This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json) Hash identifier: xyCPZH365uvCcD3Lzhd0ff7DyGGISAks6DKaITTKjhs= Subject key identifier: 53:13:AE:E8:B9:61:BD:A7:70:3E:4F:FA:66:B4:AE:29:1A:4C:56:84 Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Certificate serial: 019AF27690622A7107C0B33F5CA53C5585A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft Manifest number: 1537 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=) 2: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (hash: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=) 3: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: 3CSMTjUm9UhJGCRQsOmCemiWYrQh8DuCzXjaC/KMmn4=) 4: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:90:62:2a:71:07:c0:b3:3f:5c:a5:3c:55:85:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=5313aee8b961bda7703e4ffa66b4ae291a4c5684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:46:6d:04:92:ce:8c:77:9c:14:6e:5a:3c: d3:18:ce:e0:b3:46:1e:99:fe:a7:04:a6:e8:3b:67: 6a:fe:6d:31:97:a5:e7:d7:36:71:22:1f:5f:c7:5b: 41:e8:fe:d4:7b:40:5c:69:2c:d4:dd:09:86:0d:38: 57:9d:d4:43:1f:5f:c4:64:91:74:dd:7e:8d:33:13: aa:4a:d2:ff:e6:cf:08:a4:cf:57:1b:39:f1:13:0d: 54:62:07:02:e4:9c:49:be:6f:39:d2:b2:f4:e0:05: 07:c7:8d:8c:c7:35:ca:f3:2a:ac:04:ef:8c:12:55: 11:01:98:c7:8b:ed:9b:27:eb:a8:97:61:a8:02:14: ad:6f:c2:dd:dd:7a:07:0c:ed:5c:bb:f3:7b:ef:8c: 22:af:7d:ab:48:94:18:16:75:06:fc:c7:ee:fc:1d: 4f:00:bc:3a:e6:3f:5b:9f:8a:98:b0:19:ae:3d:3b: b0:42:95:5e:97:89:17:ed:ed:9a:5e:e6:c8:c2:c0: e3:81:02:06:be:91:77:ec:c9:91:31:89:36:e9:ec: 5b:bb:2a:16:ba:97:02:c5:aa:35:d6:c4:43:12:3c: 11:19:f8:c4:21:16:f6:82:cc:3c:be:ee:0d:68:44: 9e:14:d5:0f:8a:de:90:40:96:37:59:03:e3:19:bb: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:AE:E8:B9:61:BD:A7:70:3E:4F:FA:66:B4:AE:29:1A:4C:56:84 X509v3 Authority Key Identifier: keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:df:e4:9b:3a:86:cd:3f:e2:89:f0:d7:4f:3b:96:c7:17:03: 4d:5b:3f:07:13:ad:d0:23:c7:11:7f:15:cc:3e:fd:2b:08:09: 95:dd:5f:1f:8d:23:b4:ce:5f:1e:64:6b:c9:5c:da:c9:0d:46: ea:6c:e3:d8:80:af:f3:4c:ac:cb:dc:ba:25:f4:af:07:9d:10: 3f:2e:b3:cf:2e:01:99:e8:1b:39:50:61:e4:9f:af:9b:1c:56: e8:7b:c4:30:b8:34:97:4d:04:d8:ef:a6:00:4b:6d:a9:8a:fc: 13:de:ea:98:c1:da:03:81:73:62:96:8a:25:e7:48:1e:b1:85: 98:6e:60:3c:27:bd:31:20:a8:86:f6:52:7b:ea:b8:a7:c0:a0: 9b:fa:a3:63:5b:e6:f3:79:5c:5f:55:5f:18:81:c8:e1:d2:ce: 08:60:d4:4d:43:fb:6b:59:08:94:99:51:e6:03:19:43:e8:c3: f5:31:3c:15:ff:05:fb:52:d2:c5:47:06:37:78:c4:bc:98:cd: f3:83:1b:25:99:8f:53:8b:70:73:5e:5e:c4:09:90:73:6d:c4: 30:13:d9:f7:72:6f:a6:f9:23:3d:51:07:f3:d7:2b:c6:d0:36: 02:c1:9a:4d:05:32:68:1a:cf:7f:ad:57:13:d0:c3:b0:b4:5d: 5a:02:93:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpBiKnEHwLM/XKU8VYWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk YWM3ODQwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD Eyg1MzEzYWVlOGI5NjFiZGE3NzAzZTRmZmE2NmI0YWUyOTFhNGM1Njg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBxGbQSSzox3nBRuWjzTGM7gs0Ye mf6nBKboO2dq/m0xl6Xn1zZxIh9fx1tB6P7Ue0BcaSzU3QmGDThXndRDH1/EZJF0 3X6NMxOqStL/5s8IpM9XGznxEw1UYgcC5JxJvm850rL04AUHx42MxzXK8yqsBO+M ElURAZjHi+2bJ+uol2GoAhStb8Ld3XoHDO1cu/N774wir32rSJQYFnUG/Mfu/B1P ALw65j9bn4qYsBmuPTuwQpVel4kX7e2aXubIwsDjgQIGvpF37MmRMYk26exbuyoW upcCxao11sRDEjwRGfjEIRb2gsw8vu4NaESeFNUPit6QQJY3WQPjGbstkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMTrui5Yb2ncD5P+ma0rikaTFaEMB8GA1UdIwQY MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt YWYzMzRhMGExZTkzLzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhd/kmzqG zT/iifDXTzuWxxcDTVs/BxOt0CPHEX8VzD79KwgJld1fH40jtM5fHmRryVzayQ1G 6mzj2ICv80ysy9y6JfSvB50QPy6zzy4BmegbOVBh5J+vmxxW6HvEMLg0l00E2O+m AEttqYr8E97qmMHaA4FzYpaKJedIHrGFmG5gPCe9MSCohvZSe+q4p8Cgm/qjY1vm 83lcX1VfGIHI4dLOCGDUTUP7a1kIlJlR5gMZQ+jD9TE8Ff8F+1LSxUcGN3jEvJjN 84MbJZmPU4twc15exAmQc23EMBPZ93JvpvkjPVEH89crxtA2AsGaTQUyaBrPf61X E9DDsLRdWgKTAA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:41 2025 by rpki-client