This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft File: Jq19NWATTgqK5G_Fsyxay2Hd45w.mft (raw, json) Hash identifier: mF91iwtrRwDgipJG1bE0oR+56q1TyN+65UJj8qWPiA0= Subject key identifier: 6A:E3:AD:CF:AC:40:29:A4:74:40:F3:27:34:F2:0B:C6:95:CB:28:10 Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Certificate serial: 019B6D331FB7BC4DC1CADB64DFF9632FB17C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft Manifest number: 12CB Signing time: Tue 30 Dec 2025 03:00:25 +0000 Manifest this update: Tue 30 Dec 2025 03:00:25 +0000 Manifest next update: Wed 31 Dec 2025 03:00:25 +0000 Files and hashes: 1: Jq19NWATTgqK5G_Fsyxay2Hd45w.crl (hash: zi6YEcbWFUL3Ref+qblsowbKW3hGriwNtnb3cMofWIk=) 2: roPnxkS_TI_SjXTipSKY7TP-VJU.roa (hash: CNJacRI5tOOEcZvKvjPl2ycQI2Rr4ol7MTIxvtqeEhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:1f:b7:bc:4d:c1:ca:db:64:df:f9:63:2f:b1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c Validity Not Before: Dec 30 03:00:25 2025 GMT Not After : Dec 31 03:00:25 2025 GMT Subject: CN=6ae3adcfac4029a47440f32734f20bc695cb2810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:5f:13:5e:00:89:37:7d:a5:72:9d:fc:49: 02:d4:d0:2b:90:21:be:61:de:44:b3:74:b5:f2:f6: de:c7:03:e8:16:2f:bc:a7:d6:53:70:d0:dd:c1:01: 96:e1:2c:e0:0f:c3:53:d0:b4:40:e5:91:c0:6f:84: d9:86:89:33:72:21:9b:0f:89:77:47:d8:75:be:1d: 91:29:96:b7:c9:7c:7c:82:35:90:6d:90:e0:8d:af: c5:39:63:20:f4:56:c5:3d:10:6c:37:20:60:34:0d: 91:2d:10:a0:03:a2:88:b0:cf:39:4f:6e:35:6a:f2: e8:ab:24:58:3a:40:b8:e4:6c:73:ce:8f:32:b9:9d: 23:84:38:fc:19:07:e0:ad:4f:8f:21:00:88:0e:22: 78:14:f7:9e:27:d6:e6:18:c6:23:57:0a:35:15:50: 3d:d6:04:52:f3:ae:79:a7:90:b7:60:55:c0:59:78: c4:3f:7e:89:9f:cb:c2:a5:45:af:bc:8d:78:88:34: b4:1b:68:0f:51:11:79:a8:b0:a2:7b:32:d0:38:2d: a5:71:f5:f6:f5:50:ab:2d:97:00:e1:39:25:37:ac: 80:74:ba:70:35:79:f2:48:f3:54:46:9f:a6:e2:2a: c2:f5:31:98:eb:e5:b7:57:f2:3a:25:d9:59:65:93: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E3:AD:CF:AC:40:29:A4:74:40:F3:27:34:F2:0B:C6:95:CB:28:10 X509v3 Authority Key Identifier: keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:68:19:5c:ca:19:0f:68:73:40:11:9d:8e:99:04:ba:0c:84: eb:7d:84:29:4d:bc:49:0b:51:7e:0e:b5:71:50:96:4f:4e:ea: 1c:87:09:ef:24:ac:1e:77:b4:b2:22:1a:2e:8d:6b:08:39:e0: 53:fd:c6:1d:fb:f2:84:31:f1:2e:46:c7:8e:55:2f:37:ed:39: 5d:91:af:bc:f0:91:00:95:e7:00:24:2e:77:63:63:03:e1:67: 5c:3c:5b:2e:44:83:08:6d:64:7c:75:7a:20:fd:79:6b:7d:7b: 5c:33:81:7b:3a:ae:bf:87:83:19:00:ee:64:42:3a:5f:22:06: 23:25:d2:97:0f:0a:91:fd:8d:25:b1:b9:c1:d6:e5:2b:8e:b7: 94:90:9d:94:f3:a8:51:d9:bf:b6:b0:97:ac:62:d5:f9:50:f0: 28:81:ad:1c:45:fd:88:ed:31:f2:72:e7:fd:85:6e:f8:2e:fc: ba:cd:ae:3b:ff:f0:e6:51:a5:45:b9:7d:6c:64:e0:e1:13:87: 16:ae:67:a8:a9:c1:27:04:4a:af:05:6c:b0:1e:16:41:a2:6a: 19:f8:d9:32:de:d6:41:b7:d8:3c:55:ea:31:06:dd:15:e6:5a: e6:10:6d:1f:47:46:cb:52:ee:05:5e:b7:a1:4c:64:ef:d5:e9: b8:1f:b7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMx+3vE3Byttk3/ljL7F8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWQ3ZDM1NjAxMzRlMGE4YWU0NmZjNWIzMmM1YWNiNjFk ZGUzOWMwHhcNMjUxMjMwMDMwMDI1WhcNMjUxMjMxMDMwMDI1WjAzMTEwLwYDVQQD Eyg2YWUzYWRjZmFjNDAyOWE0NzQ0MGYzMjczNGYyMGJjNjk1Y2IyODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ohfE14AiTd9pXKd/EkC1NArkCG+ Yd5Es3S18vbexwPoFi+8p9ZTcNDdwQGW4SzgD8NT0LRA5ZHAb4TZhokzciGbD4l3 R9h1vh2RKZa3yXx8gjWQbZDgja/FOWMg9FbFPRBsNyBgNA2RLRCgA6KIsM85T241 avLoqyRYOkC45Gxzzo8yuZ0jhDj8GQfgrU+PIQCIDiJ4FPeeJ9bmGMYjVwo1FVA9 1gRS8655p5C3YFXAWXjEP36Jn8vCpUWvvI14iDS0G2gPURF5qLCiezLQOC2lcfX2 9VCrLZcA4TklN6yAdLpwNXnySPNURp+m4irC9TGY6+W3V/I6JdlZZZMSNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrjrc+sQCmkdEDzJzTyC8aVyygQMB8GA1UdIwQY MBaAFCatfTVgE04KiuRvxbMsWsth3eOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDct NDkwMmE2NmIyZDk1LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDctNDkwMmE2NmIyZDk1 LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWgZXMoZ D2hzQBGdjpkEugyE632EKU28SQtRfg61cVCWT07qHIcJ7ySsHne0siIaLo1rCDng U/3GHfvyhDHxLkbHjlUvN+05XZGvvPCRAJXnACQud2NjA+FnXDxbLkSDCG1kfHV6 IP15a317XDOBezquv4eDGQDuZEI6XyIGIyXSlw8Kkf2NJbG5wdblK463lJCdlPOo Udm/trCXrGLV+VDwKIGtHEX9iO0x8nLn/YVu+C78us2uO//w5lGlRbl9bGTg4ROH Fq5nqKnBJwRKrwVssB4WQaJqGfjZMt7WQbfYPFXqMQbdFeZa5hBtH0dGy1LuBV63 oUxk79XpuB+31g== -----END CERTIFICATE-----Generated at Tue Dec 30 08:00:50 2025 by rpki-client