This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json) Hash identifier: rZMuX9QWF7DiI8R2lzwZZ2u5P2KYNVFKFzbI+0UTSDc= Subject key identifier: DD:A1:A1:72:D5:C5:C0:AA:04:65:6D:CF:3F:B6:C5:A5:1E:E1:D6:33 Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39 Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39 Certificate serial: 019B3F7F4CEE62A820D817B7096E2A6A17E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft Manifest number: 0792 Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 06:01:05 +0000 Manifest next update: Mon 22 Dec 2025 06:01:05 +0000 Files and hashes: 1: 5Y2d5MF4TbCjZHRrJfSSoTyYdvo.roa (hash: kUdNMxl6XvZLdaSVVnColy/JpMzskekZSEK4RDo/wow=) 2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: blYXqZGXkLCcRmwWPyEc1U/ITgXhFfE5+XhX7gUl/UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4c:ee:62:a8:20:d8:17:b7:09:6e:2a:6a:17:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39 Validity Not Before: Dec 21 06:01:05 2025 GMT Not After : Dec 22 06:01:05 2025 GMT Subject: CN=dda1a172d5c5c0aa04656dcf3fb6c5a51ee1d633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:11:45:5b:9e:21:7e:f5:f7:dd:cd:4c:1c: ec:f3:3d:03:f8:c7:93:74:f6:bf:75:b0:86:7d:cf: 7e:c6:be:14:62:4c:5b:e5:1f:d6:76:05:eb:52:78: 2c:a9:b2:f8:64:fc:f1:b2:92:6a:89:5f:9b:28:3a: a4:a2:9c:76:a8:e7:be:e0:37:50:10:53:0d:a9:dc: a8:90:51:17:19:3d:3c:8c:2b:31:4c:81:62:92:3f: f6:a0:6f:9e:79:28:ed:cc:c0:f4:48:4c:95:1b:05: b5:7d:57:60:81:96:61:5c:db:8f:30:31:19:11:08: a0:33:6d:d3:78:57:d0:87:33:00:12:e9:24:55:ae: f2:ba:75:e5:74:ed:ad:39:1f:d7:a0:23:fa:35:0d: d6:ac:f2:e6:d2:15:42:46:c1:01:68:78:bc:23:50: e1:b5:b0:a5:21:6a:0d:c0:0d:a5:c8:9a:fe:7e:c6: eb:da:f5:a4:6a:d7:bd:4b:13:7c:f5:ce:a1:ba:76: 09:26:35:a7:b1:14:d2:4a:78:ab:cb:aa:b9:51:01: a7:33:c3:0b:96:97:4a:a2:72:f4:38:48:43:8e:54: 65:5c:15:fe:c9:4f:14:6a:7e:d5:38:32:e4:26:c0: 18:88:02:95:f7:17:24:37:06:d9:cd:f4:ad:9d:e3: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:A1:72:D5:C5:C0:AA:04:65:6D:CF:3F:B6:C5:A5:1E:E1:D6:33 X509v3 Authority Key Identifier: keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:68:f6:ad:9b:7f:2f:db:45:c4:c8:a6:7e:4a:24:b8:e0:ae: 44:7d:f2:d2:c8:90:76:5e:a1:87:df:2f:3b:0f:b1:b2:b1:26: a5:a9:6b:6e:45:75:e4:7f:2b:13:8b:5f:a3:5d:f8:a6:c8:af: b6:fe:2d:d8:d4:42:d4:e7:c1:2c:80:f6:47:31:4e:a1:b9:04: ea:f4:5c:ef:c9:c0:96:14:b2:e1:74:d4:37:b3:b3:41:24:51: e0:f7:d4:41:8d:19:fa:88:21:a5:ce:58:7c:2b:c9:e5:6f:a9: c3:37:e1:29:53:3b:36:e0:fd:1d:a0:70:60:e5:66:18:fc:46: 15:d3:cc:8e:23:0e:17:e7:a7:f0:7c:9c:84:28:35:6c:43:75: 95:4d:af:53:ea:de:01:0f:89:03:e6:88:8c:07:66:53:6b:43: fe:50:23:e0:e4:cb:29:a1:f5:b3:7c:e9:e2:be:2b:6d:31:8b: df:cd:b1:7d:1c:0e:d4:2d:37:a3:4a:be:25:f2:7e:23:c7:5c: 0c:48:99:95:2f:ff:fe:74:58:3f:c9:78:52:c3:47:51:bb:de: a8:13:a8:6c:78:66:32:ff:40:d9:59:b4:fc:36:e6:ac:78:c6: 90:84:49:11:08:8e:f0:3f:4e:da:56:69:30:9d:ef:d2:35:aa: a1:a2:d9:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0zuYqgg2Be3CW4qahfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWRlZDBiODNmYTRlMzFjZTBhMDg0MGViNDI5YmE4YTlm MThlMzkwHhcNMjUxMjIxMDYwMTA1WhcNMjUxMjIyMDYwMTA1WjAzMTEwLwYDVQQD EyhkZGExYTE3MmQ1YzVjMGFhMDQ2NTZkY2YzZmI2YzVhNTFlZTFkNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2gRRVueIX71993NTBzs8z0D+MeT dPa/dbCGfc9+xr4UYkxb5R/WdgXrUngsqbL4ZPzxspJqiV+bKDqkopx2qOe+4DdQ EFMNqdyokFEXGT08jCsxTIFikj/2oG+eeSjtzMD0SEyVGwW1fVdggZZhXNuPMDEZ EQigM23TeFfQhzMAEukkVa7yunXldO2tOR/XoCP6NQ3WrPLm0hVCRsEBaHi8I1Dh tbClIWoNwA2lyJr+fsbr2vWkate9SxN89c6hunYJJjWnsRTSSniry6q5UQGnM8ML lpdKonL0OEhDjlRlXBX+yU8Uan7VODLkJsAYiAKV9xckNwbZzfStneMzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2hoXLVxcCqBGVtzz+2xaUe4dYzMB8GA1UdIwQY MBaAFI6t7QuD+k4xzgoIQOtCm6ip8Y45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUt ODc3ZGRhMTkyMzc5LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUtODc3ZGRhMTkyMzc5 LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2j2rZt/ L9tFxMimfkokuOCuRH3y0siQdl6hh98vOw+xsrEmpalrbkV15H8rE4tfo134psiv tv4t2NRC1OfBLID2RzFOobkE6vRc78nAlhSy4XTUN7OzQSRR4PfUQY0Z+oghpc5Y fCvJ5W+pwzfhKVM7NuD9HaBwYOVmGPxGFdPMjiMOF+en8HychCg1bEN1lU2vU+re AQ+JA+aIjAdmU2tD/lAj4OTLKaH1s3zp4r4rbTGL382xfRwO1C03o0q+JfJ+I8dc DEiZlS///nRYP8l4UsNHUbveqBOobHhmMv9A2Vm0/DbmrHjGkIRJEQiO8D9O2lZp MJ3v0jWqoaLZ2A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:38:20 2025 by rpki-client