This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json) Hash identifier: a/IERgN/ziaRFCLbM52ZTXFfHtmGGHB01sdi7g9FzQA= Subject key identifier: 63:F6:9A:0C:D7:3C:86:E8:E6:75:F9:42:24:40:81:B0:72:B3:12:A9 Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0 Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0 Certificate serial: 019B5A884F764667ECE0A0D7A3937624AE49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 12:00:41 +0000 Manifest this update: Fri 26 Dec 2025 12:00:41 +0000 Manifest next update: Sat 27 Dec 2025 12:00:41 +0000 Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: f5aUBV3TRt0uoRQOuugMR/mJliXBncNiKYtOqq1CJ44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:4f:76:46:67:ec:e0:a0:d7:a3:93:76:24:ae:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0 Validity Not Before: Dec 26 12:00:41 2025 GMT Not After : Dec 27 12:00:41 2025 GMT Subject: CN=63f69a0cd73c86e8e675f942244081b072b312a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:72:a4:68:da:27:1f:ba:b4:c8:e8:40:ab: 7e:9b:a2:b5:18:40:14:b2:28:58:0b:d0:b7:17:14: 80:b0:ac:ad:fc:15:49:70:ca:14:6b:9c:87:49:0d: b3:e4:23:c2:86:16:63:d5:46:78:96:49:0d:a2:4f: 92:f3:62:37:70:b2:73:b3:87:91:f1:cf:ec:bd:b9: 8b:de:70:54:d4:46:cc:fc:90:6a:a5:92:f1:d9:53: 97:cb:a1:a6:a5:12:45:df:80:f9:dd:01:41:65:15: a9:8c:bd:e8:d9:5e:9d:5c:12:8a:73:55:5e:b9:91: cb:7d:9b:4a:64:ed:7d:43:db:a6:c2:e6:e8:eb:49: 7b:4d:41:96:9a:9a:a5:5a:0e:01:46:8d:92:17:a5: 3f:a5:a7:a0:e0:0b:b6:5c:0e:ad:37:24:1d:96:35: 3a:1e:45:9b:ef:76:7d:b4:12:41:d9:e3:52:c5:14: 6a:b5:0a:8d:82:1e:c5:0d:10:66:c5:d7:12:7a:2f: db:9d:d8:65:85:03:ef:d7:a1:d7:b8:95:ef:4f:f1: 56:8a:e4:fb:54:3b:69:71:38:4b:30:85:fd:4c:50: 85:f7:14:d4:12:05:2f:3f:df:59:ff:d0:bb:17:ad: 8f:59:06:5f:b9:a2:fa:a4:d7:03:99:9e:35:70:93: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:9A:0C:D7:3C:86:E8:E6:75:F9:42:24:40:81:B0:72:B3:12:A9 X509v3 Authority Key Identifier: keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:98:55:fe:c7:73:9e:40:80:de:b3:9a:40:12:80:78:2e:1c: 79:bd:4f:32:d0:6c:06:3d:0e:1b:8c:96:f9:e0:f8:24:97:48: 47:4a:84:57:ff:f0:c9:13:5f:fe:0b:9f:00:0c:f6:d0:7d:c6: 69:a3:43:51:a0:7e:26:99:5c:88:cb:71:5f:36:d8:92:39:07: bb:a3:a0:72:98:eb:29:fa:33:40:2d:db:dc:23:07:8d:a6:cd: 45:d5:ed:24:95:32:7d:60:92:f3:65:e6:01:ea:50:74:86:55: 08:0e:7f:16:11:6b:39:ed:1a:19:59:cf:68:5e:56:f8:4e:1b: 62:63:b5:e9:ea:68:b2:02:20:fa:e1:88:2d:69:9b:b6:4a:1a: c4:d8:59:57:a9:ce:98:c9:a7:72:68:a9:cf:8d:e3:93:0a:87: 93:a0:fb:1e:be:28:c7:fd:30:2f:34:99:35:9b:93:f4:27:59: 9d:fa:d5:93:91:14:15:45:b6:d3:d1:f8:89:58:c6:66:81:aa: 63:69:f0:26:d2:56:e5:a0:3b:c3:07:81:3b:5b:4c:a7:70:2d: af:57:c7:ea:10:ad:21:55:19:04:64:3a:fb:df:98:f4:12:96: fe:f2:1a:ff:e2:b6:16:1f:0f:6a:68:e9:85:ad:36:e6:ae:26: 1d:00:fe:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiE92Rmfs4KDXo5N2JK5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZjQzMTU5MmRlY2YyODVjMzMyZDMwNjI1MzFjMGU3Y2Y2 MTAyYzAwHhcNMjUxMjI2MTIwMDQxWhcNMjUxMjI3MTIwMDQxWjAzMTEwLwYDVQQD Eyg2M2Y2OWEwY2Q3M2M4NmU4ZTY3NWY5NDIyNDQwODFiMDcyYjMxMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgJypGjaJx+6tMjoQKt+m6K1GEAU sihYC9C3FxSAsKyt/BVJcMoUa5yHSQ2z5CPChhZj1UZ4lkkNok+S82I3cLJzs4eR 8c/svbmL3nBU1EbM/JBqpZLx2VOXy6GmpRJF34D53QFBZRWpjL3o2V6dXBKKc1Ve uZHLfZtKZO19Q9umwubo60l7TUGWmpqlWg4BRo2SF6U/paeg4Au2XA6tNyQdljU6 HkWb73Z9tBJB2eNSxRRqtQqNgh7FDRBmxdcSei/bndhlhQPv16HXuJXvT/FWiuT7 VDtpcThLMIX9TFCF9xTUEgUvP99Z/9C7F62PWQZfuaL6pNcDmZ41cJMykwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP2mgzXPIbo5nX5QiRAgbBysxKpMB8GA1UdIwQY MBaAFI/0MVkt7PKFwzLTBiUxwOfPYQLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZTFmZWQtMmU4Ni00NGE5LThhNjct NDRiNzhlNzg4ZGViLzEval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iZTFmZWQtMmU4Ni00NGE5LThhNjctNDRiNzhlNzg4ZGVi LzEval9ReFdTM3M4b1hETXRNR0pUSEE1ODloQXNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHphV/sdz nkCA3rOaQBKAeC4ceb1PMtBsBj0OG4yW+eD4JJdIR0qEV//wyRNf/gufAAz20H3G aaNDUaB+JplciMtxXzbYkjkHu6OgcpjrKfozQC3b3CMHjabNRdXtJJUyfWCS82Xm AepQdIZVCA5/FhFrOe0aGVnPaF5W+E4bYmO16eposgIg+uGILWmbtkoaxNhZV6nO mMmncmipz43jkwqHk6D7Hr4ox/0wLzSZNZuT9CdZnfrVk5EUFUW209H4iVjGZoGq Y2nwJtJW5aA7wweBO1tMp3Atr1fH6hCtIVUZBGQ6+9+Y9BKW/vIa/+K2Fh8Pamjp ha025q4mHQD+CQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:34 2025 by rpki-client