This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft File: jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json) Hash identifier: 5jtDQkZ7Hj2FaCKAVgUNoOHg2aNRi5HlmVG/64cfusY= Subject key identifier: 5B:35:FF:C1:A8:A4:8D:4A:A6:7F:0B:31:D6:EA:25:E2:80:6C:92:F8 Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 Certificate issuer: /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Certificate serial: 019AF19B264D19667608B4CB3C17F8D346AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft Manifest number: 1213 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 2o+avp3kcxfi/aqTfzyGqAkG+wbIwVPMJ6W51J0cPhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:26:4d:19:66:76:08:b4:cb:3c:17:f8:d3:46:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=5b35ffc1a8a48d4aa67f0b31d6ea25e2806c92f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:70:94:8d:99:82:6f:5f:3c:5b:bf:38:ff:56: 83:76:87:48:e7:a7:f2:f8:9b:73:40:88:0b:c9:37: 84:73:57:0c:29:10:a2:b7:88:ba:fd:d0:d8:5c:63: 31:f1:51:46:74:cb:d9:3f:5e:12:0e:33:a9:e4:6d: 16:04:90:44:6d:3f:23:47:30:ef:bb:7b:6d:21:66: 98:bb:cb:e3:24:dc:0d:be:06:9e:0b:69:de:13:4a: 22:1f:79:d0:19:b6:63:28:fa:02:fa:5a:65:e6:11: 49:ee:63:65:d3:3d:5d:85:c1:15:2c:80:49:6b:03: c5:c6:7a:3f:55:a5:ce:71:bf:f1:fb:fa:19:d1:b9: cc:0f:8d:2a:fc:4b:8a:4a:33:e7:c1:e7:6c:cd:a1: 24:57:2b:56:72:f5:82:12:97:67:d5:2d:20:69:af: bb:3b:23:94:98:db:04:fd:5e:17:94:32:10:fb:ac: ad:14:0c:6f:ca:bf:d3:37:d2:a4:b0:76:ef:6a:77: 7c:34:37:4d:4d:4d:79:f1:ea:07:fe:63:8c:98:2c: ad:40:58:23:25:fb:65:87:44:fb:14:c9:ad:c4:e0: ef:12:6a:0d:6f:ad:e9:50:d5:c5:d6:ed:76:77:db: e9:5c:48:bc:51:9e:b1:ab:a7:e2:1e:7b:9a:df:5d: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:FF:C1:A8:A4:8D:4A:A6:7F:0B:31:D6:EA:25:E2:80:6C:92:F8 X509v3 Authority Key Identifier: keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1a:8f:e1:7d:c9:74:04:e2:50:09:54:f3:05:ea:77:b7:2e: 36:e1:7a:86:f4:97:00:f0:37:73:ee:4b:03:92:2b:f8:c6:a0: d2:4f:3c:bf:7d:50:ad:a2:7d:65:6c:14:fd:7a:6c:6a:38:95: b9:02:ce:1d:48:f7:42:48:51:18:24:54:70:f4:28:52:a1:e4: 63:32:d0:23:9b:bb:b8:7d:b6:4c:08:f1:43:dc:12:ba:6a:0d: 30:db:e4:ce:d9:3f:58:a3:a1:d4:0d:62:be:22:c7:2f:68:2d: 3a:dc:67:ef:f9:6f:a2:b6:87:25:64:cf:e5:43:02:09:54:e9: 09:35:78:82:47:a1:bf:ff:15:e3:55:89:ee:a0:2d:1e:96:3f: 3d:b2:4a:e5:a4:84:ae:d2:8c:3b:12:54:52:31:b0:2f:2d:e1: 75:d0:e4:0d:3d:5e:f4:f8:fb:61:5b:9c:9f:05:00:37:4e:20: 6c:cc:d2:77:e7:41:9c:9a:58:f5:7c:08:d5:0e:45:c3:02:45: 27:35:d6:d2:bc:8b:77:46:85:93:69:bc:06:b1:e4:f9:46:4d: ad:18:1e:b0:09:67:c1:9a:0a:c1:0b:4b:d9:6f:28:ae:e4:df: b4:06:d5:36:11:af:80:ae:c8:df:f8:8d:d5:6b:55:88:29:4e: df:42:cc:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyZNGWZ2CLTLPBf400arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj ZTlkMjkwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg1YjM1ZmZjMWE4YTQ4ZDRhYTY3ZjBiMzFkNmVhMjVlMjgwNmM5MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HCUjZmCb188W784/1aDdodI56fy +JtzQIgLyTeEc1cMKRCit4i6/dDYXGMx8VFGdMvZP14SDjOp5G0WBJBEbT8jRzDv u3ttIWaYu8vjJNwNvgaeC2neE0oiH3nQGbZjKPoC+lpl5hFJ7mNl0z1dhcEVLIBJ awPFxno/VaXOcb/x+/oZ0bnMD40q/EuKSjPnwedszaEkVytWcvWCEpdn1S0gaa+7 OyOUmNsE/V4XlDIQ+6ytFAxvyr/TN9KksHbvand8NDdNTU158eoH/mOMmCytQFgj Jftlh0T7FMmtxODvEmoNb63pUNXF1u12d9vpXEi8UZ6xq6fiHnua311DOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs1/8GopI1Kpn8LMdbqJeKAbJL4MB8GA1UdIwQY MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRqP4X3J dATiUAlU8wXqd7cuNuF6hvSXAPA3c+5LA5Ir+Mag0k88v31QraJ9ZWwU/XpsajiV uQLOHUj3QkhRGCRUcPQoUqHkYzLQI5u7uH22TAjxQ9wSumoNMNvkztk/WKOh1A1i viLHL2gtOtxn7/lvoraHJWTP5UMCCVTpCTV4gkehv/8V41WJ7qAtHpY/PbJK5aSE rtKMOxJUUjGwLy3hddDkDT1e9Pj7YVucnwUAN04gbMzSd+dBnJpY9XwI1Q5FwwJF JzXW0ryLd0aFk2m8BrHk+UZNrRgesAlnwZoKwQtL2W8oruTftAbVNhGvgK7I3/iN 1WtViClO30LMYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:41 2025 by rpki-client