This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json) Hash identifier: bw2UklsQKrxdeAqrzNbdwSSpi3UeQ0Ma3GfAVcMNY3I= Subject key identifier: 01:36:16:52:7F:B0:67:72:B7:BB:CE:43:7C:B9:FB:39:FF:B0:72:D2 Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1 Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1 Certificate serial: 019AF1D263683C65F5F7AE745D09B666B585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft Manifest number: 13BA Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=) 2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: IQLb86+VV/CB7hVVxfR/rkYS0juBMQXIfVrhPfhL4Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:63:68:3c:65:f5:f7:ae:74:5d:09:b6:66:b5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1 Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=013616527fb06772b7bbce437cb9fb39ffb072d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:e2:67:d3:ba:18:01:06:bd:3d:bb:c9:0b: 57:78:bb:b4:6a:26:81:1d:da:56:21:00:02:8f:e2: 61:f0:5d:ac:da:f8:fd:e0:49:51:d0:24:1d:9d:1c: 99:27:6a:b1:38:72:d0:68:4b:65:01:b5:df:93:60: d9:a1:e1:2c:88:ff:0c:f6:5f:91:ed:5f:1c:c4:86: 47:aa:6d:9c:21:fa:fe:f2:99:c0:6b:96:d8:bc:81: 36:50:d9:bb:2a:33:e4:6b:1f:e1:23:f2:2c:d6:9e: 57:d5:5f:3b:a4:92:e8:74:5a:b7:6b:e9:cb:3c:5c: 16:c7:8f:ce:d6:e3:60:96:1a:f3:14:42:89:ca:36: 19:d9:f0:19:74:1b:50:82:30:1f:40:e1:7a:95:f7: 12:07:1b:24:ec:d4:cc:49:2c:0a:4b:63:1f:70:ca: 02:f5:7d:6b:53:73:0a:d1:4a:81:78:cf:b3:ab:f7: 65:f8:4f:4a:18:20:73:72:d3:9b:80:d1:c5:f6:5e: 32:5b:1a:dc:ae:98:19:00:6c:02:48:ab:e1:66:bd: 3d:fb:5b:40:c5:ff:7e:ae:d7:56:52:c5:f4:45:c5: b3:c5:36:e7:f4:64:c4:5a:7e:b0:20:97:56:74:5b: 17:76:16:85:02:43:12:e1:c9:dd:84:b8:50:85:bf: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:16:52:7F:B0:67:72:B7:BB:CE:43:7C:B9:FB:39:FF:B0:72:D2 X509v3 Authority Key Identifier: keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9e:62:87:07:53:2c:93:06:29:ce:e7:96:f8:ec:2d:47:73: 68:09:bd:49:30:aa:c3:5b:10:97:2a:2d:81:85:cf:02:fa:04: 36:74:04:ff:b3:5c:fe:91:5d:c8:22:6a:a9:20:79:f0:32:45: 0c:a8:67:fb:72:10:e0:7b:bd:70:f6:56:31:fe:52:5d:bc:8c: 5f:f3:80:26:fe:06:7d:91:37:5a:03:d8:6d:4b:f6:c8:a4:74: 0c:ed:b1:ad:b9:88:89:29:73:c4:a0:2e:b7:3e:b7:5f:93:8e: 42:a7:45:03:a0:f1:0b:a7:c3:9e:3c:e5:4e:7b:bd:8c:22:4f: 72:15:01:08:15:8b:a3:d4:96:41:dc:00:55:45:ec:46:19:51: 83:79:9e:4f:1f:06:2b:ee:13:4b:5a:f4:71:21:91:f3:ef:b9: 69:2e:7d:98:86:10:b7:74:9b:a0:99:de:2f:c9:34:3e:85:18: 96:c5:d2:00:90:2b:27:8d:18:9a:19:21:61:94:a2:0a:97:96: f4:c1:39:51:81:ec:86:f8:17:4c:b4:62:85:6b:ff:ef:30:2e: d0:b0:72:cb:93:ce:45:9e:bf:be:8b:88:92:a1:b1:98:eb:82: 92:48:2b:f9:79:0d:6f:38:73:f4:15:b7:35:d2:5e:12:a0:69: 7d:4d:f0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mNoPGX19650XQm2ZrWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl NWEyYjEwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD EygwMTM2MTY1MjdmYjA2NzcyYjdiYmNlNDM3Y2I5ZmIzOWZmYjA3MmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI7iZ9O6GAEGvT27yQtXeLu0aiaB HdpWIQACj+Jh8F2s2vj94ElR0CQdnRyZJ2qxOHLQaEtlAbXfk2DZoeEsiP8M9l+R 7V8cxIZHqm2cIfr+8pnAa5bYvIE2UNm7KjPkax/hI/Is1p5X1V87pJLodFq3a+nL PFwWx4/O1uNglhrzFEKJyjYZ2fAZdBtQgjAfQOF6lfcSBxsk7NTMSSwKS2MfcMoC 9X1rU3MK0UqBeM+zq/dl+E9KGCBzctObgNHF9l4yWxrcrpgZAGwCSKvhZr09+1tA xf9+rtdWUsX0RcWzxTbn9GTEWn6wIJdWdFsXdhaFAkMS4cndhLhQhb+QJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE2FlJ/sGdyt7vOQ3y5+zn/sHLSMB8GA1UdIwQY MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt NTZiYTE5OGQxN2YwLzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF55ihwdT LJMGKc7nlvjsLUdzaAm9STCqw1sQlyotgYXPAvoENnQE/7Nc/pFdyCJqqSB58DJF DKhn+3IQ4Hu9cPZWMf5SXbyMX/OAJv4GfZE3WgPYbUv2yKR0DO2xrbmIiSlzxKAu tz63X5OOQqdFA6DxC6fDnjzlTnu9jCJPchUBCBWLo9SWQdwAVUXsRhlRg3meTx8G K+4TS1r0cSGR8++5aS59mIYQt3SboJneL8k0PoUYlsXSAJArJ40YmhkhYZSiCpeW 9ME5UYHshvgXTLRihWv/7zAu0LByy5PORZ6/vouIkqGxmOuCkkgr+XkNbzhz9BW3 NdJeEqBpfU3wxA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:35 2025 by rpki-client