This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json) Hash identifier: RhyDOh0ModhGGJJRwlXGPaKses09JJ74AMTE7TNRWI4= Subject key identifier: 99:03:E2:20:A3:3B:FA:88:26:35:A7:3A:DE:E0:FA:46:9C:F7:51:27 Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e Certificate serial: 019B24E3D0B8B5358B139561AE163452FCF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft Manifest number: 0554 Signing time: Tue 16 Dec 2025 02:01:08 +0000 Manifest this update: Tue 16 Dec 2025 02:01:08 +0000 Manifest next update: Wed 17 Dec 2025 02:01:08 +0000 Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: J+ilNwWOqgRjohpcjKAXket3wa/HFJSorB1EsRiEbac=) 2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:d0:b8:b5:35:8b:13:95:61:ae:16:34:52:fc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e Validity Not Before: Dec 16 02:01:08 2025 GMT Not After : Dec 17 02:01:08 2025 GMT Subject: CN=9903e220a33bfa882635a73adee0fa469cf75127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:89:55:4c:d7:af:7a:c9:78:21:5e:c4:4f: 3d:1b:f2:73:75:a3:7e:e7:a9:13:fb:f5:72:48:f9: ee:10:dd:24:6d:32:4a:6e:28:0b:58:97:dd:db:ae: a5:19:e5:f3:1c:51:cd:2e:09:d5:bf:04:5f:e0:52: 51:16:48:4a:db:57:0b:46:10:60:3e:23:e1:54:3b: d0:60:11:8d:f8:05:47:ae:78:62:6e:8d:7b:36:13: be:6e:6e:e4:c7:ef:6d:98:4c:02:9a:0f:84:16:4a: e2:62:29:95:e1:53:9b:76:ee:be:d7:14:b1:65:e2: dc:d8:a6:1d:fd:68:6c:c0:ac:c6:73:3c:04:8b:a9: 45:de:75:01:42:e1:50:07:ac:a5:ba:ac:41:41:9e: 58:d4:d3:db:b1:6e:11:2d:ff:f0:65:94:3c:ae:9b: 31:f2:a6:b6:51:26:bf:ba:97:54:e8:c4:b9:bb:38: b7:d8:e9:89:c0:7d:4b:ce:d4:ee:c4:cc:df:7d:08: b7:91:9c:c7:3c:79:58:db:db:ca:4b:93:c1:74:c4: 24:ca:65:99:b4:e5:e2:b3:81:d5:c4:c8:b4:fc:95: 28:04:7b:3e:6b:e3:65:30:57:46:74:16:2e:ed:17: e3:85:c7:75:96:e3:59:ae:77:86:c9:e9:65:37:ad: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:03:E2:20:A3:3B:FA:88:26:35:A7:3A:DE:E0:FA:46:9C:F7:51:27 X509v3 Authority Key Identifier: keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ca:58:53:30:5d:08:f5:5b:fc:85:e2:9a:c5:c4:8e:5c:e0: da:11:06:80:58:13:eb:b3:ed:0c:47:fb:a8:29:f4:ee:06:48: 99:67:60:82:41:3e:cd:9f:3e:de:08:38:06:b3:f4:05:13:35: 38:29:c4:83:bb:e2:2a:06:68:bb:38:b1:bf:00:7e:4b:f7:04: 7d:9c:89:f0:c5:f3:b7:13:fc:c7:03:c3:08:b5:a0:e3:be:59: 22:6e:65:04:99:bc:b7:b1:3e:08:a7:4e:2a:9f:24:b4:d9:34: f5:33:7c:50:e1:a1:f8:f0:5e:b4:fd:9e:41:61:cb:70:4e:24: ed:51:09:36:a9:88:d7:3b:cf:a8:4d:c1:65:94:6d:f7:e4:ce: 0c:97:81:70:d6:ea:38:56:98:c5:ef:eb:21:0c:d5:0c:16:e9: a2:75:de:c2:af:28:c0:e5:86:7e:a3:c9:5b:9f:1d:e8:bd:9c: 0d:d8:ae:2e:79:6e:a0:48:3d:92:4b:81:d1:52:f3:5e:e6:d6: 49:15:f7:66:81:f6:07:52:ea:ba:87:52:ac:0e:a9:bc:bd:90: 86:56:f6:3b:a3:88:ec:4a:53:8b:87:c9:99:65:e1:94:26:a7: c0:cb:d5:4b:ba:16:c6:4e:c3:38:24:ed:31:c9:76:a8:b9:09: df:bf:05:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk49C4tTWLE5VhrhY0UvzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTI1MGQ2YzQ2ZjI2ZjRjMzAwNWZhNDJlNDAxYThhOWU1 Yzg4NmUwHhcNMjUxMjE2MDIwMTA4WhcNMjUxMjE3MDIwMTA4WjAzMTEwLwYDVQQD Eyg5OTAzZTIyMGEzM2JmYTg4MjYzNWE3M2FkZWUwZmE0NjljZjc1MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC+JVUzXr3rJeCFexE89G/JzdaN+ 56kT+/VySPnuEN0kbTJKbigLWJfd266lGeXzHFHNLgnVvwRf4FJRFkhK21cLRhBg PiPhVDvQYBGN+AVHrnhibo17NhO+bm7kx+9tmEwCmg+EFkriYimV4VObdu6+1xSx ZeLc2KYd/WhswKzGczwEi6lF3nUBQuFQB6yluqxBQZ5Y1NPbsW4RLf/wZZQ8rpsx 8qa2USa/updU6MS5uzi32OmJwH1LztTuxMzffQi3kZzHPHlY29vKS5PBdMQkymWZ tOXis4HVxMi0/JUoBHs+a+NlMFdGdBYu7Rfjhcd1luNZrneGyellN60YpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkD4iCjO/qIJjWnOt7g+kac91EnMB8GA1UdIwQY MBaAFCaiUNbEbyb0wwBfpC5AGoqeXIhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5Zjct MWZmN2IzMWU1MmNkLzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5ZjctMWZmN2IzMWU1MmNk LzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8pYUzBd CPVb/IXimsXEjlzg2hEGgFgT67PtDEf7qCn07gZImWdggkE+zZ8+3gg4BrP0BRM1 OCnEg7viKgZouzixvwB+S/cEfZyJ8MXztxP8xwPDCLWg475ZIm5lBJm8t7E+CKdO Kp8ktNk09TN8UOGh+PBetP2eQWHLcE4k7VEJNqmI1zvPqE3BZZRt9+TODJeBcNbq OFaYxe/rIQzVDBbponXewq8owOWGfqPJW58d6L2cDdiuLnluoEg9kkuB0VLzXubW SRX3ZoH2B1LquodSrA6pvL2Qhlb2O6OI7EpTi4fJmWXhlCanwMvVS7oWxk7DOCTt Mcl2qLkJ378FBw== -----END CERTIFICATE-----Generated at Tue Dec 16 10:50:15 2025 by rpki-client