This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json) Hash identifier: nZfPFItn6qyikacazlIC8dSK+bs1u1MlVr3S2MdBKxw= Subject key identifier: 1A:8F:23:96:5A:DA:0B:C6:31:54:50:EA:EE:F1:85:DC:A0:E9:70:2B Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Certificate serial: 019B0F37A4206778487926A258943D980C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft Manifest number: 0E18 Signing time: Thu 11 Dec 2025 21:01:03 +0000 Manifest this update: Thu 11 Dec 2025 21:01:03 +0000 Manifest next update: Fri 12 Dec 2025 21:01:03 +0000 Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: SdfWb80seC0JYuRivFge0fK49UYq5dKZeAxvAFxWjew=) 2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:a4:20:67:78:48:79:26:a2:58:94:3d:98:0c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Validity Not Before: Dec 11 21:01:03 2025 GMT Not After : Dec 12 21:01:03 2025 GMT Subject: CN=1a8f23965ada0bc6315450eaeef185dca0e9702b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:83:50:9e:6e:93:f4:d9:c8:0b:45:92:49:26: 40:9a:5c:b7:46:44:de:62:9b:38:98:0d:2e:17:d9: f2:8e:fe:85:aa:fb:35:bc:51:b7:b2:5f:b1:d0:74: b8:bf:18:1c:74:ba:c3:ae:ef:08:8c:3e:c7:81:f2: d8:1c:0a:20:21:8f:be:bc:2d:a6:d8:21:bf:15:9a: 0c:dd:34:a8:57:07:ec:b9:f2:a3:15:ab:ac:4c:3b: 49:6d:09:01:9a:fc:21:cd:f5:a2:9f:4a:e0:6a:ef: cd:5c:57:69:9c:66:fa:47:09:5d:00:d3:bb:26:2b: a0:a5:a9:b5:af:9a:d0:2c:6b:c3:80:37:0f:59:2b: 63:40:30:ab:e9:66:96:b7:25:9e:2b:25:3b:ca:c3: 06:01:ae:af:51:38:ba:d3:fb:62:cf:f7:c0:41:aa: 1c:88:78:71:4b:7a:0f:cf:05:b9:5b:9d:a0:dd:36: 99:c2:d6:0d:fa:21:68:ce:bb:10:50:f5:79:54:99: b4:41:36:87:0f:38:d9:1a:a3:61:57:fc:5d:6a:84: 56:05:bd:4f:42:cd:01:fb:5a:10:8e:fa:d4:52:04: 09:a4:cf:52:3a:ec:cb:e2:4c:c8:a1:05:32:a8:9a: f4:e7:9c:6f:a0:b6:f8:7e:3c:1a:66:a3:2a:ab:e1: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:23:96:5A:DA:0B:C6:31:54:50:EA:EE:F1:85:DC:A0:E9:70:2B X509v3 Authority Key Identifier: keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ae:ed:1e:00:5d:a4:af:f9:ac:20:4c:a3:d6:7f:6a:35:b3: 47:1f:c4:23:b1:47:c0:42:61:22:ae:49:76:2e:8a:ec:59:f6: 1d:51:a6:ac:b2:ce:94:e2:fd:5d:30:1a:d5:3e:96:c2:6a:5f: b6:e6:49:8a:eb:84:12:75:c3:8b:1c:5e:d5:5d:90:7b:ae:ea: 19:65:94:10:24:30:9d:24:02:f2:9d:8e:87:98:a0:61:28:24: 87:21:c8:92:28:bd:7e:82:f0:5e:86:a7:6a:8f:00:9e:9c:e5: c6:17:35:dc:2a:96:be:f9:27:11:91:23:2d:1a:c5:36:b6:05: cb:ab:59:61:09:e6:37:9e:c3:0b:1b:13:86:2c:ca:33:0b:43: a5:24:ca:1f:9b:8d:eb:8a:41:01:6d:71:a0:3b:c2:54:ea:a2: 53:c6:f1:38:a8:f5:d7:63:81:cd:e8:07:93:4d:11:66:24:32: 3c:9e:da:1b:6c:66:70:f3:b8:3b:7f:c5:1f:b9:2e:0e:44:66: f6:a2:78:17:f5:2b:1e:4a:b5:e3:9b:4e:b0:99:ee:26:85:a4: ae:87:bb:e9:09:64:9b:26:c6:1a:3e:30:2b:7e:b3:66:e8:23: 4d:98:9c:e8:df:32:fd:08:43:49:80:9f:87:06:9c:17:b8:e2: c5:74:93:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN6QgZ3hIeSaiWJQ9mAx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy NzFmMjQwHhcNMjUxMjExMjEwMTAzWhcNMjUxMjEyMjEwMTAzWjAzMTEwLwYDVQQD EygxYThmMjM5NjVhZGEwYmM2MzE1NDUwZWFlZWYxODVkY2EwZTk3MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYNQnm6T9NnIC0WSSSZAmly3RkTe Yps4mA0uF9nyjv6Fqvs1vFG3sl+x0HS4vxgcdLrDru8IjD7HgfLYHAogIY++vC2m 2CG/FZoM3TSoVwfsufKjFausTDtJbQkBmvwhzfWin0rgau/NXFdpnGb6RwldANO7 Jiugpam1r5rQLGvDgDcPWStjQDCr6WaWtyWeKyU7ysMGAa6vUTi60/tiz/fAQaoc iHhxS3oPzwW5W52g3TaZwtYN+iFozrsQUPV5VJm0QTaHDzjZGqNhV/xdaoRWBb1P Qs0B+1oQjvrUUgQJpM9SOuzL4kzIoQUyqJr055xvoLb4fjwaZqMqq+HYowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqPI5Za2gvGMVRQ6u7xhdyg6XArMB8GA1UdIwQY MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2 LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGK7tHgBd pK/5rCBMo9Z/ajWzRx/EI7FHwEJhIq5Jdi6K7Fn2HVGmrLLOlOL9XTAa1T6Wwmpf tuZJiuuEEnXDixxe1V2Qe67qGWWUECQwnSQC8p2Oh5igYSgkhyHIkii9foLwXoan ao8Anpzlxhc13CqWvvknEZEjLRrFNrYFy6tZYQnmN57DCxsThizKMwtDpSTKH5uN 64pBAW1xoDvCVOqiU8bxOKj112OBzegHk00RZiQyPJ7aG2xmcPO4O3/FH7kuDkRm 9qJ4F/UrHkq145tOsJnuJoWkroe76QlkmybGGj4wK36zZugjTZic6N8y/QhDSYCf hwacF7jixXST9A== -----END CERTIFICATE-----Generated at Fri Dec 12 06:11:19 2025 by rpki-client