This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json) Hash identifier: qA30v8CSYlcqr9FoBgJYpJqmMw/IVN9RWcsHr3wqozE= Subject key identifier: B4:06:C9:4D:E9:E3:9D:C7:50:F8:F4:3D:7F:E4:B4:2E:25:5F:B4:42 Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b Certificate serial: 019AF12D334E5D2978496060B69D2AEF62DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft Manifest number: 0A1D Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=) 2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: khGXgTQ4PUTzT058DnCxF3qPx2zLvEbsZyH6hyF47FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:33:4e:5d:29:78:49:60:60:b6:9d:2a:ef:62:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=b406c94de9e39dc750f8f43d7fe4b42e255fb442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:50:ed:9e:8f:f4:eb:11:54:1d:45:fe:03: 77:17:46:a9:61:71:0d:c4:90:34:4b:72:e5:4c:17: cd:f7:1b:33:89:8c:95:76:c3:9d:7d:3e:9e:93:55: ca:fc:fb:cc:f7:3f:79:c6:72:8b:cf:31:16:b4:3b: dd:95:76:df:28:3f:64:23:68:d2:58:b5:95:34:f5: d6:23:c4:fa:35:22:62:cb:34:7d:52:2f:9a:45:a0: dc:80:96:cf:82:ca:47:47:3e:43:c2:a2:d4:5d:b6: 68:2f:cf:bf:4f:96:2d:0e:d4:4f:5d:42:4c:6e:48: fc:89:f2:42:f3:da:78:17:47:cc:88:37:0d:06:63: c3:d5:3e:c5:43:ae:cb:99:32:a1:16:9d:e8:c4:ed: 3d:67:5a:c4:7f:ab:9d:3d:0b:11:bb:d1:84:a3:f1: 22:3e:34:9b:a0:58:8c:4f:4a:96:06:4c:98:9c:5d: 6a:6e:cc:0e:1e:15:75:f4:d7:1e:46:1b:77:f4:31: 03:b1:bb:19:24:af:5b:7c:aa:ac:26:7e:79:fb:00: 37:37:40:b5:26:b0:07:9c:1a:dd:d3:66:a5:d8:5d: 72:90:13:2f:34:93:65:b9:53:4c:7b:e4:3d:8a:cc: e1:4e:99:c0:0b:44:81:2f:0a:ec:1c:ea:eb:12:c6: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:06:C9:4D:E9:E3:9D:C7:50:F8:F4:3D:7F:E4:B4:2E:25:5F:B4:42 X509v3 Authority Key Identifier: keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:38:31:9b:98:ec:18:01:d3:67:09:39:12:13:07:c2:8a:d1: 24:94:cc:7a:66:1f:74:2c:c7:60:89:f2:56:95:50:08:74:33: 95:04:67:1f:bb:16:44:c9:30:fa:4f:63:c3:72:08:d1:7c:52: 90:79:11:2b:41:71:c3:12:a0:fa:1d:a4:22:7f:a3:27:b5:c4: c5:50:ab:ef:09:5c:df:ae:0f:34:f6:12:cf:48:29:3b:2a:f3: 80:97:a4:24:6a:83:58:78:c8:c8:90:57:eb:12:a2:5c:1c:1e: 44:98:39:4a:46:df:b2:8b:55:da:15:d3:b5:51:4e:cd:f4:d9: 77:15:ce:8c:f4:dc:47:42:63:0a:42:ab:41:bf:4b:57:32:3f: d7:78:99:1d:ac:c2:95:e4:c7:7a:aa:77:be:bc:84:3b:bf:95: c1:a2:9d:e1:11:b3:86:97:1f:59:bf:b3:ba:9e:18:8c:b7:26: f0:61:6d:0a:41:9c:4f:8d:6d:d4:4e:09:21:16:75:c0:bb:e9: 3f:0a:90:7e:5f:ce:8d:b5:3e:51:80:6c:65:83:99:b7:8c:89: 63:aa:ff:61:2f:14:3e:82:53:da:76:ef:8d:89:ca:99:23:e2: 2c:23:be:83:71:be:5e:3d:92:80:a7:0c:c5:74:02:a3:69:58: 79:6b:0b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTNOXSl4SWBgtp0q72LeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjQzYWJiN2M1NzFhYWE5Y2UyMjNjZjYxYzQ3ZTU0Zjll MWNhM2IwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EyhiNDA2Yzk0ZGU5ZTM5ZGM3NTBmOGY0M2Q3ZmU0YjQyZTI1NWZiNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLxQ7Z6P9OsRVB1F/gN3F0apYXEN xJA0S3LlTBfN9xsziYyVdsOdfT6ek1XK/PvM9z95xnKLzzEWtDvdlXbfKD9kI2jS WLWVNPXWI8T6NSJiyzR9Ui+aRaDcgJbPgspHRz5DwqLUXbZoL8+/T5YtDtRPXUJM bkj8ifJC89p4F0fMiDcNBmPD1T7FQ67LmTKhFp3oxO09Z1rEf6udPQsRu9GEo/Ei PjSboFiMT0qWBkyYnF1qbswOHhV19NceRht39DEDsbsZJK9bfKqsJn55+wA3N0C1 JrAHnBrd02al2F1ykBMvNJNluVNMe+Q9iszhTpnAC0SBLwrsHOrrEsaFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQGyU3p453HUPj0PX/ktC4lX7RCMB8GA1UdIwQY MBaAFI0kOrt8VxqqnOIjz2HEflT54co7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3Nzgt MTUxODVmNGRkOTU1LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3NzgtMTUxODVmNGRkOTU1 LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjgxm5js GAHTZwk5EhMHworRJJTMemYfdCzHYInyVpVQCHQzlQRnH7sWRMkw+k9jw3II0XxS kHkRK0FxwxKg+h2kIn+jJ7XExVCr7wlc364PNPYSz0gpOyrzgJekJGqDWHjIyJBX 6xKiXBweRJg5SkbfsotV2hXTtVFOzfTZdxXOjPTcR0JjCkKrQb9LVzI/13iZHazC leTHeqp3vryEO7+VwaKd4RGzhpcfWb+zup4YjLcm8GFtCkGcT41t1E4JIRZ1wLvp PwqQfl/OjbU+UYBsZYOZt4yJY6r/YS8UPoJT2nbvjYnKmSPiLCO+g3G+Xj2SgKcM xXQCo2lYeWsLfw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:05 2025 by rpki-client