This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json) Hash identifier: rMW1w/uk7z7L0JKSUuzwNxOvJy7w7BBVsfNze/WVaiA= Subject key identifier: 15:F3:5A:5C:BB:20:3C:FE:31:5B:B5:5F:E7:00:A1:50:2F:23:49:5A Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Certificate serial: 019B5A51A9E821443E57D7174732B7D86ACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft Manifest number: 0901 Signing time: Fri 26 Dec 2025 11:00:59 +0000 Manifest this update: Fri 26 Dec 2025 11:00:59 +0000 Manifest next update: Sat 27 Dec 2025 11:00:59 +0000 Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: SAnPvw8yhrNuYO5D/OW8ZjYX5r+Ex0QYlg4c5RozWfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a9:e8:21:44:3e:57:d7:17:47:32:b7:d8:6a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Validity Not Before: Dec 26 11:00:59 2025 GMT Not After : Dec 27 11:00:59 2025 GMT Subject: CN=15f35a5cbb203cfe315bb55fe700a1502f23495a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:ac:52:5c:52:5b:f3:7f:57:89:8a:d0:ea: b6:cc:95:14:23:59:be:1c:74:45:be:60:02:d9:31: 71:bc:5a:cf:51:af:a4:c5:9f:4a:a9:f4:65:87:92: ba:da:22:49:bd:fa:0f:fe:41:4b:10:aa:82:28:80: 12:f9:39:fa:5c:a8:0d:87:8f:37:18:3e:16:e1:9b: 1f:e1:12:3b:2d:1b:82:d6:43:67:6c:d6:3d:df:77: 55:29:7a:60:9d:be:d3:11:fc:ed:0a:d9:fb:27:d6: c9:b9:68:8e:51:27:86:61:92:48:ec:93:71:0c:b9: 9d:5a:7a:5f:ee:00:08:b5:9e:d5:2f:8f:4a:84:b3: 74:1f:6e:d5:3a:7f:88:01:f9:21:df:db:70:31:a6: 27:e1:54:84:66:4c:f4:af:66:8d:d8:2f:89:30:ef: 02:d6:d8:93:3c:02:0f:b1:07:02:c0:9d:0c:e0:12: 93:98:14:a3:7f:1f:b1:4e:a2:ad:e9:54:f6:97:a9: 8a:ae:ad:76:71:b8:7d:54:60:dd:e6:90:36:6e:95: 06:31:b9:78:b0:e2:2b:3f:8c:7b:b2:89:f0:6a:36: 85:0d:6a:7a:94:b8:48:13:2c:8a:c8:7a:2d:4b:8f: 56:e4:34:46:37:94:23:bd:61:31:17:d6:5b:62:98: bd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:5A:5C:BB:20:3C:FE:31:5B:B5:5F:E7:00:A1:50:2F:23:49:5A X509v3 Authority Key Identifier: keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f7:47:f0:38:a1:72:18:7f:08:8f:9a:0f:ca:54:82:18:73: 2e:76:93:bb:25:fc:3a:c2:31:90:fd:bc:8e:23:de:39:1b:e6: ea:48:a1:c2:10:6a:ec:1d:2c:cf:38:e3:72:a7:bc:92:c8:d8: f1:b0:94:f0:e8:e1:59:a4:94:cc:03:6d:a9:be:09:0d:5c:0e: 8b:68:95:dc:c6:8d:7f:d1:55:68:89:8e:1c:d2:1f:fb:0a:6a: 20:26:34:72:b2:73:c7:de:bd:b7:19:a0:3c:e2:5c:7c:7a:20: d2:f1:e8:c1:de:d7:2a:30:f8:e5:25:fe:d6:0f:5f:dc:f3:5e: 14:10:0a:44:1e:8b:1b:69:d0:6c:2d:c4:74:40:b8:68:ff:48: 3c:ff:28:50:ec:31:34:a3:34:f3:ae:d3:8e:a8:1e:2f:9d:c7: 9a:db:47:3f:37:98:3c:dc:22:54:69:2d:0b:f1:cd:9c:bf:82: 7d:31:fe:42:96:01:1a:a1:0f:56:8c:fd:eb:56:de:c6:0f:41: a6:9d:e3:ac:7c:08:1a:5f:17:e1:b3:c2:b2:04:10:41:ea:0f: f4:71:5a:b5:02:4e:e5:6a:32:7b:16:54:b5:d5:68:c2:35:d1: 88:f4:f2:73:a6:17:b7:bd:5a:07:79:98:6b:81:fd:1c:ad:ec: e1:48:51:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUanoIUQ+V9cXRzK32GrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWE0MDM4YmRlYjE4OTI0MmYyOGY5ZDg1YzQwZWM0ZDdk MzIxZWIwHhcNMjUxMjI2MTEwMDU5WhcNMjUxMjI3MTEwMDU5WjAzMTEwLwYDVQQD EygxNWYzNWE1Y2JiMjAzY2ZlMzE1YmI1NWZlNzAwYTE1MDJmMjM0OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa6sUlxSW/N/V4mK0Oq2zJUUI1m+ HHRFvmAC2TFxvFrPUa+kxZ9KqfRlh5K62iJJvfoP/kFLEKqCKIAS+Tn6XKgNh483 GD4W4Zsf4RI7LRuC1kNnbNY933dVKXpgnb7TEfztCtn7J9bJuWiOUSeGYZJI7JNx DLmdWnpf7gAItZ7VL49KhLN0H27VOn+IAfkh39twMaYn4VSEZkz0r2aN2C+JMO8C 1tiTPAIPsQcCwJ0M4BKTmBSjfx+xTqKt6VT2l6mKrq12cbh9VGDd5pA2bpUGMbl4 sOIrP4x7sonwajaFDWp6lLhIEyyKyHotS49W5DRGN5QjvWExF9ZbYpi9xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXzWly7IDz+MVu1X+cAoVAvI0laMB8GA1UdIwQY MBaAFCcaQDi96xiSQvKPnYXEDsTX0yHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzct ODg2MmM3NDI5NDI1LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzctODg2MmM3NDI5NDI1 LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPdH8Dih chh/CI+aD8pUghhzLnaTuyX8OsIxkP28jiPeORvm6kihwhBq7B0szzjjcqe8ksjY 8bCU8OjhWaSUzANtqb4JDVwOi2iV3MaNf9FVaImOHNIf+wpqICY0crJzx969txmg POJcfHog0vHowd7XKjD45SX+1g9f3PNeFBAKRB6LG2nQbC3EdEC4aP9IPP8oUOwx NKM0867TjqgeL53HmttHPzeYPNwiVGktC/HNnL+CfTH+QpYBGqEPVoz961bexg9B pp3jrHwIGl8X4bPCsgQQQeoP9HFatQJO5WoyexZUtdVowjXRiPTyc6YXt71aB3mY a4H9HK3s4UhR6Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client