This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft File: JQfjIVuSyGWOv0lfa4fOC6anvSc.mft (raw, json) Hash identifier: +PSK152L8G6TI53G+VISIbeQV8ihZb/n4TAHcOtYAh4= Subject key identifier: 40:9E:C1:B1:E5:E0:F7:14:08:73:E4:EF:E3:2B:2A:01:26:96:CC:B9 Authority key identifier: 25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27 Certificate issuer: /CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27 Certificate serial: 019AF3C047BF901B62590A26EAA1449011C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft Manifest number: 0902 Signing time: Sat 06 Dec 2025 13:00:56 +0000 Manifest this update: Sat 06 Dec 2025 13:00:56 +0000 Manifest next update: Sun 07 Dec 2025 13:00:56 +0000 Files and hashes: 1: JQfjIVuSyGWOv0lfa4fOC6anvSc.crl (hash: AVmBqN7WOwqLXCTpceFj6+HQAyCmoSHR1vhp36CSVqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:47:bf:90:1b:62:59:0a:26:ea:a1:44:90:11:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2507e3215b92c8658ebf495f6b87ce0ba6a7bd27 Validity Not Before: Dec 6 13:00:56 2025 GMT Not After : Dec 7 13:00:56 2025 GMT Subject: CN=409ec1b1e5e0f7140873e4efe32b2a012696ccb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:4e:31:49:e9:98:ba:cb:72:c6:1a:a7:64: 12:9f:2b:a6:6f:23:02:e4:df:fb:48:50:47:7b:1e: 45:7f:ee:cb:34:ca:13:97:c6:00:54:4a:10:92:87: 4d:51:66:7d:45:9e:0a:6f:23:bb:67:ac:3c:75:5b: 45:d9:04:ad:10:2f:f1:40:56:be:da:3f:a3:e2:d2: 62:72:93:a7:ba:8b:fb:c5:67:cd:62:47:d7:42:f0: b0:d1:67:b2:01:3e:35:5e:74:7d:39:be:fc:56:23: 26:c1:88:25:e7:ac:ab:bc:4e:38:1c:82:84:fb:69: 35:7c:a8:b1:b3:23:6a:95:5c:61:4d:b9:63:d8:fd: 89:88:1e:be:95:c8:71:86:fc:3e:f9:ec:c3:78:a0: 5c:16:9e:27:bb:a1:b2:64:ca:7c:5b:95:19:ef:87: 09:a7:84:fb:59:f5:b9:eb:23:a2:68:05:8b:87:40: 02:9a:27:1e:1c:51:27:92:e3:b7:90:5e:0c:65:f3: 17:38:34:d9:08:d1:0f:94:59:91:a6:90:5f:cc:c8: a8:b8:cc:50:2e:f1:00:8b:33:f3:52:61:4a:7f:dc: 1e:81:3b:84:58:83:d8:e0:9e:ef:4a:b2:a7:b6:92: 1d:6a:3e:e6:e8:31:b9:b7:5d:f9:28:85:cf:1c:f1: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9E:C1:B1:E5:E0:F7:14:08:73:E4:EF:E3:2B:2A:01:26:96:CC:B9 X509v3 Authority Key Identifier: keyid:25:07:E3:21:5B:92:C8:65:8E:BF:49:5F:6B:87:CE:0B:A6:A7:BD:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQfjIVuSyGWOv0lfa4fOC6anvSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4eef1b-c30b-4ed7-af2a-01c356b73f0d/1/JQfjIVuSyGWOv0lfa4fOC6anvSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:40:da:1f:8b:19:13:b4:f7:66:2f:dc:e0:0f:aa:ac:f9:80: 03:18:37:af:3e:22:00:5c:90:8c:77:9e:3e:de:1a:01:f7:f7: 02:31:77:7d:31:46:44:1a:8f:88:7f:e8:7d:60:05:62:dd:80: c1:30:8e:9e:9c:0c:a4:d0:8b:54:10:c9:b1:b2:fb:03:ec:ce: 4f:f9:d6:06:27:71:30:ca:d9:94:99:1c:fc:02:b7:c8:3c:db: ee:52:b5:68:93:8e:a8:61:2f:0e:02:ed:b4:af:de:3a:03:91: b0:28:80:14:87:9a:37:b2:08:02:b3:f8:7a:c8:0c:8e:74:e6: b4:50:fc:3d:aa:12:82:8f:a3:41:00:61:cd:ec:9c:cc:98:a2: 4b:96:46:f2:6d:d0:58:10:ae:cf:c5:2d:13:1f:99:70:b1:a3: 95:89:01:a8:16:97:bb:18:26:e6:77:f7:9f:dd:3e:b7:d1:79: 39:ad:20:6a:bf:68:ff:12:96:f5:f5:f8:ff:e0:f7:14:e1:60: 9b:94:e7:90:e6:88:1f:61:a8:d7:91:be:d1:3f:6d:29:35:12: f4:bc:c4:5c:5d:20:f7:7a:e0:ca:7a:bd:43:ca:3c:6f:19:3b: 2e:3d:8a:68:99:28:e7:49:8e:5c:44:0c:3c:86:31:dd:c3:09: 26:27:80:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEe/kBtiWQom6qFEkBHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MDdlMzIxNWI5MmM4NjU4ZWJmNDk1ZjZiODdjZTBiYTZh N2JkMjcwHhcNMjUxMjA2MTMwMDU2WhcNMjUxMjA3MTMwMDU2WjAzMTEwLwYDVQQD Eyg0MDllYzFiMWU1ZTBmNzE0MDg3M2U0ZWZlMzJiMmEwMTI2OTZjY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn5OMUnpmLrLcsYap2QSnyumbyMC 5N/7SFBHex5Ff+7LNMoTl8YAVEoQkodNUWZ9RZ4KbyO7Z6w8dVtF2QStEC/xQFa+ 2j+j4tJicpOnuov7xWfNYkfXQvCw0WeyAT41XnR9Ob78ViMmwYgl56yrvE44HIKE +2k1fKixsyNqlVxhTblj2P2JiB6+lchxhvw++ezDeKBcFp4nu6GyZMp8W5UZ74cJ p4T7WfW56yOiaAWLh0ACmiceHFEnkuO3kF4MZfMXODTZCNEPlFmRppBfzMiouMxQ LvEAizPzUmFKf9wegTuEWIPY4J7vSrKntpIdaj7m6DG5t135KIXPHPHm3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECewbHl4PcUCHPk7+MrKgEmlsy5MB8GA1UdIwQY MBaAFCUH4yFbkshljr9JX2uHzgump70nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlFmaklWdVN5R1dPdjBsZmE0Zk9DNmFudlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZWVmMWItYzMwYi00ZWQ3LWFmMmEt MDFjMzU2YjczZjBkLzEvSlFmaklWdVN5R1dPdjBsZmE0Zk9DNmFudlNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZWVmMWItYzMwYi00ZWQ3LWFmMmEtMDFjMzU2YjczZjBk LzEvSlFmaklWdVN5R1dPdjBsZmE0Zk9DNmFudlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkDaH4sZ E7T3Zi/c4A+qrPmAAxg3rz4iAFyQjHeePt4aAff3AjF3fTFGRBqPiH/ofWAFYt2A wTCOnpwMpNCLVBDJsbL7A+zOT/nWBidxMMrZlJkc/AK3yDzb7lK1aJOOqGEvDgLt tK/eOgORsCiAFIeaN7IIArP4esgMjnTmtFD8PaoSgo+jQQBhzeyczJiiS5ZG8m3Q WBCuz8UtEx+ZcLGjlYkBqBaXuxgm5nf3n90+t9F5Oa0gar9o/xKW9fX4/+D3FOFg m5TnkOaIH2Go15G+0T9tKTUS9LzEXF0g93rgynq9Q8o8bxk7Lj2KaJko50mOXEQM PIYx3cMJJieAwA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:19 2025 by rpki-client