This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json) Hash identifier: 3CMa3cRWw7kLVviZjAKSHqtfbQcElMD4LLZ0JUti8xI= Subject key identifier: 8F:CE:65:5A:15:20:44:04:24:21:58:40:B0:D1:E1:19:87:1B:86:81 Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f Certificate serial: 019B3343DA58AD20240FCE4FC8B3DECBF418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft Manifest number: 036E Signing time: Thu 18 Dec 2025 21:00:43 +0000 Manifest this update: Thu 18 Dec 2025 21:00:43 +0000 Manifest next update: Fri 19 Dec 2025 21:00:43 +0000 Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: ZErgPn1KdVK7N2NFZY4tlp9+r2w2ZzypdgMvW5Fnj00=) 2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:da:58:ad:20:24:0f:ce:4f:c8:b3:de:cb:f4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f Validity Not Before: Dec 18 21:00:43 2025 GMT Not After : Dec 19 21:00:43 2025 GMT Subject: CN=8fce655a1520440424215840b0d1e119871b8681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:a1:34:dd:ee:8b:3a:42:97:83:6b:d0:d3: 98:51:71:06:4c:af:a0:34:98:bb:f7:19:8d:a6:fa: 41:85:0e:a4:62:c4:b8:7d:62:ce:3d:ed:3e:48:08: ab:25:9b:c5:fc:ab:29:1a:3b:d2:90:bb:8a:5e:1d: 76:8d:23:3c:0b:10:40:07:1f:d0:58:0e:9f:10:50: 65:59:1f:b0:b6:41:ad:b1:73:dc:97:09:41:45:9f: 25:95:a8:7c:3c:10:d6:d3:f5:52:fd:f5:b3:8b:84: 69:a7:21:78:f2:2d:fe:1f:0d:bd:e4:4d:1f:f8:53: 20:a1:a9:6d:0b:54:8a:9c:64:14:f8:47:59:4f:5a: e5:04:c6:d1:c7:de:3f:14:e9:53:4d:d8:bf:f6:b6: 81:2a:37:76:70:c7:65:9a:fc:07:91:75:59:f7:ed: c1:15:9d:05:d5:cd:7a:40:22:47:7f:52:23:55:85: dd:fd:bc:bc:05:e9:ed:12:a5:ca:e8:fc:11:4d:68: e3:69:c5:ac:f6:7c:51:6f:a0:08:47:f7:4d:74:52: 8f:d8:ac:86:a0:ba:ab:ce:00:9b:29:c6:4b:5a:09: d0:65:fd:22:d5:78:27:90:49:25:d3:11:e8:16:fa: 9e:7b:3e:7c:87:38:76:9c:37:00:7b:b7:fd:9e:06: 67:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CE:65:5A:15:20:44:04:24:21:58:40:B0:D1:E1:19:87:1B:86:81 X509v3 Authority Key Identifier: keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:65:46:6b:4f:6f:ff:7e:90:58:bd:3a:51:3d:d9:f0:6c:f7: f4:1f:ae:de:b3:f1:cc:c0:f7:2c:fe:99:3d:ae:ce:7a:f0:45: d1:f6:c6:58:94:09:ee:fb:38:32:65:64:2e:3d:00:ef:ab:7b: 43:66:8d:50:ad:ee:53:ff:cc:a4:0f:29:a1:df:5c:e5:c4:ed: a7:6c:bd:c7:c1:92:7a:bb:70:d1:40:db:0e:1a:b6:d0:fd:4a: 71:a9:c6:5b:22:45:14:31:85:63:b0:0f:97:51:6a:3e:af:04: 3c:41:fe:61:29:df:3e:cd:70:79:36:bb:ae:17:21:1d:b0:9a: de:5e:81:d4:49:17:13:c6:ef:86:13:a6:59:ff:fc:92:80:15: 70:91:9b:52:6a:c0:b4:1a:ee:85:17:86:5d:0f:e9:d1:2c:13: 77:79:14:40:05:b9:13:6e:11:c3:30:ba:25:90:b8:1d:9f:4a: e9:26:ab:95:d1:c1:53:c8:56:06:0a:b5:38:45:4e:81:76:52: 56:77:4c:a5:83:59:c3:43:e6:b6:2f:65:69:60:71:c9:6b:32: 8a:79:55:0e:08:e4:78:08:f3:aa:51:8c:08:30:fe:06:fb:b1: d3:21:2b:c7:43:ff:38:14:3a:3c:5b:10:12:53:8d:ce:02:41: 27:49:18:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ9pYrSAkD85PyLPey/QYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTE3NTg2MWNlZDBjZjcwZDUxNjQ3OWIzZmE4ODA3NjI2 YWMzMWYwHhcNMjUxMjE4MjEwMDQzWhcNMjUxMjE5MjEwMDQzWjAzMTEwLwYDVQQD Eyg4ZmNlNjU1YTE1MjA0NDA0MjQyMTU4NDBiMGQxZTExOTg3MWI4NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZShNN3uizpCl4Nr0NOYUXEGTK+g NJi79xmNpvpBhQ6kYsS4fWLOPe0+SAirJZvF/KspGjvSkLuKXh12jSM8CxBABx/Q WA6fEFBlWR+wtkGtsXPclwlBRZ8llah8PBDW0/VS/fWzi4RppyF48i3+Hw295E0f +FMgoaltC1SKnGQU+EdZT1rlBMbRx94/FOlTTdi/9raBKjd2cMdlmvwHkXVZ9+3B FZ0F1c16QCJHf1IjVYXd/by8BentEqXK6PwRTWjjacWs9nxRb6AIR/dNdFKP2KyG oLqrzgCbKcZLWgnQZf0i1XgnkEkl0xHoFvqeez58hzh2nDcAe7f9ngZnHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/OZVoVIEQEJCFYQLDR4RmHG4aBMB8GA1UdIwQY MBaAFI6hdYYc7Qz3DVFkebP6iAdiasMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAt ZGFlZDhmMWU3NDhiLzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAtZGFlZDhmMWU3NDhi LzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWVGa09v /36QWL06UT3Z8Gz39B+u3rPxzMD3LP6ZPa7OevBF0fbGWJQJ7vs4MmVkLj0A76t7 Q2aNUK3uU//MpA8pod9c5cTtp2y9x8GSertw0UDbDhq20P1KcanGWyJFFDGFY7AP l1FqPq8EPEH+YSnfPs1weTa7rhchHbCa3l6B1EkXE8bvhhOmWf/8koAVcJGbUmrA tBruhReGXQ/p0SwTd3kUQAW5E24RwzC6JZC4HZ9K6SarldHBU8hWBgq1OEVOgXZS VndMpYNZw0Pmti9laWBxyWsyinlVDgjkeAjzqlGMCDD+Bvux0yErx0P/OBQ6PFsQ ElONzgJBJ0kYDw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:33 2025 by rpki-client