This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json) Hash identifier: CsvLgA2ANAgXn9JFYj7SDnsG2Dxzqb1wTWbQH9KTZUg= Subject key identifier: 18:D9:8F:0C:EF:70:E8:4E:6F:30:F7:53:C2:A6:D5:3A:FE:2F:13:47 Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Certificate serial: 019AF208DDD1915906C9E9C5488072AEEF43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft Manifest number: 08CB Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: u9oTYL+Dl3wZwLfL35yRfRNhGEsM6e8rF1WddzMXOl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dd:d1:91:59:06:c9:e9:c5:48:80:72:ae:ef:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=18d98f0cef70e84e6f30f753c2a6d53afe2f1347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:4c:03:a7:7b:12:ed:9e:ae:7c:c5:b4:b3: 61:8d:a1:98:6b:be:cc:44:03:29:2a:70:f3:13:a1: 44:58:18:36:ea:be:d0:04:22:99:e4:67:49:bc:ac: 2b:ad:73:41:c3:a5:60:06:73:70:9e:34:92:ba:a2: 5f:87:23:41:dd:85:8d:eb:08:6f:43:cb:a8:92:05: 10:fa:02:ec:e9:32:20:c4:ba:55:48:92:a7:b8:cf: cf:5a:7c:da:23:47:a7:9c:a4:c3:90:f1:d3:b1:04: b3:3b:ab:da:a8:46:53:25:ae:e5:31:47:c6:ef:89: ea:6b:06:e1:a5:67:6e:dd:58:d9:ce:48:ea:f9:2b: 9e:81:11:10:28:6d:20:57:a2:90:01:c2:61:a6:ad: 4c:43:82:d7:0c:6c:70:d6:dc:6d:65:43:b2:44:fa: e9:cc:b2:34:15:d6:b1:7b:e6:6b:92:e7:5c:02:d4: d3:fc:92:68:76:76:ac:95:16:c8:2f:5d:33:89:2d: 7b:88:39:02:05:e2:e0:3a:33:d4:61:ef:49:d0:96: 4a:e2:7b:01:b7:8d:8b:7f:d2:d5:8f:70:11:cd:71: 14:39:b7:e8:b6:b3:c0:d7:8f:63:de:ab:65:96:20: f0:53:3e:e6:dd:d4:e8:23:13:78:d9:5c:94:b6:e9: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D9:8F:0C:EF:70:E8:4E:6F:30:F7:53:C2:A6:D5:3A:FE:2F:13:47 X509v3 Authority Key Identifier: keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6f:75:04:55:0d:4d:da:ca:ed:35:95:89:d1:e3:8c:43:87: 1b:01:68:1b:14:e4:b0:40:a4:4e:d5:dc:12:6a:a3:55:c2:a6: 84:7c:02:d1:d9:0e:be:cd:3c:a0:5b:99:da:76:e2:51:7b:01: b7:a5:bd:e9:7a:7e:5c:15:c0:01:d0:b2:44:69:4b:1f:d7:87: b6:8a:81:5c:4f:61:6a:e9:07:7a:b2:8d:fb:78:ad:3e:40:34: 34:2d:06:8f:f4:f2:52:95:30:a2:87:c2:ca:08:ef:a6:ef:40: 8f:47:d6:d5:31:78:b6:3e:1f:52:3f:4a:18:5c:f4:00:20:c1: 6b:fd:43:3e:57:59:8f:0d:75:72:74:a6:af:0e:dd:e9:4f:c4: 49:00:29:84:94:f3:8d:01:41:40:99:4c:bd:74:6e:48:95:6f: 0f:06:a5:1f:af:06:b0:03:ca:8f:51:82:d8:a8:61:1a:61:3e: 10:b9:49:95:26:43:0e:df:a8:2e:99:59:1e:b9:b0:cb:b6:6b: f7:5f:e9:3e:d2:c2:73:b0:58:27:b0:79:16:3a:d2:4a:89:52: c7:4e:cd:dc:41:65:8d:aa:5c:f1:4f:ed:b5:8c:71:96:a5:d6: a8:d3:4f:21:1f:4b:76:0f:e1:d9:94:6e:8f:44:d5:3a:ce:59: 79:fc:68:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN3RkVkGyenFSIByru9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWE0MDM4YmRlYjE4OTI0MmYyOGY5ZDg1YzQwZWM0ZDdk MzIxZWIwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EygxOGQ5OGYwY2VmNzBlODRlNmYzMGY3NTNjMmE2ZDUzYWZlMmYxMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgBMA6d7Eu2ernzFtLNhjaGYa77M RAMpKnDzE6FEWBg26r7QBCKZ5GdJvKwrrXNBw6VgBnNwnjSSuqJfhyNB3YWN6whv Q8uokgUQ+gLs6TIgxLpVSJKnuM/PWnzaI0ennKTDkPHTsQSzO6vaqEZTJa7lMUfG 74nqawbhpWdu3VjZzkjq+SuegREQKG0gV6KQAcJhpq1MQ4LXDGxw1txtZUOyRPrp zLI0Fdaxe+ZrkudcAtTT/JJodnaslRbIL10ziS17iDkCBeLgOjPUYe9J0JZK4nsB t42Lf9LVj3ARzXEUObfotrPA149j3qtlliDwUz7m3dToIxN42VyUtul20QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjZjwzvcOhObzD3U8Km1Tr+LxNHMB8GA1UdIwQY MBaAFCcaQDi96xiSQvKPnYXEDsTX0yHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzct ODg2MmM3NDI5NDI1LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzctODg2MmM3NDI5NDI1 LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm91BFUN TdrK7TWVidHjjEOHGwFoGxTksECkTtXcEmqjVcKmhHwC0dkOvs08oFuZ2nbiUXsB t6W96Xp+XBXAAdCyRGlLH9eHtoqBXE9haukHerKN+3itPkA0NC0Gj/TyUpUwoofC ygjvpu9Aj0fW1TF4tj4fUj9KGFz0ACDBa/1DPldZjw11cnSmrw7d6U/ESQAphJTz jQFBQJlMvXRuSJVvDwalH68GsAPKj1GC2KhhGmE+ELlJlSZDDt+oLplZHrmwy7Zr 91/pPtLCc7BYJ7B5FjrSSolSx07N3EFljapc8U/ttYxxlqXWqNNPIR9Ldg/h2ZRu j0TVOs5Zefxoxg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:00 2025 by rpki-client