This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json) Hash identifier: taMz4iQB6R9O/NYKULOhSKGV31vXbKOjVHGfKMRWOq8= Subject key identifier: 24:28:80:56:96:60:0A:B1:C3:38:8C:3F:5A:09:3D:F0:F8:78:52:62 Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57 Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957 Certificate serial: 019AF1D1F978BFEE46E88DAE5F5F196B6A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=) 2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: EDuib56yXciuFx64adQezyvBV1ZxRJHC8xOiiHpkS1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f9:78:bf:ee:46:e8:8d:ae:5f:5f:19:6b:6a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957 Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=2428805696600ab1c3388c3f5a093df0f8785262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:0d:43:21:bd:2d:37:33:06:4c:af:e2:7c: 1e:1b:8d:de:c1:d3:fe:a9:51:b4:8d:7b:eb:44:66: 44:73:81:32:a5:01:40:be:f4:5a:5a:69:e3:ca:56: 26:9a:10:82:3b:2d:d2:f5:db:ef:fc:08:26:42:77: 97:1b:7e:e5:15:a6:d1:2c:43:d9:b5:1a:16:44:c0: d9:39:fb:d9:8c:76:fb:9a:e9:2b:32:27:01:35:c4: 40:68:94:b0:41:73:42:90:a7:65:f8:38:78:2c:56: e2:70:eb:05:74:63:3e:4d:40:76:d6:1d:8c:22:23: cf:01:10:23:c1:9d:73:f1:eb:d1:4d:b3:08:94:2e: 60:0c:ce:0f:7c:44:97:46:33:11:24:cb:14:66:46: b2:af:d8:1d:7f:e2:2d:7e:3a:4e:ab:a0:dc:3f:91: 19:36:3c:3e:02:74:62:9d:a1:d6:8e:62:b8:00:b7: 42:01:2f:da:2c:72:4e:76:ca:cd:70:f0:f8:e8:ae: 96:86:bd:33:ae:36:fa:70:bb:d2:68:66:17:df:07: 05:60:6d:73:04:9d:cf:5c:a7:3c:be:dd:34:d5:da: 20:4b:a4:e3:12:3c:8c:91:ff:d2:53:d9:2b:26:e8: b0:67:ac:55:70:13:13:ac:8c:7d:f0:e5:24:91:38: 11:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:80:56:96:60:0A:B1:C3:38:8C:3F:5A:09:3D:F0:F8:78:52:62 X509v3 Authority Key Identifier: keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:d1:25:14:4e:e1:35:0b:1f:32:71:73:30:f2:07:89:f0: b8:df:ee:b7:6a:09:2b:dd:f9:d0:97:5c:c1:d2:64:9c:91:35: a1:f0:90:29:b8:b4:20:95:9f:ae:92:6a:1c:17:81:0e:4e:09: af:49:3f:c8:22:21:b0:bd:80:0e:d8:24:e5:4d:dd:18:38:c3: 31:e2:4e:8d:3d:6a:c6:4e:65:29:98:b7:5d:ed:05:9e:9a:4d: 19:75:58:d3:e1:67:b7:a7:20:48:a3:05:a0:c5:c2:ee:5f:0f: 7b:78:16:a6:74:f4:ef:00:d1:a7:02:64:77:64:50:c2:6d:62: f5:64:bc:d9:b1:1c:c5:72:ba:8d:04:17:0a:2b:9d:73:c9:c5: 56:e1:45:8c:63:f9:ac:54:90:e4:51:23:9c:45:6e:cb:fc:5b: f1:76:2d:5b:cd:2a:4f:05:5a:5e:fb:64:dc:1f:63:07:93:04: 42:c1:b1:9c:dc:dc:e8:fd:77:3a:77:ee:62:83:45:e9:12:f9: dd:ee:3d:92:68:cd:0a:35:81:6f:a8:ca:46:8a:0a:17:51:51: 3b:47:b1:d0:66:09:e5:7b:ad:c4:e0:63:d2:e7:68:ec:d3:46: 2b:18:50:92:8a:6a:46:4b:3b:ec:b3:a7:c1:e9:68:b9:07:5c: 2d:28:5b:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fl4v+5G6I2uX18Za2qTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTZjMWUxNGM4NmU2ZWY1YjE2NzI0ZjcxMTc2NzZlYzcy MTQ5NTcwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EygyNDI4ODA1Njk2NjAwYWIxYzMzODhjM2Y1YTA5M2RmMGY4Nzg1MjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYNQyG9LTczBkyv4nweG43ewdP+ qVG0jXvrRGZEc4EypQFAvvRaWmnjylYmmhCCOy3S9dvv/AgmQneXG37lFabRLEPZ tRoWRMDZOfvZjHb7mukrMicBNcRAaJSwQXNCkKdl+Dh4LFbicOsFdGM+TUB21h2M IiPPARAjwZ1z8evRTbMIlC5gDM4PfESXRjMRJMsUZkayr9gdf+ItfjpOq6DcP5EZ Njw+AnRinaHWjmK4ALdCAS/aLHJOdsrNcPD46K6Whr0zrjb6cLvSaGYX3wcFYG1z BJ3PXKc8vt001dogS6TjEjyMkf/SU9krJuiwZ6xVcBMTrIx98OUkkTgRkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQogFaWYAqxwziMP1oJPfD4eFJiMB8GA1UdIwQY MBaAFKiWweFMhubvWxZyT3EXZ27HIUlXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt MTRhMDgyNWI1MjkxLzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx LzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeTRJRRO 4TULHzJxczDyB4nwuN/ut2oJK9350JdcwdJknJE1ofCQKbi0IJWfrpJqHBeBDk4J r0k/yCIhsL2ADtgk5U3dGDjDMeJOjT1qxk5lKZi3Xe0FnppNGXVY0+Fnt6cgSKMF oMXC7l8Pe3gWpnT07wDRpwJkd2RQwm1i9WS82bEcxXK6jQQXCiudc8nFVuFFjGP5 rFSQ5FEjnEVuy/xb8XYtW80qTwVaXvtk3B9jB5MEQsGxnNzc6P13OnfuYoNF6RL5 3e49kmjNCjWBb6jKRooKF1FRO0ex0GYJ5XutxOBj0udo7NNGKxhQkopqRks77LOn welouQdcLShbjA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:00 2025 by rpki-client