This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json) Hash identifier: IxdKl9zssMxbSA6kTyEdu0qzMN4Z5vDHPY6BB7G4sFQ= Subject key identifier: DB:18:2B:1B:99:B5:68:5E:2E:F6:6C:5B:39:AC:F4:D8:DC:6E:73:78 Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1 Certificate serial: 019B5E2E68DA3F3E61AFD0DD5E5C059F0393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft Manifest number: 1354 Signing time: Sat 27 Dec 2025 05:00:58 +0000 Manifest this update: Sat 27 Dec 2025 05:00:58 +0000 Manifest next update: Sun 28 Dec 2025 05:00:58 +0000 Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=) 2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: pHk3+X7PM3PDkYDxccKJZNh0uBAZG0IdCb7w9nzkATs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:68:da:3f:3e:61:af:d0:dd:5e:5c:05:9f:03:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1 Validity Not Before: Dec 27 05:00:58 2025 GMT Not After : Dec 28 05:00:58 2025 GMT Subject: CN=db182b1b99b5685e2ef66c5b39acf4d8dc6e7378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:67:a8:81:cc:d3:af:56:f5:f8:65:13:ac: 01:aa:f9:ae:36:21:69:c2:49:cc:07:08:6f:cf:a3: 98:3b:5a:84:ca:56:2b:4e:f3:03:b6:39:0a:39:02: ea:21:ba:45:a2:a7:2f:99:9d:49:ff:6f:7d:c5:bb: f1:4f:53:f1:45:3a:c6:6a:38:d5:22:8f:93:72:f9: 55:7f:c6:56:55:45:50:0b:e3:70:be:7a:2c:7f:60: cb:f3:f8:66:6b:af:2a:e3:50:eb:a1:7b:06:6b:c2: f2:b3:2a:5c:b2:38:26:82:e4:5d:19:4c:86:82:71: ba:b7:b4:6b:31:10:a5:52:4d:9a:e4:78:a8:44:84: 4e:9a:61:a2:09:4e:41:fd:7b:f7:e2:14:12:74:62: 5a:57:40:0a:d0:60:bd:a0:9b:67:d6:b1:b3:fd:b6: 80:b8:4e:ae:73:07:41:e9:fc:a5:aa:ca:15:0b:62: f0:9e:1d:12:ff:ca:f4:1d:2c:e0:09:35:91:24:10: a1:98:67:ad:d3:4e:97:43:ce:4c:a0:d0:46:d5:b0: fa:74:66:1f:74:5b:7d:64:2b:8b:9e:67:85:2b:7a: cd:55:5b:c8:12:db:f0:a8:7c:f6:04:f9:ee:61:66: 00:9a:4c:a3:0b:03:7c:68:5e:a4:14:70:34:48:de: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:18:2B:1B:99:B5:68:5E:2E:F6:6C:5B:39:AC:F4:D8:DC:6E:73:78 X509v3 Authority Key Identifier: keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:91:0f:cf:08:f3:21:14:14:11:54:12:3c:e7:8b:30:5b:3f: 35:6e:f8:54:15:ab:5c:f5:4e:f7:fc:56:0f:be:1b:93:04:0e: b6:41:68:0a:bf:a3:a3:49:b2:05:60:6d:31:c1:d8:21:72:5f: 2a:20:21:f7:fe:5c:e2:26:15:4f:e6:e2:42:d5:b1:b3:e6:cc: e9:00:8e:53:70:fe:b9:d6:eb:21:43:f5:b3:c9:6b:e8:24:00: 34:44:c8:97:7b:5c:3a:fd:c3:43:6f:7f:28:18:bd:82:16:91: e7:43:67:bd:78:57:97:43:5f:37:4d:12:93:82:6e:db:b4:df: 17:74:ce:76:a0:7c:a9:bc:c2:64:c4:5d:ee:8f:40:d6:9b:14: 67:d3:e3:6b:84:53:99:57:d0:65:9f:79:1d:55:4a:d4:a4:56: e2:c0:99:bd:34:84:6f:a6:e7:13:7b:a6:66:b5:5a:09:2b:82: e2:f7:34:30:c8:b0:3a:e9:ca:ca:96:60:4d:d6:1f:31:b0:96: 89:2e:17:5d:40:e5:3c:ef:e7:f2:70:f7:ad:16:b0:73:11:5d: a7:00:04:6d:a0:79:ec:62:db:5c:3b:ff:03:da:93:ae:64:ac: 01:44:93:46:a2:1a:45:c9:17:52:7f:61:62:d8:97:9d:bb:27: fc:23:dc:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLmjaPz5hr9DdXlwFnwOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTk4YjYxMjVmNTI0M2UzZWQ4MzUwMTU5NjdjZGRiOTcx NDhkZjEwHhcNMjUxMjI3MDUwMDU4WhcNMjUxMjI4MDUwMDU4WjAzMTEwLwYDVQQD EyhkYjE4MmIxYjk5YjU2ODVlMmVmNjZjNWIzOWFjZjRkOGRjNmU3Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbNnqIHM069W9fhlE6wBqvmuNiFp wknMBwhvz6OYO1qEylYrTvMDtjkKOQLqIbpFoqcvmZ1J/299xbvxT1PxRTrGajjV Io+TcvlVf8ZWVUVQC+Nwvnosf2DL8/hma68q41DroXsGa8LysypcsjgmguRdGUyG gnG6t7RrMRClUk2a5HioRIROmmGiCU5B/Xv34hQSdGJaV0AK0GC9oJtn1rGz/baA uE6ucwdB6fylqsoVC2Lwnh0S/8r0HSzgCTWRJBChmGet006XQ85MoNBG1bD6dGYf dFt9ZCuLnmeFK3rNVVvIEtvwqHz2BPnuYWYAmkyjCwN8aF6kFHA0SN6m6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsYKxuZtWheLvZsWzms9NjcbnN4MB8GA1UdIwQY MBaAFCapi2El9SQ+Ptg1AVlnzduXFI3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTIt YjkxM2U1OTY3MDdlLzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iZGJmYjAtZjkxNC00MGQzLWIyZTItYjkxM2U1OTY3MDdl LzEvSnFtTFlTWDFKRDQtMkRVQldXZk4yNWNVamZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5EPzwjz IRQUEVQSPOeLMFs/NW74VBWrXPVO9/xWD74bkwQOtkFoCr+jo0myBWBtMcHYIXJf KiAh9/5c4iYVT+biQtWxs+bM6QCOU3D+udbrIUP1s8lr6CQANETIl3tcOv3DQ29/ KBi9ghaR50NnvXhXl0NfN00Sk4Ju27TfF3TOdqB8qbzCZMRd7o9A1psUZ9Pja4RT mVfQZZ95HVVK1KRW4sCZvTSEb6bnE3umZrVaCSuC4vc0MMiwOunKypZgTdYfMbCW iS4XXUDlPO/n8nD3rRawcxFdpwAEbaB57GLbXDv/A9qTrmSsAUSTRqIaRckXUn9h YtiXnbsn/CPcyA== -----END CERTIFICATE-----Generated at Sat Dec 27 09:14:00 2025 by rpki-client