This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json) Hash identifier: ooCpmO94QAiRGwyYmHp1hM2o44+vqJboN7hyrKN68QU= Subject key identifier: 08:80:FF:D2:B0:FA:FF:AD:09:DC:66:B7:55:C5:13:1F:54:70:7D:8A Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df Certificate serial: 019B5A51ACEFF2CD227C5B62617A9904497A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft Manifest number: 14A7 Signing time: Fri 26 Dec 2025 11:01:00 +0000 Manifest this update: Fri 26 Dec 2025 11:01:00 +0000 Manifest next update: Sat 27 Dec 2025 11:01:00 +0000 Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=) 2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: Ual54YHbGZGi3iDnxkG1YNdLy/FoKFQRgDf849XhpB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ac:ef:f2:cd:22:7c:5b:62:61:7a:99:04:49:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df Validity Not Before: Dec 26 11:01:00 2025 GMT Not After : Dec 27 11:01:00 2025 GMT Subject: CN=0880ffd2b0faffad09dc66b755c5131f54707d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:98:08:b6:7a:a5:97:a9:91:83:04:6f:3f: 62:42:90:48:cd:39:95:52:97:22:54:a8:e5:36:44: 35:81:fd:ef:09:45:5a:e2:a2:76:a6:d6:95:d4:31: d6:90:e5:6b:db:17:8a:4e:68:3c:19:88:fb:1a:06: 86:92:ab:9e:8e:c7:e4:72:80:e6:cd:57:68:51:19: b6:20:2b:57:f8:23:1e:16:a1:c9:d1:0b:81:d0:a6: 2d:96:f3:15:31:4d:33:76:ad:a3:b0:12:41:21:fa: 95:66:2d:54:81:24:a6:b5:4b:11:0a:c4:aa:69:a1: 89:b7:cd:e1:db:07:0c:da:e4:d4:6a:01:69:11:36: 7f:87:77:f5:00:eb:9c:86:a8:40:22:db:95:89:a1: 65:2c:f6:37:5b:b7:b4:1f:69:dc:e3:29:08:95:3a: db:0c:95:e1:3d:76:fa:7f:3e:48:57:e1:a9:5f:06: ff:77:6b:43:58:db:5e:13:58:4b:75:86:5b:ee:ca: a2:c0:d8:cd:86:70:7a:41:d0:12:71:3e:b6:5d:3e: ce:09:1c:77:3f:de:62:17:50:53:d7:76:5d:82:7d: b5:1b:dc:c0:7d:96:2f:d3:a3:e2:d7:bb:14:c0:31: 60:2c:da:52:8b:ce:fa:a0:ef:1f:6f:03:f2:8b:a0: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:80:FF:D2:B0:FA:FF:AD:09:DC:66:B7:55:C5:13:1F:54:70:7D:8A X509v3 Authority Key Identifier: keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:68:84:76:39:c2:67:ea:00:6b:21:d1:6f:c8:0a:9e:b5:01: 52:e6:51:46:f4:cd:43:eb:ff:b7:52:90:a9:82:97:79:16:a5: df:18:b9:56:85:f9:fe:29:f5:22:87:9f:87:f9:b3:a3:d3:9c: 06:c1:1f:c9:8f:1e:4b:a4:37:a0:a3:eb:bc:e3:d7:08:5d:87: 79:8f:fe:23:68:c8:c5:9a:52:35:ba:c8:16:40:c3:ef:3a:76: 62:95:53:5b:63:b4:a2:bf:ee:ef:d9:67:3a:9e:47:a2:5c:8d: 54:2f:80:41:21:a9:9c:84:63:f2:34:a7:fd:98:f5:9e:d4:ee: 5e:09:ed:8a:8f:ec:4d:e1:fc:13:fb:7b:bf:23:8f:af:25:94: 0b:00:ed:84:a7:97:78:b1:e9:ed:a5:d3:49:74:4b:67:c7:d7: 9e:43:22:f3:ca:d8:c3:7d:dd:8a:9f:b4:d8:af:02:95:01:70: 5d:81:62:96:b3:54:c6:2f:20:4c:3b:c3:c2:c7:d1:3d:c2:c1: e1:81:0a:b4:81:a3:f5:7c:ed:ba:d2:9b:f7:2f:f6:6d:18:15: 37:02:b3:05:81:a1:5d:b2:bb:27:f4:9f:57:46:bb:ef:d5:40: 56:27:7c:00:99:bc:ee:99:0b:17:16:ac:3e:87:8d:14:46:e6: 25:a4:5d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUazv8s0ifFtiYXqZBEl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz YjkzZGYwHhcNMjUxMjI2MTEwMTAwWhcNMjUxMjI3MTEwMTAwWjAzMTEwLwYDVQQD EygwODgwZmZkMmIwZmFmZmFkMDlkYzY2Yjc1NWM1MTMxZjU0NzA3ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2mYCLZ6pZepkYMEbz9iQpBIzTmV UpciVKjlNkQ1gf3vCUVa4qJ2ptaV1DHWkOVr2xeKTmg8GYj7GgaGkquejsfkcoDm zVdoURm2ICtX+CMeFqHJ0QuB0KYtlvMVMU0zdq2jsBJBIfqVZi1UgSSmtUsRCsSq aaGJt83h2wcM2uTUagFpETZ/h3f1AOuchqhAItuViaFlLPY3W7e0H2nc4ykIlTrb DJXhPXb6fz5IV+GpXwb/d2tDWNteE1hLdYZb7sqiwNjNhnB6QdAScT62XT7OCRx3 P95iF1BT13Zdgn21G9zAfZYv06Pi17sUwDFgLNpSi876oO8fbwPyi6CORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiA/9Kw+v+tCdxmt1XFEx9UcH2KMB8GA1UdIwQY MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt MzY4NzhmNjU3ZTEyLzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWiEdjnC Z+oAayHRb8gKnrUBUuZRRvTNQ+v/t1KQqYKXeRal3xi5VoX5/in1Ioefh/mzo9Oc BsEfyY8eS6Q3oKPrvOPXCF2HeY/+I2jIxZpSNbrIFkDD7zp2YpVTW2O0or/u79ln Op5HolyNVC+AQSGpnIRj8jSn/Zj1ntTuXgntio/sTeH8E/t7vyOPryWUCwDthKeX eLHp7aXTSXRLZ8fXnkMi88rYw33dip+02K8ClQFwXYFilrNUxi8gTDvDwsfRPcLB 4YEKtIGj9XztutKb9y/2bRgVNwKzBYGhXbK7J/SfV0a779VAVid8AJm87pkLFxas PoeNFEbmJaRdcg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:13 2025 by rpki-client