This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json) Hash identifier: FToyIpsjexARR+OZkZnk+mgxugfTEFv3MDWbWLrbjbo= Subject key identifier: 11:59:82:0C:EC:A2:F3:30:A4:48:84:DD:9E:B7:19:63:11:37:EA:E1 Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Certificate serial: 019AF2ADD3DCBC79D9E12791128DE78B307B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft Manifest number: 16B9 Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: Lo/fD0445Y4yfdPC/3FAlHM9uCd3Imumq9+optR6v98=) 2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d3:dc:bc:79:d9:e1:27:91:12:8d:e7:8b:30:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=1159820ceca2f330a44884dd9eb719631137eae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:6e:cb:0d:76:b2:1c:68:2f:a7:2b:3f:2b: ee:b1:ba:6e:7d:4f:80:35:cb:a7:6f:8f:9c:b6:af: 19:39:c7:55:c4:e6:4a:57:35:a7:48:1e:69:8d:4f: 7f:d9:f6:bc:e2:5c:4a:aa:df:f3:b7:c5:a5:9c:0e: 73:67:ae:62:db:ac:87:15:2b:1f:ec:19:2d:bb:92: 74:f5:fc:91:60:ec:06:fc:8f:a3:55:db:05:02:ca: f0:e6:23:6d:8e:9e:32:f0:f1:33:12:7d:6e:f8:29: b1:0e:6c:e1:5d:0a:46:0d:d1:71:92:a5:e3:73:f1: 4a:e3:68:3d:fc:b4:92:da:d1:5a:8a:13:aa:f4:e5: d6:34:a8:08:ea:ba:04:c7:83:ef:85:3d:28:78:b4: cf:46:a7:e5:ff:ce:d7:2b:6f:ca:84:b1:cb:a9:93: 0a:e2:f5:41:c5:cd:a8:55:77:b9:78:30:11:d9:23: 94:d1:d7:0b:ad:c1:76:67:12:01:5d:3c:bb:76:ec: 84:85:b7:bb:c6:ca:1d:04:13:14:e3:6d:ee:13:fd: 2e:79:09:64:91:27:1d:e0:e2:15:5c:66:60:4e:ec: d4:09:72:b8:76:39:16:a9:e9:5b:3e:99:8b:b5:93: 72:c1:ac:39:e8:53:0e:05:17:cc:31:12:19:6c:bd: 16:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:59:82:0C:EC:A2:F3:30:A4:48:84:DD:9E:B7:19:63:11:37:EA:E1 X509v3 Authority Key Identifier: keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0f:5a:97:8d:2e:a2:b8:55:77:92:a1:d1:f9:2e:4b:5f:3f: 44:ac:a2:e8:32:3e:e3:b5:21:34:2f:ec:8b:48:bb:7f:6a:f4: ae:c4:b6:6a:23:fb:47:11:61:17:9c:52:1d:ac:66:c1:46:8b: 86:0b:66:34:87:93:ba:7f:c0:9f:93:03:56:59:07:67:99:f8: bb:40:c3:de:6a:c4:a0:0f:5a:84:ab:30:78:19:59:55:45:cb: 94:f4:8c:ed:41:cd:35:f2:79:0d:3e:7b:c1:6d:0c:95:06:f9: cb:73:8e:8f:e7:4a:2b:4f:ff:4d:98:fc:9b:5c:27:4a:4d:44: d3:22:ef:52:52:0d:d0:49:96:9a:9a:ec:e0:cf:f2:cf:7c:4f: de:57:d9:1e:99:6c:16:f0:b0:cd:48:d2:7c:6a:b2:ec:28:64: f7:3d:ea:d4:a3:9d:0f:51:bb:fa:3d:f3:9d:e3:3c:8a:f7:88: b7:c5:d5:23:57:eb:89:26:19:0c:d7:5f:bc:fa:21:bb:d9:de: e3:25:e4:68:ab:58:37:38:e4:4f:2d:5a:e1:e0:28:8d:d0:94: f8:71:3c:cd:5d:6c:84:bb:21:59:54:f2:b7:b1:d3:99:6a:a5: da:bf:f2:a3:51:ce:da:cf:0f:e4:8c:81:59:7d:eb:5d:aa:46: 1b:6b:57:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdPcvHnZ4SeREo3nizB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4 NTk4YjYwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD EygxMTU5ODIwY2VjYTJmMzMwYTQ0ODg0ZGQ5ZWI3MTk2MzExMzdlYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9uyw12shxoL6crPyvusbpufU+A Ncunb4+ctq8ZOcdVxOZKVzWnSB5pjU9/2fa84lxKqt/zt8WlnA5zZ65i26yHFSsf 7Bktu5J09fyRYOwG/I+jVdsFAsrw5iNtjp4y8PEzEn1u+CmxDmzhXQpGDdFxkqXj c/FK42g9/LSS2tFaihOq9OXWNKgI6roEx4PvhT0oeLTPRqfl/87XK2/KhLHLqZMK 4vVBxc2oVXe5eDAR2SOU0dcLrcF2ZxIBXTy7duyEhbe7xsodBBMU423uE/0ueQlk kScd4OIVXGZgTuzUCXK4djkWqelbPpmLtZNywaw56FMOBRfMMRIZbL0WowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFZggzsovMwpEiE3Z63GWMRN+rhMB8GA1UdIwQY MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGA9al40u orhVd5Kh0fkuS18/RKyi6DI+47UhNC/si0i7f2r0rsS2aiP7RxFhF5xSHaxmwUaL hgtmNIeTun/An5MDVlkHZ5n4u0DD3mrEoA9ahKsweBlZVUXLlPSM7UHNNfJ5DT57 wW0MlQb5y3OOj+dKK0//TZj8m1wnSk1E0yLvUlIN0EmWmprs4M/yz3xP3lfZHpls FvCwzUjSfGqy7Chk9z3q1KOdD1G7+j3zneM8iveIt8XVI1friSYZDNdfvPohu9ne 4yXkaKtYNzjkTy1a4eAojdCU+HE8zV1shLshWVTyt7HTmWql2r/yo1HO2s8P5IyB WX3rXapGG2tXuA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:01 2025 by rpki-client