This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft File: JQfjIVuSyGWOv0lfa4fOC6anvSc.mft (raw, json) Hash identifier: IDE8xzVr1Ifn4DkK1BauUQIzMFlo71kfyQz+Q8dw9Q0= Subject key identifier: E2:10:8E:65:C6:33:64:8F:E0:F2:47:D5:5D:5B:F3:94:41:ED:AE:5A Authority key identifier: 25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27 Certificate issuer: /CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27 Certificate serial: 019B221A1A75890107885BA1A90EEAD3BE67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft Manifest number: 091A Signing time: Mon 15 Dec 2025 13:01:34 +0000 Manifest this update: Mon 15 Dec 2025 13:01:34 +0000 Manifest next update: Tue 16 Dec 2025 13:01:34 +0000 Files and hashes: 1: JQfjIVuSyGWOv0lfa4fOC6anvSc.crl (hash: eRQKGzutkoON9dnLryRleZn+iyhZsgUeb3CoNuqA5K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:1a:1a:75:89:01:07:88:5b:a1:a9:0e:ea:d3:be:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27 Validity Not Before: Dec 15 13:01:34 2025 GMT Not After : Dec 16 13:01:34 2025 GMT Subject: CN=e2108e65c633648fe0f247d55d5bf39441edae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:cf:0b:43:e1:55:90:77:9f:48:0b:a9:9e: aa:3c:b4:a8:1a:44:38:4e:8e:78:7f:81:4d:b6:19: f5:c8:c0:d3:e5:76:2c:6b:4c:20:eb:51:e1:d4:9c: 14:76:f4:db:5a:6d:28:aa:3a:cd:3b:6d:c0:21:90: 3d:e7:a2:fc:b2:88:af:af:eb:86:23:d9:17:49:c5: 07:93:b8:fe:7b:c1:23:8d:0d:65:b9:dd:31:c0:0b: 76:c2:4e:cf:64:aa:be:12:75:d1:25:b4:2d:c4:a8: e4:d9:53:4e:1a:35:6f:2c:11:46:97:d6:84:a4:d5: 02:38:55:c1:83:20:69:55:33:f0:e0:3c:6a:12:3d: 42:14:d6:f3:e8:81:2a:b5:6d:1d:2f:fa:52:ef:bc: 9e:8d:53:da:32:8a:b3:06:0e:f1:f7:9b:8e:04:8d: f9:db:32:53:10:16:68:12:a4:a0:2b:06:36:32:cf: 34:da:2b:4d:86:2a:58:58:ea:77:57:b4:69:63:9d: d3:74:c8:ae:4e:87:59:2e:8a:a3:3c:98:94:52:79: 40:15:ba:06:5a:c9:47:13:91:3a:1a:75:7f:8b:6b: 00:4d:44:25:d5:27:73:17:e5:43:ef:2b:b2:c3:54: 7a:73:69:cf:53:06:1a:58:40:fb:1c:1a:0e:4b:0a: de:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:8E:65:C6:33:64:8F:E0:F2:47:D5:5D:5B:F3:94:41:ED:AE:5A X509v3 Authority Key Identifier: keyid:25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ad:ff:cd:53:a8:af:8c:33:cc:a6:1a:79:28:ef:f3:2b:7b: 8e:bd:af:4a:2c:84:b6:46:fb:c4:15:62:62:c0:32:97:04:5b: 04:63:dd:3d:fd:e9:a5:9a:65:fb:6c:b8:40:50:71:d2:42:09: 03:fc:00:56:e4:bb:d0:07:06:9a:f8:25:bd:41:f5:10:f2:0f: b0:88:c6:8d:86:af:71:0c:65:d4:a8:fa:7c:37:ce:7a:71:9a: 25:56:52:e7:48:1a:ea:b2:36:2d:59:05:41:7d:3c:0d:19:38: 5a:74:2a:c1:5e:47:b2:6c:14:7d:15:ce:dc:ed:0d:fb:bf:fb: 9d:a9:74:25:ba:2c:fd:b0:45:8f:8a:0e:01:bf:e2:b5:0b:98: 40:03:de:1b:64:3d:f5:d7:5f:9f:ad:88:a6:e4:9b:66:f4:1e: f9:2e:d6:d2:fa:2b:f0:6c:07:c4:0e:23:70:d0:db:16:ce:0d: 4d:42:e8:d3:2c:f8:d0:f9:df:40:1d:f4:8b:d7:4e:63:a4:47: f8:1b:59:26:ee:62:28:99:cd:47:18:94:28:dd:95:ab:0e:76: fd:7b:00:c7:4e:1f:19:b8:6f:5f:7a:98:57:9f:0b:8c:ae:5b: cc:45:5b:8c:a3:c6:8a:a9:ae:a8:6d:5e:76:fa:b9:9a:70:f8: 87:4b:2b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGhp1iQEHiFuhqQ7q075nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MDdlMzIxNWI5MmM4NjU4ZWJmNDk1ZjZiODdjZTBiYTZh N2JkMjcwHhcNMjUxMjE1MTMwMTM0WhcNMjUxMjE2MTMwMTM0WjAzMTEwLwYDVQQD EyhlMjEwOGU2NWM2MzM2NDhmZTBmMjQ3ZDU1ZDViZjM5NDQxZWRhZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA3PC0PhVZB3n0gLqZ6qPLSoGkQ4 To54f4FNthn1yMDT5XYsa0wg61Hh1JwUdvTbWm0oqjrNO23AIZA956L8soivr+uG I9kXScUHk7j+e8EjjQ1lud0xwAt2wk7PZKq+EnXRJbQtxKjk2VNOGjVvLBFGl9aE pNUCOFXBgyBpVTPw4DxqEj1CFNbz6IEqtW0dL/pS77yejVPaMoqzBg7x95uOBI35 2zJTEBZoEqSgKwY2Ms802itNhipYWOp3V7RpY53TdMiuTodZLoqjPJiUUnlAFboG WslHE5E6GnV/i2sATUQl1SdzF+VD7yuyw1R6c2nPUwYaWED7HBoOSwre0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIQjmXGM2SP4PJH1V1b85RB7a5aMB8GA1UdIwQY MBaAFCUH4yFbkshljr9JX2uHzgump70nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlFmaklWdVN5R1dPdjBsZmE0Zk9DNmFudlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZWVmMWItYzMwYi00ZWQ3LWFmMmEt MDFjMzU2YjczZjBkLzEvSlFmaklWdVN5R1dPdjBsZmE0Zk9DNmFudlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZWVmMWItYzMwYi00ZWQ3LWFmMmEtMDFjMzU2YjczZjBk LzEvSlFmaklWdVN5R1dPdjBsZmE0Zk9DNmFudlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK3/zVOo r4wzzKYaeSjv8yt7jr2vSiyEtkb7xBViYsAylwRbBGPdPf3ppZpl+2y4QFBx0kIJ A/wAVuS70AcGmvglvUH1EPIPsIjGjYavcQxl1Kj6fDfOenGaJVZS50ga6rI2LVkF QX08DRk4WnQqwV5HsmwUfRXO3O0N+7/7nal0Jbos/bBFj4oOAb/itQuYQAPeG2Q9 9ddfn62IpuSbZvQe+S7W0vor8GwHxA4jcNDbFs4NTULo0yz40PnfQB30i9dOY6RH +BtZJu5iKJnNRxiUKN2Vqw52/XsAx04fGbhvX3qYV58LjK5bzEVbjKPGiqmuqG1e dvq5mnD4h0sr0w== -----END CERTIFICATE-----Generated at Mon Dec 15 20:13:40 2025 by rpki-client