This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json) Hash identifier: BttH4u33Gn9Yrhh+HhIzCbNmSAdFCxLZAMxdkqLatuU= Subject key identifier: 16:AE:F5:92:2A:4D:86:2D:64:84:8F:B6:2F:F0:13:30:0C:69:2B:DE Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad Certificate serial: 019B3155BA586854A8699FA41C34C224B468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 12:01:00 +0000 Manifest this update: Thu 18 Dec 2025 12:01:00 +0000 Manifest next update: Fri 19 Dec 2025 12:01:00 +0000 Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: yF/StTpvG928zkx/p6mfoRTJOALTwcB/34oYogUA/So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:ba:58:68:54:a8:69:9f:a4:1c:34:c2:24:b4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad Validity Not Before: Dec 18 12:01:00 2025 GMT Not After : Dec 19 12:01:00 2025 GMT Subject: CN=16aef5922a4d862d64848fb62ff013300c692bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:d6:33:8c:fc:8f:4b:43:3b:f5:1e:c5:04: 43:f5:4f:08:73:68:1d:8a:e7:e8:f6:14:ae:3d:41: 48:7c:02:d7:84:6c:ca:28:1f:24:35:35:c7:5b:b1: 0e:a2:25:74:7e:2b:01:8d:1c:6e:cf:cb:02:11:19: f2:3b:5b:2a:ee:5a:ad:d0:5a:7e:2e:2e:36:ad:59: d0:a7:eb:5f:05:00:96:c5:74:fb:d0:f9:e8:c9:44: 32:6b:ea:f4:01:33:81:dd:06:36:75:ca:b2:52:d2: 2e:ab:97:f1:22:67:5e:db:4b:2b:7e:13:e8:65:c1: 40:ae:c6:8d:79:70:88:5a:c5:c1:49:e2:9d:1b:e1: 6c:4f:35:90:65:58:a0:17:29:9f:df:b5:bf:52:2b: ac:db:a5:60:22:01:7d:eb:60:9c:d2:8c:16:1c:60: fe:23:6f:51:f7:44:9d:3e:45:33:7a:35:28:eb:38: 19:7d:c0:70:24:04:f1:78:da:15:65:14:93:97:70: 94:03:eb:c8:35:78:c3:a9:25:f5:4d:ff:18:ca:88: b3:18:47:9f:f5:4a:63:8a:0b:3b:a7:43:53:b1:3d: 3b:eb:f8:a2:95:0d:1a:77:97:5b:26:4f:1f:25:9c: 08:55:13:8b:ee:d4:51:66:36:c8:8e:36:68:a4:ee: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AE:F5:92:2A:4D:86:2D:64:84:8F:B6:2F:F0:13:30:0C:69:2B:DE X509v3 Authority Key Identifier: keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0a:67:cc:c9:1b:0e:45:29:1d:d2:bf:3a:3c:c1:6b:cb:24: 77:c9:17:87:1c:85:73:17:7b:e7:20:49:b3:94:7d:6a:f6:73: 9b:88:79:da:69:29:ba:f5:74:7e:fe:76:c5:12:98:4c:89:b5: 7e:fc:bd:81:89:0c:af:d3:9c:0b:32:1e:b6:34:1f:91:e9:be: 5a:45:97:7e:15:9f:62:da:77:17:03:88:77:a0:35:77:9b:76: d4:24:90:25:7b:b3:35:50:0c:74:95:5f:a1:f9:69:cd:06:03: 50:c4:a5:dd:05:01:b4:6c:dc:a4:78:b6:50:ed:a5:ae:d0:bb: 8a:b2:63:e3:45:3f:81:6c:f4:6d:b2:b2:95:f8:ab:3f:db:72: 5c:03:58:51:9f:9e:bf:a8:68:c2:a3:5a:03:e8:be:76:0a:a3: 47:4e:71:e7:d1:a9:94:af:f1:ce:18:06:3d:47:6b:1e:27:04: fa:49:2b:54:ef:9a:c4:b2:85:a7:b1:40:16:a4:08:ad:90:ad: 62:97:9e:32:03:84:64:c1:8a:74:d6:cd:b7:dd:a1:c2:60:d6: 9e:67:42:57:af:f4:39:91:4b:cd:c6:76:da:01:f3:f9:79:53: bb:d0:cc:59:25:55:d2:33:25:a2:40:5f:a1:07:fd:1b:2d:87: e1:28:be:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVbpYaFSoaZ+kHDTCJLRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMTJiMjY5ZWI3MDNhYmMxMjJkNDc4NTEzYjA4MTcxZDRj OTZkYWQwHhcNMjUxMjE4MTIwMTAwWhcNMjUxMjE5MTIwMTAwWjAzMTEwLwYDVQQD EygxNmFlZjU5MjJhNGQ4NjJkNjQ4NDhmYjYyZmYwMTMzMDBjNjkyYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+vWM4z8j0tDO/UexQRD9U8Ic2gd iufo9hSuPUFIfALXhGzKKB8kNTXHW7EOoiV0fisBjRxuz8sCERnyO1sq7lqt0Fp+ Li42rVnQp+tfBQCWxXT70PnoyUQya+r0ATOB3QY2dcqyUtIuq5fxImde20srfhPo ZcFArsaNeXCIWsXBSeKdG+FsTzWQZVigFymf37W/Uius26VgIgF962Cc0owWHGD+ I29R90SdPkUzejUo6zgZfcBwJATxeNoVZRSTl3CUA+vINXjDqSX1Tf8YyoizGEef 9Upjigs7p0NTsT076/iilQ0ad5dbJk8fJZwIVROL7tRRZjbIjjZopO6btQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBau9ZIqTYYtZISPti/wEzAMaSveMB8GA1UdIwQY MBaAFI8SsmnrcDq8Ei1HhROwgXHUyW2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMt NmVmZjE4YTJlYTQ0LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMtNmVmZjE4YTJlYTQ0 LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArApnzMkb DkUpHdK/OjzBa8skd8kXhxyFcxd75yBJs5R9avZzm4h52mkpuvV0fv52xRKYTIm1 fvy9gYkMr9OcCzIetjQfkem+WkWXfhWfYtp3FwOId6A1d5t21CSQJXuzNVAMdJVf oflpzQYDUMSl3QUBtGzcpHi2UO2lrtC7irJj40U/gWz0bbKylfirP9tyXANYUZ+e v6howqNaA+i+dgqjR05x59GplK/xzhgGPUdrHicE+kkrVO+axLKFp7FAFqQIrZCt YpeeMgOEZMGKdNbNt92hwmDWnmdCV6/0OZFLzcZ22gHz+XlTu9DMWSVV0jMlokBf oQf9Gy2H4Si+ZA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:30:50 2025 by rpki-client