This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json) Hash identifier: 6nBod/OM89SbZJbVPb0zLEnPNBuznaz4UzwnFQGQCQg= Subject key identifier: 07:21:95:78:6F:06:26:FF:75:03:AE:86:53:CD:9E:BF:3F:56:A4:19 Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7 Certificate serial: 019B397D6E2050E99FD8CCF1AABD2F46423C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft Manifest number: 0419 Signing time: Sat 20 Dec 2025 02:01:19 +0000 Manifest this update: Sat 20 Dec 2025 02:01:19 +0000 Manifest next update: Sun 21 Dec 2025 02:01:19 +0000 Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=) 2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: 7a2KTl0PCUSIXk2SP//uGKG9ijBvoPSQei4EiN7h/J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:6e:20:50:e9:9f:d8:cc:f1:aa:bd:2f:46:42:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7 Validity Not Before: Dec 20 02:01:19 2025 GMT Not After : Dec 21 02:01:19 2025 GMT Subject: CN=072195786f0626ff7503ae8653cd9ebf3f56a419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:75:8b:52:92:89:a6:4e:61:96:67:04:db:35: 88:53:df:02:97:db:cf:95:25:19:bd:66:38:6c:02: da:bd:af:a6:7d:fc:c4:e0:27:d2:c2:2e:60:40:75: c8:1d:4c:cd:6b:12:c2:52:04:60:f4:0e:3c:7e:44: 63:5b:7a:c1:87:8e:dd:eb:63:84:ec:da:54:a1:04: 4d:4f:0b:07:c8:ef:a4:d7:25:dc:59:51:d9:c8:ff: bb:dc:4e:c4:5f:5d:34:00:b2:3d:e8:73:a3:09:be: 2b:d8:1b:60:55:c4:53:16:9e:da:a4:77:1b:db:69: d8:6e:67:88:4e:1b:87:06:4a:4a:03:ec:44:6e:63: a2:23:dc:c0:84:4a:3a:21:94:8a:f9:36:38:c1:e6: 97:78:01:46:39:c7:da:9a:b3:8a:63:f7:52:b8:67: d5:a8:2f:9b:85:82:3f:98:28:34:7c:6f:0d:b7:04: 7d:19:62:05:68:f3:ba:50:ce:c3:55:0f:ce:21:8d: 4e:5c:89:5f:e0:8d:49:67:04:0c:05:bd:a9:55:6c: 5c:1f:d2:63:92:35:64:ef:43:db:57:44:cb:c0:85: bb:9b:f2:16:a9:95:d4:0d:f0:b3:ae:98:af:f4:de: 41:f4:3a:36:97:df:7a:bc:46:76:7f:66:ea:9a:04: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:95:78:6F:06:26:FF:75:03:AE:86:53:CD:9E:BF:3F:56:A4:19 X509v3 Authority Key Identifier: keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:62:c6:c9:2d:f0:3b:49:be:83:b8:d1:5e:ab:35:63:01:10: 81:ad:7e:70:5b:7e:d5:81:fa:a8:2c:a1:0f:61:0b:16:01:c2: 8b:1c:0b:97:e7:ec:7e:c7:62:8a:a4:15:39:d4:60:5d:ef:1a: bc:eb:e1:ce:0d:92:56:cf:b7:52:a9:fe:b1:8f:c7:56:75:53: 1a:8b:ac:ba:e7:a0:f0:66:e4:0a:3c:2e:6e:5f:70:5a:ac:ff: 58:ce:86:4c:4f:12:7c:36:19:4f:af:f7:c6:bf:26:18:5f:0b: 9f:dd:c0:36:a5:4f:02:89:c5:ff:0f:af:91:74:43:b7:12:5e: cb:8c:d8:e9:39:6e:16:98:bf:1f:fe:0a:0d:73:f1:b2:9d:82: 8f:20:fa:10:d1:24:f1:e8:41:82:e7:38:6f:d9:80:62:36:5a: 53:f8:ce:d6:b9:cf:d5:40:1c:ea:93:17:fc:d7:c6:46:a5:c6: 29:9d:df:ff:20:fe:71:62:16:79:3d:eb:7f:0f:b6:e7:50:73: e3:8f:e2:c4:bd:a6:d1:9b:eb:d3:8b:ce:5e:60:06:6a:ff:08: 8e:9d:2b:ff:8d:02:bf:c8:81:7d:eb:7a:d5:5c:be:67:2b:26: c3:5a:ff:c2:ef:c2:e3:c2:b6:22:8f:e8:61:78:5f:38:7b:a1: 4e:51:3e:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fW4gUOmf2Mzxqr0vRkI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk NzQ0YjcwHhcNMjUxMjIwMDIwMTE5WhcNMjUxMjIxMDIwMTE5WjAzMTEwLwYDVQQD EygwNzIxOTU3ODZmMDYyNmZmNzUwM2FlODY1M2NkOWViZjNmNTZhNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHWLUpKJpk5hlmcE2zWIU98Cl9vP lSUZvWY4bALava+mffzE4CfSwi5gQHXIHUzNaxLCUgRg9A48fkRjW3rBh47d62OE 7NpUoQRNTwsHyO+k1yXcWVHZyP+73E7EX100ALI96HOjCb4r2BtgVcRTFp7apHcb 22nYbmeIThuHBkpKA+xEbmOiI9zAhEo6IZSK+TY4weaXeAFGOcfamrOKY/dSuGfV qC+bhYI/mCg0fG8NtwR9GWIFaPO6UM7DVQ/OIY1OXIlf4I1JZwQMBb2pVWxcH9Jj kjVk70PbV0TLwIW7m/IWqZXUDfCzrpiv9N5B9Do2l996vEZ2f2bqmgRfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAchlXhvBib/dQOuhlPNnr8/VqQZMB8GA1UdIwQY MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2 LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2LGyS3w O0m+g7jRXqs1YwEQga1+cFt+1YH6qCyhD2ELFgHCixwLl+fsfsdiiqQVOdRgXe8a vOvhzg2SVs+3Uqn+sY/HVnVTGousuueg8GbkCjwubl9wWqz/WM6GTE8SfDYZT6/3 xr8mGF8Ln93ANqVPAonF/w+vkXRDtxJey4zY6TluFpi/H/4KDXPxsp2CjyD6ENEk 8ehBguc4b9mAYjZaU/jO1rnP1UAc6pMX/NfGRqXGKZ3f/yD+cWIWeT3rfw+251Bz 44/ixL2m0Zvr04vOXmAGav8Ijp0r/40Cv8iBfet61Vy+Zysmw1r/wu/C48K2Io/o YXhfOHuhTlE+zg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:43 2025 by rpki-client