This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json) Hash identifier: YaDIOK4C6EFeRxfUsqulI+PBJdEtdu/sDR57zmFC0bk= Subject key identifier: 40:D0:34:0F:D7:87:31:E2:EB:E8:5F:AF:A7:2B:C6:47:F9:4F:E8:D6 Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1 Certificate serial: 019B6BB33689E27F8F460789BEDE2A8AE0AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft Manifest number: 135B Signing time: Mon 29 Dec 2025 20:01:05 +0000 Manifest this update: Mon 29 Dec 2025 20:01:05 +0000 Manifest next update: Tue 30 Dec 2025 20:01:05 +0000 Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=) 2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: q5PCF7CW1BVIFgf43Ft3KK0xcATBf6DZVAfQgLymJvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b3:36:89:e2:7f:8f:46:07:89:be:de:2a:8a:e0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1 Validity Not Before: Dec 29 20:01:05 2025 GMT Not After : Dec 30 20:01:05 2025 GMT Subject: CN=40d0340fd78731e2ebe85fafa72bc647f94fe8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e6:c3:c9:2f:3a:de:dc:7b:91:54:73:19:fd: 06:d6:12:d0:4d:5d:14:bc:64:0b:8b:d5:b6:e7:42: f1:9b:59:52:62:d3:bd:9c:1d:df:e4:f6:69:06:a1: 1b:c4:f8:3c:f2:f3:95:77:d2:80:38:65:36:b4:2b: 15:e1:9c:a4:f9:0b:cf:d0:d7:00:e0:e6:c8:9e:a8: bc:0b:20:bb:11:62:48:e1:60:a7:8c:8a:dd:d1:3f: 55:b9:cb:30:6e:8c:ca:18:54:94:ef:80:39:93:41: 3c:f3:b9:b6:2d:af:07:47:de:49:c8:8a:64:fb:ae: 3c:ce:e1:06:ce:c4:2e:6e:38:3d:74:8c:b4:c1:30: 37:50:dd:89:57:ab:e7:59:b3:f0:0b:22:a4:70:30: 71:da:ae:4b:8e:7f:d6:29:20:12:ff:e6:6d:74:6f: 49:40:9a:56:32:a8:cd:dc:4e:42:75:b0:a6:f1:2f: ec:a2:e3:1d:0d:8a:be:28:54:5e:ae:47:43:24:e2: 19:7b:69:d0:03:ef:96:13:9d:31:22:47:bf:90:c9: 01:8a:1f:fe:08:65:f9:da:b1:31:6d:aa:7d:90:d7: 7e:b0:44:5c:7d:bc:fa:37:ab:01:1b:6a:33:65:ea: 20:ff:67:fe:6b:a4:7e:ac:20:77:73:ab:ff:58:28: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D0:34:0F:D7:87:31:E2:EB:E8:5F:AF:A7:2B:C6:47:F9:4F:E8:D6 X509v3 Authority Key Identifier: keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3c:c2:a7:22:c3:35:9a:6a:62:a8:1f:1b:fb:fa:26:22:4f: bc:0f:04:58:f3:f5:4a:b7:17:60:42:da:80:ef:c4:d9:cc:b8: 89:c3:18:ac:63:33:aa:1a:d0:76:31:50:05:47:e2:d0:d3:dc: a2:60:44:98:7f:86:79:34:2b:8f:be:ac:75:56:f4:4c:8b:d6: 04:ce:9e:28:ca:40:d7:07:8f:9d:7f:09:b5:14:3e:7c:75:21: 53:13:b4:1c:0b:c7:20:f0:84:cb:67:e3:19:01:2b:3b:65:57: 20:cc:ca:2f:d8:23:89:85:2b:07:81:d2:32:ba:ad:a0:5b:f9: 99:c8:13:bf:09:e6:f5:d3:98:ee:74:3a:49:40:d4:16:bf:a9: 1e:80:7d:63:47:ec:8d:9e:62:14:98:89:c1:d6:2d:b9:7e:1f: 3c:96:78:92:dd:c3:2a:c7:9c:49:bf:ca:8e:3f:43:95:15:a3: 68:44:c0:ab:ec:81:01:a1:c1:7a:55:72:9e:da:ae:9c:f8:99: 0c:02:c5:7d:1f:bb:c4:f5:84:a5:12:e0:e6:14:cb:f7:6a:a7: 1d:d2:6b:f7:48:14:1b:df:4e:a8:c8:e5:9b:a2:ba:56:0b:43: 28:6c:5a:ed:f9:97:bf:d7:32:75:37:fb:e5:32:c4:bd:4e:03: 7a:06:12:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrszaJ4n+PRgeJvt4qiuCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx NDhkZjEwHhcNMjUxMjI5MjAwMTA1WhcNMjUxMjMwMjAwMTA1WjAzMTEwLwYDVQQD Eyg0MGQwMzQwZmQ3ODczMWUyZWJlODVmYWZhNzJiYzY0N2Y5NGZlOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ebDyS863tx7kVRzGf0G1hLQTV0U vGQLi9W250Lxm1lSYtO9nB3f5PZpBqEbxPg88vOVd9KAOGU2tCsV4Zyk+QvP0NcA 4ObInqi8CyC7EWJI4WCnjIrd0T9VucswbozKGFSU74A5k0E887m2La8HR95JyIpk +648zuEGzsQubjg9dIy0wTA3UN2JV6vnWbPwCyKkcDBx2q5Ljn/WKSAS/+ZtdG9J QJpWMqjN3E5CdbCm8S/souMdDYq+KFRerkdDJOIZe2nQA++WE50xIke/kMkBih/+ CGX52rExbap9kNd+sERcfbz6N6sBG2ozZeog/2f+a6R+rCB3c6v/WCiYwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDQNA/XhzHi6+hfr6crxkf5T+jWMB8GA1UdIwQY MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTzCpyLD NZpqYqgfG/v6JiJPvA8EWPP1SrcXYELagO/E2cy4icMYrGMzqhrQdjFQBUfi0NPc omBEmH+GeTQrj76sdVb0TIvWBM6eKMpA1wePnX8JtRQ+fHUhUxO0HAvHIPCEy2fj GQErO2VXIMzKL9gjiYUrB4HSMrqtoFv5mcgTvwnm9dOY7nQ6SUDUFr+pHoB9Y0fs jZ5iFJiJwdYtuX4fPJZ4kt3DKsecSb/Kjj9DlRWjaETAq+yBAaHBelVyntqunPiZ DALFfR+7xPWEpRLg5hTL92qnHdJr90gUG99OqMjlm6K6VgtDKGxa7fmXv9cydTf7 5TLEvU4DegYSIQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:18:12 2025 by rpki-client