This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json) Hash identifier: bmoe959pngJWHzBB38SuIL2SY03a/0F8LniJIbIFLTI= Subject key identifier: D6:BA:6F:CF:64:EA:7B:3E:20:50:F1:97:FC:72:FD:98:A0:C9:05:9B Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d Certificate serial: 019AF19BA3A9972A5C260E9CFDF935884721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft Manifest number: 09A1 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: 9fBP4Rj7uU5TQZxx6yQX+w1IMD8AiCeLTB5xUPZ+7RM=) 2: ZFYqKvxguHm4smQvy9awnquW2qU.roa (hash: 8vWdx+ga/HPoDaDg67DCWpBBfssC0K3uCo1oOh4juXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a3:a9:97:2a:5c:26:0e:9c:fd:f9:35:88:47:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=d6ba6fcf64ea7b3e2050f197fc72fd98a0c9059b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:0e:ab:bf:1f:60:b5:0d:a7:c7:47:19:0f: 4a:d4:09:f6:a4:9a:05:46:e5:05:5d:5a:0e:1e:1e: cb:1e:56:ef:f8:43:2c:b0:f4:26:96:15:92:ac:9a: 2f:a6:82:a4:12:f7:b1:b2:62:67:f8:41:4b:cb:34: ed:de:8a:00:d3:d2:26:11:1b:43:85:5d:d2:f5:4b: 98:46:b3:87:a7:6e:ae:f5:56:d8:65:d8:fa:4d:44: 3e:7f:c4:07:db:11:8d:7f:80:45:df:9c:63:e6:49: 19:d8:7d:f5:b8:6d:8d:45:6f:35:21:bc:97:66:91: 56:f3:5f:78:e1:99:16:0b:ac:60:f0:dc:4f:a6:4d: e1:63:bb:b1:74:1e:7c:6a:58:c9:47:cf:59:0a:51: fa:aa:1c:84:b8:9b:64:b5:c2:fa:bf:c6:03:7a:7d: 26:7b:6c:3d:6c:01:0d:db:2a:be:52:5a:a9:71:e7: e2:9c:88:7c:79:e4:be:f4:bf:04:ec:73:4e:84:90: 60:e4:f4:4c:47:f8:a7:78:44:49:d0:a0:9e:9f:92: 3d:c1:73:d6:f5:c3:27:e2:22:08:56:67:fb:9e:a9: ad:9c:31:40:a3:f3:2d:01:4b:a8:b3:bd:a5:38:f7: aa:33:d4:6a:5b:bf:d4:98:e5:71:16:1d:95:15:ac: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BA:6F:CF:64:EA:7B:3E:20:50:F1:97:FC:72:FD:98:A0:C9:05:9B X509v3 Authority Key Identifier: keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8a:0a:db:e8:35:de:93:f4:53:9a:3b:56:18:90:ef:e1:9c: 7b:92:2f:44:9f:dd:b1:d9:19:9e:73:9a:12:d6:90:1c:9f:e1: b3:59:02:80:77:b5:c1:e8:8f:a8:2d:12:6f:7b:6f:b1:be:63: 40:e0:da:3f:a1:66:65:27:44:08:19:18:5a:5f:1e:70:c9:7e: 25:33:5f:48:f5:10:74:fd:e7:00:0d:40:0b:e4:c1:ff:b6:a5: 65:68:79:ba:68:bf:57:17:22:b4:17:ea:e1:ad:e3:40:39:12: e8:10:fd:80:56:58:df:c2:f4:1a:fa:bc:09:53:d2:c7:1b:10: a0:25:a6:0d:de:65:e8:c5:86:d4:2c:1f:a3:6a:7d:b9:96:e2: b6:0c:69:55:0d:50:6a:c2:f6:13:8e:3b:44:34:fa:d7:ed:67: 06:27:3d:9f:6f:d2:6f:2e:6e:c5:db:1b:16:4c:6d:c2:62:69: 43:3d:f7:83:04:50:8b:8c:8a:e7:e7:41:e4:03:4f:cf:87:a5: 6a:ae:e6:84:e3:fe:1e:5d:35:6d:71:bd:6f:fc:f2:ee:cc:6d: 61:af:e3:c2:2c:0f:1c:51:63:6b:d7:4c:35:15:45:79:5e:af: 05:70:ea:a4:97:65:bf:24:f9:37:22:2b:86:3a:31:8b:2c:20: d1:92:e2:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6OplypcJg6c/fk1iEchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MTlkNDEwMTA3Njc1ZWVkOGI2MmNjYWQ0MzUzMzZmODE5 ZTBhNmQwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD EyhkNmJhNmZjZjY0ZWE3YjNlMjA1MGYxOTdmYzcyZmQ5OGEwYzkwNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZwOq78fYLUNp8dHGQ9K1An2pJoF RuUFXVoOHh7LHlbv+EMssPQmlhWSrJovpoKkEvexsmJn+EFLyzTt3ooA09ImERtD hV3S9UuYRrOHp26u9VbYZdj6TUQ+f8QH2xGNf4BF35xj5kkZ2H31uG2NRW81IbyX ZpFW81944ZkWC6xg8NxPpk3hY7uxdB58aljJR89ZClH6qhyEuJtktcL6v8YDen0m e2w9bAEN2yq+UlqpcefinIh8eeS+9L8E7HNOhJBg5PRMR/ineERJ0KCen5I9wXPW 9cMn4iIIVmf7nqmtnDFAo/MtAUuos72lOPeqM9RqW7/UmOVxFh2VFaxAdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa6b89k6ns+IFDxl/xy/ZigyQWbMB8GA1UdIwQY MBaAFCcZ1BAQdnXu2LYsytQ1M2+BngptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEt NzcxODUxMmYwZGVmLzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni83MTVlZjItMDZlOS00NTVkLThiNzEtNzcxODUxMmYwZGVm LzEvSnhuVUVCQjJkZTdZdGl6SzFEVXpiNEdlQ20wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYoK2+g1 3pP0U5o7VhiQ7+Gce5IvRJ/dsdkZnnOaEtaQHJ/hs1kCgHe1weiPqC0Sb3tvsb5j QODaP6FmZSdECBkYWl8ecMl+JTNfSPUQdP3nAA1AC+TB/7alZWh5umi/VxcitBfq 4a3jQDkS6BD9gFZY38L0Gvq8CVPSxxsQoCWmDd5l6MWG1Cwfo2p9uZbitgxpVQ1Q asL2E447RDT61+1nBic9n2/Sby5uxdsbFkxtwmJpQz33gwRQi4yK5+dB5ANPz4el aq7mhOP+Hl01bXG9b/zy7sxtYa/jwiwPHFFja9dMNRVFeV6vBXDqpJdlvyT5NyIr hjoxiywg0ZLiDg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:47:05 2025 by rpki-client