This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft File: Jq19NWATTgqK5G_Fsyxay2Hd45w.mft (raw, json) Hash identifier: g07DLdYUcCMkRf5MSk0kIB55duVebXNMyU4fSr6hYdM= Subject key identifier: BE:FA:FD:5F:3E:72:9F:89:45:50:50:FF:EA:5B:48:20:94:54:C8:43 Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Certificate serial: 019B4A70C8847DBB718F6908CD3414A525D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft Manifest number: 12B9 Signing time: Tue 23 Dec 2025 09:01:03 +0000 Manifest this update: Tue 23 Dec 2025 09:01:03 +0000 Manifest next update: Wed 24 Dec 2025 09:01:03 +0000 Files and hashes: 1: Jq19NWATTgqK5G_Fsyxay2Hd45w.crl (hash: I6Jp8BViGu281QsgypltTdeUySDkQ3s7IPfo5kn4AJg=) 2: roPnxkS_TI_SjXTipSKY7TP-VJU.roa (hash: CNJacRI5tOOEcZvKvjPl2ycQI2Rr4ol7MTIxvtqeEhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:c8:84:7d:bb:71:8f:69:08:cd:34:14:a5:25:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Validity Not Before: Dec 23 09:01:03 2025 GMT Not After : Dec 24 09:01:03 2025 GMT Subject: CN=befafd5f3e729f89455050ffea5b48209454c843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:31:98:f3:8e:22:dd:af:e2:48:a8:49:b0: 80:4c:5f:73:e9:41:2a:1a:be:a0:0d:b7:af:2d:f8: 99:f4:df:69:fb:46:8d:08:83:c4:83:87:8e:6a:0d: cb:39:ff:c2:98:1d:5f:f0:79:4d:e4:17:7c:ca:9e: 52:11:9a:3a:cc:bb:e5:4a:af:b9:1f:76:7b:1b:af: c6:00:5d:61:56:14:92:79:f2:1b:71:fd:d2:17:11: 4e:b9:64:a0:85:24:7b:be:8e:51:f8:cc:1c:68:f5: c6:ec:4c:6b:8b:57:43:58:77:9b:3d:e1:ed:d6:29: 8c:bf:cb:f6:bf:50:fc:83:4c:dd:1b:3b:a8:d4:b6: af:19:f1:3b:0e:56:3e:64:cb:c5:d8:7b:b6:1c:f2: d4:ec:6f:40:57:17:1e:9c:44:dc:9b:95:e7:49:f7: 5b:a9:e9:a4:49:9e:f2:b4:b9:8d:bb:08:79:7d:23: 1e:5f:92:0e:c8:94:52:7f:4b:15:28:42:39:e4:5e: 67:2e:b2:dc:e1:19:94:c8:f0:fa:0d:2c:42:ec:11: 4a:dd:66:80:2a:f9:23:d5:b9:a9:6e:d5:e6:8c:e3: c5:2f:af:99:7a:9a:a5:17:c8:e3:c8:f7:75:6d:a7: 13:17:53:49:44:10:ea:0f:b1:d6:d4:b7:f5:bc:67: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FA:FD:5F:3E:72:9F:89:45:50:50:FF:EA:5B:48:20:94:54:C8:43 X509v3 Authority Key Identifier: keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:25:1f:5e:da:3c:64:da:ba:50:23:83:8b:a0:a6:3a:ac: 29:53:86:87:db:ad:51:8c:85:74:e0:44:de:73:80:30:c4:69: 27:97:30:35:fa:95:1b:54:2a:d8:ed:43:59:91:38:66:c1:71: 5e:c3:09:8f:da:63:c7:ea:8d:01:23:0b:4d:7b:b1:cd:f5:eb: 51:33:ca:88:c2:b5:75:0b:7b:d7:43:29:46:31:60:8c:e8:51: e9:9c:ea:42:c5:b6:17:20:a8:84:47:33:7e:ff:41:4e:fe:af: fa:64:53:54:54:95:60:ab:0b:15:41:98:a8:b0:1d:74:d1:7d: 75:d9:88:bd:6c:7a:05:6e:f1:fb:f2:33:6a:c6:73:93:ca:3a: 60:1a:02:b1:d7:0d:b7:3f:0a:02:e4:bb:49:c3:e1:0b:95:6b: a9:6e:20:aa:58:68:22:65:06:a6:e5:a2:b1:4c:96:85:6b:fe: 7c:a9:30:ed:83:45:52:71:fb:43:de:50:8f:2a:4c:64:0c:b8: 0a:61:2d:bf:cc:70:bf:02:c2:3e:6c:d1:a4:a6:62:80:88:81: 28:c5:43:c3:d5:81:72:31:88:89:95:dc:05:7d:93:13:6e:5c: 48:93:a8:19:41:29:94:39:c2:0e:b7:68:ee:ff:88:1f:80:40: e5:ac:e0:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcMiEfbtxj2kIzTQUpSXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWQ3ZDM1NjAxMzRlMGE4YWU0NmZjNWIzMmM1YWNiNjFk ZGUzOWMwHhcNMjUxMjIzMDkwMTAzWhcNMjUxMjI0MDkwMTAzWjAzMTEwLwYDVQQD EyhiZWZhZmQ1ZjNlNzI5Zjg5NDU1MDUwZmZlYTViNDgyMDk0NTRjODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdMxmPOOIt2v4kioSbCATF9z6UEq Gr6gDbevLfiZ9N9p+0aNCIPEg4eOag3LOf/CmB1f8HlN5Bd8yp5SEZo6zLvlSq+5 H3Z7G6/GAF1hVhSSefIbcf3SFxFOuWSghSR7vo5R+MwcaPXG7Exri1dDWHebPeHt 1imMv8v2v1D8g0zdGzuo1LavGfE7DlY+ZMvF2Hu2HPLU7G9AVxcenETcm5XnSfdb qemkSZ7ytLmNuwh5fSMeX5IOyJRSf0sVKEI55F5nLrLc4RmUyPD6DSxC7BFK3WaA Kvkj1bmpbtXmjOPFL6+ZepqlF8jjyPd1bacTF1NJRBDqD7HW1Lf1vGeU3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL76/V8+cp+JRVBQ/+pbSCCUVMhDMB8GA1UdIwQY MBaAFCatfTVgE04KiuRvxbMsWsth3eOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDct NDkwMmE2NmIyZDk1LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDctNDkwMmE2NmIyZDk1 LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9AlH17a PGTaulAjg4ugpjqsKVOGh9utUYyFdOBE3nOAMMRpJ5cwNfqVG1Qq2O1DWZE4ZsFx XsMJj9pjx+qNASMLTXuxzfXrUTPKiMK1dQt710MpRjFgjOhR6ZzqQsW2FyCohEcz fv9BTv6v+mRTVFSVYKsLFUGYqLAddNF9ddmIvWx6BW7x+/IzasZzk8o6YBoCsdcN tz8KAuS7ScPhC5VrqW4gqlhoImUGpuWisUyWhWv+fKkw7YNFUnH7Q95QjypMZAy4 CmEtv8xwvwLCPmzRpKZigIiBKMVDw9WBcjGIiZXcBX2TE25cSJOoGUEplDnCDrdo 7v+IH4BA5azgpQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:45:23 2025 by rpki-client