This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json) Hash identifier: NIubedfwS2UBxPjqmWgdzEvLQVkcHy6zsFNtfXVCT8M= Subject key identifier: 88:64:1B:30:35:05:B1:33:E1:D9:B6:C2:86:E9:D2:8D:6B:76:FE:6C Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98 Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98 Certificate serial: 019AF12D4751C66684FA86A40CFE7F3BE117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:07 +0000 Manifest this update: Sat 06 Dec 2025 01:01:07 +0000 Manifest next update: Sun 07 Dec 2025 01:01:07 +0000 Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: fPK/Rc92TovizodzC7xMlgTaMufu4mi/kxcWeqxJ2GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:47:51:c6:66:84:fa:86:a4:0c:fe:7f:3b:e1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98 Validity Not Before: Dec 6 01:01:07 2025 GMT Not After : Dec 7 01:01:07 2025 GMT Subject: CN=88641b303505b133e1d9b6c286e9d28d6b76fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:2d:d2:c4:1b:b5:7e:c8:c5:dd:ac:48:8e: f4:37:98:6a:22:9e:e3:83:a9:d4:53:06:06:49:53: db:d6:05:ab:33:c0:2a:45:d1:1c:0e:6b:66:8a:d7: a9:4f:f3:0b:70:69:86:e5:b1:9e:04:7a:d7:d4:07: 08:2f:52:b3:53:59:df:2c:fc:a9:27:e4:35:30:73: f3:0d:04:c8:4f:54:58:25:a5:c3:bc:c7:d1:e1:39: 46:29:ea:e8:6d:96:12:13:0c:94:80:dc:83:27:9e: 8f:c1:67:52:c9:28:72:71:17:62:0d:01:17:b7:31: 31:29:b6:75:22:f4:4f:6d:85:2e:9d:5b:52:c3:6e: ae:a1:3d:e4:07:dc:66:13:d3:04:46:c8:38:a8:ce: fb:f8:94:fe:d8:60:79:df:49:3d:f9:0c:e1:9b:3f: be:29:5f:a3:4a:d7:c9:fd:09:4b:f5:ab:85:95:0e: c5:de:ac:79:5f:17:a0:75:6c:21:d9:f0:3d:a9:96: a6:92:b7:58:d4:15:85:c7:e0:1e:79:35:da:f2:9d: c0:f0:42:0f:8b:6d:02:cb:03:90:65:51:73:45:76: 65:2f:6e:4d:32:73:46:ab:57:8b:26:96:e8:95:0c: db:95:9c:5f:82:8e:f8:9d:e8:f9:a1:c1:98:2e:1d: 0c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:64:1B:30:35:05:B1:33:E1:D9:B6:C2:86:E9:D2:8D:6B:76:FE:6C X509v3 Authority Key Identifier: keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:95:4f:7f:21:5e:c0:3e:80:e3:95:52:58:3d:5b:16:32:1b: cc:c4:4d:91:60:d5:16:db:1e:83:02:1a:97:37:7e:b0:22:98: 5f:8b:64:86:50:d1:ac:38:80:40:e9:c1:3d:01:a4:cd:86:f4: 49:99:cd:de:2d:a5:dc:d8:1e:90:0b:9e:17:52:12:7c:6a:42: 80:cf:c4:6b:f9:e1:05:6c:d1:5d:09:9b:b9:3f:93:55:a6:4b: c9:ab:5e:e2:a0:63:98:be:28:f5:40:f3:0e:e1:cd:91:80:c1: de:38:ac:b6:b7:21:c0:3c:49:a7:3a:f1:6d:23:b7:8f:05:7f: 9e:64:ee:af:3d:f1:6a:8b:10:fe:34:71:22:6b:b6:b9:8d:ac: 1a:d6:35:e3:36:c8:8b:6d:8d:0f:ae:8c:e4:cb:ae:a1:68:74: 27:9c:09:e5:d9:db:92:0d:d6:f7:54:44:26:f4:11:71:3c:03: ea:ed:d6:67:9a:4d:0b:93:35:d1:cd:4a:92:22:f0:e5:77:ac: 37:90:e0:e4:fc:4e:ee:17:9e:b0:56:1d:ee:da:fd:60:09:3d: e9:cc:e6:72:81:58:8c:7e:c7:34:8f:ae:3b:39:d3:d6:6c:30: ca:5c:16:19:12:49:74:e2:f0:ed:c3:92:da:b5:d0:ad:6c:d6: 64:e1:b4:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUdRxmaE+oakDP5/O+EXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWJlMWMwNmFmMTFmM2VlYzFkY2IxOTZiY2E4ZGU3YmYw OGZiOTgwHhcNMjUxMjA2MDEwMTA3WhcNMjUxMjA3MDEwMTA3WjAzMTEwLwYDVQQD Eyg4ODY0MWIzMDM1MDViMTMzZTFkOWI2YzI4NmU5ZDI4ZDZiNzZmZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pot0sQbtX7Ixd2sSI70N5hqIp7j g6nUUwYGSVPb1gWrM8AqRdEcDmtmitepT/MLcGmG5bGeBHrX1AcIL1KzU1nfLPyp J+Q1MHPzDQTIT1RYJaXDvMfR4TlGKerobZYSEwyUgNyDJ56PwWdSyShycRdiDQEX tzExKbZ1IvRPbYUunVtSw26uoT3kB9xmE9MERsg4qM77+JT+2GB530k9+Qzhmz++ KV+jStfJ/QlL9auFlQ7F3qx5XxegdWwh2fA9qZamkrdY1BWFx+AeeTXa8p3A8EIP i20CywOQZVFzRXZlL25NMnNGq1eLJpbolQzblZxfgo74nej5ocGYLh0MDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhkGzA1BbEz4dm2wobp0o1rdv5sMB8GA1UdIwQY MBaAFCcb4cBq8R8+7B3LGWvKjee/CPuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUt NDc0MjA3ZGFlZjQzLzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDlkNjQtODNjNC00YTdlLWI0YjUtNDc0MjA3ZGFlZjQz LzEvSnh2aHdHcnhIejdzSGNzWmE4cU41NzhJLTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5VPfyFe wD6A45VSWD1bFjIbzMRNkWDVFtsegwIalzd+sCKYX4tkhlDRrDiAQOnBPQGkzYb0 SZnN3i2l3NgekAueF1ISfGpCgM/Ea/nhBWzRXQmbuT+TVaZLyate4qBjmL4o9UDz DuHNkYDB3jistrchwDxJpzrxbSO3jwV/nmTurz3xaosQ/jRxImu2uY2sGtY14zbI i22ND66M5MuuoWh0J5wJ5dnbkg3W91REJvQRcTwD6u3WZ5pNC5M10c1KkiLw5Xes N5Dg5PxO7heesFYd7tr9YAk96czmcoFYjH7HNI+uOznT1mwwylwWGRJJdOLw7cOS 2rXQrWzWZOG0Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:19:39 2025 by rpki-client