This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json) Hash identifier: +1tLXw/J96Ik2cJzpg6E+18Ga1obr0WgkZUGB/VoBUg= Subject key identifier: 45:FD:72:44:64:9F:B5:E8:B5:02:1D:37:3A:69:02:56:3D:DE:54:EE Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab Certificate serial: 019B0F6E98CEF17D5E6CE0BBD9AF883FC46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft Manifest number: 1448 Signing time: Thu 11 Dec 2025 22:01:04 +0000 Manifest this update: Thu 11 Dec 2025 22:01:04 +0000 Manifest next update: Fri 12 Dec 2025 22:01:04 +0000 Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: iKdjEkXdYui6Apa0EAVFDLjryu+8dLggVjx51b9vXwk=) 2: JwgnOTRAlCXt1K7at1wAyMz7bd8.roa (hash: lBC8tzOboiP4jQAHCC/omLvaunl3BvP+L/B2M2ocu+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:98:ce:f1:7d:5e:6c:e0:bb:d9:af:88:3f:c4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab Validity Not Before: Dec 11 22:01:04 2025 GMT Not After : Dec 12 22:01:04 2025 GMT Subject: CN=45fd7244649fb5e8b5021d373a6902563dde54ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:1f:c7:a8:cd:d1:3c:5f:f7:11:3b:55:3a: 41:50:78:62:d6:e0:e8:97:35:fd:2e:96:68:29:24: 88:e1:e4:08:60:23:3b:6e:b8:ac:05:3c:e6:b3:25: c2:17:b4:41:06:4d:00:b6:97:10:30:48:e9:e9:f5: af:90:f8:3f:85:08:5e:0f:40:73:49:40:11:da:fb: 85:62:74:c9:e9:ff:45:34:3a:1e:f2:31:a1:29:f5: 51:3d:b6:3c:b6:31:31:15:c2:17:92:a2:b2:fb:b0: 86:bf:db:a4:b1:a5:f6:ba:5e:67:48:25:7f:29:1f: f9:b4:c8:91:51:3f:a5:c8:f5:db:4d:fb:fa:8d:21: 2b:36:75:59:63:51:da:05:7e:b5:75:0f:2c:36:42: 0f:93:f6:16:bd:57:cc:d2:d2:bf:f8:06:82:41:df: ce:3f:f1:c6:f2:ff:74:9b:4f:24:18:de:15:b4:ae: 7e:f8:d9:cd:da:2f:5b:a5:98:bd:76:85:ff:5f:60: 19:f4:e2:10:45:45:f9:a2:89:dc:b1:8b:3d:32:dc: 3c:82:38:c1:39:83:cf:5e:d9:1c:9d:08:12:80:b2: 83:63:06:c0:89:50:ba:ac:ca:39:ad:41:bf:5b:c2: 67:7a:10:6e:45:c3:99:13:30:ae:5b:c2:69:93:a3: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FD:72:44:64:9F:B5:E8:B5:02:1D:37:3A:69:02:56:3D:DE:54:EE X509v3 Authority Key Identifier: keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:99:2f:7b:aa:68:09:6a:7e:58:71:62:4c:f6:a4:3e:0e:c8: 5f:92:11:eb:49:f7:37:cc:5c:6d:c8:3d:0f:83:f6:cd:39:87: 5f:4e:71:8a:8a:39:1d:db:25:60:01:bd:43:8e:53:9c:e4:88: 03:6c:9f:86:9b:dc:b7:b7:06:ec:4d:e8:d5:7c:89:c0:cc:9d: 98:1e:7d:ff:a5:c6:12:2d:4d:1b:80:ac:da:be:31:85:dd:55: 57:79:dc:cd:ff:46:61:20:18:de:99:4b:5e:00:e0:a9:93:8c: cf:5a:cc:0f:79:11:8f:3c:1c:71:0c:f1:a7:3a:69:0f:e1:d4: 7f:a1:c1:a9:3f:69:9e:b6:d3:ad:1e:c1:ea:c6:e4:13:74:69: c8:0d:29:93:ee:1b:bb:99:c5:f3:15:69:e3:c0:0e:2c:ac:55: fd:50:39:5d:14:70:3d:21:db:35:7e:88:59:88:68:9b:8a:ea: ab:e6:1c:cb:94:dc:3e:03:fe:60:02:e5:68:08:d7:86:42:90: 24:56:33:62:2b:48:47:1e:e8:a9:03:9f:aa:5f:50:00:77:88: 50:f4:6e:64:3a:78:df:21:0e:6d:a6:b0:2c:77:ed:13:26:22: fb:c0:3d:0c:b4:7b:fb:d7:a1:e2:78:8e:88:cd:be:5e:01:51: 34:03:c6:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbpjO8X1ebOC72a+IP8RrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll OTVhYWIwHhcNMjUxMjExMjIwMTA0WhcNMjUxMjEyMjIwMTA0WjAzMTEwLwYDVQQD Eyg0NWZkNzI0NDY0OWZiNWU4YjUwMjFkMzczYTY5MDI1NjNkZGU1NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aIfx6jN0Txf9xE7VTpBUHhi1uDo lzX9LpZoKSSI4eQIYCM7brisBTzmsyXCF7RBBk0AtpcQMEjp6fWvkPg/hQheD0Bz SUAR2vuFYnTJ6f9FNDoe8jGhKfVRPbY8tjExFcIXkqKy+7CGv9uksaX2ul5nSCV/ KR/5tMiRUT+lyPXbTfv6jSErNnVZY1HaBX61dQ8sNkIPk/YWvVfM0tK/+AaCQd/O P/HG8v90m08kGN4VtK5++NnN2i9bpZi9doX/X2AZ9OIQRUX5ooncsYs9Mtw8gjjB OYPPXtkcnQgSgLKDYwbAiVC6rMo5rUG/W8JnehBuRcOZEzCuW8Jpk6PQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEX9ckRkn7XotQIdNzppAlY93lTuMB8GA1UdIwQY MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZkve6po CWp+WHFiTPakPg7IX5IR60n3N8xcbcg9D4P2zTmHX05xioo5HdslYAG9Q45TnOSI A2yfhpvct7cG7E3o1XyJwMydmB59/6XGEi1NG4Cs2r4xhd1VV3nczf9GYSAY3plL XgDgqZOMz1rMD3kRjzwccQzxpzppD+HUf6HBqT9pnrbTrR7B6sbkE3RpyA0pk+4b u5nF8xVp48AOLKxV/VA5XRRwPSHbNX6IWYhom4rqq+Ycy5TcPgP+YALlaAjXhkKQ JFYzYitIRx7oqQOfql9QAHeIUPRuZDp43yEObaawLHftEyYi+8A9DLR7+9eh4niO iM2+XgFRNAPGCA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:37:30 2025 by rpki-client