This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json) Hash identifier: qkDquvCw166c+Nb2c5MVbIV1Hx2iyKyOHFVnETd+eGk= Subject key identifier: 0B:C6:DA:A5:57:E1:C8:47:7C:F5:2C:98:11:44:8D:00:D8:41:94:F6 Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2 Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2 Certificate serial: 019B74ECFFB2124F2769901145A4888F1523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft Manifest number: 17A2 Signing time: Wed 31 Dec 2025 15:00:47 +0000 Manifest this update: Wed 31 Dec 2025 15:00:47 +0000 Manifest next update: Thu 01 Jan 2026 15:00:47 +0000 Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=) 2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: +0LruRSEUCIWOqAWTpWQrslaxjgySDU7tkSxifmOfkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ec:ff:b2:12:4f:27:69:90:11:45:a4:88:8f:15:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2 Validity Not Before: Dec 31 15:00:47 2025 GMT Not After : Jan 1 15:00:47 2026 GMT Subject: CN=0bc6daa557e1c8477cf52c9811448d00d84194f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:9d:a0:fe:82:55:df:8f:f3:84:02:c4:f7: a2:91:70:b1:d5:3c:36:0f:cf:83:bb:d6:ee:72:9c: b9:10:6c:19:48:5e:4a:99:43:4e:cb:06:50:43:4f: d9:49:47:21:2c:0f:89:73:93:69:a3:1e:64:e2:79: 91:7a:88:30:61:34:bc:df:ce:bf:0a:bd:c8:9c:23: 52:0f:08:cb:e7:38:ac:94:bb:87:65:63:d0:51:7a: 2a:af:35:23:82:cf:5d:28:e9:4e:94:c7:ad:a0:64: 65:25:97:14:f1:70:e0:a5:c9:5f:8c:75:1e:8a:74: b8:01:2e:41:77:0e:a6:5c:57:5d:9f:f3:9e:be:08: 81:9c:fe:fc:8e:d4:62:a5:75:f7:ec:14:68:21:f9: 73:83:36:44:1f:12:28:9f:bd:52:40:17:15:fc:51: 66:48:d3:b1:42:db:07:32:0f:05:42:2b:0a:63:ee: 25:14:38:24:85:c3:4a:6b:53:8c:df:37:2d:78:fc: e1:b5:e0:ed:d8:96:dc:e3:c7:66:c7:e1:29:18:f9: 57:68:3f:c2:0f:2f:fa:a1:fd:bf:19:e9:f6:26:ff: a4:9f:ca:a0:14:ac:e7:4c:51:9d:a0:0d:79:a6:e0: c8:29:ac:8d:ea:ab:89:35:77:9e:5b:e9:8b:22:e9: ca:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C6:DA:A5:57:E1:C8:47:7C:F5:2C:98:11:44:8D:00:D8:41:94:F6 X509v3 Authority Key Identifier: keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:11:3a:d3:60:52:06:79:2b:66:f4:e6:fb:d9:22:ad:f0:44: 2a:1f:fd:00:82:d4:8e:5b:11:73:30:ca:a8:ef:a5:1b:41:f0: 44:31:d5:09:1d:0c:61:e5:e9:cf:40:66:b8:7c:4b:85:0c:e4: 2f:a4:cb:92:6c:52:3a:00:98:17:7b:72:5c:14:af:8a:45:dc: f5:3d:67:b3:24:56:7c:7d:81:a8:12:ae:6f:ff:8d:48:b8:43: d3:87:16:7e:bd:d2:ea:83:16:f4:12:f9:c6:e1:da:16:2c:2f: 19:47:c7:e8:95:84:93:c9:f8:79:24:5a:de:fa:f7:cf:70:79: 7d:70:22:ae:50:4c:4f:bc:9b:1d:b3:5f:0f:f8:2c:c2:63:3a: f9:75:9b:ff:23:d6:78:0f:62:ed:40:41:5b:fe:01:6b:a9:37: b2:a2:47:ff:f2:07:a0:19:ea:2b:39:90:f2:54:ea:c5:89:0a: 40:aa:f1:21:0a:90:ab:89:e7:d2:fa:23:54:9e:8b:dc:da:62: 34:e4:a4:e2:e5:d9:b6:45:25:17:2a:50:2e:1f:48:a9:62:05: e1:78:41:f7:24:52:b7:ed:c6:9b:00:39:66:79:75:64:db:14: 33:d2:95:5a:5c:e8:97:e8:9f:b2:49:c2:65:b4:03:7a:52:eb: 8a:0b:41:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07P+yEk8naZARRaSIjxUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMGI1ODRmNjAzNWZlNWEyODdjNTY3ZjFlMzg1NGI4ZmJj MmEwYzIwHhcNMjUxMjMxMTUwMDQ3WhcNMjYwMTAxMTUwMDQ3WjAzMTEwLwYDVQQD EygwYmM2ZGFhNTU3ZTFjODQ3N2NmNTJjOTgxMTQ0OGQwMGQ4NDE5NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2doP6CVd+P84QCxPeikXCx1Tw2 D8+Du9bucpy5EGwZSF5KmUNOywZQQ0/ZSUchLA+Jc5Npox5k4nmReogwYTS8386/ Cr3InCNSDwjL5zislLuHZWPQUXoqrzUjgs9dKOlOlMetoGRlJZcU8XDgpclfjHUe inS4AS5Bdw6mXFddn/OevgiBnP78jtRipXX37BRoIflzgzZEHxIon71SQBcV/FFm SNOxQtsHMg8FQisKY+4lFDgkhcNKa1OM3zctePzhteDt2Jbc48dmx+EpGPlXaD/C Dy/6of2/Gen2Jv+kn8qgFKznTFGdoA15puDIKayN6quJNXeeW+mLIunK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvG2qVX4chHfPUsmBFEjQDYQZT2MB8GA1UdIwQY MBaAFI0LWE9gNf5aKHxWfx44VLj7wqDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zOTMxMzEtMTc0My00OGU1LWFlNTQt YTliZjNhNzY5Mzc3LzEvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zOTMxMzEtMTc0My00OGU1LWFlNTQtYTliZjNhNzY5Mzc3 LzEvalF0WVQyQTFfbG9vZkZaX0hqaFV1UHZDb01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxE602BS BnkrZvTm+9kirfBEKh/9AILUjlsRczDKqO+lG0HwRDHVCR0MYeXpz0BmuHxLhQzk L6TLkmxSOgCYF3tyXBSvikXc9T1nsyRWfH2BqBKub/+NSLhD04cWfr3S6oMW9BL5 xuHaFiwvGUfH6JWEk8n4eSRa3vr3z3B5fXAirlBMT7ybHbNfD/gswmM6+XWb/yPW eA9i7UBBW/4Ba6k3sqJH//IHoBnqKzmQ8lTqxYkKQKrxIQqQq4nn0vojVJ6L3Npi NOSk4uXZtkUlFypQLh9IqWIF4XhB9yRSt+3GmwA5Znl1ZNsUM9KVWlzol+ifsknC ZbQDelLrigtB2Q== -----END CERTIFICATE-----Generated at Wed Dec 31 21:09:24 2025 by rpki-client