This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json) Hash identifier: l7spAq5pVfRffuYMGphnse7k/GdGwzp9UAqD1qj+7S0= Subject key identifier: AB:3B:89:C8:FC:9B:E1:41:25:2C:88:16:92:AF:2D:14:4D:76:5D:DD Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1 Certificate serial: 019AF208DB7F76BDB766F3AC25FB5E6B007B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft Manifest number: 131C Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=) 2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: 8rhnuKkwkX9jKTSJ5hBOZjJKB0VdTkYjXmIHe87IXHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:db:7f:76:bd:b7:66:f3:ac:25:fb:5e:6b:00:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=ab3b89c8fc9be141252c881692af2d144d765ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:2d:b0:aa:fa:ba:8c:e3:0a:33:18:bb:70: 18:64:6a:16:4b:96:e1:c4:5f:da:06:81:d4:3b:48: ae:19:ea:c2:96:85:ce:33:11:55:f5:6d:5e:3a:cd: 72:3c:ea:97:8e:59:86:21:19:e8:72:32:16:79:0c: 3d:16:4a:14:47:06:7d:77:53:11:5d:16:92:a4:d4: c2:ea:09:0a:1f:03:ff:97:4b:9f:ca:03:8e:fc:79: 12:8d:35:e1:b6:b2:40:7b:25:4c:d8:10:cb:66:91: fc:1a:bd:ab:ef:eb:86:04:61:c2:c7:85:24:00:1c: 35:40:b6:a1:63:df:86:c4:ae:f9:8c:95:d6:26:b5: df:d8:b2:8e:ca:56:2c:8b:42:f1:e4:e2:5a:d9:6e: 37:33:df:64:d9:b7:e9:d3:bd:83:52:bd:50:30:e0: 5f:e5:29:c5:2c:4f:88:60:20:98:04:ff:55:8e:95: dc:48:8e:9e:8f:97:a8:a6:7a:72:35:e1:49:05:3f: 38:d6:5a:59:f0:46:9c:27:76:6e:01:c4:a6:ba:bb: 60:61:93:00:ef:6f:2d:d7:bd:05:02:b4:f9:8c:ff: 5c:44:3e:d1:88:f7:99:5b:5b:12:bb:13:aa:5c:57: e8:43:be:1c:cd:2e:67:0d:f9:6b:eb:83:f6:04:38: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3B:89:C8:FC:9B:E1:41:25:2C:88:16:92:AF:2D:14:4D:76:5D:DD X509v3 Authority Key Identifier: keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a0:46:e9:63:9b:12:7b:29:c9:ed:cd:bd:d0:27:c9:64:52: c0:17:bf:43:80:5b:bc:af:3d:36:35:e9:a4:37:5f:41:b5:4f: 2f:ff:a5:00:9d:61:41:53:fb:57:f2:b8:11:1b:af:1c:23:6e: ad:a0:ae:06:a1:82:56:82:9a:a8:bb:77:dc:fa:c0:a2:9b:53: ea:83:af:38:2d:38:81:60:71:d5:e3:6c:89:ef:a8:29:9a:24: ec:ab:48:22:47:6a:d3:d7:1a:2d:11:f7:c7:5e:5a:88:c9:a6: 52:05:b8:54:d7:cd:58:a1:60:7c:26:56:a9:b1:65:48:b9:fd: 7f:fa:b7:5e:f6:ae:61:1d:e0:e6:8e:fa:24:10:5d:e8:d9:07: 4d:12:02:70:22:79:6f:47:c4:44:ad:43:09:33:eb:02:3e:33: f2:7b:c2:9b:c4:50:bb:5f:eb:db:6b:2c:c9:33:0d:82:2a:fd: 6e:8b:fb:f9:4b:7e:31:c4:f5:51:08:2b:6f:43:90:ba:45:f8: 11:72:66:aa:6a:a5:22:76:d2:85:91:41:7b:a6:33:0e:f6:54: 28:77:40:24:c3:50:df:03:a2:55:bf:07:61:8b:c1:31:0c:14: 16:fd:b3:eb:95:4f:7b:58:b9:dc:cf:d0:76:6e:20:e4:fa:ce: f0:e6:e0:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNt/dr23ZvOsJfteawB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx NDhkZjEwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhhYjNiODljOGZjOWJlMTQxMjUyYzg4MTY5MmFmMmQxNDRkNzY1ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh4tsKr6uozjCjMYu3AYZGoWS5bh xF/aBoHUO0iuGerCloXOMxFV9W1eOs1yPOqXjlmGIRnocjIWeQw9FkoURwZ9d1MR XRaSpNTC6gkKHwP/l0ufygOO/HkSjTXhtrJAeyVM2BDLZpH8Gr2r7+uGBGHCx4Uk ABw1QLahY9+GxK75jJXWJrXf2LKOylYsi0Lx5OJa2W43M99k2bfp072DUr1QMOBf 5SnFLE+IYCCYBP9VjpXcSI6ej5eopnpyNeFJBT841lpZ8EacJ3ZuAcSmurtgYZMA 728t170FArT5jP9cRD7RiPeZW1sSuxOqXFfoQ74czS5nDflr64P2BDj+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs7icj8m+FBJSyIFpKvLRRNdl3dMB8GA1UdIwQY MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqBG6WOb Enspye3NvdAnyWRSwBe/Q4BbvK89NjXppDdfQbVPL/+lAJ1hQVP7V/K4ERuvHCNu raCuBqGCVoKaqLt33PrAoptT6oOvOC04gWBx1eNsie+oKZok7KtIIkdq09caLRH3 x15aiMmmUgW4VNfNWKFgfCZWqbFlSLn9f/q3XvauYR3g5o76JBBd6NkHTRICcCJ5 b0fERK1DCTPrAj4z8nvCm8RQu1/r22ssyTMNgir9bov7+Ut+McT1UQgrb0OQukX4 EXJmqmqlInbShZFBe6YzDvZUKHdAJMNQ3wOiVb8HYYvBMQwUFv2z65VPe1i53M/Q dm4g5PrO8ObgOA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:24 2025 by rpki-client