This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft File: jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json) Hash identifier: j0KVja9HuQ0K7twxRfmAjg48Wv2HuY6zgsLptPdP98M= Subject key identifier: 02:4F:2F:53:FC:94:2D:EC:07:D6:7C:21:79:A1:DB:01:07:ED:64:D9 Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF Certificate issuer: /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf Certificate serial: 019AF31BC658D95149AD374C4AC7DA8E20A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft Manifest number: 146B Signing time: Sat 06 Dec 2025 10:01:14 +0000 Manifest this update: Sat 06 Dec 2025 10:01:14 +0000 Manifest next update: Sun 07 Dec 2025 10:01:14 +0000 Files and hashes: 1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: vgKBSPUJG8fINHVqczjtt0uIB1O1MIcDJ3kzwSoNXEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c6:58:d9:51:49:ad:37:4c:4a:c7:da:8e:20:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf Validity Not Before: Dec 6 10:01:14 2025 GMT Not After : Dec 7 10:01:14 2025 GMT Subject: CN=024f2f53fc942dec07d67c2179a1db0107ed64d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:01:81:6d:eb:d4:05:a8:47:6c:d6:12:1a: 79:2c:89:a9:82:70:11:db:12:35:bc:34:f9:89:f0: 90:96:25:48:b8:80:60:2f:2a:41:58:ad:fc:10:62: 5b:87:33:9f:c6:3c:8b:af:5f:c9:2d:af:21:19:39: bc:41:41:64:99:21:32:73:21:0a:ab:73:a1:a7:aa: 50:ca:d9:f8:fe:a1:6c:d4:99:97:43:f8:cf:b5:80: 8e:7d:8d:03:c2:9e:55:36:82:6e:2f:4d:98:6f:2c: f9:96:b2:fd:8d:7b:b4:50:f1:8e:f5:fc:5d:8b:08: 29:35:a8:e0:eb:b0:7a:c9:79:f6:9a:45:8d:55:7c: 77:9d:6a:4e:84:8b:b3:d7:14:95:de:fe:6a:d1:52: 91:cf:a0:99:a6:31:ef:d2:79:eb:19:4b:6a:ba:ee: 16:c5:8f:73:cb:e5:34:be:2a:6c:fa:79:0e:5c:d6: 1f:d8:75:d4:3b:e5:03:26:b3:cb:0c:c8:43:35:f1: 0e:e4:a0:25:d3:14:16:3a:6e:4b:38:62:56:5a:b3: bf:70:88:aa:f8:bc:95:b0:96:04:e5:8c:22:48:cf: 13:0d:b6:ee:c8:7a:cf:e0:5e:06:61:cd:66:47:da: 8a:54:83:3f:be:2f:b4:08:0f:52:20:7d:ab:97:24: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4F:2F:53:FC:94:2D:EC:07:D6:7C:21:79:A1:DB:01:07:ED:64:D9 X509v3 Authority Key Identifier: keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ec:e7:6f:85:7a:cf:23:e9:d7:d3:7f:bf:15:61:21:98:ab: 14:b4:31:16:a4:f7:ee:d2:04:f0:d9:6c:76:72:6e:2d:1a:0f: a3:fc:f0:a5:f0:c2:97:cb:47:77:a0:99:b5:bb:43:b9:23:a6: c5:d1:b5:87:f5:15:04:0e:0b:36:b2:dc:9f:ef:b2:8b:a5:06: 0e:a5:d6:65:a2:08:32:01:39:33:94:ad:a0:3e:81:75:21:f5: 0d:e2:30:2c:1b:03:91:09:b8:a1:63:64:3a:25:06:64:d8:79: d8:06:01:2d:0a:75:e1:6f:79:73:12:43:67:99:6b:e8:3d:c9: 66:ac:03:80:e3:d8:dd:84:b7:c3:38:b7:e3:d6:80:2f:21:fc: 4e:f5:b2:48:be:ec:6f:b6:4c:3c:84:97:12:7a:df:43:b0:90: df:d3:26:f6:55:66:86:76:e8:ab:c0:00:78:6b:d2:86:8f:2a: 09:2b:f4:93:5e:9f:25:65:ef:55:d4:2c:a0:2e:19:5e:29:db: ec:b0:4b:9a:a6:c7:60:93:63:c6:7a:52:0d:ab:68:69:9a:06: b9:e8:66:74:aa:84:54:48:bb:0b:52:30:a4:cb:a9:fc:c5:69: ec:fe:a2:2f:ed:5d:3d:c2:d5:79:68:26:00:06:c3:60:f0:58: df:db:9a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8ZY2VFJrTdMSsfajiCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMWY5MWE5ZWIzODlhMjY2ODllZjAzNzYzYTFkYmIwOWQ2 ODI1YmYwHhcNMjUxMjA2MTAwMTE0WhcNMjUxMjA3MTAwMTE0WjAzMTEwLwYDVQQD EygwMjRmMmY1M2ZjOTQyZGVjMDdkNjdjMjE3OWExZGIwMTA3ZWQ2NGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmkBgW3r1AWoR2zWEhp5LImpgnAR 2xI1vDT5ifCQliVIuIBgLypBWK38EGJbhzOfxjyLr1/JLa8hGTm8QUFkmSEycyEK q3Ohp6pQytn4/qFs1JmXQ/jPtYCOfY0Dwp5VNoJuL02Ybyz5lrL9jXu0UPGO9fxd iwgpNajg67B6yXn2mkWNVXx3nWpOhIuz1xSV3v5q0VKRz6CZpjHv0nnrGUtquu4W xY9zy+U0vips+nkOXNYf2HXUO+UDJrPLDMhDNfEO5KAl0xQWOm5LOGJWWrO/cIiq +LyVsJYE5YwiSM8TDbbuyHrP4F4GYc1mR9qKVIM/vi+0CA9SIH2rlyTukwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJPL1P8lC3sB9Z8IXmh2wEH7WTZMB8GA1UdIwQY MBaAFI8fkanrOJomaJ7wN2Oh27CdaCW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvangtUnFlczRtaVpvbnZBM1k2SGJzSjFvSmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YjJiNmEtYjI4YS00NGRmLTkyMmQt ZjU3ZmMxZmNkMzJlLzEvangtUnFlczRtaVpvbnZBM1k2SGJzSjFvSmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS80YjJiNmEtYjI4YS00NGRmLTkyMmQtZjU3ZmMxZmNkMzJl LzEvangtUnFlczRtaVpvbnZBM1k2SGJzSjFvSmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuznb4V6 zyPp19N/vxVhIZirFLQxFqT37tIE8NlsdnJuLRoPo/zwpfDCl8tHd6CZtbtDuSOm xdG1h/UVBA4LNrLcn++yi6UGDqXWZaIIMgE5M5StoD6BdSH1DeIwLBsDkQm4oWNk OiUGZNh52AYBLQp14W95cxJDZ5lr6D3JZqwDgOPY3YS3wzi349aALyH8TvWySL7s b7ZMPISXEnrfQ7CQ39Mm9lVmhnboq8AAeGvSho8qCSv0k16fJWXvVdQsoC4ZXinb 7LBLmqbHYJNjxnpSDatoaZoGuehmdKqEVEi7C1IwpMup/MVp7P6iL+1dPcLVeWgm AAbDYPBY39ua8g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:16 2025 by rpki-client