This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json) Hash identifier: WE23159WSwQlGmcOZRIpKBTiHgxcCM070AQwJqBltnU= Subject key identifier: E3:4F:5B:66:2C:DC:7D:0C:EA:9B:5F:80:E4:93:47:00:7F:97:E6:AD Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e Certificate serial: 019AF2ADD04F6963EA085F7C6BF56430E3C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft Manifest number: 053A Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: W1IeQ+oGB42ILJ0P7x3xMQ9PZbLRxf1pmqE9gh2uigc=) 2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d0:4f:69:63:ea:08:5f:7c:6b:f5:64:30:e3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=e34f5b662cdc7d0cea9b5f80e49347007f97e6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:09:49:a4:60:32:8a:f0:77:82:0d:2a:f8: ba:c2:fd:61:8d:39:19:22:85:97:09:34:5e:5b:3b: 52:af:da:ed:34:73:12:c4:c9:c9:03:84:32:38:62: 97:86:82:fe:66:0e:7f:39:fb:70:ea:b3:07:c3:d3: 02:bc:0e:e7:06:7d:5b:2b:d3:f8:7c:f0:23:81:01: c4:ae:14:97:d4:ca:51:95:a5:50:55:37:69:45:26: 62:bf:14:65:0d:04:bb:f5:85:3b:30:d5:cc:55:c0: 96:e0:33:8c:7a:43:f1:32:04:fb:79:c5:5e:7f:93: 74:58:db:0f:26:74:bd:8d:23:8d:3d:82:e8:8a:ed: c5:50:f6:82:80:68:39:b6:e4:1b:6f:74:9e:15:50: e4:1c:5a:12:d4:c5:1c:0c:3c:ed:27:5a:43:c5:91: e1:be:a3:f8:58:c9:39:5f:d7:a5:4b:9e:52:49:61: 30:7d:ed:a7:9c:96:3f:8a:3d:0a:79:3d:5e:80:5e: 8d:9f:82:4b:cd:5f:12:6a:e3:72:5d:88:25:7e:96: d8:89:0b:3c:dd:5f:21:5d:13:ed:bd:5c:4c:05:d5: a7:bf:57:da:c4:bb:8d:99:ee:9b:60:37:7e:f2:f6: e8:0f:09:77:d3:50:75:1f:97:72:97:b7:e0:0c:73: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4F:5B:66:2C:DC:7D:0C:EA:9B:5F:80:E4:93:47:00:7F:97:E6:AD X509v3 Authority Key Identifier: keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b9:66:75:17:3a:54:58:f1:0e:94:18:27:b3:c3:e0:fa:c4: 3d:76:83:e5:4c:c4:e7:25:d7:d5:7e:d7:1d:f9:61:25:b8:c6: 8e:09:3c:94:05:81:71:80:24:b6:24:06:f1:f1:48:e3:09:c3: a7:6f:3f:de:b6:c9:c6:6e:ca:5d:5a:37:15:40:77:ef:f1:c5: db:40:28:90:97:1d:33:11:75:ba:06:79:41:ae:47:e2:73:6c: c2:e2:1a:2a:c0:82:39:de:d7:cf:31:4a:2f:b1:e7:6b:27:60: 11:9b:17:99:3a:16:14:c1:1f:07:a7:0c:a6:bd:d4:c3:35:2e: 62:9b:a5:d2:0a:b9:61:5a:03:23:ca:19:96:31:d4:07:0a:6c: 44:bc:03:00:e0:01:14:6e:a7:c4:a2:dc:a4:ce:97:c7:03:a5: c4:99:6c:98:41:4b:87:c0:d3:ee:19:44:dd:50:73:9c:38:aa: f3:33:b8:d9:84:93:cd:4b:86:8e:57:db:1f:87:ba:d6:8e:75: 9c:42:0f:51:19:68:97:8a:35:b6:a1:14:32:6f:a6:07:e3:4c: b5:1b:0b:dd:70:4c:cd:2a:c9:be:16:1c:55:32:f5:c6:67:7e: 87:76:ff:36:1a:ba:41:c2:8a:7b:d2:dd:a0:04:e5:fb:a1:e8: c5:30:e5:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdBPaWPqCF98a/VkMOPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTI1MGQ2YzQ2ZjI2ZjRjMzAwNWZhNDJlNDAxYThhOWU1 Yzg4NmUwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD EyhlMzRmNWI2NjJjZGM3ZDBjZWE5YjVmODBlNDkzNDcwMDdmOTdlNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q8JSaRgMorwd4INKvi6wv1hjTkZ IoWXCTReWztSr9rtNHMSxMnJA4QyOGKXhoL+Zg5/Oftw6rMHw9MCvA7nBn1bK9P4 fPAjgQHErhSX1MpRlaVQVTdpRSZivxRlDQS79YU7MNXMVcCW4DOMekPxMgT7ecVe f5N0WNsPJnS9jSONPYLoiu3FUPaCgGg5tuQbb3SeFVDkHFoS1MUcDDztJ1pDxZHh vqP4WMk5X9elS55SSWEwfe2nnJY/ij0KeT1egF6Nn4JLzV8SauNyXYglfpbYiQs8 3V8hXRPtvVxMBdWnv1faxLuNme6bYDd+8vboDwl301B1H5dyl7fgDHN6WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONPW2Ys3H0M6ptfgOSTRwB/l+atMB8GA1UdIwQY MBaAFCaiUNbEbyb0wwBfpC5AGoqeXIhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5Zjct MWZmN2IzMWU1MmNkLzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5ZjctMWZmN2IzMWU1MmNk LzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7lmdRc6 VFjxDpQYJ7PD4PrEPXaD5UzE5yXX1X7XHflhJbjGjgk8lAWBcYAktiQG8fFI4wnD p28/3rbJxm7KXVo3FUB37/HF20AokJcdMxF1ugZ5Qa5H4nNswuIaKsCCOd7XzzFK L7HnaydgEZsXmToWFMEfB6cMpr3UwzUuYpul0gq5YVoDI8oZljHUBwpsRLwDAOAB FG6nxKLcpM6XxwOlxJlsmEFLh8DT7hlE3VBznDiq8zO42YSTzUuGjlfbH4e61o51 nEIPURlol4o1tqEUMm+mB+NMtRsL3XBMzSrJvhYcVTL1xmd+h3b/Nhq6QcKKe9Ld oATl+6HoxTDl9g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:24 2025 by rpki-client