This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json) Hash identifier: 8pP2JrYqx7lfHCWMZm2J7S/6O+2cQz7uwwmI2zv4rMs= Subject key identifier: 21:19:1A:EC:D2:A7:20:BE:01:85:C0:FC:27:8B:2C:3E:52:76:C7:BB Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Certificate serial: 019AF3895B8E1ED7056FD194B345F55E9F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft Manifest number: 1663 Signing time: Sat 06 Dec 2025 12:00:56 +0000 Manifest this update: Sat 06 Dec 2025 12:00:56 +0000 Manifest next update: Sun 07 Dec 2025 12:00:56 +0000 Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=) 2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=) 3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: h9i0fGV+C5a74RkrHHyIziQTfJEvz5kh5MMMjkZ7UYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5b:8e:1e:d7:05:6f:d1:94:b3:45:f5:5e:9f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Validity Not Before: Dec 6 12:00:56 2025 GMT Not After : Dec 7 12:00:56 2025 GMT Subject: CN=21191aecd2a720be0185c0fc278b2c3e5276c7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:30:b1:9b:2f:54:32:87:7e:8b:93:39:67: d4:cc:88:d6:be:f0:8e:ae:1b:e9:a3:cc:5b:ff:ba: 00:25:54:f8:b9:41:94:ee:f6:21:2a:51:5e:22:68: 7c:72:37:04:25:fc:42:66:dd:dc:e6:64:e1:7c:f9: ea:58:d9:b2:1b:c5:16:28:5b:15:ae:5c:ed:2a:9d: a2:f2:8e:df:e3:4e:a8:eb:39:0f:f5:e8:e2:03:57: 54:ee:aa:07:b0:8c:59:d7:6b:8f:bd:2f:86:5a:b2: d1:d2:4b:f2:45:fe:34:8b:88:42:1e:ae:5f:42:17: 80:1e:49:05:61:2d:e8:f2:17:98:b9:5f:1b:db:98: c6:ee:46:67:3a:ea:0b:7a:7d:38:ae:fc:23:cb:ab: 27:6e:5f:46:1e:90:ad:68:44:a7:c0:b1:d7:d5:cd: 41:b7:68:18:10:56:e0:f5:af:41:ee:4e:23:4f:69: 03:49:99:94:6e:77:93:e3:86:10:6c:f7:1f:95:05: 3f:e6:1c:9c:62:7c:6a:84:da:50:fe:af:85:fc:a2: 9a:85:8d:58:8f:00:42:6c:27:90:a3:b9:30:25:aa: 42:01:f5:10:b6:8a:82:a0:ee:13:85:74:71:8a:6e: 69:96:03:ae:f8:3b:01:23:f7:08:f5:8b:89:bc:30: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:19:1A:EC:D2:A7:20:BE:01:85:C0:FC:27:8B:2C:3E:52:76:C7:BB X509v3 Authority Key Identifier: keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:53:0c:75:11:41:46:3f:75:fc:9e:93:3d:01:ff:72:ed: d0:5c:46:fd:83:47:60:f2:06:c1:49:8a:7a:4d:f0:8b:4a:1f: 41:f0:28:ba:89:d7:a3:c2:3e:96:e6:57:f5:68:7d:63:3f:a5: a1:a5:68:f0:7c:54:df:c9:a2:cf:ab:8f:4d:e5:5b:52:e0:a4: 79:38:2a:bb:59:d2:f1:40:93:02:db:ff:51:9a:32:7e:91:79: 47:92:a4:be:20:a0:ae:cb:94:31:c8:b6:b6:d2:23:13:46:47: d6:69:98:04:96:90:e6:7f:eb:e1:e3:93:ba:6c:9b:57:4f:d7: f9:fb:a4:5a:2d:ed:59:00:83:f6:bd:1f:00:4b:bb:fe:8c:f7: c1:e7:09:e0:29:74:db:5c:a2:e5:15:08:28:02:15:d2:06:76: 27:60:a5:91:1d:b1:18:99:f4:06:52:58:e7:ad:6a:72:15:73: 33:bc:6a:3e:27:71:e2:a5:08:f8:ea:98:0c:39:0c:eb:b8:ab: c7:d5:65:ea:58:13:88:89:46:22:d2:ac:56:6d:6b:bd:9b:14: ed:c4:83:4d:fc:bd:97:45:cf:51:f7:ad:36:46:97:b0:51:e5: 98:d6:bc:ee:92:81:6b:7a:1e:ee:a3:1f:1b:33:56:4a:41:3a: 78:5b:aa:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVuOHtcFb9GUs0X1Xp94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk ZTQwYTAwHhcNMjUxMjA2MTIwMDU2WhcNMjUxMjA3MTIwMDU2WjAzMTEwLwYDVQQD EygyMTE5MWFlY2QyYTcyMGJlMDE4NWMwZmMyNzhiMmMzZTUyNzZjN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdswsZsvVDKHfouTOWfUzIjWvvCO rhvpo8xb/7oAJVT4uUGU7vYhKlFeImh8cjcEJfxCZt3c5mThfPnqWNmyG8UWKFsV rlztKp2i8o7f406o6zkP9ejiA1dU7qoHsIxZ12uPvS+GWrLR0kvyRf40i4hCHq5f QheAHkkFYS3o8heYuV8b25jG7kZnOuoLen04rvwjy6snbl9GHpCtaESnwLHX1c1B t2gYEFbg9a9B7k4jT2kDSZmUbneT44YQbPcflQU/5hycYnxqhNpQ/q+F/KKahY1Y jwBCbCeQo7kwJapCAfUQtoqCoO4ThXRxim5plgOu+DsBI/cI9YuJvDAS0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEZGuzSpyC+AYXA/CeLLD5Sdse7MB8GA1UdIwQY MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW9TDHUR QUY/dfyekz0B/3Lt0FxG/YNHYPIGwUmKek3wi0ofQfAouonXo8I+luZX9Wh9Yz+l oaVo8HxU38miz6uPTeVbUuCkeTgqu1nS8UCTAtv/UZoyfpF5R5KkviCgrsuUMci2 ttIjE0ZH1mmYBJaQ5n/r4eOTumybV0/X+fukWi3tWQCD9r0fAEu7/oz3wecJ4Cl0 21yi5RUIKAIV0gZ2J2ClkR2xGJn0BlJY561qchVzM7xqPidx4qUI+OqYDDkM67ir x9Vl6lgTiIlGItKsVm1rvZsU7cSDTfy9l0XPUfetNkaXsFHlmNa87pKBa3oe7qMf GzNWSkE6eFuq4g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:37:11 2025 by rpki-client