This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json) Hash identifier: 8cxJliYUqBSuAFIfnJxqfhAaXH8MQQyPI70aAhWzuFM= Subject key identifier: 8D:62:71:2F:1E:E9:D6:F7:3E:55:5F:48:F2:9D:FD:FA:85:B8:BE:F5 Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Certificate serial: 019B32685F684C5D088812BB3822E8663542 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft Manifest number: 16DA Signing time: Thu 18 Dec 2025 17:00:59 +0000 Manifest this update: Thu 18 Dec 2025 17:00:59 +0000 Manifest next update: Fri 19 Dec 2025 17:00:59 +0000 Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: NUeeK0TJt0xR+mmxLKuhnVrPpYYaGjIF6dyWgBJbQNM=) 2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:5f:68:4c:5d:08:88:12:bb:38:22:e8:66:35:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Validity Not Before: Dec 18 17:00:59 2025 GMT Not After : Dec 19 17:00:59 2025 GMT Subject: CN=8d62712f1ee9d6f73e555f48f29dfdfa85b8bef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:ca:20:8a:02:d9:ba:6e:03:2f:7d:ea:95: 0c:8d:7d:db:ef:58:14:4c:b0:8a:93:0c:d3:20:53: 9d:ec:7c:43:33:6d:a5:5e:5d:23:fe:ba:d3:e8:5d: 5d:ac:6d:ed:0c:59:d1:65:d0:c9:d0:e4:e7:dd:7f: 46:e4:44:df:ba:2e:e6:73:48:af:16:dd:4b:7a:3b: f8:f2:cb:05:f2:4c:41:dc:d2:b6:0b:da:ed:66:a9: 85:56:c5:9f:c7:9b:27:20:8c:04:8f:36:b8:93:e1: fe:cb:83:76:29:5b:4b:a3:0f:da:fe:fb:d7:43:26: f7:1b:e6:9c:81:df:98:dd:ce:0f:a8:5f:57:06:e4: 6c:e5:cf:57:e6:7b:ec:bd:3b:b6:da:e6:58:43:f9: be:7b:14:4d:cd:b4:51:8e:c9:29:3e:53:44:1a:17: f4:4e:8a:46:dd:bb:ba:25:ba:91:19:cf:c4:26:a1: aa:61:82:be:fc:55:0f:da:33:c9:05:c2:21:34:e3: fa:08:ac:b3:22:fe:b8:05:a8:a1:f6:7b:a3:86:be: 4a:a7:e0:b1:5e:77:cc:1d:57:03:d5:e9:c2:3e:93: 89:d4:f6:50:43:a7:95:ab:85:42:6f:c4:bf:3d:09: e7:19:f3:84:41:44:3a:21:c1:0b:21:2b:6a:b8:58: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:62:71:2F:1E:E9:D6:F7:3E:55:5F:48:F2:9D:FD:FA:85:B8:BE:F5 X509v3 Authority Key Identifier: keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:26:14:38:0e:00:d8:de:de:a9:a8:35:02:58:4b:8c:88:3e: 1e:43:dd:1a:32:cd:12:a5:ad:5b:60:ba:bf:ee:40:71:14:33: 92:73:26:28:e5:86:dc:0c:fa:db:3b:95:af:e9:ac:07:db:e0: 60:75:13:01:f6:74:ea:0a:54:c5:11:d5:b4:dd:bf:02:8e:44: 45:55:97:bb:87:ad:a1:95:ba:73:f6:e9:54:ca:77:f3:41:07: 78:df:41:a4:14:63:a5:4e:08:79:6d:f5:99:a9:3e:e2:2b:51: 5f:f0:b2:e7:ee:a5:d7:9f:ee:fb:5a:c3:85:6f:21:d6:24:23: f8:1d:24:2d:20:fa:7f:c8:09:01:a5:bb:94:65:60:7f:8b:21: fc:8f:f7:32:fd:76:f2:85:18:39:b2:1a:74:2b:b4:a4:be:3e: e4:5f:bb:01:23:5a:f0:8b:68:13:63:90:f2:77:54:66:e5:87: 36:44:54:a2:cb:04:8b:ff:6f:bc:fe:e8:1d:a8:9c:f3:78:e3: 5f:b6:57:bf:23:6b:8a:16:87:c9:9d:e8:ca:f4:99:e8:1e:f0: c3:ed:9a:ec:14:ca:80:5e:a7:3b:ff:86:83:74:f5:20:dd:e4: fd:33:ce:f8:f4:79:cc:41:12:ce:09:88:87:b6:38:fa:65:e0: fb:ac:ba:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaF9oTF0IiBK7OCLoZjVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4 NTk4YjYwHhcNMjUxMjE4MTcwMDU5WhcNMjUxMjE5MTcwMDU5WjAzMTEwLwYDVQQD Eyg4ZDYyNzEyZjFlZTlkNmY3M2U1NTVmNDhmMjlkZmRmYTg1YjhiZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyXKIIoC2bpuAy996pUMjX3b71gU TLCKkwzTIFOd7HxDM22lXl0j/rrT6F1drG3tDFnRZdDJ0OTn3X9G5ETfui7mc0iv Ft1Lejv48ssF8kxB3NK2C9rtZqmFVsWfx5snIIwEjza4k+H+y4N2KVtLow/a/vvX Qyb3G+acgd+Y3c4PqF9XBuRs5c9X5nvsvTu22uZYQ/m+exRNzbRRjskpPlNEGhf0 TopG3bu6JbqRGc/EJqGqYYK+/FUP2jPJBcIhNOP6CKyzIv64Baih9nujhr5Kp+Cx XnfMHVcD1enCPpOJ1PZQQ6eVq4VCb8S/PQnnGfOEQUQ6IcELIStquFgu2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1icS8e6db3PlVfSPKd/fqFuL71MB8GA1UdIwQY MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSYUOA4A 2N7eqag1AlhLjIg+HkPdGjLNEqWtW2C6v+5AcRQzknMmKOWG3Az62zuVr+msB9vg YHUTAfZ06gpUxRHVtN2/Ao5ERVWXu4etoZW6c/bpVMp380EHeN9BpBRjpU4IeW31 mak+4itRX/Cy5+6l15/u+1rDhW8h1iQj+B0kLSD6f8gJAaW7lGVgf4sh/I/3Mv12 8oUYObIadCu0pL4+5F+7ASNa8ItoE2OQ8ndUZuWHNkRUossEi/9vvP7oHaic83jj X7ZXvyNrihaHyZ3oyvSZ6B7ww+2a7BTKgF6nO/+Gg3T1IN3k/TPO+PR5zEESzgmI h7Y4+mXg+6y6JQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:53:08 2025 by rpki-client