This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json) Hash identifier: bmq0j55REMNhKCXSVmgkf9RgTCgw+gzBJ4jJpaR8qV0= Subject key identifier: 6D:06:E8:62:01:C8:68:89:AE:CE:A8:1C:2C:C5:3E:48:AC:CD:4B:F7 Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Certificate serial: 019B243EDDF616E500B730D4B90B06BC8D80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft Manifest number: 08E5 Signing time: Mon 15 Dec 2025 23:00:58 +0000 Manifest this update: Mon 15 Dec 2025 23:00:58 +0000 Manifest next update: Tue 16 Dec 2025 23:00:58 +0000 Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: S2eKMVABEq3Pk5ckQgMLpalvsa6NCbMpImmsQIy9IY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:dd:f6:16:e5:00:b7:30:d4:b9:0b:06:bc:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb Validity Not Before: Dec 15 23:00:58 2025 GMT Not After : Dec 16 23:00:58 2025 GMT Subject: CN=6d06e86201c86889aecea81c2cc53e48accd4bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:dd:a4:07:20:b9:2e:d7:77:d0:8c:7b:0c: 14:7d:b5:2e:b5:aa:9e:96:ff:da:c4:8d:7f:ed:07: 95:cd:b2:5d:6b:c3:0b:20:14:6d:2d:ed:0c:0a:b6: 20:40:e5:e6:44:ae:36:cc:3f:7e:59:31:57:20:94: ce:19:77:41:3b:23:d4:90:48:6a:29:dd:00:a1:87: 69:fa:60:74:ef:e3:90:64:9a:cd:a6:4f:6b:41:a4: 9b:35:d0:7b:27:8a:09:c6:7c:cf:0c:c0:5b:9f:cc: ad:41:08:9d:02:24:eb:0c:c8:6d:c4:9a:ef:97:46: 73:1f:17:a1:c3:21:62:e6:65:a5:72:a5:24:4c:6c: a7:b7:39:f4:43:53:44:e9:2b:7b:31:ac:d3:1b:fb: 50:ef:0a:a0:05:3d:7d:63:e0:59:e3:93:68:bc:c9: 26:cd:d6:a9:09:53:4a:dd:33:e3:e2:d7:26:c6:37: 7a:34:b2:d2:9b:8c:0a:bb:86:24:6e:80:f9:9f:39: b6:81:4a:98:77:9f:aa:1c:ca:51:1e:21:e3:8e:41: 87:0c:76:a7:82:76:e5:47:d0:61:d3:cd:f2:a9:84: c4:6e:6c:bb:e2:51:94:5e:f6:b3:bc:bb:78:48:fd: d8:89:b0:cf:af:d8:3e:63:19:8f:99:26:d3:37:b2: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:06:E8:62:01:C8:68:89:AE:CE:A8:1C:2C:C5:3E:48:AC:CD:4B:F7 X509v3 Authority Key Identifier: keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e5:79:f5:d1:aa:67:2f:89:f5:42:f0:1e:94:73:d8:b2:8a: d5:05:67:66:69:bb:d7:76:d0:c9:5d:05:90:09:8a:59:be:5a: 45:e3:ab:a9:60:1a:df:bd:cc:d6:4c:04:8b:48:67:74:f3:d0: 4e:cf:b8:73:3a:9d:e6:0c:ce:b7:9a:fe:b8:ec:22:42:c1:8d: 9d:b9:e9:61:80:d9:51:cf:e7:3d:99:cd:e0:8a:e5:c4:c7:80: 09:8b:ce:eb:c2:0a:f8:f4:8b:32:b2:00:e8:fe:65:30:cc:a1: 4a:ae:b0:93:22:1a:cf:d8:39:a3:1b:5f:57:de:d8:27:76:78: 65:16:d6:e0:4d:32:64:3b:08:83:6e:4f:eb:ab:89:77:6c:a2: f8:0d:d6:fe:2c:30:95:f5:fa:f9:76:59:9b:a2:25:57:c8:80: 5f:fd:3a:18:08:05:10:49:1a:80:4a:35:6d:8e:4a:cc:fc:0c: 52:8a:ab:21:ac:27:a2:aa:a6:29:ce:59:4d:5f:9f:04:79:55: 1e:55:01:20:a6:f5:7e:c7:50:11:7d:9e:a5:ca:29:e0:43:39: 71:23:0e:71:2e:e1:67:b5:73:35:ab:df:85:96:83:fd:13:09: a5:9f:84:11:2c:23:ac:c1:93:4a:33:16:db:97:52:8f:d2:23: 4a:bf:42:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPt32FuUAtzDUuQsGvI2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWE0MDM4YmRlYjE4OTI0MmYyOGY5ZDg1YzQwZWM0ZDdk MzIxZWIwHhcNMjUxMjE1MjMwMDU4WhcNMjUxMjE2MjMwMDU4WjAzMTEwLwYDVQQD Eyg2ZDA2ZTg2MjAxYzg2ODg5YWVjZWE4MWMyY2M1M2U0OGFjY2Q0YmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14bdpAcguS7Xd9CMewwUfbUutaqe lv/axI1/7QeVzbJda8MLIBRtLe0MCrYgQOXmRK42zD9+WTFXIJTOGXdBOyPUkEhq Kd0AoYdp+mB07+OQZJrNpk9rQaSbNdB7J4oJxnzPDMBbn8ytQQidAiTrDMhtxJrv l0ZzHxehwyFi5mWlcqUkTGyntzn0Q1NE6St7MazTG/tQ7wqgBT19Y+BZ45NovMkm zdapCVNK3TPj4tcmxjd6NLLSm4wKu4YkboD5nzm2gUqYd5+qHMpRHiHjjkGHDHan gnblR9Bh083yqYTEbmy74lGUXvazvLt4SP3YibDPr9g+YxmPmSbTN7JRwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0G6GIByGiJrs6oHCzFPkiszUv3MB8GA1UdIwQY MBaAFCcaQDi96xiSQvKPnYXEDsTX0yHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzct ODg2MmM3NDI5NDI1LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82ZmYxZTctYTg0ZC00MjIxLWFhYzctODg2MmM3NDI5NDI1 LzEvSnhwQU9MM3JHSkpDOG8tZGhjUU94TmZUSWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+V59dGq Zy+J9ULwHpRz2LKK1QVnZmm713bQyV0FkAmKWb5aReOrqWAa373M1kwEi0hndPPQ Ts+4czqd5gzOt5r+uOwiQsGNnbnpYYDZUc/nPZnN4IrlxMeACYvO68IK+PSLMrIA 6P5lMMyhSq6wkyIaz9g5oxtfV97YJ3Z4ZRbW4E0yZDsIg25P66uJd2yi+A3W/iww lfX6+XZZm6IlV8iAX/06GAgFEEkagEo1bY5KzPwMUoqrIawnoqqmKc5ZTV+fBHlV HlUBIKb1fsdQEX2epcop4EM5cSMOcS7hZ7VzNavfhZaD/RMJpZ+EESwjrMGTSjMW 25dSj9IjSr9CMw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:05:49 2025 by rpki-client