQGgy CrirsH/P84jvMLLgQTOtGRSt6fvm2rXKcOahA1xng9m5kNTZXlAYnmgBcGmjI7ha +qxsGiha6BqxTXSWes8BJqJ+hhvh81jZixymTR667i6JoCngKzZP2JcAnaVXePYA dO9NO4Hwhjxa/91Q2z3/irPTsvO50JjcLYRdHs0gJfYD76p0Hb3cN+TrSjorz4oD FzUtyuq1Lr+BEA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:33:44 2025 by rpki-client