This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft File: jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json) Hash identifier: DpUQlPikXyxFKxZCO/l+4r+hYZNKdYzGdkLjQDKep1g= Subject key identifier: B1:E1:0B:62:5F:2D:A6:5B:F9:44:D2:62:DB:EE:5D:BE:46:AC:7C:B5 Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c Certificate serial: 019B59E38E4EB60E5E742646C07A1C880F49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft Manifest number: 0848 Signing time: Fri 26 Dec 2025 09:00:43 +0000 Manifest this update: Fri 26 Dec 2025 09:00:43 +0000 Manifest next update: Sat 27 Dec 2025 09:00:43 +0000 Files and hashes: 1: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: nHkaf0SPTnFM9sEvar+C+KwTykBESDKGX1KfUlyNC28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:8e:4e:b6:0e:5e:74:26:46:c0:7a:1c:88:0f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c Validity Not Before: Dec 26 09:00:43 2025 GMT Not After : Dec 27 09:00:43 2025 GMT Subject: CN=b1e10b625f2da65bf944d262dbee5dbe46ac7cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ac:d5:5d:1e:9d:a1:72:14:26:1c:65:6d:d8: 53:de:75:cf:17:09:31:77:1e:65:28:e5:ed:05:b4: 8f:3c:56:c1:00:65:08:a8:4d:55:62:e0:8e:6a:61: 34:93:bc:52:c6:4d:96:b6:d9:e0:14:69:2d:ab:60: e5:98:d0:5b:0d:68:c2:8b:e7:a4:c3:95:25:e9:19: 52:e7:1d:47:0c:25:45:5f:7c:76:4e:50:d4:b9:ab: 67:bb:c1:6c:fe:d2:dd:b2:c4:f7:54:da:bc:12:ee: ee:3b:87:3e:e3:68:18:d0:33:e3:0b:af:5b:01:af: 07:07:96:17:d8:27:49:7f:49:6e:7a:75:13:ae:06: 2f:94:71:42:71:a7:6a:12:05:81:dc:4c:7b:09:fb: ea:db:a4:4a:06:0e:2c:6a:e8:27:f1:a7:81:26:7b: 8d:18:b0:bc:23:8f:d1:75:6b:fe:ef:5c:05:aa:07: 3a:94:e4:98:87:56:6f:34:f4:07:84:7f:46:59:23: 64:c6:a2:f4:4f:60:a3:5f:90:1c:cb:52:16:3a:a1: 38:c2:fb:28:ef:cb:b8:08:b2:c6:f2:68:ed:db:64: 78:c3:5a:81:e9:a4:5d:d8:5c:84:97:e0:fc:db:4e: 8a:44:af:f2:ae:f8:08:f4:48:2b:63:36:80:19:55: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:0B:62:5F:2D:A6:5B:F9:44:D2:62:DB:EE:5D:BE:46:AC:7C:B5 X509v3 Authority Key Identifier: keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:20:41:63:31:72:4a:8e:8c:18:60:b6:0e:d1:74:31:fa:9a: 57:62:af:55:4a:83:ad:3b:79:de:28:9b:73:1e:b4:e4:3e:7b: fe:ce:fc:50:22:c3:a4:d9:39:44:b1:80:37:10:c7:0e:a3:7e: 11:f2:01:bf:79:fd:6b:ed:74:71:bb:6f:4a:4f:42:06:bb:59: 90:83:1e:ab:cd:3b:53:4c:b0:07:33:13:73:53:5b:5f:a6:a3: 8d:01:83:a4:db:57:6e:84:54:8b:17:19:2b:9c:78:ac:53:65: 52:f7:e4:76:6b:48:82:49:85:09:ff:ff:82:f9:14:98:76:b7: 6e:ba:1d:03:3c:13:e8:87:30:18:d1:f0:02:02:5b:78:ac:b1: 35:97:fc:cc:c5:0d:70:29:3e:4f:26:52:77:8d:e8:73:37:1e: 88:b4:7b:fb:a5:5e:74:15:fd:69:d9:0e:7a:84:25:8c:ed:a4: 81:fd:30:49:be:d8:d5:26:28:95:31:01:6e:46:4e:7e:b2:9e: 7a:4a:c5:f9:72:a6:3a:7f:05:af:91:2e:6d:f8:c3:a7:79:ce: b9:a2:80:64:1f:22:60:5f:4e:cb:58:8a:33:ad:96:cf:c5:91: a4:59:df:70:1b:ea:a6:68:76:9a:6c:fb:5f:a4:a1:39:05:c6: de:23:3e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ445Otg5edCZGwHociA9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTI2YjQ1OGFkNDFkNDdkMjYxYTc2ZDhjNWRjMGZjOGQx YTllMmMwHhcNMjUxMjI2MDkwMDQzWhcNMjUxMjI3MDkwMDQzWjAzMTEwLwYDVQQD EyhiMWUxMGI2MjVmMmRhNjViZjk0NGQyNjJkYmVlNWRiZTQ2YWM3Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6zVXR6doXIUJhxlbdhT3nXPFwkx dx5lKOXtBbSPPFbBAGUIqE1VYuCOamE0k7xSxk2WttngFGktq2DlmNBbDWjCi+ek w5Ul6RlS5x1HDCVFX3x2TlDUuatnu8Fs/tLdssT3VNq8Eu7uO4c+42gY0DPjC69b Aa8HB5YX2CdJf0luenUTrgYvlHFCcadqEgWB3Ex7Cfvq26RKBg4saugn8aeBJnuN GLC8I4/RdWv+71wFqgc6lOSYh1ZvNPQHhH9GWSNkxqL0T2CjX5Acy1IWOqE4wvso 78u4CLLG8mjt22R4w1qB6aRd2FyEl+D8206KRK/yrvgI9EgrYzaAGVUc6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHhC2JfLaZb+UTSYtvuXb5GrHy1MB8GA1UdIwQY MBaAFI6ia0WK1B1H0mGnbYxdwPyNGp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYt Mjg5MDA1NTkxNGM1LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYtMjg5MDA1NTkxNGM1 LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiBBYzFy So6MGGC2DtF0MfqaV2KvVUqDrTt53iibcx605D57/s78UCLDpNk5RLGANxDHDqN+ EfIBv3n9a+10cbtvSk9CBrtZkIMeq807U0ywBzMTc1NbX6ajjQGDpNtXboRUixcZ K5x4rFNlUvfkdmtIgkmFCf//gvkUmHa3brodAzwT6IcwGNHwAgJbeKyxNZf8zMUN cCk+TyZSd43oczceiLR7+6VedBX9adkOeoQljO2kgf0wSb7Y1SYolTEBbkZOfrKe ekrF+XKmOn8Fr5EubfjDp3nOuaKAZB8iYF9Oy1iKM62Wz8WRpFnfcBvqpmh2mmz7 X6ShOQXG3iM+LQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:04 2025 by rpki-client