This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json) Hash identifier: Qnbd9ocskaFEhGSAgeSf5HFbT6FQ5D+ut+CbqJUmK1Q= Subject key identifier: 68:95:80:EA:BB:5D:FA:83:DF:25:4D:2E:5B:88:33:4A:4C:E3:FF:DF Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e Certificate serial: 019B34FBC23C8F117D68349E71DEE3E73312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft Manifest number: 117F Signing time: Fri 19 Dec 2025 05:01:12 +0000 Manifest this update: Fri 19 Dec 2025 05:01:12 +0000 Manifest next update: Sat 20 Dec 2025 05:01:12 +0000 Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=) 2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: rf9ZoxTrXgVwcxQxnC1+tND8idva8keJA3yv/Z3YFpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:c2:3c:8f:11:7d:68:34:9e:71:de:e3:e7:33:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e Validity Not Before: Dec 19 05:01:12 2025 GMT Not After : Dec 20 05:01:12 2025 GMT Subject: CN=689580eabb5dfa83df254d2e5b88334a4ce3ffdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ee:ae:01:96:ac:61:d5:4b:96:f3:36:16:56: 3e:b2:b8:ab:7d:4e:de:e1:62:ee:04:b7:d9:b0:fd: 15:4e:ab:ce:48:d6:5a:ed:82:bb:7c:cf:55:e8:c1: a5:fd:46:42:00:b6:1a:38:9c:b7:2e:62:3c:d3:6f: 16:f7:65:15:59:f7:2a:43:22:91:e0:ca:e5:bb:2d: 00:90:8d:cf:37:20:e1:57:95:fc:4b:17:94:fd:09: 29:c9:1b:35:d3:94:d5:50:86:e7:a7:11:43:aa:76: ed:b7:00:93:33:6a:ec:7b:df:90:60:3d:80:08:15: 36:e0:16:fd:d0:fa:44:83:13:7f:d7:c7:96:0e:94: 9d:b1:cd:7f:b6:fe:8a:d0:fc:92:06:dd:76:b0:b7: 85:68:a5:a8:be:eb:0d:36:b3:93:2c:49:93:c3:43: 2e:1b:b4:ab:0a:79:69:9f:d8:ca:9c:07:cc:7a:6d: 5b:3b:4c:9e:15:36:3f:59:36:f3:36:f2:aa:ff:c0: 0c:34:f8:53:1c:67:e7:ae:91:d6:04:bf:9d:37:a4: 8b:2b:53:5b:f7:03:eb:b7:39:6a:a6:f6:03:5e:40: 82:16:cc:54:d1:e4:b7:9f:a7:5d:88:a3:87:5f:4b: 29:a7:35:58:ee:df:d0:98:c8:5a:60:09:d4:0c:fa: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:95:80:EA:BB:5D:FA:83:DF:25:4D:2E:5B:88:33:4A:4C:E3:FF:DF X509v3 Authority Key Identifier: keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c6:50:7b:db:0c:3b:e4:3d:9e:e8:f5:27:be:ae:49:6e:1e: 7a:55:7f:78:f0:7b:0b:ae:91:57:d9:eb:a0:d8:c3:ab:24:cf: ec:00:99:e5:2b:b1:a8:e8:07:66:ef:b2:65:6a:60:44:d4:b8: d6:27:fb:29:cf:03:68:bd:dc:89:ea:4a:ff:d5:d1:87:0b:9d: d6:2b:8c:fd:b9:2f:f6:60:13:4b:83:4c:aa:31:5c:de:18:76: c0:f6:9c:a2:01:38:20:f4:55:66:bd:36:91:1d:fe:0f:c0:54: de:83:89:b9:db:7c:78:65:f0:46:a0:87:d4:ac:63:ae:2b:12: 2b:ec:0a:72:fc:96:b6:8a:0b:77:c5:c6:c8:6c:a9:c0:f7:81: 32:52:24:df:27:d2:bd:e3:d2:50:36:bb:19:97:24:c8:0b:d2: 05:8d:be:fd:c0:08:4a:b5:50:e5:ff:21:ce:81:33:90:a4:dd: 2b:0a:78:01:5a:ea:d3:9e:d5:74:51:a0:c8:e1:b2:e0:ef:4e: 17:85:53:32:0e:6d:cc:b9:50:5d:0e:46:4e:f0:d8:92:eb:7c: ac:f3:6f:7e:11:df:10:bd:87:71:47:8b:0f:df:db:49:d4:21: 91:c5:0f:02:b9:93:4c:9a:fe:9c:4d:77:48:3a:15:9b:21:24: bc:8e:38:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+8I8jxF9aDSecd7j5zMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjQwYzFiOTBmN2YwMjAwNTNmYTA5NTMzMGZmY2ZhZGVm NTM5OWUwHhcNMjUxMjE5MDUwMTEyWhcNMjUxMjIwMDUwMTEyWjAzMTEwLwYDVQQD Eyg2ODk1ODBlYWJiNWRmYTgzZGYyNTRkMmU1Yjg4MzM0YTRjZTNmZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e6uAZasYdVLlvM2FlY+srirfU7e 4WLuBLfZsP0VTqvOSNZa7YK7fM9V6MGl/UZCALYaOJy3LmI8028W92UVWfcqQyKR 4Mrluy0AkI3PNyDhV5X8SxeU/QkpyRs105TVUIbnpxFDqnbttwCTM2rse9+QYD2A CBU24Bb90PpEgxN/18eWDpSdsc1/tv6K0PySBt12sLeFaKWovusNNrOTLEmTw0Mu G7SrCnlpn9jKnAfMem1bO0yeFTY/WTbzNvKq/8AMNPhTHGfnrpHWBL+dN6SLK1Nb 9wPrtzlqpvYDXkCCFsxU0eS3n6ddiKOHX0sppzVY7t/QmMhaYAnUDPq70wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiVgOq7XfqD3yVNLluIM0pM4//fMB8GA1UdIwQY MBaAFIwkDBuQ9/AgBT+glTMP/Pre9TmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMt ODdlMzYxODRjMGI1LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMtODdlMzYxODRjMGI1 LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8ZQe9sM O+Q9nuj1J76uSW4eelV/ePB7C66RV9nroNjDqyTP7ACZ5SuxqOgHZu+yZWpgRNS4 1if7Kc8DaL3ciepK/9XRhwud1iuM/bkv9mATS4NMqjFc3hh2wPacogE4IPRVZr02 kR3+D8BU3oOJudt8eGXwRqCH1KxjrisSK+wKcvyWtooLd8XGyGypwPeBMlIk3yfS vePSUDa7GZckyAvSBY2+/cAISrVQ5f8hzoEzkKTdKwp4AVrq057VdFGgyOGy4O9O F4VTMg5tzLlQXQ5GTvDYkut8rPNvfhHfEL2HcUeLD9/bSdQhkcUPArmTTJr+nE13 SDoVmyEkvI44Nw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:33:30 2025 by rpki-client