This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json) Hash identifier: wjFMmdZUqIXJvhTg2w3ppm0+PSrHa2P7S5afkVTnk/k= Subject key identifier: F6:46:3D:74:94:7C:2B:E3:E4:5F:C4:BF:05:6E:3A:12:0E:78:99:3B Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39 Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39 Certificate serial: 019AF509DC7A6E0CFB091F10509C0F146A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft Manifest number: 076B Signing time: Sat 06 Dec 2025 19:00:55 +0000 Manifest this update: Sat 06 Dec 2025 19:00:55 +0000 Manifest next update: Sun 07 Dec 2025 19:00:55 +0000 Files and hashes: 1: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: +x2vpLNJFmNdV1kEZEMeh2uVES7jrIEoG6GDqMRgmfY=) 2: puK5C5ciq_8h6j0CRZVDBefLH8E.roa (hash: 4/NrhigEpmQvT9wCYkrgFk3j/nd4+lPtgKwDUJpXTPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:dc:7a:6e:0c:fb:09:1f:10:50:9c:0f:14:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39 Validity Not Before: Dec 6 19:00:55 2025 GMT Not After : Dec 7 19:00:55 2025 GMT Subject: CN=f6463d74947c2be3e45fc4bf056e3a120e78993b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:a8:50:3c:c4:58:de:a4:8a:23:39:78:88: 34:6a:a2:8b:eb:8d:43:df:45:f9:0c:3d:3e:33:5b: 24:71:c6:40:6c:06:d1:2f:5c:95:58:6c:42:06:33: a7:4e:86:15:8e:70:61:26:c5:be:df:06:68:e8:af: 66:a7:b2:d5:39:23:76:ae:42:ae:24:1a:fd:43:73: c4:f7:c2:2a:41:c8:92:d0:21:8f:32:6a:72:a0:a6: 69:62:03:67:a0:5c:79:cf:cb:56:cc:78:ee:44:e9: b9:e5:44:33:fd:96:9b:9b:82:8d:22:30:e3:a3:16: af:f3:d1:21:6a:df:58:cf:c9:08:6e:dd:e4:44:ce: 06:5f:01:31:36:22:18:dd:42:ed:8c:29:c9:63:f2: 7c:6f:32:9f:88:10:5f:e0:aa:0e:4f:e5:12:90:c0: a8:c9:45:ab:ea:ec:ac:6b:05:34:51:8d:cd:46:84: f7:4a:76:74:88:21:42:56:8f:31:d2:ec:28:a1:4e: f6:0f:cf:1b:79:41:67:53:e6:bd:25:b7:c2:70:4b: 26:92:b9:42:24:a8:4b:78:cf:a4:0d:a7:c3:d4:f2: 19:a8:e2:fb:f7:d5:54:47:e3:db:67:b6:7a:43:92: 72:fc:63:3f:aa:fc:94:f6:81:e6:71:b8:08:5c:89: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:46:3D:74:94:7C:2B:E3:E4:5F:C4:BF:05:6E:3A:12:0E:78:99:3B X509v3 Authority Key Identifier: keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5a:cd:15:0e:b0:fe:59:dd:5d:27:5d:e8:60:e1:16:f4:d7: 5d:2b:f0:76:57:96:5c:b7:08:7e:f3:20:ef:94:e6:9b:f3:6f: 98:28:33:ad:80:62:08:bf:55:d5:b2:9e:5f:31:d5:b6:53:90: 6d:e8:f3:6e:03:dc:3c:3d:fb:ff:22:32:da:59:bf:4b:d8:af: f5:b3:34:90:f5:24:38:e6:31:79:63:ba:4f:dd:49:68:16:a4: 46:3a:14:2f:27:ba:6e:60:1f:05:b1:54:bd:24:47:2d:ec:27: 1e:ab:1b:d5:cb:10:e8:9b:a2:1b:21:83:12:1a:08:d2:02:72: 74:17:40:53:12:82:9a:f9:dc:17:c2:34:52:93:91:95:2d:ae: fa:e9:50:6f:99:46:cd:19:eb:14:e3:e3:e7:fb:8b:35:06:9f: d9:dc:50:f3:48:1c:c6:f3:af:e6:83:2c:51:7c:be:6b:d5:b3: dc:17:40:38:15:a5:7e:25:04:c3:fe:01:1b:f1:ad:a9:df:8c: 17:e0:3a:18:96:36:b4:81:5d:aa:55:49:2a:2f:1b:99:16:25: d1:b2:6e:ce:2c:04:ca:d5:de:a8:4c:8f:f7:ec:65:05:e7:e8: 57:fd:02:5c:d2:2c:8f:8c:e9:da:08:d6:b9:25:6c:46:82:b4: d1:f3:69:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cdx6bgz7CR8QUJwPFGqAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWRlZDBiODNmYTRlMzFjZTBhMDg0MGViNDI5YmE4YTlm MThlMzkwHhcNMjUxMjA2MTkwMDU1WhcNMjUxMjA3MTkwMDU1WjAzMTEwLwYDVQQD EyhmNjQ2M2Q3NDk0N2MyYmUzZTQ1ZmM0YmYwNTZlM2ExMjBlNzg5OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS6oUDzEWN6kiiM5eIg0aqKL641D 30X5DD0+M1skccZAbAbRL1yVWGxCBjOnToYVjnBhJsW+3wZo6K9mp7LVOSN2rkKu JBr9Q3PE98IqQciS0CGPMmpyoKZpYgNnoFx5z8tWzHjuROm55UQz/Zabm4KNIjDj oxav89Ehat9Yz8kIbt3kRM4GXwExNiIY3ULtjCnJY/J8bzKfiBBf4KoOT+USkMCo yUWr6uysawU0UY3NRoT3SnZ0iCFCVo8x0uwooU72D88beUFnU+a9JbfCcEsmkrlC JKhLeM+kDafD1PIZqOL799VUR+PbZ7Z6Q5Jy/GM/qvyU9oHmcbgIXImMJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZGPXSUfCvj5F/EvwVuOhIOeJk7MB8GA1UdIwQY MBaAFI6t7QuD+k4xzgoIQOtCm6ip8Y45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUt ODc3ZGRhMTkyMzc5LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMjJjMDgtNTZhNy00MmQ0LWJlYTUtODc3ZGRhMTkyMzc5 LzEvanEzdEM0UDZUakhPQ2doQTYwS2JxS254amprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlrNFQ6w /lndXSdd6GDhFvTXXSvwdleWXLcIfvMg75Tmm/NvmCgzrYBiCL9V1bKeXzHVtlOQ bejzbgPcPD37/yIy2lm/S9iv9bM0kPUkOOYxeWO6T91JaBakRjoULye6bmAfBbFU vSRHLewnHqsb1csQ6JuiGyGDEhoI0gJydBdAUxKCmvncF8I0UpORlS2u+ulQb5lG zRnrFOPj5/uLNQaf2dxQ80gcxvOv5oMsUXy+a9Wz3BdAOBWlfiUEw/4BG/Gtqd+M F+A6GJY2tIFdqlVJKi8bmRYl0bJuziwEytXeqEyP9+xlBefoV/0CXNIsj4zp2gjW uSVsRoK00fNpUg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:23 2025 by rpki-client