This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json) Hash identifier: PPEYyMsATiFuUIK3kdWh/mxjxAU+Nl0scxZ7Dh8xPfo= Subject key identifier: B9:DE:65:D4:23:F0:63:E8:E4:05:03:EE:23:AB:D8:45:DA:B2:A7:F6 Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab Certificate serial: 019AF276C175D676E6D7D99F8E156ECAB693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft Manifest number: 1439 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: 7JzTxkS8aVAFs0NI/SkkpGj7bm/xMhP1EktMuwCq35E=) 2: JwgnOTRAlCXt1K7at1wAyMz7bd8.roa (hash: lBC8tzOboiP4jQAHCC/omLvaunl3BvP+L/B2M2ocu+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c1:75:d6:76:e6:d7:d9:9f:8e:15:6e:ca:b6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=b9de65d423f063e8e40503ee23abd845dab2a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:26:f0:02:b6:8b:e6:01:af:c4:6a:90:1d: f4:3b:6d:a1:6f:f2:77:c5:b1:b0:01:38:6c:49:e2: 6d:61:88:b0:6c:48:c1:23:01:41:bc:a1:ee:63:be: e1:b9:fc:87:e6:df:76:ad:34:e9:3b:11:56:8c:dc: 12:7b:ae:31:95:8f:fe:c4:eb:4b:2a:7e:94:67:02: 84:86:29:66:81:cf:23:de:bc:ac:fb:3f:2c:f6:68: 3c:d6:0e:a0:e4:44:54:ac:e9:0e:9c:db:11:40:e0: c3:1e:73:56:e8:28:fb:2c:0c:bd:70:32:12:22:dd: 35:78:5c:96:97:34:30:92:65:f8:7c:c1:de:4e:9c: c8:8f:37:d4:13:c8:e3:03:42:46:21:16:37:e2:9a: c7:69:ea:58:d7:88:87:90:d2:21:dd:7e:e0:70:97: f1:8c:36:49:50:24:cf:0e:57:8d:28:ff:ed:8d:c6: 4e:32:46:1e:f7:b3:f7:d8:25:63:67:39:a4:4d:72: 2a:b8:42:4b:8a:d7:17:7f:90:82:70:e1:16:69:47: c3:f4:a0:26:84:8c:35:60:dd:76:0d:04:09:3f:ac: 43:b5:60:49:73:4c:38:fa:26:02:72:55:2e:bf:4e: 29:85:28:f5:59:18:c0:df:80:b3:71:ee:41:44:97: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DE:65:D4:23:F0:63:E8:E4:05:03:EE:23:AB:D8:45:DA:B2:A7:F6 X509v3 Authority Key Identifier: keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b5:c0:85:13:ab:bf:15:af:ae:32:03:29:60:5c:b5:0c:b3: 12:84:f5:9f:64:44:37:25:75:73:f0:3f:0c:13:d3:70:6b:d3: 89:fc:39:11:9f:e7:83:b7:54:2d:f4:9b:e8:9e:c4:e2:20:9a: 5e:09:22:60:6f:7a:3b:01:49:22:e6:7f:76:87:94:d8:9c:d8: 46:e4:9a:28:13:e7:50:24:cb:3c:b3:fa:c2:24:cb:c0:85:52: c8:9f:61:eb:0a:12:34:f7:d0:70:dd:d7:70:91:4e:94:07:46: 1e:a9:0b:ab:15:08:64:84:6a:f6:96:f4:8d:60:e2:0e:9b:f0: 45:4f:50:bb:37:84:75:2c:a8:7d:01:e7:0e:10:38:ad:b0:a3: 8a:6c:1b:2a:e1:90:ae:64:97:d3:0e:85:d2:da:f9:ae:b4:0a: d3:2f:76:c1:4c:7c:86:ce:89:8c:28:1a:b3:36:d9:20:c4:94: 59:ed:52:be:7b:80:47:a3:e5:1e:04:00:0a:de:d8:a6:48:7d: 50:d3:69:8b:b2:41:6c:25:e9:9b:af:2c:ed:19:58:b9:0e:64: f2:b0:2d:f9:c8:7d:02:d7:fb:7d:9c:1e:88:89:5a:0e:81:d3: ad:a9:f8:9e:b1:4e:0d:7f:49:3c:41:2b:5c:0b:b5:3c:ce:77: 9b:41:83:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsF11nbm19mfjhVuyraTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll OTVhYWIwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EyhiOWRlNjVkNDIzZjA2M2U4ZTQwNTAzZWUyM2FiZDg0NWRhYjJhN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMIm8AK2i+YBr8RqkB30O22hb/J3 xbGwAThsSeJtYYiwbEjBIwFBvKHuY77hufyH5t92rTTpOxFWjNwSe64xlY/+xOtL Kn6UZwKEhilmgc8j3rys+z8s9mg81g6g5ERUrOkOnNsRQODDHnNW6Cj7LAy9cDIS It01eFyWlzQwkmX4fMHeTpzIjzfUE8jjA0JGIRY34prHaepY14iHkNIh3X7gcJfx jDZJUCTPDleNKP/tjcZOMkYe97P32CVjZzmkTXIquEJLitcXf5CCcOEWaUfD9KAm hIw1YN12DQQJP6xDtWBJc0w4+iYCclUuv04phSj1WRjA34Czce5BRJfs1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLneZdQj8GPo5AUD7iOr2EXasqf2MB8GA1UdIwQY MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrXAhROr vxWvrjIDKWBctQyzEoT1n2RENyV1c/A/DBPTcGvTifw5EZ/ng7dULfSb6J7E4iCa XgkiYG96OwFJIuZ/doeU2JzYRuSaKBPnUCTLPLP6wiTLwIVSyJ9h6woSNPfQcN3X cJFOlAdGHqkLqxUIZIRq9pb0jWDiDpvwRU9QuzeEdSyofQHnDhA4rbCjimwbKuGQ rmSX0w6F0tr5rrQK0y92wUx8hs6JjCgaszbZIMSUWe1SvnuAR6PlHgQACt7Ypkh9 UNNpi7JBbCXpm68s7RlYuQ5k8rAt+ch9Atf7fZweiIlaDoHTran4nrFODX9JPEEr XAu1PM53m0GDdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:33 2025 by rpki-client