This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json) Hash identifier: KiF9xhrWeBnQjjNI5+XoN04MHc42vi7Tif3Rlasjp3s= Subject key identifier: 3E:02:42:43:1F:87:51:A3:BE:8F:F1:B9:95:EB:C1:30:2E:7A:DB:E3 Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Certificate serial: 019B1A29A86AC47CB1DBC3F61CD69308B644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft Manifest number: 1677 Signing time: Sun 14 Dec 2025 00:01:36 +0000 Manifest this update: Sun 14 Dec 2025 00:01:36 +0000 Manifest next update: Mon 15 Dec 2025 00:01:36 +0000 Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=) 2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=) 3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: ycEFRQKqBQEg7BDXNI6E2et76LRRxhJSfF3bgGj3J8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:a8:6a:c4:7c:b1:db:c3:f6:1c:d6:93:08:b6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Validity Not Before: Dec 14 00:01:36 2025 GMT Not After : Dec 15 00:01:36 2025 GMT Subject: CN=3e0242431f8751a3be8ff1b995ebc1302e7adbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:41:ba:34:f7:75:10:35:3d:8e:23:1c:e0: 3c:44:d0:9b:9f:dc:46:a2:17:86:69:3f:30:38:b4: 2b:c4:85:f4:60:cc:0c:99:f9:cf:30:84:74:00:7b: c1:e5:53:4b:64:b7:9b:e0:17:e6:bd:98:0d:b7:d6: 36:91:f7:ef:3b:98:d1:21:96:21:ff:27:c7:40:5b: ed:fd:d9:9a:72:f8:0e:04:ca:75:12:10:1f:fc:ed: 91:53:61:45:89:21:f7:a5:b0:0a:a9:62:c0:27:b2: 56:2c:19:88:53:8b:20:86:86:01:3c:7f:a4:54:81: 3d:b4:0b:a4:af:ef:47:8f:2a:38:96:23:74:bd:08: 1e:33:5b:0c:46:40:f1:01:f6:a3:c4:74:c1:f0:9c: 0e:9f:aa:1c:12:9e:ca:06:2b:1b:c8:3f:d3:6c:37: 0a:ea:43:c8:63:21:98:04:0d:bf:2d:ca:44:68:a1: 29:68:32:c7:ac:c2:fa:83:0f:d7:61:3a:f0:42:0f: 77:61:bf:5c:e4:19:cf:b9:62:ff:fb:21:9e:ca:9f: a0:23:c4:27:5c:22:f7:d4:9f:43:19:1a:31:e4:12: f0:82:c4:a6:f3:87:3c:e1:f9:31:30:74:45:71:47: 2f:13:69:3e:e0:aa:4c:8c:54:cb:cd:0f:bc:f5:6e: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:42:43:1F:87:51:A3:BE:8F:F1:B9:95:EB:C1:30:2E:7A:DB:E3 X509v3 Authority Key Identifier: keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:07:49:b2:09:18:37:8a:b7:e4:3b:b9:bb:8a:f7:50:97:8e: 4c:30:75:17:17:bb:45:1b:24:30:a6:48:81:2f:8d:87:8d:6b: 20:21:da:5b:dd:87:a5:59:b4:3a:ce:ae:52:a9:5d:aa:42:52: 4f:69:2e:bd:c4:06:05:d4:d1:07:1d:95:59:85:a4:8b:ee:06: 6e:13:55:c9:4b:ba:b1:58:69:a4:f0:58:e4:89:e5:db:86:2e: 4d:8c:98:06:79:23:5d:77:a2:f2:1c:65:5e:65:b7:6e:24:b4: d2:51:6d:35:f9:f2:d0:b7:d6:a2:bd:c9:5c:c2:ae:8f:d0:15: 45:5a:c3:55:10:1a:bb:cd:13:f8:a4:d7:60:65:a9:e0:e2:76: a5:60:65:83:00:5f:25:fb:c5:36:51:e2:71:59:46:4e:b0:6b: 57:ff:3f:71:85:2d:eb:96:f5:1d:8b:f6:7e:3e:3e:a2:cd:14: 87:5a:ab:c7:8a:63:84:21:a5:eb:d5:b5:d9:63:e7:69:94:14: d8:bf:0e:42:94:60:f9:08:db:60:18:7b:31:b0:81:79:fd:31: b4:c1:68:3f:ce:e0:61:47:ba:c5:9b:60:c4:35:05:1a:4a:db: b5:92:e8:9f:45:ba:d2:52:0a:da:c6:82:31:a9:64:b7:f4:a9: 2e:58:93:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKahqxHyx28P2HNaTCLZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk ZTQwYTAwHhcNMjUxMjE0MDAwMTM2WhcNMjUxMjE1MDAwMTM2WjAzMTEwLwYDVQQD EygzZTAyNDI0MzFmODc1MWEzYmU4ZmYxYjk5NWViYzEzMDJlN2FkYmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH1BujT3dRA1PY4jHOA8RNCbn9xG oheGaT8wOLQrxIX0YMwMmfnPMIR0AHvB5VNLZLeb4BfmvZgNt9Y2kffvO5jRIZYh /yfHQFvt/dmacvgOBMp1EhAf/O2RU2FFiSH3pbAKqWLAJ7JWLBmIU4sghoYBPH+k VIE9tAukr+9Hjyo4liN0vQgeM1sMRkDxAfajxHTB8JwOn6ocEp7KBisbyD/TbDcK 6kPIYyGYBA2/LcpEaKEpaDLHrML6gw/XYTrwQg93Yb9c5BnPuWL/+yGeyp+gI8Qn XCL31J9DGRox5BLwgsSm84c84fkxMHRFcUcvE2k+4KpMjFTLzQ+89W7/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4CQkMfh1Gjvo/xuZXrwTAuetvjMB8GA1UdIwQY MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAdJsgkY N4q35Du5u4r3UJeOTDB1Fxe7RRskMKZIgS+Nh41rICHaW92HpVm0Os6uUqldqkJS T2kuvcQGBdTRBx2VWYWki+4GbhNVyUu6sVhppPBY5Inl24YuTYyYBnkjXXei8hxl XmW3biS00lFtNfny0LfWor3JXMKuj9AVRVrDVRAau80T+KTXYGWp4OJ2pWBlgwBf JfvFNlHicVlGTrBrV/8/cYUt65b1HYv2fj4+os0Uh1qrx4pjhCGl69W12WPnaZQU 2L8OQpRg+QjbYBh7MbCBef0xtMFoP87gYUe6xZtgxDUFGkrbtZLon0W60lIK2saC Malkt/SpLliTZQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:52:48 2025 by rpki-client