This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json) Hash identifier: YWPeeG/07DA0BfW01t3CbemCvPt1EH5EiTx3CX23ZX4= Subject key identifier: 25:71:FF:46:FD:77:4C:15:BC:98:37:F9:94:56:27:32:67:1B:CB:D2 Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4 Certificate serial: 019AF1D197B29FDC69B77FDFD494363F1AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft Manifest number: 117E Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: pnNSj8YBXCqax0cSdpnS+SKvscn1xMeSY11Vu2qg9yc=) 2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:97:b2:9f:dc:69:b7:7f:df:d4:94:36:3f:1a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=2571ff46fd774c15bc9837f994562732671bcbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:73:50:6b:be:68:d2:16:bd:71:72:25:c7: ef:f6:34:1f:45:a2:ed:e7:b6:49:9a:60:88:83:86: 67:0f:dd:4b:96:cb:3f:51:ad:1b:c1:74:fc:a9:6e: 11:55:e1:16:29:8c:31:fd:af:20:1b:4f:6f:14:e4: 7b:50:35:7d:c2:7d:48:7b:f9:2d:2c:f1:df:a6:17: 56:3e:aa:b2:89:98:33:3a:b3:35:12:9f:6f:5b:db: a1:bb:50:57:0d:83:b3:71:0c:a6:23:78:9d:55:a7: ec:18:2c:c0:1f:20:87:33:74:38:cc:7f:43:f1:10: c6:8b:77:7b:73:36:ba:f0:85:f2:e0:9f:3a:97:8e: 15:03:ca:3a:d3:79:aa:80:82:f2:b0:2f:d3:3a:aa: 49:6a:56:e5:48:16:c0:a0:d0:eb:2a:3f:b9:fd:a2: 01:04:f4:23:be:27:ab:95:57:4d:0f:eb:bb:5c:62: e6:f2:4d:1d:90:45:2c:7c:e9:85:72:c9:29:3e:d2: e2:21:7e:4f:50:41:60:18:49:17:27:62:48:22:72: 3e:78:c6:e9:1a:fb:2a:f8:f0:04:73:cc:7c:f8:0b: f8:18:e3:53:1f:dd:15:1d:98:2e:c9:24:8b:33:6b: 3c:db:ec:f9:77:95:b4:94:f7:c3:27:3b:07:8e:f4: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:71:FF:46:FD:77:4C:15:BC:98:37:F9:94:56:27:32:67:1B:CB:D2 X509v3 Authority Key Identifier: keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e6:7b:4e:20:56:2c:2e:a8:2c:e1:c2:3d:f3:3f:9e:a8:0c: 51:21:46:ef:a4:a3:47:14:19:09:15:f7:15:51:4a:b3:33:bd: 40:79:94:57:fe:b9:c0:80:d9:99:cb:46:fc:4f:1e:fc:55:bd: e0:18:b4:19:53:64:ee:40:53:1e:f8:a7:44:51:cb:6e:8c:0b: 62:85:76:93:d5:6d:23:2b:b9:bb:75:2a:89:0b:a9:59:32:c0: 60:3d:cb:b6:2a:d5:eb:3c:6c:02:d6:90:9d:58:7c:87:54:45: cc:78:b3:3e:37:0d:f1:51:9a:e0:d7:06:d7:0e:16:bf:20:f3: 08:1e:3d:8a:44:2a:ee:04:3f:10:bc:3d:fe:ae:42:85:93:d8: 02:37:d5:61:01:47:f9:2b:3b:03:7b:43:dd:ef:35:ce:47:fd: f7:25:89:2f:e1:25:97:c4:41:48:75:6e:19:bf:84:ec:de:37: f7:96:6e:c9:2c:49:9d:18:5b:9a:98:db:5d:17:dc:e0:aa:62: 5a:25:99:a0:09:78:38:b4:2c:69:9d:08:e6:1c:58:15:dd:1b: 5b:a8:6e:b9:24:0c:a6:03:0a:da:87:be:f1:6a:b7:1b:13:ad: f8:99:45:62:44:8f:3d:48:ff:35:61:c6:96:83:9d:78:64:12: 92:c9:62:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zeyn9xpt3/f1JQ2PxqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5 NGM4YzQwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD EygyNTcxZmY0NmZkNzc0YzE1YmM5ODM3Zjk5NDU2MjczMjY3MWJjYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3VzUGu+aNIWvXFyJcfv9jQfRaLt 57ZJmmCIg4ZnD91Llss/Ua0bwXT8qW4RVeEWKYwx/a8gG09vFOR7UDV9wn1Ie/kt LPHfphdWPqqyiZgzOrM1Ep9vW9uhu1BXDYOzcQymI3idVafsGCzAHyCHM3Q4zH9D 8RDGi3d7cza68IXy4J86l44VA8o603mqgILysC/TOqpJalblSBbAoNDrKj+5/aIB BPQjvierlVdND+u7XGLm8k0dkEUsfOmFcskpPtLiIX5PUEFgGEkXJ2JIInI+eMbp Gvsq+PAEc8x8+Av4GONTH90VHZguySSLM2s82+z5d5W0lPfDJzsHjvQVgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVx/0b9d0wVvJg3+ZRWJzJnG8vSMB8GA1UdIwQY MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+Z7TiBW LC6oLOHCPfM/nqgMUSFG76SjRxQZCRX3FVFKszO9QHmUV/65wIDZmctG/E8e/FW9 4Bi0GVNk7kBTHvinRFHLbowLYoV2k9VtIyu5u3UqiQupWTLAYD3LtirV6zxsAtaQ nVh8h1RFzHizPjcN8VGa4NcG1w4WvyDzCB49ikQq7gQ/ELw9/q5ChZPYAjfVYQFH +Ss7A3tD3e81zkf99yWJL+Ell8RBSHVuGb+E7N4395ZuySxJnRhbmpjbXRfc4Kpi WiWZoAl4OLQsaZ0I5hxYFd0bW6huuSQMpgMK2oe+8Wq3GxOt+JlFYkSPPUj/NWHG loOdeGQSkslixw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:40 2025 by rpki-client