This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json) Hash identifier: hEfSSjpbOGfNrjRTQTDdJ453lmcVaRBivvL/FIwwWyU= Subject key identifier: 3C:B5:80:BD:35:16:AE:49:4A:BA:1F:40:6E:39:95:58:64:30:33:1A Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42 Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842 Certificate serial: 019B620ACCBD943F28A1F174C80168B33D93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft Manifest number: 1380 Signing time: Sat 27 Dec 2025 23:00:33 +0000 Manifest this update: Sat 27 Dec 2025 23:00:33 +0000 Manifest next update: Sun 28 Dec 2025 23:00:33 +0000 Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=) 2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: ro1SB0bdxGzJe48o6sfOA/HY5Gow+zuL8X/cgsWZHsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:cc:bd:94:3f:28:a1:f1:74:c8:01:68:b3:3d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842 Validity Not Before: Dec 27 23:00:33 2025 GMT Not After : Dec 28 23:00:33 2025 GMT Subject: CN=3cb580bd3516ae494aba1f406e3995586430331a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:c0:44:87:b7:b7:ca:08:b4:57:2c:71:00: 8a:93:27:58:8a:1c:0b:0b:2c:38:c0:80:65:e0:5d: 10:ba:4a:8d:ae:e4:43:82:2b:86:0b:9a:93:5f:8a: 40:e4:df:e0:88:df:de:e3:29:6c:16:02:43:5e:54: 24:b2:5a:34:08:25:41:7d:37:a1:4c:df:d2:33:67: 7f:0b:4c:94:38:9f:3b:c8:d8:2e:bb:21:18:27:80: 5e:b0:4c:1e:75:ca:63:19:bd:d1:bd:12:4b:11:62: 5b:15:72:de:76:b5:ac:b5:98:45:c1:b0:3d:10:4a: ff:a4:f3:1f:76:a5:ec:1c:63:5f:34:de:75:17:95: ff:b9:f1:58:a4:60:c6:b2:32:d4:4b:5e:1a:81:13: 4f:3e:55:77:cd:88:c7:8a:9e:6e:05:12:c3:3d:84: 35:eb:db:de:5c:44:40:e5:cb:76:e7:72:22:73:ae: 15:24:67:ea:2c:16:86:66:bb:e6:08:ff:35:10:87: eb:ad:69:c5:a5:2b:7b:00:f1:d6:dc:35:bf:bb:96: 64:7c:c0:45:97:4a:c8:dc:17:5c:5a:15:ff:9f:76: dd:2a:83:63:17:38:2c:57:e6:18:cd:db:ed:c2:36: 66:6a:41:dc:60:ee:7e:be:ca:96:47:7f:39:8a:2c: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:80:BD:35:16:AE:49:4A:BA:1F:40:6E:39:95:58:64:30:33:1A X509v3 Authority Key Identifier: keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1b:c1:0f:b4:da:74:f8:2a:37:f0:6f:ee:a0:51:a0:87:d2: 21:8c:b3:fe:26:0a:2b:f6:88:77:cf:18:cf:09:ae:cf:68:9d: d0:7c:90:1b:21:23:69:fe:37:ee:f7:48:fb:39:78:71:aa:c6: fe:c0:d3:69:ae:29:98:58:ae:44:7d:a4:6a:28:b9:36:e1:75: 39:69:4a:1a:11:65:4a:37:46:69:03:12:45:ff:47:bc:46:e0: 70:e3:09:8c:c1:eb:ff:a6:92:d2:5c:a8:63:6b:9d:d5:0c:55: b7:b1:c2:13:79:5a:e0:33:99:52:e1:99:cf:86:19:e3:db:bf: 2b:d4:00:05:41:0c:60:bb:00:91:c9:26:17:f2:1b:a7:09:1c: 64:d6:cd:b0:3d:d2:d9:cd:26:56:a0:69:2f:8b:d5:bc:82:bf: 3c:92:a7:e2:75:09:fe:56:12:c8:cb:3c:69:eb:20:ab:2f:96: b9:b3:05:65:5f:65:1c:1b:04:49:7b:64:c9:c0:fe:0a:da:67: 45:d7:96:1b:f4:c3:84:10:b9:c0:12:a3:75:20:73:81:e4:9a: 85:ec:ac:51:4d:13:d2:92:91:9c:a1:73:54:60:bf:da:32:a9: 38:df:e9:90:4e:12:84:85:14:a9:b0:60:e2:fb:4b:15:73:a6: d3:f8:7f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCsy9lD8oofF0yAFosz2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYWQ0NWUzMTcyNTdlMTcwYTIwMzBlNzliMGY1Zjc0NDA2 YTc4NDIwHhcNMjUxMjI3MjMwMDMzWhcNMjUxMjI4MjMwMDMzWjAzMTEwLwYDVQQD EygzY2I1ODBiZDM1MTZhZTQ5NGFiYTFmNDA2ZTM5OTU1ODY0MzAzMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphjARIe3t8oItFcscQCKkydYihwL Cyw4wIBl4F0QukqNruRDgiuGC5qTX4pA5N/giN/e4ylsFgJDXlQkslo0CCVBfTeh TN/SM2d/C0yUOJ87yNguuyEYJ4BesEwedcpjGb3RvRJLEWJbFXLedrWstZhFwbA9 EEr/pPMfdqXsHGNfNN51F5X/ufFYpGDGsjLUS14agRNPPlV3zYjHip5uBRLDPYQ1 69veXERA5ct253Iic64VJGfqLBaGZrvmCP81EIfrrWnFpSt7APHW3DW/u5ZkfMBF l0rI3BdcWhX/n3bdKoNjFzgsV+YYzdvtwjZmakHcYO5+vsqWR385iiyfQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy1gL01Fq5JSrofQG45lVhkMDMaMB8GA1UdIwQY MBaAFI6tReMXJX4XCiAw55sPX3RAanhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmIt MDhiZGNkNTMzYjYxLzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmItMDhiZGNkNTMzYjYx LzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRvBD7Ta dPgqN/Bv7qBRoIfSIYyz/iYKK/aId88Yzwmuz2id0HyQGyEjaf437vdI+zl4carG /sDTaa4pmFiuRH2kaii5NuF1OWlKGhFlSjdGaQMSRf9HvEbgcOMJjMHr/6aS0lyo Y2ud1QxVt7HCE3la4DOZUuGZz4YZ49u/K9QABUEMYLsAkckmF/IbpwkcZNbNsD3S 2c0mVqBpL4vVvIK/PJKn4nUJ/lYSyMs8aesgqy+WubMFZV9lHBsESXtkycD+Ctpn RdeWG/TDhBC5wBKjdSBzgeSaheysUU0T0pKRnKFzVGC/2jKpON/pkE4ShIUUqbBg 4vtLFXOm0/h/zQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:33 2025 by rpki-client