This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json) Hash identifier: ld6WaHawToH2VG2HfkQYaY9croV//0UBmiTDhZujpoE= Subject key identifier: 23:2D:2D:E5:C5:49:8A:65:A0:6E:93:B5:63:B0:88:E8:B8:D2:C0:F5 Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2 Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2 Certificate serial: 019AF509F5591FAA497333A5440B9A14DC90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:01:01 +0000 Manifest this update: Sat 06 Dec 2025 19:01:01 +0000 Manifest next update: Sun 07 Dec 2025 19:01:01 +0000 Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: gZf7CDnLOwRdhs8lsVdP4ezNU0LiOzVJOlQzmJ1i6eQ=) 2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f5:59:1f:aa:49:73:33:a5:44:0b:9a:14:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2 Validity Not Before: Dec 6 19:01:01 2025 GMT Not After : Dec 7 19:01:01 2025 GMT Subject: CN=232d2de5c5498a65a06e93b563b088e8b8d2c0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:97:4b:b9:c4:e5:c6:15:a8:16:71:ed:5c: b1:ea:25:d4:ed:cf:c8:0e:6b:9d:db:b4:62:24:30: 6d:9f:a3:09:d4:75:b4:1e:85:91:f2:8c:ae:99:b5: 26:48:a9:6e:8e:d2:99:1a:37:78:c8:08:f3:0a:bf: d1:57:23:2b:e7:dd:65:f2:9f:f8:34:4d:b4:37:1b: ad:a7:a3:23:d0:d2:ec:f5:84:e8:15:79:30:0f:f9: f8:dc:85:46:05:a0:84:f3:90:75:80:70:f8:87:1e: 3d:98:86:52:10:f8:76:15:1b:64:4a:8b:4e:46:eb: f1:a8:b1:e7:6a:e9:30:0f:8c:1c:64:d8:d5:11:21: bd:e8:1f:e4:43:76:12:6e:41:ed:c5:75:d4:72:d7: 65:6b:43:e4:9d:7a:97:58:bf:71:31:73:6a:ab:5f: 79:9a:ac:94:87:c3:a9:af:b5:52:6c:20:ed:eb:a3: 8f:ec:ce:78:7b:54:ef:79:e7:40:d7:2a:d9:07:6d: e6:3c:af:04:61:fe:d3:71:b3:88:98:63:4c:aa:9b: 0b:a5:e5:47:30:0e:32:bb:f3:cd:d0:c2:2b:84:dd: 48:86:07:c3:5b:a5:10:3a:9a:b8:6d:6e:4d:6a:23: 3b:73:a5:28:06:de:3d:88:79:40:87:25:65:65:40: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:2D:E5:C5:49:8A:65:A0:6E:93:B5:63:B0:88:E8:B8:D2:C0:F5 X509v3 Authority Key Identifier: keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:82:7a:de:28:05:28:e5:cc:eb:08:12:ae:03:15:d9:55:2a: 24:9a:68:69:13:16:d2:2d:e0:79:81:77:f9:a8:53:82:38:63: 7d:74:be:8b:ea:8a:10:0d:4a:ce:87:96:90:24:8c:4e:e2:c6: 6c:08:81:8a:e8:36:00:43:48:79:30:10:17:f4:80:e4:f7:e5: 18:4d:d9:e0:c0:9e:fb:4b:9a:f8:64:08:63:11:a1:d4:98:39: 04:f5:cb:c9:e9:00:70:9d:52:0b:e2:28:bc:52:72:ea:ee:d1: 28:48:5a:f1:c6:01:a6:b7:b1:b3:9f:be:a6:62:12:9b:6b:e2: 93:04:1e:84:8a:92:12:e9:53:41:52:18:58:d4:ee:00:73:47: cf:b9:48:79:33:7e:c4:78:48:66:b3:a1:a4:5c:08:77:7b:59: 8e:2c:f0:7d:d7:11:79:d1:05:3d:f5:ae:90:d9:78:8a:5e:dd: a2:83:10:58:f3:5f:b0:86:74:0e:a1:88:e7:89:34:ae:b7:a2: a4:7e:27:48:cc:76:c8:86:a4:25:a8:f3:8f:00:61:8c:79:cc: 6c:b3:e8:dc:4e:1a:c6:52:11:7c:81:17:dc:97:53:9b:c1:3f: 44:01:c2:4d:c9:e6:cf:d9:ab:30:39:42:ec:63:e8:38:ac:84: bd:4a:ba:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfVZH6pJczOlRAuaFNyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTQ1MWUyNDVlMDFiYTliMmZiMjMxNGMyNjA5ZTdiMTUx ZTc0YTIwHhcNMjUxMjA2MTkwMTAxWhcNMjUxMjA3MTkwMTAxWjAzMTEwLwYDVQQD EygyMzJkMmRlNWM1NDk4YTY1YTA2ZTkzYjU2M2IwODhlOGI4ZDJjMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyaXS7nE5cYVqBZx7Vyx6iXU7c/I Dmud27RiJDBtn6MJ1HW0HoWR8oyumbUmSKlujtKZGjd4yAjzCr/RVyMr591l8p/4 NE20Nxutp6Mj0NLs9YToFXkwD/n43IVGBaCE85B1gHD4hx49mIZSEPh2FRtkSotO RuvxqLHnaukwD4wcZNjVESG96B/kQ3YSbkHtxXXUctdla0PknXqXWL9xMXNqq195 mqyUh8Opr7VSbCDt66OP7M54e1TveedA1yrZB23mPK8EYf7TcbOImGNMqpsLpeVH MA4yu/PN0MIrhN1IhgfDW6UQOpq4bW5NaiM7c6UoBt49iHlAhyVlZUA4qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMtLeXFSYploG6TtWOwiOi40sD1MB8GA1UdIwQY MBaAFCakUeJF4BupsvsjFMJgnnsVHnSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUt YjU2YzUzNjYyMDI4LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUtYjU2YzUzNjYyMDI4 LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYJ63igF KOXM6wgSrgMV2VUqJJpoaRMW0i3geYF3+ahTgjhjfXS+i+qKEA1KzoeWkCSMTuLG bAiBiug2AENIeTAQF/SA5PflGE3Z4MCe+0ua+GQIYxGh1Jg5BPXLyekAcJ1SC+Io vFJy6u7RKEha8cYBprexs5++pmISm2vikwQehIqSEulTQVIYWNTuAHNHz7lIeTN+ xHhIZrOhpFwId3tZjizwfdcRedEFPfWukNl4il7dooMQWPNfsIZ0DqGI54k0rrei pH4nSMx2yIakJajzjwBhjHnMbLPo3E4axlIRfIEX3JdTm8E/RAHCTcnmz9mrMDlC 7GPoOKyEvUq6iQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:25 2025 by rpki-client