This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json) Hash identifier: cVdv5D4doYktkrwEE1uFYSJ9cmNGnOHVf0FbZqOa7Bo= Subject key identifier: BD:75:AA:9A:7D:F0:1A:B1:4D:62:E8:83:1B:69:89:BE:19:24:4C:DB Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9 Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9 Certificate serial: 019AF31D4A4CB29B571B48CB7540C4AB3A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft Manifest number: 0E49 Signing time: Sat 06 Dec 2025 10:02:54 +0000 Manifest this update: Sat 06 Dec 2025 10:02:54 +0000 Manifest next update: Sun 07 Dec 2025 10:02:54 +0000 Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: c1HrlzTOyCf9gwms+kIUzNoKb+2jc84/0MI5bz5gpEM=) 2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4a:4c:b2:9b:57:1b:48:cb:75:40:c4:ab:3a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9 Validity Not Before: Dec 6 10:02:54 2025 GMT Not After : Dec 7 10:02:54 2025 GMT Subject: CN=bd75aa9a7df01ab14d62e8831b6989be19244cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:e0:1e:7b:37:06:67:05:6b:52:98:04:95: c1:57:81:c0:22:38:af:79:60:c5:59:56:c3:17:06: b7:5d:d2:e0:ec:bc:91:66:79:61:07:e7:45:9c:38: b1:5b:cc:b2:37:a0:0a:1f:41:87:7c:b8:a5:10:ab: 79:c0:8c:0c:aa:5c:9c:d8:ea:43:d5:39:e5:ec:3b: 67:ef:90:34:61:4d:a6:d3:f5:98:64:fe:12:ac:76: 37:81:cf:10:09:ab:20:f4:ea:84:40:cf:b6:a8:e8: e5:14:5a:2c:fe:1a:83:06:0f:a6:96:e9:c5:cc:10: e2:69:39:c7:60:10:0e:b6:2b:1d:a0:98:29:c0:54: 85:81:0d:56:74:3a:28:57:a9:b2:e0:10:07:6f:43: 18:5f:4e:03:1d:19:cc:a5:24:94:29:7e:25:88:11: 9b:63:20:ac:f9:a6:ad:88:df:14:de:8e:9d:2f:52: 90:0c:08:7d:3f:74:8b:1d:a6:47:85:cf:33:52:2e: a1:86:f4:95:18:b6:60:15:c9:f8:ff:d1:7c:4a:2a: dc:18:26:9b:7c:37:80:e1:8c:92:80:82:a1:84:f3: 55:c7:7f:12:1b:3e:e3:f2:ab:f2:4e:8f:1d:ec:9d: f0:b1:42:a1:20:1c:6b:f9:d8:58:07:cd:77:d9:99: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:75:AA:9A:7D:F0:1A:B1:4D:62:E8:83:1B:69:89:BE:19:24:4C:DB X509v3 Authority Key Identifier: keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:65:7f:24:dd:3d:d8:3b:1d:76:8d:67:2f:af:92:4a:6e:90: 6e:e8:5d:cd:0d:cb:5a:b3:5f:c0:d7:ab:3f:9d:7e:00:a3:4f: 8d:54:90:f0:ee:ae:3f:f9:1c:cc:e1:8e:28:33:0d:5d:38:6e: dd:21:24:34:5d:30:0d:c9:f4:a0:16:32:7e:00:67:c1:1e:a7: 6b:a7:86:2c:39:5b:f2:35:b7:e4:ce:7a:02:39:2c:44:3b:cc: 1c:48:bc:e7:30:1a:9b:0f:38:f3:88:68:fd:59:07:3e:32:ec: 4d:e0:97:f5:3b:6b:f9:fb:45:bc:4f:b2:c2:74:57:cb:0b:73: ee:31:b7:a2:10:85:d8:bf:14:95:c3:12:8e:7c:9d:62:4b:4c: 31:4c:af:63:0a:bf:00:df:eb:e6:08:05:43:87:bc:93:82:63: 22:88:5e:67:cc:ab:3d:cb:0f:bc:cc:bc:f4:3b:94:0e:a8:0b: 8b:a9:e3:de:1e:e0:7d:a2:4b:85:7a:9c:85:6b:dd:34:bf:b4: 4f:4d:41:bb:8c:17:d8:49:a3:11:c9:5b:e3:9e:83:0b:b9:64: 58:24:e1:1b:0c:72:b7:e3:a5:35:be:51:36:5a:fc:3c:6c:c5: 6b:93:a0:e5:a1:94:8a:d5:68:d7:ef:7f:1b:c7:3d:55:8c:32: 3a:dc:e0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUpMsptXG0jLdUDEqzoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTJkYmZjNDY2YmQzNDgwOTBlZGMxYWUzMjkyNTIyZTlk NzNiZDkwHhcNMjUxMjA2MTAwMjU0WhcNMjUxMjA3MTAwMjU0WjAzMTEwLwYDVQQD EyhiZDc1YWE5YTdkZjAxYWIxNGQ2MmU4ODMxYjY5ODliZTE5MjQ0Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV3gHns3BmcFa1KYBJXBV4HAIjiv eWDFWVbDFwa3XdLg7LyRZnlhB+dFnDixW8yyN6AKH0GHfLilEKt5wIwMqlyc2OpD 1Tnl7Dtn75A0YU2m0/WYZP4SrHY3gc8QCasg9OqEQM+2qOjlFFos/hqDBg+mlunF zBDiaTnHYBAOtisdoJgpwFSFgQ1WdDooV6my4BAHb0MYX04DHRnMpSSUKX4liBGb YyCs+aatiN8U3o6dL1KQDAh9P3SLHaZHhc8zUi6hhvSVGLZgFcn4/9F8SircGCab fDeA4YySgIKhhPNVx38SGz7j8qvyTo8d7J3wsUKhIBxr+dhYB8132ZnvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL11qpp98BqxTWLogxtpib4ZJEzbMB8GA1UdIwQY MBaAFI8S2/xGa9NICQ7cGuMpJSLp1zvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgt NGIwOWJkOGVkMDRhLzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zOWI1MDktYTY3Yy00NjNiLTk2ODgtNGIwOWJkOGVkMDRh LzEvanhMYl9FWnIwMGdKRHR3YTR5a2xJdW5YTzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmV/JN09 2Dsddo1nL6+SSm6QbuhdzQ3LWrNfwNerP51+AKNPjVSQ8O6uP/kczOGOKDMNXThu 3SEkNF0wDcn0oBYyfgBnwR6na6eGLDlb8jW35M56AjksRDvMHEi85zAamw8484ho /VkHPjLsTeCX9Ttr+ftFvE+ywnRXywtz7jG3ohCF2L8UlcMSjnydYktMMUyvYwq/ AN/r5ggFQ4e8k4JjIoheZ8yrPcsPvMy89DuUDqgLi6nj3h7gfaJLhXqchWvdNL+0 T01Bu4wX2EmjEclb456DC7lkWCThGwxyt+OlNb5RNlr8PGzFa5Og5aGUitVo1+9/ G8c9VYwyOtzg7g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:24 2025 by rpki-client