This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json) Hash identifier: o8lNrUhPvrLXgDJl4IXUTUv+Y68ySn7BN1PmjEqcVH4= Subject key identifier: A4:B0:32:C7:D3:23:28:FA:95:6F:89:BA:AC:09:73:33:D1:A5:4F:37 Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7 Certificate serial: 019AF209862B1AB4704F04BFD81A05A28BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft Manifest number: 03F4 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=) 2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: YlS4EwJiQzeiEN6+LdUySzqz0HkW3UPIUI5Shvtann8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:86:2b:1a:b4:70:4f:04:bf:d8:1a:05:a2:8b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=a4b032c7d32328fa956f89baac097333d1a54f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:59:69:c1:95:8f:fc:f9:95:14:62:c9:dd: f0:98:13:e2:e2:5b:85:7b:d1:27:ad:de:b6:96:53: 90:c1:df:c1:62:9e:87:ce:38:d7:7c:e8:3e:65:91: c7:9f:3c:1f:11:76:89:64:5d:80:16:e4:18:1b:89: be:ba:01:82:90:fa:39:4b:10:47:52:98:c5:41:20: 1b:a0:93:d8:f3:d9:7f:7d:15:06:72:17:62:97:17: e6:41:cb:6e:be:72:dc:2d:b1:43:ed:df:10:4f:ac: a6:cc:b9:21:5c:ea:77:a4:30:11:c7:4f:81:bb:ce: 29:de:cc:7a:16:1e:bd:e6:2e:fe:78:eb:30:4e:d8: 48:cb:81:94:57:62:b3:9b:c9:ef:9f:89:b2:1d:14: cb:cc:b9:2a:0f:fb:9b:60:45:0c:33:f9:8a:67:b4: 34:e5:83:4d:bc:17:ca:29:49:31:b8:19:4d:83:ef: 4a:4a:97:3f:b1:4f:fc:ce:7c:13:79:63:5a:b4:7d: 5e:48:9c:c5:0c:68:e9:fb:76:99:e3:fa:d9:b6:0f: c3:58:9d:08:bd:d8:51:e5:4c:fd:72:9e:d2:ce:cd: 13:ab:d0:a0:bf:a4:0e:d8:fe:5f:5a:22:83:bf:4d: 47:f9:70:e6:b7:d9:c9:f4:fc:5a:cd:12:b0:19:ee: 3d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B0:32:C7:D3:23:28:FA:95:6F:89:BA:AC:09:73:33:D1:A5:4F:37 X509v3 Authority Key Identifier: keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f5:2d:d5:de:7b:37:8a:22:04:8e:e4:9e:0d:93:71:d8:03: 36:2c:54:90:5c:b5:00:76:06:ca:35:5c:c4:b5:cc:2a:8e:b1: 61:f0:9d:98:e0:47:a3:39:a7:a2:1e:ed:51:82:6e:73:80:e9: 47:69:4f:75:81:f2:c1:2f:3d:61:16:c5:45:e9:81:a4:5d:60: e1:cd:bd:6d:b6:67:39:44:10:c3:db:50:eb:de:dd:62:87:19: 0e:a1:41:3f:f5:cb:27:e9:20:59:f4:b6:47:dd:d1:48:75:a9: a6:69:cd:42:88:85:2a:47:23:97:b5:45:5f:ab:21:45:20:d8: d7:bf:0f:17:d2:a5:2c:f6:ca:21:0b:5c:e6:61:bc:6f:92:a2: 24:51:ff:a6:8f:20:26:6b:6e:68:f4:fc:d5:ae:0a:db:b7:f7: 4b:09:c0:cf:30:9e:78:09:f2:32:c8:7a:5d:f4:c4:8a:51:6c: f5:e4:cb:c2:00:7d:d2:31:89:84:e3:68:58:4d:fc:65:19:83: 46:f7:9a:d9:d0:b6:a6:4d:a9:82:f4:6c:b5:e9:21:73:ff:7f: a2:ba:95:da:b6:2a:10:bf:8d:d1:eb:07:8d:0a:de:79:7e:51: b6:03:9a:69:7b:dd:28:18:10:2b:6a:8f:56:86:10:da:ba:7a: af:8c:14:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYYrGrRwTwS/2BoFoouvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk NzQ0YjcwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhhNGIwMzJjN2QzMjMyOGZhOTU2Zjg5YmFhYzA5NzMzM2QxYTU0ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueVZacGVj/z5lRRiyd3wmBPi4luF e9Enrd62llOQwd/BYp6HzjjXfOg+ZZHHnzwfEXaJZF2AFuQYG4m+ugGCkPo5SxBH UpjFQSAboJPY89l/fRUGchdilxfmQctuvnLcLbFD7d8QT6ymzLkhXOp3pDARx0+B u84p3sx6Fh695i7+eOswTthIy4GUV2Kzm8nvn4myHRTLzLkqD/ubYEUMM/mKZ7Q0 5YNNvBfKKUkxuBlNg+9KSpc/sU/8znwTeWNatH1eSJzFDGjp+3aZ4/rZtg/DWJ0I vdhR5Uz9cp7Szs0Tq9Cgv6QO2P5fWiKDv01H+XDmt9nJ9PxazRKwGe49LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSwMsfTIyj6lW+JuqwJczPRpU83MB8GA1UdIwQY MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2 LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/Ut1d57 N4oiBI7kng2TcdgDNixUkFy1AHYGyjVcxLXMKo6xYfCdmOBHozmnoh7tUYJuc4Dp R2lPdYHywS89YRbFRemBpF1g4c29bbZnOUQQw9tQ697dYocZDqFBP/XLJ+kgWfS2 R93RSHWppmnNQoiFKkcjl7VFX6shRSDY178PF9KlLPbKIQtc5mG8b5KiJFH/po8g JmtuaPT81a4K27f3SwnAzzCeeAnyMsh6XfTEilFs9eTLwgB90jGJhONoWE38ZRmD Rvea2dC2pk2pgvRstekhc/9/orqV2rYqEL+N0esHjQreeX5RtgOaaXvdKBgQK2qP VoYQ2rp6r4wUOw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:44 2025 by rpki-client