This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json) Hash identifier: LJYZnE0EVZR8oIZtottNof8um3NvRrYXOBLpna6fmhE= Subject key identifier: 3B:CE:AE:F4:9F:20:6C:C1:C2:F6:C5:10:3C:98:14:36:7E:BE:24:32 Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42 Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842 Certificate serial: 019AF209A94940D1DB060DE0261BCB360FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft Manifest number: 1346 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=) 2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: HlCKDS1Dp2/vrhK+Hoya0kBiGD35618F2lSML5/P8vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a9:49:40:d1:db:06:0d:e0:26:1b:cb:36:0f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=3bceaef49f206cc1c2f6c5103c9814367ebe2432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:a6:d6:76:44:f5:44:a3:48:87:e4:4b:47: d5:f7:fc:39:31:9b:61:05:ae:72:00:25:b0:3e:fa: bf:74:78:7f:53:c3:6d:a1:cc:43:7e:9a:17:d6:b2: b4:9e:43:31:3a:23:c0:55:e7:2b:09:94:fb:99:91: f1:55:fe:70:dd:fe:79:b8:1a:f5:84:05:be:2b:5e: 04:52:06:55:8f:9e:5e:18:ea:3e:7a:41:e1:83:ae: a0:8b:6d:2a:2b:7f:41:88:74:69:6b:1a:39:d3:64: 75:5b:a5:34:a3:60:dc:fa:10:cf:69:dc:9f:75:ef: 66:9c:c2:67:30:cd:84:f8:3c:7f:90:12:97:54:80: 1d:8c:9e:dd:50:53:1b:7d:20:c3:90:d1:ff:c7:db: d6:dd:52:f0:48:65:d3:2f:84:2b:78:22:0f:0d:01: b3:f1:12:4a:24:b2:81:d9:72:85:c0:ae:c5:4e:16: 4f:07:8a:c7:4c:d9:0d:15:83:7e:9b:7c:64:a7:53: 4d:32:f2:6d:38:75:30:69:ad:9f:b4:47:b6:3b:b8: b4:ac:c8:cc:cc:3c:c5:e8:3a:c6:07:b6:10:6b:78: 02:3e:c3:f6:84:9b:66:ca:b5:7f:37:f1:fc:b4:dd: e9:1a:50:e0:8f:d8:0b:4b:35:c6:6e:00:da:ae:38: 2a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:AE:F4:9F:20:6C:C1:C2:F6:C5:10:3C:98:14:36:7E:BE:24:32 X509v3 Authority Key Identifier: keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7c:c7:f7:3c:03:24:13:79:36:04:d9:48:8f:ef:51:0b:a8: 98:f3:84:ad:f9:9a:3b:e2:5f:e4:da:6f:b3:9c:17:53:f9:a7: df:9c:f5:7b:ce:76:89:c6:5c:94:f6:b5:f9:4f:b0:d5:d3:49: 90:73:bd:56:9a:fe:94:e3:a1:33:36:f3:8b:4e:bf:85:fc:5f: 16:20:7b:81:2a:2d:ab:0a:29:ad:62:55:67:ec:74:40:af:4a: 35:e9:d6:64:55:e6:34:52:e4:40:4c:f3:da:10:78:77:66:a3: 3c:79:b5:7d:ea:5f:3a:f1:07:61:4f:17:a4:c1:1d:3f:44:33: a1:25:c0:f0:a0:6b:4f:a2:bc:51:61:94:17:0c:29:96:9e:e0: 35:60:8d:4e:07:35:6c:07:df:f6:90:54:6b:7e:27:41:8f:f5: b7:c4:c5:e4:ea:ce:7a:40:6d:46:e8:bf:26:48:19:f7:56:81: 85:40:09:0b:a1:f7:5a:2e:14:56:98:48:50:3c:46:ce:d2:89: 8c:31:cb:1f:5d:6f:71:5e:89:55:e1:da:5c:ba:ad:7c:6b:82: 5e:df:b6:4c:7f:3d:b1:f8:82:99:b3:76:cd:50:9d:86:88:91: e0:59:47:88:24:8e:45:a1:bd:2b:9f:69:08:d9:90:3e:67:7f: 9a:3c:26:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCalJQNHbBg3gJhvLNg/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWQ0NWUzMTcyNTdlMTcwYTIwMzBlNzliMGY1Zjc0NDA2 YTc4NDIwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EygzYmNlYWVmNDlmMjA2Y2MxYzJmNmM1MTAzYzk4MTQzNjdlYmUyNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QCm1nZE9USjSIfkS0fV9/w5MZth Ba5yACWwPvq/dHh/U8NtocxDfpoX1rK0nkMxOiPAVecrCZT7mZHxVf5w3f55uBr1 hAW+K14EUgZVj55eGOo+ekHhg66gi20qK39BiHRpaxo502R1W6U0o2Dc+hDPadyf de9mnMJnMM2E+Dx/kBKXVIAdjJ7dUFMbfSDDkNH/x9vW3VLwSGXTL4QreCIPDQGz 8RJKJLKB2XKFwK7FThZPB4rHTNkNFYN+m3xkp1NNMvJtOHUwaa2ftEe2O7i0rMjM zDzF6DrGB7YQa3gCPsP2hJtmyrV/N/H8tN3pGlDgj9gLSzXGbgDarjgqSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvOrvSfIGzBwvbFEDyYFDZ+viQyMB8GA1UdIwQY MBaAFI6tReMXJX4XCiAw55sPX3RAanhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmIt MDhiZGNkNTMzYjYxLzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmItMDhiZGNkNTMzYjYx LzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHzH9zwD JBN5NgTZSI/vUQuomPOErfmaO+Jf5Npvs5wXU/mn35z1e852icZclPa1+U+w1dNJ kHO9Vpr+lOOhMzbzi06/hfxfFiB7gSotqwoprWJVZ+x0QK9KNenWZFXmNFLkQEzz 2hB4d2ajPHm1fepfOvEHYU8XpMEdP0QzoSXA8KBrT6K8UWGUFwwplp7gNWCNTgc1 bAff9pBUa34nQY/1t8TF5OrOekBtRui/JkgZ91aBhUAJC6H3Wi4UVphIUDxGztKJ jDHLH11vcV6JVeHaXLqtfGuCXt+2TH89sfiCmbN2zVCdhoiR4FlHiCSORaG9K59p CNmQPmd/mjwm/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:10 2025 by rpki-client