This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json) Hash identifier: QVW8rzI7k4ctz0sJkqe9GIvXo6OGlnCjRd8znnZ6Y2g= Subject key identifier: E1:DB:33:A2:12:FE:3F:B7:48:60:5F:9E:C4:9E:29:4E:DC:F5:B7:8B Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f Certificate serial: 019AF577ACD362697C6C04A16B57684B31AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft Manifest number: 034E Signing time: Sat 06 Dec 2025 21:00:52 +0000 Manifest this update: Sat 06 Dec 2025 21:00:52 +0000 Manifest next update: Sun 07 Dec 2025 21:00:52 +0000 Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: aJ0aa+DJa5/al15Gl7D6xNyHAPIysQA7b8vkmX7NoZ8=) 2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:ac:d3:62:69:7c:6c:04:a1:6b:57:68:4b:31:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f Validity Not Before: Dec 6 21:00:52 2025 GMT Not After : Dec 7 21:00:52 2025 GMT Subject: CN=e1db33a212fe3fb748605f9ec49e294edcf5b78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:03:22:33:9b:6b:46:11:27:fb:16:77:ba: 5c:ac:7a:cc:92:0a:f0:68:68:c0:12:9e:90:b3:07: b0:1b:35:ad:3a:b4:3c:58:bd:66:30:f0:ce:82:67: a5:d1:9b:86:1a:0b:df:7e:53:c8:bf:06:36:cd:ea: 60:b0:1e:3d:98:78:66:b8:62:49:f2:b7:4a:ae:a7: d0:0d:b8:1d:8c:d2:5f:cb:14:e0:7b:1c:c6:51:5b: 99:5f:4d:69:52:8d:d5:02:71:31:f3:c7:8c:2f:9a: ca:d8:29:a7:45:b3:58:8c:2b:24:4a:f6:f8:2f:4f: 17:ef:1d:c6:62:b6:8d:7f:f3:02:46:db:a5:04:d6: aa:72:95:aa:9b:55:1b:f6:2e:6a:50:e0:64:1d:fa: 75:20:a8:ed:3e:49:55:11:59:29:75:ed:33:75:72: 94:12:87:c2:1d:7f:58:f4:57:1a:ac:08:6b:41:19: 47:60:1b:6c:e2:3a:4b:1d:ea:db:74:ba:7e:27:24: 33:8c:59:b0:be:b4:bf:86:7e:1a:de:ba:bb:9e:5e: b8:a5:1d:25:e5:77:1e:a8:31:5c:3e:42:5a:93:f5: 0d:ec:e4:47:ff:cc:af:e8:6c:00:64:36:c8:d8:23: 5c:02:50:07:f7:2f:74:65:68:f1:6d:9f:b1:80:26: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:33:A2:12:FE:3F:B7:48:60:5F:9E:C4:9E:29:4E:DC:F5:B7:8B X509v3 Authority Key Identifier: keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e5:d6:b6:9d:47:91:7a:d0:c0:82:51:82:a0:c2:54:1d:d3: 3e:42:31:36:ed:59:b8:9f:77:f0:85:5b:e7:18:ea:f1:2d:cb: f6:eb:61:3e:72:17:95:f8:ef:b6:bb:9c:79:61:8a:20:0c:58: f1:73:9b:f8:82:b3:de:2f:e1:b3:78:7a:df:b1:32:73:30:8e: b7:57:e7:68:2f:b4:bd:e9:83:ae:a9:a7:8b:69:89:95:53:fa: 4f:a2:ff:10:ec:cd:7a:69:be:c6:d8:ae:82:ac:50:89:a7:c1: e7:62:ea:79:90:41:a3:88:29:ea:5d:cc:ec:5d:8f:9c:1d:f6: d1:52:2b:46:9b:af:46:5f:dc:a3:e0:ee:7d:45:37:e4:ce:d9: 9d:2b:bd:e4:1f:1f:9a:f6:9d:fa:8e:70:03:7c:de:49:33:92: d3:fe:a2:6d:ab:72:8e:fe:80:89:96:5c:8b:fb:d3:d0:f3:a7: c5:29:98:43:d1:e5:b5:91:e8:92:d4:d8:7b:63:43:d2:55:49: 6f:e7:c9:42:49:e8:01:c2:98:5e:cc:e2:7d:ac:c0:e4:01:42: c3:0b:d1:36:bf:43:9a:c5:ea:c4:03:8d:bf:5a:26:aa:46:d5: c4:45:62:0c:de:99:e5:3d:05:70:f9:24:61:34:ee:77:29:91: b2:38:b2:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d6zTYml8bASha1doSzGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTE3NTg2MWNlZDBjZjcwZDUxNjQ3OWIzZmE4ODA3NjI2 YWMzMWYwHhcNMjUxMjA2MjEwMDUyWhcNMjUxMjA3MjEwMDUyWjAzMTEwLwYDVQQD EyhlMWRiMzNhMjEyZmUzZmI3NDg2MDVmOWVjNDllMjk0ZWRjZjViNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSYDIjOba0YRJ/sWd7pcrHrMkgrw aGjAEp6QswewGzWtOrQ8WL1mMPDOgmel0ZuGGgvfflPIvwY2zepgsB49mHhmuGJJ 8rdKrqfQDbgdjNJfyxTgexzGUVuZX01pUo3VAnEx88eML5rK2CmnRbNYjCskSvb4 L08X7x3GYraNf/MCRtulBNaqcpWqm1Ub9i5qUOBkHfp1IKjtPklVEVkpde0zdXKU EofCHX9Y9FcarAhrQRlHYBts4jpLHerbdLp+JyQzjFmwvrS/hn4a3rq7nl64pR0l 5XceqDFcPkJak/UN7ORH/8yv6GwAZDbI2CNcAlAH9y90ZWjxbZ+xgCYCCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHbM6IS/j+3SGBfnsSeKU7c9beLMB8GA1UdIwQY MBaAFI6hdYYc7Qz3DVFkebP6iAdiasMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAt ZGFlZDhmMWU3NDhiLzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAtZGFlZDhmMWU3NDhi LzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeXWtp1H kXrQwIJRgqDCVB3TPkIxNu1ZuJ938IVb5xjq8S3L9uthPnIXlfjvtruceWGKIAxY 8XOb+IKz3i/hs3h637EyczCOt1fnaC+0vemDrqmni2mJlVP6T6L/EOzNemm+xtiu gqxQiafB52LqeZBBo4gp6l3M7F2PnB320VIrRpuvRl/co+DufUU35M7ZnSu95B8f mvad+o5wA3zeSTOS0/6ibatyjv6AiZZci/vT0POnxSmYQ9HltZHoktTYe2ND0lVJ b+fJQknoAcKYXszifazA5AFCwwvRNr9DmsXqxAONv1omqkbVxEViDN6Z5T0FcPkk YTTudymRsjiyvw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:00 2025 by rpki-client