This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json) Hash identifier: 6vN5QsNa57HRhAfaJr+l4E7xlF5GgtLeTxy9SeshaVo= Subject key identifier: A3:EB:D6:AA:90:D7:F4:6A:B8:B5:67:5B:DA:48:1E:D3:23:85:1C:36 Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Certificate serial: 019AF23F815986A473EC06EF7E81D1A5FFFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft Manifest number: 0E09 Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: bjN3H3sUBFSfLWI7K4pnGILsjfkMM36YShxn45jLDRI=) 2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:81:59:86:a4:73:ec:06:ef:7e:81:d1:a5:ff:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=a3ebd6aa90d7f46ab8b5675bda481ed323851c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ef:e8:db:1a:55:7f:47:90:ae:45:c2:ad:20: de:bc:05:35:f6:e8:fc:8b:d7:b4:df:78:54:0d:ef: ea:4f:ee:58:8e:f1:62:00:5c:73:86:6c:29:06:58: 43:50:75:63:4d:56:f3:4c:8f:db:4a:2c:de:b9:d4: 7d:62:64:c4:4b:4f:64:b7:f6:66:50:12:ee:e1:36: b5:1d:99:0e:a5:7c:b8:04:1c:61:c7:c7:88:fa:f1: 7f:4f:6b:43:94:f1:dd:1e:eb:83:11:66:8a:15:98: a1:d6:dc:a7:84:89:69:6e:4d:83:45:a2:66:fc:24: a5:2a:0c:f4:cf:26:da:ea:a9:3e:2c:b2:da:9b:c1: a7:8c:ae:bd:15:2d:64:26:63:d1:14:d2:8c:3c:bf: c6:bd:9a:0c:29:aa:77:d0:7d:4f:84:49:6c:57:0d: 34:29:5f:20:ce:88:8f:31:24:0b:a1:76:ef:d5:26: 5a:d6:c3:47:60:d5:e6:0e:c0:20:1b:99:ea:10:09: 92:3c:6c:a2:3f:f1:92:3b:65:e8:4c:1d:6e:a3:dc: 4f:0b:5f:bf:fe:51:e5:cf:4c:93:39:b0:ed:1c:c1: 0f:1b:72:92:32:25:0c:db:4a:d1:6b:7d:b0:aa:30: 3b:c3:eb:ed:32:ba:61:29:92:a3:ad:94:01:68:8c: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:D6:AA:90:D7:F4:6A:B8:B5:67:5B:DA:48:1E:D3:23:85:1C:36 X509v3 Authority Key Identifier: keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:bb:d8:05:31:9d:b8:c0:07:f0:9c:4c:0e:54:c3:14:31:d5: 52:af:5f:e4:12:f8:1e:7b:2e:7d:27:af:a8:17:96:97:91:3b: ba:76:8b:62:3a:56:91:43:2d:38:27:af:ed:42:ce:41:34:40: 27:4f:1f:7a:b9:a8:b2:5a:3e:14:80:4b:ec:bd:bd:92:4f:4b: 31:06:fd:21:20:51:1c:44:ed:e1:32:e9:6c:ef:86:28:ac:f1: 19:d4:05:ef:74:46:30:7a:4b:c8:46:0f:76:5e:f6:f0:54:f6: 09:9a:09:89:1d:c5:bb:ee:70:23:2c:d6:13:1e:67:54:bb:97: 6a:74:81:5e:34:94:6e:97:48:3a:58:b8:f9:a6:24:f2:58:81: 10:61:63:3e:0e:2c:96:80:35:aa:27:58:09:26:3d:57:0d:bd: 4f:4d:4f:65:5b:6b:fb:7b:7a:25:68:20:fb:79:7f:27:33:f8: 6e:97:ce:38:75:f1:1f:5c:54:a3:68:a3:32:36:e8:74:72:62: 39:96:a9:29:fd:5f:b3:75:4f:dc:92:63:cf:25:c6:8a:6c:ec: 77:13:f6:2c:87:62:47:e1:7b:e8:0e:e0:c1:f5:84:cc:87:dd: 80:fc:98:65:1a:af:b3:45:fb:d8:2d:c3:56:73:04:2e:80:ed: 0f:cf:06:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4FZhqRz7AbvfoHRpf//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy NzFmMjQwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhhM2ViZDZhYTkwZDdmNDZhYjhiNTY3NWJkYTQ4MWVkMzIzODUxYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+/o2xpVf0eQrkXCrSDevAU19uj8 i9e033hUDe/qT+5YjvFiAFxzhmwpBlhDUHVjTVbzTI/bSizeudR9YmTES09kt/Zm UBLu4Ta1HZkOpXy4BBxhx8eI+vF/T2tDlPHdHuuDEWaKFZih1tynhIlpbk2DRaJm /CSlKgz0zyba6qk+LLLam8GnjK69FS1kJmPRFNKMPL/GvZoMKap30H1PhElsVw00 KV8gzoiPMSQLoXbv1SZa1sNHYNXmDsAgG5nqEAmSPGyiP/GSO2XoTB1uo9xPC1+/ /lHlz0yTObDtHMEPG3KSMiUM20rRa32wqjA7w+vtMrphKZKjrZQBaIw4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPr1qqQ1/RquLVnW9pIHtMjhRw2MB8GA1UdIwQY MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt NjAyMGU4YTU2NTU2LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2 LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLvYBTGd uMAH8JxMDlTDFDHVUq9f5BL4HnsufSevqBeWl5E7unaLYjpWkUMtOCev7ULOQTRA J08fermoslo+FIBL7L29kk9LMQb9ISBRHETt4TLpbO+GKKzxGdQF73RGMHpLyEYP dl728FT2CZoJiR3Fu+5wIyzWEx5nVLuXanSBXjSUbpdIOli4+aYk8liBEGFjPg4s loA1qidYCSY9Vw29T01PZVtr+3t6JWgg+3l/JzP4bpfOOHXxH1xUo2ijMjbodHJi OZapKf1fs3VP3JJjzyXGimzsdxP2LIdiR+F76A7gwfWEzIfdgPyYZRqvs0X72C3D VnMELoDtD88GyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:34 2025 by rpki-client