This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json) Hash identifier: SzirXR2PoJkGxG2GsD46VbxYzrDRxavzvUe7I2CGpaA= Subject key identifier: 5E:8C:7B:9D:07:63:32:BB:B1:A2:05:88:14:45:73:73:4C:46:D5:3E Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Certificate serial: 019B2A77E8C877067A0F1F77BBF5536FF48D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft Manifest number: 1554 Signing time: Wed 17 Dec 2025 04:00:59 +0000 Manifest this update: Wed 17 Dec 2025 04:00:59 +0000 Manifest next update: Thu 18 Dec 2025 04:00:59 +0000 Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=) 2: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (hash: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=) 3: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: 8AdFMcGBBfS3/mLmiaSUyEtNzOaELtHoiTV2R3s3FAs=) 4: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:e8:c8:77:06:7a:0f:1f:77:bb:f5:53:6f:f4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Validity Not Before: Dec 17 04:00:59 2025 GMT Not After : Dec 18 04:00:59 2025 GMT Subject: CN=5e8c7b9d076332bbb1a20588144573734c46d53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:7a:e5:d1:2f:e5:84:f5:09:06:18:b8:9e: 81:49:1b:97:34:65:cb:85:86:3f:d2:87:39:29:68: df:9e:33:58:05:1b:6d:6e:08:b8:ed:ee:ab:f9:fa: 56:b1:3f:c9:7d:bb:78:bb:cb:93:be:bf:de:b5:63: 63:05:81:d9:c8:58:cc:a0:d4:f5:8b:53:63:85:52: b0:b3:2e:e2:71:27:31:a4:b9:f0:98:4e:ed:26:ab: 49:73:83:a5:72:42:fe:57:0e:c0:f0:f6:f7:01:24: 87:5a:a8:53:10:43:9b:28:df:40:9f:65:9a:8a:24: 30:fc:d3:76:0b:52:34:9a:7f:6e:6b:e7:a8:af:5f: f7:92:8c:55:47:ee:78:28:6c:27:c4:b0:64:50:50: af:d0:b7:6f:92:f9:b8:b3:28:48:08:ef:bc:d3:c5: 05:2a:78:35:4b:75:da:c0:61:ff:bb:de:ab:6c:24: 6a:cc:c6:94:2c:ea:a5:6f:1e:13:58:68:e1:b3:46: 83:e4:1a:5e:b3:df:d7:0b:4c:0a:f0:0b:9f:df:6e: 6e:07:cd:10:54:2b:55:4b:22:f1:48:f5:1a:10:c0: c7:30:e5:66:aa:79:dd:34:1f:07:7b:19:e5:ab:32: a3:1a:24:12:ef:1a:ca:f3:d6:35:93:46:0f:a1:47: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:7B:9D:07:63:32:BB:B1:A2:05:88:14:45:73:73:4C:46:D5:3E X509v3 Authority Key Identifier: keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1a:b0:cc:ac:5e:6e:5a:71:c2:0b:7a:77:f6:e1:60:86:25: 19:ff:f9:5d:86:96:ff:2e:70:9a:5c:39:3a:6d:a5:f1:5a:67: e3:cf:ad:f5:91:a5:e6:84:f5:36:1d:5c:30:14:19:20:a0:59: 32:16:1c:35:30:84:1b:1b:dd:15:9c:24:4a:f1:2e:ba:e7:a5: 24:32:72:df:fb:a3:64:ca:49:55:da:e0:0f:78:26:3b:d7:c5: 2b:76:34:da:ee:1c:99:1e:69:f2:22:da:47:de:df:4f:94:4e: 55:1f:58:c1:af:9d:5e:13:0d:cb:62:e7:88:bf:8d:a9:b9:3d: e8:a4:d5:55:8b:60:94:e8:fc:ae:28:0b:cc:47:b6:cd:31:37: 03:50:22:35:86:e0:ba:85:7a:ec:40:48:24:5f:ff:2a:e8:86: da:9d:07:5f:09:58:2e:eb:ab:57:b8:ac:74:12:d9:00:fd:35: 3e:6b:0d:96:e4:66:29:c4:c3:0e:5f:74:c8:7f:f2:e6:3f:30: 14:b2:e1:9c:d5:34:d7:8b:7b:39:cd:34:f1:98:ce:ea:da:ee: da:fd:66:d5:af:4e:89:30:c6:31:c1:bb:d3:c7:f9:b9:af:fe: 92:e2:50:61:63:7a:ff:17:a4:a5:9c:3d:91:e6:81:26:6a:96: e8:28:eb:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd+jIdwZ6Dx93u/VTb/SNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk YWM3ODQwHhcNMjUxMjE3MDQwMDU5WhcNMjUxMjE4MDQwMDU5WjAzMTEwLwYDVQQD Eyg1ZThjN2I5ZDA3NjMzMmJiYjFhMjA1ODgxNDQ1NzM3MzRjNDZkNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yp65dEv5YT1CQYYuJ6BSRuXNGXL hYY/0oc5KWjfnjNYBRttbgi47e6r+fpWsT/Jfbt4u8uTvr/etWNjBYHZyFjMoNT1 i1NjhVKwsy7icScxpLnwmE7tJqtJc4OlckL+Vw7A8Pb3ASSHWqhTEEObKN9An2Wa iiQw/NN2C1I0mn9ua+eor1/3koxVR+54KGwnxLBkUFCv0Ldvkvm4syhICO+808UF Kng1S3XawGH/u96rbCRqzMaULOqlbx4TWGjhs0aD5Bpes9/XC0wK8Auf325uB80Q VCtVSyLxSPUaEMDHMOVmqnndNB8HexnlqzKjGiQS7xrK89Y1k0YPoUc+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6Me50HYzK7saIFiBRFc3NMRtU+MB8GA1UdIwQY MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt YWYzMzRhMGExZTkzLzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhqwzKxe blpxwgt6d/bhYIYlGf/5XYaW/y5wmlw5Om2l8Vpn48+t9ZGl5oT1Nh1cMBQZIKBZ MhYcNTCEGxvdFZwkSvEuuuelJDJy3/ujZMpJVdrgD3gmO9fFK3Y02u4cmR5p8iLa R97fT5ROVR9Ywa+dXhMNy2LniL+Nqbk96KTVVYtglOj8rigLzEe2zTE3A1AiNYbg uoV67EBIJF//KuiG2p0HXwlYLuurV7isdBLZAP01PmsNluRmKcTDDl90yH/y5j8w FLLhnNU014t7Oc008ZjO6tru2v1m1a9OiTDGMcG708f5ua/+kuJQYWN6/xekpZw9 keaBJmqW6CjrTw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:51 2025 by rpki-client