This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json) Hash identifier: eRw7ooupM3nR+VscXLcpMIiC+AjykmrcxgoWZwk1FOI= Subject key identifier: 31:01:8D:7C:7D:37:21:85:B8:89:A8:01:71:84:CC:F8:57:55:4C:26 Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1 Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1 Certificate serial: 019AF465536A116D54C6750B3542EA6EB694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft Manifest number: 0F48 Signing time: Sat 06 Dec 2025 16:01:12 +0000 Manifest this update: Sat 06 Dec 2025 16:01:12 +0000 Manifest next update: Sun 07 Dec 2025 16:01:12 +0000 Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: dCm31Q3BzVy0Kizpz2BMNPjttcRf/wbuuWkO4IRrkOI=) 2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=) 3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:53:6a:11:6d:54:c6:75:0b:35:42:ea:6e:b6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1 Validity Not Before: Dec 6 16:01:12 2025 GMT Not After : Dec 7 16:01:12 2025 GMT Subject: CN=31018d7c7d372185b889a8017184ccf857554c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:d1:91:f0:63:60:9c:6c:cb:7d:0b:a9:a9: f7:e8:b1:9d:ba:24:f5:c6:2d:e5:cc:d1:71:c0:7f: c7:32:78:da:c5:56:b6:2e:8c:31:77:be:7b:37:86: 4b:52:a5:6b:4d:73:16:3a:00:57:c5:dc:02:5e:f1: 00:9e:63:80:67:00:bc:d8:f7:eb:87:0c:89:f0:19: 14:b8:ff:c0:0d:bd:4b:0e:bd:42:ae:10:e2:29:51: 9f:ae:15:2c:58:1e:28:37:e0:1f:27:9e:6d:3f:e8: 96:3e:b1:5c:c4:a2:c4:83:d8:c7:4a:59:dc:2b:2a: 3c:38:26:8b:b9:3f:e1:03:71:81:70:95:c1:b9:4a: 18:9f:f2:52:31:81:e5:70:1e:57:cc:65:06:f0:f5: ea:9e:0d:36:20:20:ec:68:2d:2a:53:1a:ee:c6:81: ba:c6:84:c8:c9:d7:af:63:2b:f9:cd:0c:9a:31:63: 28:b1:f6:2e:f0:05:0f:01:b7:6a:88:43:4d:7c:f6: 11:16:56:a6:67:c6:47:d4:c8:33:47:57:fa:56:06: f3:1b:31:b1:c0:81:04:06:8c:7d:8d:bd:1f:a0:6e: a5:73:73:f6:d1:a9:91:0f:db:b8:18:0a:b0:4f:de: 36:f0:5b:ec:e8:57:cc:42:6a:81:2a:8d:20:7d:c4: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:01:8D:7C:7D:37:21:85:B8:89:A8:01:71:84:CC:F8:57:55:4C:26 X509v3 Authority Key Identifier: keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f1:47:9d:82:c7:92:61:d1:ab:0d:00:90:9d:da:3a:98:17: 22:1c:1c:09:81:c3:bf:c7:d4:6f:1c:7c:2d:ab:90:ec:af:6a: 2c:48:d3:ac:72:c2:cf:e8:7f:3e:2d:51:46:28:88:0e:67:b7: 99:b1:48:eb:4b:8a:0a:11:89:6d:5f:49:eb:09:da:54:33:19: 65:f1:1f:23:c7:47:22:48:15:e7:ed:9a:17:5e:81:b8:f1:79: 76:09:56:8b:f0:f1:e3:87:d8:12:02:16:26:f8:62:e1:f9:76: 21:f1:79:fb:99:58:66:44:ba:a7:70:eb:f6:58:b5:c4:e5:da: f8:c4:bd:c2:f5:bf:c5:07:2b:24:fd:e6:89:c8:31:01:4e:d2: f7:07:c5:bf:fd:fc:c4:75:73:84:e2:f4:3d:cb:c7:3c:8b:f3: 6e:17:20:15:5a:89:ae:31:08:af:4d:6e:5d:9b:2e:7f:47:a0: c9:c4:60:75:92:a0:7e:d7:04:ba:98:43:9d:50:c7:25:6d:20: b9:15:27:98:3e:76:c7:3b:7f:c3:c0:df:30:d1:ec:8f:f9:08: 24:e9:4d:6a:b0:07:f6:a5:bf:83:f7:81:7e:d0:77:36:45:f6: b7:8f:f3:63:e7:84:cd:32:c1:b7:16:c3:4a:ca:12:7f:bb:18: dc:6d:35:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVNqEW1UxnULNULqbraUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0 NGIxZTEwHhcNMjUxMjA2MTYwMTEyWhcNMjUxMjA3MTYwMTEyWjAzMTEwLwYDVQQD EygzMTAxOGQ3YzdkMzcyMTg1Yjg4OWE4MDE3MTg0Y2NmODU3NTU0YzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtebRkfBjYJxsy30Lqan36LGduiT1 xi3lzNFxwH/HMnjaxVa2Lowxd757N4ZLUqVrTXMWOgBXxdwCXvEAnmOAZwC82Pfr hwyJ8BkUuP/ADb1LDr1CrhDiKVGfrhUsWB4oN+AfJ55tP+iWPrFcxKLEg9jHSlnc Kyo8OCaLuT/hA3GBcJXBuUoYn/JSMYHlcB5XzGUG8PXqng02ICDsaC0qUxruxoG6 xoTIydevYyv5zQyaMWMosfYu8AUPAbdqiENNfPYRFlamZ8ZH1MgzR1f6VgbzGzGx wIEEBox9jb0foG6lc3P20amRD9u4GAqwT9428Fvs6FfMQmqBKo0gfcT7IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEBjXx9NyGFuImoAXGEzPhXVUwmMB8GA1UdIwQY MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt NGE5YmIyZmU3MzMxLzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPFHnYLH kmHRqw0AkJ3aOpgXIhwcCYHDv8fUbxx8LauQ7K9qLEjTrHLCz+h/Pi1RRiiIDme3 mbFI60uKChGJbV9J6wnaVDMZZfEfI8dHIkgV5+2aF16BuPF5dglWi/Dx44fYEgIW Jvhi4fl2IfF5+5lYZkS6p3Dr9li1xOXa+MS9wvW/xQcrJP3micgxAU7S9wfFv/38 xHVzhOL0PcvHPIvzbhcgFVqJrjEIr01uXZsuf0egycRgdZKgftcEuphDnVDHJW0g uRUnmD52xzt/w8DfMNHsj/kIJOlNarAH9qW/g/eBftB3NkX2t4/zY+eEzTLBtxbD SsoSf7sY3G01RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:27 2025 by rpki-client