This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json) Hash identifier: Qz2NdJq4u/7J3AdQOa6/uFe9Q++W73otk2Tw+UE5XRI= Subject key identifier: 31:EC:23:F8:77:A1:56:DA:BE:10:29:99:0C:11:3C:6C:24:30:FF:35 Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019B3F7EF1D1C2DD21DC7B67707B77F6F96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft Manifest number: 1440 Signing time: Sun 21 Dec 2025 06:00:42 +0000 Manifest this update: Sun 21 Dec 2025 06:00:42 +0000 Manifest next update: Mon 22 Dec 2025 06:00:42 +0000 Files and hashes: 1: 3AQkVEHFaMYSacwuB_BxozwNGjQ.roa (hash: jeS6MVFt6boj/NgjPcW0szXMbQo13HV5/k7qMzzrnUk=) 2: 8yaYj48CMeDTrtxfRpEdN6HgFIQ.roa (hash: 4avp+UIZj25/RQWft/nWjrgeixj3LhpnKvccOgiHbbs=) 3: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=) 4: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: eFFiXrPQ1rlMsi5VeKuWFdnzzj726GMks1mPS3/NtRg=) 5: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=) 6: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=) 7: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=) 8: gcc-FdNN6vti97PWBSoHsMNsu34.roa (hash: CtKuHOA67XtrsqR+tr65cCG6nxTHyUOq4FA3/7KVSO4=) 9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=) 10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:f1:d1:c2:dd:21:dc:7b:67:70:7b:77:f6:f9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Dec 21 06:00:42 2025 GMT Not After : Dec 22 06:00:42 2025 GMT Subject: CN=31ec23f877a156dabe1029990c113c6c2430ff35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:a1:1f:22:7f:58:b2:92:2b:aa:eb:bc:84: 3a:04:6b:b7:02:3c:94:5a:6b:cb:21:32:3b:ef:cf: 88:43:5c:62:be:9d:0a:9a:62:8d:99:6b:6b:8f:cc: 07:72:52:75:8f:bb:db:8e:73:78:fc:66:46:89:8c: 74:eb:d9:5f:3e:a7:c7:b7:15:eb:28:b3:45:85:1b: a4:f5:c7:ef:1e:fa:3a:96:26:bb:ab:7c:b8:f1:61: d7:83:8c:d1:63:3b:dc:38:e2:b4:8e:56:1b:13:79: a3:02:b8:b8:3a:90:c4:64:bd:9b:5b:27:2f:10:4f: 59:be:61:84:f1:df:70:f2:3c:ca:b6:04:68:a0:a8: 2d:51:85:50:73:7b:26:5e:ef:3f:e7:ef:b7:a6:cb: cd:42:44:9c:8d:87:d5:f7:57:a2:20:b1:80:fd:50: aa:b4:00:72:f7:f1:02:3d:01:01:75:b3:3b:37:46: f8:15:5f:19:39:18:2f:4a:a5:24:c1:81:52:02:7b: 4a:5b:14:a8:ec:63:94:f6:3e:a8:98:9f:5d:20:2e: d5:f7:db:d7:31:04:ec:9f:db:ac:f5:bf:e4:05:2d: 12:14:b5:94:9a:2f:ba:01:2d:d6:f5:23:2f:f4:43: 89:94:02:f5:6c:18:95:e0:69:8b:ce:65:9a:1e:53: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EC:23:F8:77:A1:56:DA:BE:10:29:99:0C:11:3C:6C:24:30:FF:35 X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bf:ca:e7:76:56:dc:32:2f:90:e5:32:c5:4f:9c:5b:2e:95: b1:c4:78:c8:8a:ac:ab:47:f1:d2:e1:b0:79:9c:b1:e7:23:69: f7:22:36:a8:b3:1d:d9:3d:1d:7a:af:02:00:49:25:59:cd:dd: 69:66:d5:36:c2:61:0b:a5:17:92:64:6f:ec:11:28:d9:e9:a3: 2b:82:a2:df:96:48:63:35:a9:dd:9a:bd:4d:44:30:4b:03:f0: b7:1b:49:b7:70:23:02:35:d7:86:a3:0b:ab:88:a3:a9:14:56: 63:38:c6:be:c1:47:dd:ae:2c:3c:9b:37:9f:28:21:57:57:53: 4e:f1:cd:d2:f5:92:88:29:54:69:2c:ff:16:47:d7:77:6c:8e: a4:5f:54:c4:be:83:18:98:dc:8b:6a:4c:a6:6f:bb:5a:6a:7a: 12:d4:ad:40:c4:b3:bf:72:99:2f:35:a0:cb:22:4f:29:73:3a: 5e:26:d7:51:f7:1a:58:42:55:84:0f:ba:94:23:70:32:50:b1: 07:a8:aa:7a:e4:cf:d1:ec:06:f6:64:76:bd:52:fe:d4:ba:2e: 96:4a:92:dd:e5:7c:a6:5e:51:10:1c:c0:7c:34:a4:7d:ee:f5: 46:0e:24:a3:30:04:0b:35:ac:1a:14:36:e7:9f:81:2b:2a:d0: fe:80:8e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvHRwt0h3HtncHt39vlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjUxMjIxMDYwMDQyWhcNMjUxMjIyMDYwMDQyWjAzMTEwLwYDVQQD EygzMWVjMjNmODc3YTE1NmRhYmUxMDI5OTkwYzExM2M2YzI0MzBmZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr2hHyJ/WLKSK6rrvIQ6BGu3AjyU WmvLITI778+IQ1xivp0KmmKNmWtrj8wHclJ1j7vbjnN4/GZGiYx069lfPqfHtxXr KLNFhRuk9cfvHvo6lia7q3y48WHXg4zRYzvcOOK0jlYbE3mjAri4OpDEZL2bWycv EE9ZvmGE8d9w8jzKtgRooKgtUYVQc3smXu8/5++3psvNQkScjYfV91eiILGA/VCq tABy9/ECPQEBdbM7N0b4FV8ZORgvSqUkwYFSAntKWxSo7GOU9j6omJ9dIC7V99vX MQTsn9us9b/kBS0SFLWUmi+6AS3W9SMv9EOJlAL1bBiV4GmLzmWaHlPprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHsI/h3oVbavhApmQwRPGwkMP81MB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr/K53ZW 3DIvkOUyxU+cWy6VscR4yIqsq0fx0uGweZyx5yNp9yI2qLMd2T0deq8CAEklWc3d aWbVNsJhC6UXkmRv7BEo2emjK4Ki35ZIYzWp3Zq9TUQwSwPwtxtJt3AjAjXXhqML q4ijqRRWYzjGvsFH3a4sPJs3nyghV1dTTvHN0vWSiClUaSz/FkfXd2yOpF9UxL6D GJjci2pMpm+7Wmp6EtStQMSzv3KZLzWgyyJPKXM6XibXUfcaWEJVhA+6lCNwMlCx B6iqeuTP0ewG9mR2vVL+1LoulkqS3eV8pl5REBzAfDSkfe71Rg4kozAECzWsGhQ2 55+BKyrQ/oCOMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:14:27 2025 by rpki-client