This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json) Hash identifier: ASo/K8I55EiIecPxeulORV2MLVDfEqYygOPMmxAJ2ms= Subject key identifier: 04:4F:3A:50:1F:D6:C3:33:8D:EB:97:EE:C1:20:3C:C0:79:8A:1A:D5 Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42 Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842 Certificate serial: 019B378EABEC384749A1EDEDAFC1E6FAA283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft Manifest number: 136A Signing time: Fri 19 Dec 2025 17:00:55 +0000 Manifest this update: Fri 19 Dec 2025 17:00:55 +0000 Manifest next update: Sat 20 Dec 2025 17:00:55 +0000 Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=) 2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: wzjGnSutYxXQ/w5uRio+U2FUzj3Jq7botU5oBMpW8gY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:ab:ec:38:47:49:a1:ed:ed:af:c1:e6:fa:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842 Validity Not Before: Dec 19 17:00:55 2025 GMT Not After : Dec 20 17:00:55 2025 GMT Subject: CN=044f3a501fd6c3338deb97eec1203cc0798a1ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:0d:9a:c1:0c:0e:a7:06:65:0e:11:68:60: d3:af:72:bc:0f:4d:3f:c8:5a:f0:74:f8:c4:d3:b9: bd:60:20:62:1e:6f:c1:fa:0d:71:47:bb:b4:1b:d5: d5:17:6e:1a:99:c0:51:07:9b:f9:3e:cd:dc:3e:3e: 0f:84:55:e8:c3:9b:a5:4e:22:12:d9:ce:8c:79:74: 3f:cc:03:57:cc:af:14:5f:7c:2c:04:fb:5a:ca:fd: 35:38:f0:a1:5d:70:3a:3a:9c:89:b6:58:90:0b:5e: 5e:2e:76:7c:6a:10:4a:9a:f4:43:f8:72:54:f2:7b: 63:e9:f4:f1:51:3c:a3:d8:c6:53:36:55:81:50:4f: 2a:88:4a:b5:e0:00:6f:5b:09:60:0f:2b:f7:ea:81: f4:28:0e:b1:c6:98:98:f7:c4:a8:ac:06:bc:00:0f: 42:a7:22:12:b5:33:a5:84:bc:5f:5c:3e:41:69:cd: a3:bf:fb:56:a7:92:d8:88:f4:51:7e:18:f9:41:5e: 13:f1:88:d0:3e:b8:23:1b:53:ec:d1:ec:52:bb:5e: 1e:c4:a5:dc:a8:bf:73:54:d7:fa:28:66:ad:b4:94: 79:40:b1:82:7a:61:97:76:8d:c4:22:f6:19:b2:2e: 7b:b6:5b:fa:63:9d:09:20:83:f4:07:f3:25:2b:d2: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4F:3A:50:1F:D6:C3:33:8D:EB:97:EE:C1:20:3C:C0:79:8A:1A:D5 X509v3 Authority Key Identifier: keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:86:96:3b:6c:fe:d1:a0:db:3b:4f:83:5e:3c:d9:e4:92: 40:95:6e:50:ab:d1:9a:dd:2a:5a:aa:57:f6:80:a8:64:e2:f7: 15:57:f6:f6:20:97:75:e7:4b:5d:4b:b7:be:e1:dd:81:cd:59: 77:5a:dd:c2:1f:bf:84:6c:9c:a8:ad:f4:8e:ea:11:96:0d:69: fd:74:38:68:c1:e0:a8:9f:1e:38:44:57:f5:49:56:d5:a3:1f: 32:1c:65:37:81:c4:43:98:06:be:15:e2:1e:28:8a:e4:05:a6: 9d:aa:ff:91:06:5f:63:d2:0a:73:83:65:e8:77:b4:2c:21:64: 3a:e1:75:52:b5:80:1c:7b:f6:e9:7f:29:d1:06:23:97:cc:23: 22:fd:c3:6d:63:33:53:70:1e:0b:3c:cc:00:cf:83:0a:c9:45: 18:89:59:2c:e5:75:71:f4:f1:ad:e0:a6:29:f9:97:d2:04:bf: 90:e7:c3:4d:e9:a8:44:eb:9c:46:dc:7d:88:e2:39:32:e1:ea: 9c:bb:30:2b:23:6d:17:2d:20:c7:57:eb:61:ba:56:7e:bb:16: 83:e7:77:9d:10:90:9a:f7:a1:ec:13:e4:54:55:06:ba:ce:bc: 71:db:4f:19:18:a1:65:ac:fc:e6:1d:01:f8:e9:b1:3e:81:cc: 39:8a:c2:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jqvsOEdJoe3tr8Hm+qKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWQ0NWUzMTcyNTdlMTcwYTIwMzBlNzliMGY1Zjc0NDA2 YTc4NDIwHhcNMjUxMjE5MTcwMDU1WhcNMjUxMjIwMTcwMDU1WjAzMTEwLwYDVQQD EygwNDRmM2E1MDFmZDZjMzMzOGRlYjk3ZWVjMTIwM2NjMDc5OGExYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzcNmsEMDqcGZQ4RaGDTr3K8D00/ yFrwdPjE07m9YCBiHm/B+g1xR7u0G9XVF24amcBRB5v5Ps3cPj4PhFXow5ulTiIS 2c6MeXQ/zANXzK8UX3wsBPtayv01OPChXXA6OpyJtliQC15eLnZ8ahBKmvRD+HJU 8ntj6fTxUTyj2MZTNlWBUE8qiEq14ABvWwlgDyv36oH0KA6xxpiY98SorAa8AA9C pyIStTOlhLxfXD5Bac2jv/tWp5LYiPRRfhj5QV4T8YjQPrgjG1Ps0exSu14exKXc qL9zVNf6KGattJR5QLGCemGXdo3EIvYZsi57tlv6Y50JIIP0B/MlK9JiTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARPOlAf1sMzjeuX7sEgPMB5ihrVMB8GA1UdIwQY MBaAFI6tReMXJX4XCiAw55sPX3RAanhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmIt MDhiZGNkNTMzYjYxLzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmItMDhiZGNkNTMzYjYx LzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADr6Gljts /tGg2ztPg1482eSSQJVuUKvRmt0qWqpX9oCoZOL3FVf29iCXdedLXUu3vuHdgc1Z d1rdwh+/hGycqK30juoRlg1p/XQ4aMHgqJ8eOERX9UlW1aMfMhxlN4HEQ5gGvhXi HiiK5AWmnar/kQZfY9IKc4Nl6He0LCFkOuF1UrWAHHv26X8p0QYjl8wjIv3DbWMz U3AeCzzMAM+DCslFGIlZLOV1cfTxreCmKfmX0gS/kOfDTemoROucRtx9iOI5MuHq nLswKyNtFy0gx1frYbpWfrsWg+d3nRCQmveh7BPkVFUGus68cdtPGRihZaz85h0B +OmxPoHMOYrC+g== -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:20 2025 by rpki-client