This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json) Hash identifier: m6sSABDUTUmCVot5Mt6ArDO++xszRIiLblTBaQKlyGc= Subject key identifier: B6:DF:7A:12:0E:20:63:6B:FC:27:6E:F1:03:46:66:61:AC:30:7A:47 Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f Certificate serial: 019B76DB4FC8ABD80222077A9710D132A59A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft Manifest number: 0391 Signing time: Thu 01 Jan 2026 00:00:42 +0000 Manifest this update: Thu 01 Jan 2026 00:00:42 +0000 Manifest next update: Fri 02 Jan 2026 00:00:42 +0000 Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: kdoP19vERRc8wwJUNflWNv/Fod674hRV6ljbVnvlxdI=) 2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:db:4f:c8:ab:d8:02:22:07:7a:97:10:d1:32:a5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f Validity Not Before: Jan 1 00:00:42 2026 GMT Not After : Jan 2 00:00:42 2026 GMT Subject: CN=b6df7a120e20636bfc276ef103466661ac307a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:87:a9:c7:b3:b6:46:74:ce:b6:21:c2:16: 60:c0:2d:85:13:f4:93:dd:e6:3e:7d:16:74:93:a9: 7e:c1:20:dc:3e:55:c2:7e:80:bd:80:b7:eb:b9:24: 36:4a:95:fe:c0:72:e6:4d:65:b0:d4:a2:a4:8e:2a: 61:40:a5:b8:8e:28:4f:8b:98:2b:e6:f7:7a:54:28: ae:c7:26:1a:45:3d:d4:dc:76:a9:35:f1:0f:b6:9f: b4:0e:21:4b:ff:40:4f:45:8b:a9:92:2a:93:af:02: 35:fe:28:4c:ab:ff:67:0c:ac:9e:1a:dd:9f:d1:7f: 54:42:a8:c0:da:8c:9a:d7:9c:35:46:fc:29:bd:17: b2:7c:77:79:28:ae:e1:f4:b9:7f:9a:fe:82:1e:a3: 2a:21:c7:40:24:0d:58:b2:1b:c7:2d:48:72:56:8e: 47:c7:e8:6d:7c:07:18:b3:58:07:e4:b0:15:f8:f8: cd:1a:ed:2b:22:9f:93:69:21:bf:65:87:9b:9d:e7: 86:2b:93:3b:10:d4:d6:4a:a4:d3:89:78:34:ae:0a: 17:e3:af:8d:b4:9f:b2:9b:12:37:b7:b3:68:6a:af: 6d:d8:da:57:7a:b2:bc:f6:c5:9a:33:ae:83:c4:8a: e2:6c:79:08:e7:c8:3d:76:6d:df:3f:c5:d4:5f:9a: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DF:7A:12:0E:20:63:6B:FC:27:6E:F1:03:46:66:61:AC:30:7A:47 X509v3 Authority Key Identifier: keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2c:11:0a:72:72:3b:d3:79:4b:b1:6e:af:41:c3:45:2f:be: d3:7c:c7:60:32:98:a7:bb:ca:99:8a:0c:bc:13:b6:1d:7b:fb: 96:72:82:57:80:7d:cb:58:5d:65:90:b4:3d:7e:05:e9:53:90: ef:06:9b:83:0e:04:04:90:74:98:3d:0a:76:b4:8f:3f:b3:03: b6:d4:5c:fa:ef:5e:be:ae:e8:b9:6f:8f:57:53:6e:47:d0:2a: 40:33:df:80:41:71:f7:5b:70:15:38:c6:bb:09:44:f6:7d:9a: ee:68:39:31:fb:6c:19:15:39:a3:4e:99:9b:9b:b1:34:eb:35: 10:fa:b5:c1:c0:7a:48:b6:d3:b7:d8:19:1d:44:b9:ca:28:19: a4:1f:e4:b4:19:51:4a:67:9d:07:ba:2c:e4:b2:c1:2a:0c:4e: 2d:24:85:af:c5:ad:c8:52:52:e6:1d:29:1d:d1:90:9b:a9:20: 1e:ca:8e:18:9e:ae:d0:3d:83:6b:72:08:3e:07:a9:6c:f6:35: 06:51:d7:b1:5e:e2:fa:2e:ca:de:f8:a2:93:ef:da:13:e0:6a: 30:c9:c5:05:4c:12:c9:ef:2e:48:09:4b:ea:c7:e2:3a:f0:2c: 8c:fa:15:82:cd:87:b0:ba:96:2a:65:2c:42:9f:82:ea:b2:d1: 9b:21:01:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt220/Iq9gCIgd6lxDRMqWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTE3NTg2MWNlZDBjZjcwZDUxNjQ3OWIzZmE4ODA3NjI2 YWMzMWYwHhcNMjYwMTAxMDAwMDQyWhcNMjYwMTAyMDAwMDQyWjAzMTEwLwYDVQQD EyhiNmRmN2ExMjBlMjA2MzZiZmMyNzZlZjEwMzQ2NjY2MWFjMzA3YTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSeHqceztkZ0zrYhwhZgwC2FE/ST 3eY+fRZ0k6l+wSDcPlXCfoC9gLfruSQ2SpX+wHLmTWWw1KKkjiphQKW4jihPi5gr 5vd6VCiuxyYaRT3U3HapNfEPtp+0DiFL/0BPRYupkiqTrwI1/ihMq/9nDKyeGt2f 0X9UQqjA2oya15w1RvwpvReyfHd5KK7h9Ll/mv6CHqMqIcdAJA1YshvHLUhyVo5H x+htfAcYs1gH5LAV+PjNGu0rIp+TaSG/ZYebneeGK5M7ENTWSqTTiXg0rgoX46+N tJ+ymxI3t7Noaq9t2NpXerK89sWaM66DxIribHkI58g9dm3fP8XUX5onDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbfehIOIGNr/Cdu8QNGZmGsMHpHMB8GA1UdIwQY MBaAFI6hdYYc7Qz3DVFkebP6iAdiasMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAt ZGFlZDhmMWU3NDhiLzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lYmZhYzgtNTdiNS00OGE0LWE2OTAtZGFlZDhmMWU3NDhi LzEvanFGMWhoenREUGNOVVdSNXNfcUlCMkpxd3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiwRCnJy O9N5S7Fur0HDRS++03zHYDKYp7vKmYoMvBO2HXv7lnKCV4B9y1hdZZC0PX4F6VOQ 7wabgw4EBJB0mD0KdrSPP7MDttRc+u9evq7ouW+PV1NuR9AqQDPfgEFx91twFTjG uwlE9n2a7mg5MftsGRU5o06Zm5uxNOs1EPq1wcB6SLbTt9gZHUS5yigZpB/ktBlR SmedB7os5LLBKgxOLSSFr8WtyFJS5h0pHdGQm6kgHsqOGJ6u0D2Da3IIPgepbPY1 BlHXsV7i+i7K3viik+/aE+BqMMnFBUwSye8uSAlL6sfiOvAsjPoVgs2HsLqWKmUs Qp+C6rLRmyEBaQ== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:32 2026 by rpki-client