This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json) Hash identifier: z9qOoySRF4cbmXZ40cOcTo5Qs6PFFOso0VNJkjJ7SkU= Subject key identifier: D5:29:BF:0F:18:C5:2A:0F:CB:AF:B0:4E:18:1F:6B:D2:A6:88:86:93 Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7 Certificate serial: 019B1C85EDED00C0B819E80CB5E92DA10ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft Manifest number: 040A Signing time: Sun 14 Dec 2025 11:01:37 +0000 Manifest this update: Sun 14 Dec 2025 11:01:37 +0000 Manifest next update: Mon 15 Dec 2025 11:01:37 +0000 Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=) 2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: 9h+1+6x4zJt+mAK8XF959shJEPvAI1227Ip2iy9q0lI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:ed:ed:00:c0:b8:19:e8:0c:b5:e9:2d:a1:0e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7 Validity Not Before: Dec 14 11:01:37 2025 GMT Not After : Dec 15 11:01:37 2025 GMT Subject: CN=d529bf0f18c52a0fcbafb04e181f6bd2a6888693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:d6:82:30:c9:f4:97:0b:fc:72:a4:95:7a: 89:c3:ec:07:95:ce:ea:3b:8d:db:47:b9:b4:81:ba: 46:b9:c1:d6:1b:0a:30:8f:03:15:86:d3:e9:ff:b8: da:3f:70:22:ea:87:ed:27:d6:3c:7a:9d:40:5e:ef: 7a:21:a2:99:af:d7:81:e3:97:0c:6d:f9:1a:63:00: 30:2a:4c:50:4d:04:67:45:f9:da:a6:e8:a1:89:e4: 34:50:bc:a1:e6:39:f1:84:80:8d:2f:12:c4:4b:e0: 61:38:dd:fe:7a:e3:d7:b5:5f:c0:07:f3:0e:92:09: 65:68:3f:f5:1f:d3:22:9b:9a:8b:d3:3d:17:96:0a: 98:d0:5f:02:d3:2f:b8:08:5b:79:b4:16:0c:89:c4: 97:79:05:65:f5:f6:cf:8a:69:4a:65:a5:47:32:33: fe:84:b0:79:89:e5:98:85:36:5b:a3:a1:a7:c2:50: 30:50:17:d1:c1:62:6e:35:3d:8c:e7:d7:c5:b5:2a: ce:4b:5a:ca:13:b6:2c:09:87:da:32:96:e0:f2:51: e0:db:31:9d:06:09:94:62:13:28:8f:46:77:5b:67: 5b:1d:9f:62:34:26:16:ab:5b:ba:9c:f5:b2:f3:35: 92:ec:06:de:99:6b:af:97:11:2c:8c:bb:d0:e0:56: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:29:BF:0F:18:C5:2A:0F:CB:AF:B0:4E:18:1F:6B:D2:A6:88:86:93 X509v3 Authority Key Identifier: keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:23:3a:45:1c:16:a1:37:f8:3e:eb:5b:25:b3:ab:98:c5:db: 02:8e:d6:00:4f:46:be:33:6f:c6:c9:1c:bd:e7:f3:12:4c:04: 2d:9e:9b:b6:e7:6c:00:ed:d0:54:27:59:46:d7:62:ad:e9:c5: 05:de:ae:e1:25:1d:72:09:41:5d:a5:0e:aa:fb:b0:94:0c:f6: 9f:f7:68:d5:c0:36:14:80:86:08:f2:95:70:34:ae:51:da:07: a5:4b:ba:1c:e0:ca:88:7e:d7:11:46:45:3a:20:71:54:1f:3c: 12:96:c0:77:13:3f:24:2d:d9:1e:d2:4b:79:83:ad:09:ff:67: 43:74:d2:26:74:0a:5c:c3:35:18:79:f3:9a:0f:7e:0c:32:ca: f1:b7:ea:86:b9:4d:5d:86:59:de:c8:c2:8a:5c:c2:c9:db:dd: dd:0a:b3:63:aa:a8:1e:1c:3c:95:d5:35:c4:5e:f8:78:9f:9c: 5b:9b:ac:71:2f:fd:56:d2:35:04:14:9b:36:77:a3:35:d9:be: a0:28:32:12:02:62:2d:5c:0d:1e:d6:87:b7:fa:83:a1:c0:df: 98:22:cc:6a:50:a8:b7:f0:9a:89:a9:df:5a:c3:d8:d4:2d:c8: b6:a5:b0:70:d6:c6:fb:2e:6b:6b:40:c2:8a:81:5f:68:a6:94: 64:68:4c:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsche3tAMC4GegMtektoQ7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk NzQ0YjcwHhcNMjUxMjE0MTEwMTM3WhcNMjUxMjE1MTEwMTM3WjAzMTEwLwYDVQQD EyhkNTI5YmYwZjE4YzUyYTBmY2JhZmIwNGUxODFmNmJkMmE2ODg4NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM7WgjDJ9JcL/HKklXqJw+wHlc7q O43bR7m0gbpGucHWGwowjwMVhtPp/7jaP3Ai6oftJ9Y8ep1AXu96IaKZr9eB45cM bfkaYwAwKkxQTQRnRfnapuihieQ0ULyh5jnxhICNLxLES+BhON3+euPXtV/AB/MO kgllaD/1H9Mim5qL0z0XlgqY0F8C0y+4CFt5tBYMicSXeQVl9fbPimlKZaVHMjP+ hLB5ieWYhTZbo6GnwlAwUBfRwWJuNT2M59fFtSrOS1rKE7YsCYfaMpbg8lHg2zGd BgmUYhMoj0Z3W2dbHZ9iNCYWq1u6nPWy8zWS7AbemWuvlxEsjLvQ4FbjswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUpvw8YxSoPy6+wThgfa9KmiIaTMB8GA1UdIwQY MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2 LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyM6RRwW oTf4PutbJbOrmMXbAo7WAE9GvjNvxskcvefzEkwELZ6btudsAO3QVCdZRtdirenF Bd6u4SUdcglBXaUOqvuwlAz2n/do1cA2FICGCPKVcDSuUdoHpUu6HODKiH7XEUZF OiBxVB88EpbAdxM/JC3ZHtJLeYOtCf9nQ3TSJnQKXMM1GHnzmg9+DDLK8bfqhrlN XYZZ3sjCilzCydvd3QqzY6qoHhw8ldU1xF74eJ+cW5uscS/9VtI1BBSbNnejNdm+ oCgyEgJiLVwNHtaHt/qDocDfmCLMalCot/CaianfWsPY1C3ItqWwcNbG+y5ra0DC ioFfaKaUZGhMmQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:14:17 2025 by rpki-client