This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json) Hash identifier: PduBri8BUmgmLnJXMkhPngsqE/tXQxXw0gj4AxQWs0s= Subject key identifier: 6A:98:E6:7F:F8:D0:B2:32:31:36:F1:B7:98:62:3E:5C:68:93:62:FB Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df Certificate serial: 019B378F01846EA70315E45C6205DF358116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft Manifest number: 1495 Signing time: Fri 19 Dec 2025 17:01:17 +0000 Manifest this update: Fri 19 Dec 2025 17:01:17 +0000 Manifest next update: Sat 20 Dec 2025 17:01:17 +0000 Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=) 2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: aQ4p+EocHUrMPw/W3nYNzz1MW4vKtxKUiOjEXGfWyws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:01:84:6e:a7:03:15:e4:5c:62:05:df:35:81:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df Validity Not Before: Dec 19 17:01:17 2025 GMT Not After : Dec 20 17:01:17 2025 GMT Subject: CN=6a98e67ff8d0b2323136f1b798623e5c689362fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:fd:71:c3:7f:86:e3:49:42:f6:34:88:34: 93:06:22:a9:6f:41:a1:c9:73:16:9f:08:b6:c6:89: 81:f5:e2:d6:58:bc:6a:1f:c7:f1:c0:92:d3:c5:35: 95:6d:f4:d1:0f:12:e8:2e:00:6a:f9:7f:a8:2c:3f: cc:78:38:13:e8:cc:f7:b4:56:5f:2b:a8:b1:94:c6: 8e:ee:29:ce:69:72:e4:49:06:05:41:90:fc:da:86: 5f:39:9f:a8:33:e0:b6:69:99:eb:97:0e:34:ef:c1: af:d9:f5:9a:b5:59:e6:1f:db:a4:a2:a6:1b:b6:72: 24:35:5c:51:5a:6c:33:af:a7:32:f0:0e:b6:32:e7: 6a:66:7b:7b:86:23:ec:1e:46:88:34:8b:cb:3d:33: bb:14:d0:c4:09:13:76:00:65:fa:ea:37:dd:b8:81: 9b:af:61:c4:83:86:7e:24:35:9b:02:81:6b:77:80: fb:5a:f5:9b:0a:e6:32:85:9a:bb:86:fd:8d:60:d5: da:08:7c:d9:a8:df:1b:dc:eb:2d:4e:7c:ad:b2:6b: fe:e6:df:5f:42:ef:e2:b1:60:2a:d7:92:13:e1:25: fc:a3:33:8a:45:05:f1:5c:ec:7e:20:af:ca:82:8b: 0b:e0:b2:49:3c:bc:cf:97:df:f8:01:5b:08:ab:28: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:98:E6:7F:F8:D0:B2:32:31:36:F1:B7:98:62:3E:5C:68:93:62:FB X509v3 Authority Key Identifier: keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7e:df:ce:85:64:98:b0:33:33:0d:5e:92:06:3a:52:91:c3: 87:9d:48:76:58:31:ed:3d:8f:92:66:c4:e5:b4:82:81:f4:97: a0:14:d4:24:fe:2e:5c:e1:2f:b2:18:51:47:f3:10:5a:d2:0a: 58:12:41:8f:16:a1:0d:cd:d7:79:25:b3:d4:7c:5e:44:42:6a: c5:59:db:44:8d:50:c8:ac:47:60:88:7f:3f:2f:33:fe:54:74: c8:4a:54:d3:4c:5c:34:f6:c3:91:f1:85:71:3c:4f:3b:cb:bc: ac:1c:e8:3e:46:16:20:7a:b3:65:65:80:9d:90:4f:56:c5:f0: 92:1f:b9:f2:9f:cc:71:29:97:e4:85:df:f2:01:cd:02:80:2d: a9:7f:e3:ea:72:44:71:bf:2a:56:32:40:12:2f:34:9c:bc:30: 8d:85:c1:ea:2a:8d:88:ad:76:ea:ac:11:b6:77:15:64:11:59: f6:5e:ae:44:23:04:56:be:17:45:3f:dd:d3:ff:4a:db:61:b9: ff:55:ce:97:4f:8f:5e:ca:7e:98:0b:7f:17:c3:38:6d:99:c2: 60:92:5f:94:0d:09:30:d8:cf:41:47:9a:30:07:5c:8b:a5:e5: 0b:81:bc:2c:b2:6c:ec:8f:3f:47:e1:e9:f8:84:34:1d:b9:e3: db:c8:d4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jwGEbqcDFeRcYgXfNYEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz YjkzZGYwHhcNMjUxMjE5MTcwMTE3WhcNMjUxMjIwMTcwMTE3WjAzMTEwLwYDVQQD Eyg2YTk4ZTY3ZmY4ZDBiMjMyMzEzNmYxYjc5ODYyM2U1YzY4OTM2MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVj9ccN/huNJQvY0iDSTBiKpb0Gh yXMWnwi2xomB9eLWWLxqH8fxwJLTxTWVbfTRDxLoLgBq+X+oLD/MeDgT6Mz3tFZf K6ixlMaO7inOaXLkSQYFQZD82oZfOZ+oM+C2aZnrlw4078Gv2fWatVnmH9ukoqYb tnIkNVxRWmwzr6cy8A62MudqZnt7hiPsHkaINIvLPTO7FNDECRN2AGX66jfduIGb r2HEg4Z+JDWbAoFrd4D7WvWbCuYyhZq7hv2NYNXaCHzZqN8b3OstTnytsmv+5t9f Qu/isWAq15IT4SX8ozOKRQXxXOx+IK/KgosL4LJJPLzPl9/4AVsIqyiBWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqY5n/40LIyMTbxt5hiPlxok2L7MB8GA1UdIwQY MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt MzY4NzhmNjU3ZTEyLzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArH7fzoVk mLAzMw1ekgY6UpHDh51Idlgx7T2PkmbE5bSCgfSXoBTUJP4uXOEvshhRR/MQWtIK WBJBjxahDc3XeSWz1HxeREJqxVnbRI1QyKxHYIh/Py8z/lR0yEpU00xcNPbDkfGF cTxPO8u8rBzoPkYWIHqzZWWAnZBPVsXwkh+58p/McSmX5IXf8gHNAoAtqX/j6nJE cb8qVjJAEi80nLwwjYXB6iqNiK126qwRtncVZBFZ9l6uRCMEVr4XRT/d0/9K22G5 /1XOl0+PXsp+mAt/F8M4bZnCYJJflA0JMNjPQUeaMAdci6XlC4G8LLJs7I8/R+Hp +IQ0Hbnj28jUzw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:25 2025 by rpki-client