This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json) Hash identifier: EzK29+agoqc8cZ0xV54aJyngWjldTf/W7a2ltUYj3lg= Subject key identifier: BD:A4:E0:C4:10:57:62:C6:E5:06:07:0C:FB:77:B8:19:2F:E5:BC:5C Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37 Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37 Certificate serial: 019AF31CD67E6DE6D8C5E32B7C883BB32575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft Manifest number: 0459 Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: JQLVtXN-TqtLp9hzLXYLt2Yh1zk.roa (hash: f214yyN1FtBYx9omDVPh5FOJpLcqVPrmTXzmLrvFbb4=) 2: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: gjyzuj2Fqn5pvZqMTDa5uQ2ci3TS0o493VYli0kkvg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d6:7e:6d:e6:d8:c5:e3:2b:7c:88:3b:b3:25:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=bda4e0c4105762c6e506070cfb77b8192fe5bc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:62:47:d2:cb:7b:4d:43:e7:22:03:ba:6a: 95:fd:7a:26:49:cc:16:f2:ce:bd:06:82:3f:67:51: 2d:e6:40:c7:f6:d7:19:b5:00:36:9e:e2:e7:4f:4f: f0:0d:9d:c5:8b:37:48:df:6a:3d:0b:65:57:09:2f: e8:44:30:c3:67:74:e3:48:f4:ec:50:c7:f0:63:7a: ca:67:cd:29:ba:5e:32:ee:70:ea:6f:3d:6e:5d:83: 6e:16:63:ab:54:07:06:db:bd:4c:fa:0e:4c:66:3f: 5d:79:13:96:bd:01:55:73:19:36:d8:38:c2:35:ae: de:12:d1:f4:a3:e3:fb:ce:b4:4c:06:02:16:47:51: ee:b2:07:90:6c:be:f2:09:cf:26:d9:36:f9:bb:6f: f0:f8:df:32:cb:eb:e2:97:1b:89:65:65:82:43:a3: d2:3f:1c:96:c2:05:02:12:07:0b:23:61:ea:6a:37: f3:08:a5:24:15:3f:c0:d5:f4:26:ea:81:21:31:58: 22:5f:c4:8b:fd:61:4b:0c:c5:90:ef:d9:98:30:33: 97:39:48:d8:25:1f:75:0f:bc:f3:b5:48:09:d4:e2: 40:66:6b:9e:b9:96:c9:a2:39:bc:eb:7b:ff:e1:d4: 10:5f:a4:d1:59:80:37:78:d2:53:9e:df:22:d9:c2: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A4:E0:C4:10:57:62:C6:E5:06:07:0C:FB:77:B8:19:2F:E5:BC:5C X509v3 Authority Key Identifier: keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5c:93:81:19:a7:e8:81:a1:b5:b6:b4:6e:27:98:ab:6d:82: 1a:89:3d:1c:27:d6:32:8e:06:97:02:5c:c6:a4:da:63:87:d3: 48:cb:c8:3d:10:98:d0:25:ac:d3:7e:77:fc:2c:4e:c3:58:84: 9b:4a:83:b4:79:49:da:74:e1:3f:5f:55:cf:25:b2:ed:1d:14: 0d:d3:bc:be:b8:61:94:e0:1a:20:dc:54:ec:31:9a:47:45:a2: 19:2f:1e:5b:1c:2f:79:3b:25:10:09:47:53:47:34:04:f8:27: 3e:86:08:fb:2f:07:25:f4:90:ed:1b:35:27:27:f3:48:2d:54: e2:46:4d:b3:b6:b8:c5:77:e6:82:ec:dc:9a:4c:99:cb:1a:5a: b5:09:64:14:fc:e2:90:ec:e8:4e:05:af:5c:fd:5d:f8:4f:64: f1:57:43:a1:6f:e9:df:42:3c:5e:0d:e9:1a:1a:60:2b:62:cf: ee:fe:ab:32:d3:b9:2b:b5:5e:5a:0a:75:b5:c5:e6:ba:78:df: cf:06:d7:b1:e2:f8:6a:84:97:47:10:24:19:2f:98:30:c9:f6: f2:3c:e0:7c:4d:ea:f8:07:a7:b9:57:86:05:54:94:7b:eb:e6: 41:a7:88:a3:21:70:12:d0:bc:2c:46:0a:f0:ed:b4:58:fb:8d: 20:96:68:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNZ+bebYxeMrfIg7syV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMWE1MTk3ZDYzMjRlZWVkMjU2YjI2ODYxZTFhMjRhYzg2 MzVkMzcwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD EyhiZGE0ZTBjNDEwNTc2MmM2ZTUwNjA3MGNmYjc3YjgxOTJmZTViYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnBiR9LLe01D5yIDumqV/XomScwW 8s69BoI/Z1Et5kDH9tcZtQA2nuLnT0/wDZ3FizdI32o9C2VXCS/oRDDDZ3TjSPTs UMfwY3rKZ80pul4y7nDqbz1uXYNuFmOrVAcG271M+g5MZj9deROWvQFVcxk22DjC Na7eEtH0o+P7zrRMBgIWR1HusgeQbL7yCc8m2Tb5u2/w+N8yy+vilxuJZWWCQ6PS PxyWwgUCEgcLI2HqajfzCKUkFT/A1fQm6oEhMVgiX8SL/WFLDMWQ79mYMDOXOUjY JR91D7zztUgJ1OJAZmueuZbJojm863v/4dQQX6TRWYA3eNJTnt8i2cL3FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2k4MQQV2LG5QYHDPt3uBkv5bxcMB8GA1UdIwQY MBaAFI8aUZfWMk7u0layaGHhokrIY103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAt YTRkZTlkZmY1ZWQyLzEvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAtYTRkZTlkZmY1ZWQy LzEvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1yTgRmn 6IGhtba0bieYq22CGok9HCfWMo4GlwJcxqTaY4fTSMvIPRCY0CWs0353/CxOw1iE m0qDtHlJ2nThP19VzyWy7R0UDdO8vrhhlOAaINxU7DGaR0WiGS8eWxwveTslEAlH U0c0BPgnPoYI+y8HJfSQ7Rs1JyfzSC1U4kZNs7a4xXfmguzcmkyZyxpatQlkFPzi kOzoTgWvXP1d+E9k8VdDoW/p30I8Xg3pGhpgK2LP7v6rMtO5K7VeWgp1tcXmunjf zwbXseL4aoSXRxAkGS+YMMn28jzgfE3q+AenuVeGBVSUe+vmQaeIoyFwEtC8LEYK 8O20WPuNIJZo3w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:52:44 2025 by rpki-client