This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json) Hash identifier: IQ9GqtZSnXcMVkcp2mmTTHRfYvjCxnvFEFWhyv4J1d0= Subject key identifier: B8:F9:EB:68:EA:E0:54:14:A9:FC:53:B6:50:F3:F7:CF:2D:4F:2A:2E Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c Certificate serial: 019AF276B2E880E877A53FAF4C56C6F860F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft Manifest number: 02B3 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: 2+laMi61ROo4X3GIF7mINeZUNtOCSnvbz9sQoIt8swU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b2:e8:80:e8:77:a5:3f:af:4c:56:c6:f8:60:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a021d2587342c49453f151342208c8de944f2c Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=b8f9eb68eae05414a9fc53b650f3f7cf2d4f2a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:a6:50:14:81:10:2b:76:6b:05:ed:20:5c: 07:1e:7a:8f:45:a9:f7:e3:16:08:27:53:6e:f0:36: 86:1a:1f:bd:e9:44:fa:0d:3f:94:9e:e2:6d:46:42: 39:a2:a8:18:4c:89:67:cc:1f:19:e6:25:9d:ab:8f: ba:4e:29:bf:41:80:a4:a4:a8:d5:92:6e:2a:9f:78: 77:40:15:e1:8d:55:88:52:9c:0c:35:14:18:31:26: d8:83:b4:9a:26:3b:38:77:a2:3d:38:21:c1:cd:00: 5c:5d:0a:aa:a8:f3:d1:f8:dd:10:6a:59:59:7c:38: 23:4b:31:27:a6:3d:71:f3:33:ad:e0:70:e3:ea:d0: 62:78:61:19:d0:7b:61:17:d1:e5:62:5e:f8:15:c3: 51:e8:b3:d6:2f:fe:52:fc:ad:c7:2b:b5:f7:28:69: e4:98:0e:47:d0:30:e9:6d:da:52:71:39:e0:03:d3: 42:36:7f:89:08:73:bc:7d:b5:51:58:7f:4a:9c:bd: e0:e4:61:ee:1d:f3:83:c5:fb:fe:93:e2:c0:8c:01: a4:b0:99:32:b4:a5:7f:e6:69:a4:23:70:8c:b4:ae: 29:d6:ff:32:9e:d1:21:2f:7f:73:df:15:37:10:4d: 31:54:a3:81:27:8c:8c:f9:0b:5f:d6:4a:6f:f8:06: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:EB:68:EA:E0:54:14:A9:FC:53:B6:50:F3:F7:CF:2D:4F:2A:2E X509v3 Authority Key Identifier: keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b3:0c:6b:e0:72:96:9d:a0:25:c9:1f:03:57:5c:24:4b:52: 9c:2d:11:48:e2:b6:7a:de:ac:20:bf:05:d0:ef:4a:cc:bb:2a: 78:09:be:ea:8c:1d:21:7b:ce:33:be:d7:d7:28:08:89:30:0d: c9:0a:0f:0e:22:a2:59:5d:ce:94:63:63:1f:88:09:35:3a:c9: 5a:66:da:a2:ac:c9:f7:fe:b8:23:5a:05:89:22:90:ff:e7:a9: 5e:17:17:9a:c1:d2:6c:4d:44:3a:31:ce:da:fc:fb:63:bf:e8: bc:cc:3b:ca:6f:9b:65:b0:20:1a:fc:19:cc:f7:ac:50:a2:bb: c6:7d:5a:4d:5d:f8:7e:be:a8:25:c2:ea:12:d9:ff:ea:aa:c8: 7a:66:86:ff:8e:ef:40:6d:bb:cb:94:a9:d0:35:71:9e:17:43: 3b:ea:97:7c:d0:8c:c0:4f:94:9f:7d:84:65:0f:9f:63:0a:6e: db:c7:ac:c8:38:16:23:07:f9:ce:77:60:5d:07:d0:7e:22:6c: d2:40:42:5d:4c:72:92:bb:3f:e0:82:a9:f2:88:70:07:3e:72: 49:23:54:b6:de:ba:a0:30:08:09:d0:30:fb:1f:21:c8:f8:4d: 10:d4:92:08:be:12:5e:08:bf:fb:01:ab:cc:96:08:29:e6:b4: db:26:a7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrLogOh3pT+vTFbG+GDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTAyMWQyNTg3MzQyYzQ5NDUzZjE1MTM0MjIwOGM4ZGU5 NDRmMmMwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EyhiOGY5ZWI2OGVhZTA1NDE0YTlmYzUzYjY1MGYzZjdjZjJkNGYyYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG2mUBSBECt2awXtIFwHHnqPRan3 4xYIJ1Nu8DaGGh+96UT6DT+UnuJtRkI5oqgYTIlnzB8Z5iWdq4+6Tim/QYCkpKjV km4qn3h3QBXhjVWIUpwMNRQYMSbYg7SaJjs4d6I9OCHBzQBcXQqqqPPR+N0QallZ fDgjSzEnpj1x8zOt4HDj6tBieGEZ0HthF9HlYl74FcNR6LPWL/5S/K3HK7X3KGnk mA5H0DDpbdpScTngA9NCNn+JCHO8fbVRWH9KnL3g5GHuHfODxfv+k+LAjAGksJky tKV/5mmkI3CMtK4p1v8yntEhL39z3xU3EE0xVKOBJ4yM+Qtf1kpv+AbbUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj562jq4FQUqfxTtlDz988tTyouMB8GA1UdIwQY MBaAFCagIdJYc0LElFPxUTQiCMjelE8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQt NGEzM2JmNTE4MDFlLzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQtNGEzM2JmNTE4MDFl LzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLMMa+By lp2gJckfA1dcJEtSnC0RSOK2et6sIL8F0O9KzLsqeAm+6owdIXvOM77X1ygIiTAN yQoPDiKiWV3OlGNjH4gJNTrJWmbaoqzJ9/64I1oFiSKQ/+epXhcXmsHSbE1EOjHO 2vz7Y7/ovMw7ym+bZbAgGvwZzPesUKK7xn1aTV34fr6oJcLqEtn/6qrIemaG/47v QG27y5Sp0DVxnhdDO+qXfNCMwE+Un32EZQ+fYwpu28esyDgWIwf5zndgXQfQfiJs 0kBCXUxykrs/4IKp8ohwBz5ySSNUtt66oDAICdAw+x8hyPhNENSSCL4SXgi/+wGr zJYIKea02yanSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:50 2025 by rpki-client