This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json) Hash identifier: UE+61xgkQAfasHQdTEBR29LwiEbiOF3WGNgOBHU+Izk= Subject key identifier: F8:9C:A5:3B:AD:F8:2F:6A:E4:45:88:30:8B:A3:46:27:9D:89:00:43 Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4 Certificate serial: 019B2BC20295653C32677471CB1A9C24E2D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft Manifest number: 119C Signing time: Wed 17 Dec 2025 10:01:33 +0000 Manifest this update: Wed 17 Dec 2025 10:01:33 +0000 Manifest next update: Thu 18 Dec 2025 10:01:33 +0000 Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: KQc5kMHWcJh00t6W8ncm8g7o+FsMZzDpNYl5OHfE4Tg=) 2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:02:95:65:3c:32:67:74:71:cb:1a:9c:24:e2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4 Validity Not Before: Dec 17 10:01:33 2025 GMT Not After : Dec 18 10:01:33 2025 GMT Subject: CN=f89ca53badf82f6ae44588308ba346279d890043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:7c:33:db:e6:1e:80:51:10:dd:ae:15:70: c6:72:a1:2c:2f:a7:d0:58:70:38:ac:33:20:6a:65: b5:e4:2e:eb:65:0b:3a:43:d4:fa:2e:40:83:98:b1: 54:d9:92:9f:7d:fa:81:8c:d7:6d:82:f6:e1:82:c9: 2e:5d:4c:54:ac:7f:a9:51:d2:b2:d4:0f:88:54:f1: 2e:4f:f0:67:93:36:9e:77:78:5b:72:f7:54:96:bd: 1e:2b:26:73:2f:0c:62:23:93:50:41:d1:ed:99:5e: 22:4c:42:e1:d7:f9:7a:de:2f:1f:ac:4e:36:1d:c8: b7:1a:e8:4d:d5:70:f1:29:0e:6b:1b:0c:d0:25:91: 3b:63:4b:9e:b0:ea:6c:4b:17:bd:ef:c2:a1:1f:58: 44:b5:f5:90:06:40:6d:aa:ee:eb:9f:a8:ee:f3:18: 17:42:4f:b5:ff:cb:1d:68:ba:ef:3e:dc:5e:7d:14: b0:4a:34:12:aa:1f:3c:d0:89:82:e1:63:b6:af:00: 8b:c1:47:05:73:d0:74:7d:45:56:78:aa:92:84:1f: cd:65:f7:3b:5d:6e:08:8e:cc:24:fa:bd:36:e5:47: b8:3d:d2:c3:7a:2c:f0:d0:b3:fb:26:cf:19:d2:fb: da:a5:6d:be:e5:79:c2:8c:a2:09:d7:78:47:ef:d3: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:A5:3B:AD:F8:2F:6A:E4:45:88:30:8B:A3:46:27:9D:89:00:43 X509v3 Authority Key Identifier: keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:df:17:5f:82:78:83:a5:87:02:47:bb:ac:59:fb:a1:f8: a1:58:48:47:58:e9:10:c8:4c:5b:2a:cc:85:d9:d0:2b:09:06: e6:89:75:8b:90:76:b5:44:1f:a7:7c:04:9f:1e:f5:4d:f7:b9: d4:0c:90:0d:5c:65:de:82:a7:db:17:95:1e:1a:ee:8f:3a:dc: 1a:3d:01:cc:f5:2c:28:0b:35:2d:c9:bd:4f:45:ef:6e:ea:6a: 8d:2a:be:d3:39:58:ec:ef:49:29:4a:d1:3a:47:9b:9f:9d:ee: 03:ef:76:80:2c:67:c6:49:fd:57:64:cf:b9:28:68:68:de:ff: 71:a5:10:36:67:d7:03:fe:57:46:5d:84:12:e3:9e:e0:08:28: bc:40:6a:e3:39:90:5a:47:1b:65:d5:58:60:d5:64:11:26:a8: bb:b6:6f:b8:7e:94:e1:d4:72:72:8e:86:13:3d:7b:fb:9e:50: 98:eb:c3:3a:a4:56:d9:c2:40:9d:5c:22:0a:4d:6f:64:96:77: cf:37:d3:ed:ce:8d:71:b4:d8:b1:cd:ba:aa:ab:48:00:ba:a7: a8:29:da:e2:a1:4a:e8:be:40:0a:2b:09:3b:01:ea:11:32:31: 23:25:a8:c2:5f:d5:2b:70:ad:66:dc:0d:61:9b:10:10:44:98: 4a:c5:19:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwgKVZTwyZ3RxyxqcJOLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5 NGM4YzQwHhcNMjUxMjE3MTAwMTMzWhcNMjUxMjE4MTAwMTMzWjAzMTEwLwYDVQQD EyhmODljYTUzYmFkZjgyZjZhZTQ0NTg4MzA4YmEzNDYyNzlkODkwMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkJ8M9vmHoBREN2uFXDGcqEsL6fQ WHA4rDMgamW15C7rZQs6Q9T6LkCDmLFU2ZKfffqBjNdtgvbhgskuXUxUrH+pUdKy 1A+IVPEuT/Bnkzaed3hbcvdUlr0eKyZzLwxiI5NQQdHtmV4iTELh1/l63i8frE42 Hci3GuhN1XDxKQ5rGwzQJZE7Y0uesOpsSxe978KhH1hEtfWQBkBtqu7rn6ju8xgX Qk+1/8sdaLrvPtxefRSwSjQSqh880ImC4WO2rwCLwUcFc9B0fUVWeKqShB/NZfc7 XW4Ijswk+r025Ue4PdLDeizw0LP7Js8Z0vvapW2+5XnCjKIJ13hH79MDNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPicpTut+C9q5EWIMIujRiediQBDMB8GA1UdIwQY MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaV7fF1+C eIOlhwJHu6xZ+6H4oVhIR1jpEMhMWyrMhdnQKwkG5ol1i5B2tUQfp3wEnx71Tfe5 1AyQDVxl3oKn2xeVHhrujzrcGj0BzPUsKAs1Lcm9T0XvbupqjSq+0zlY7O9JKUrR Okebn53uA+92gCxnxkn9V2TPuShoaN7/caUQNmfXA/5XRl2EEuOe4AgovEBq4zmQ WkcbZdVYYNVkESaou7ZvuH6U4dRyco6GEz17+55QmOvDOqRW2cJAnVwiCk1vZJZ3 zzfT7c6NcbTYsc26qqtIALqnqCna4qFK6L5ACisJOwHqETIxIyWowl/VK3CtZtwN YZsQEESYSsUZHg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:57 2025 by rpki-client