This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json) Hash identifier: DafX0kPFYNmLieJ64RqTKKFJ1RZg1fp9EQrclNl1tzE= Subject key identifier: 68:58:17:31:69:99:27:2D:5D:EB:F3:26:C2:1C:62:FB:F8:C0:4F:E2 Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e Certificate serial: 019B2F300D2B047B0A9A4DFC9DA2DB0102D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft Manifest number: 117C Signing time: Thu 18 Dec 2025 02:00:36 +0000 Manifest this update: Thu 18 Dec 2025 02:00:36 +0000 Manifest next update: Fri 19 Dec 2025 02:00:36 +0000 Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=) 2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: IYcmLwG8lTvpg5eNyybthK49Xm2+rcvKDEUYWAVut8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:0d:2b:04:7b:0a:9a:4d:fc:9d:a2:db:01:02:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e Validity Not Before: Dec 18 02:00:36 2025 GMT Not After : Dec 19 02:00:36 2025 GMT Subject: CN=685817316999272d5debf326c21c62fbf8c04fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:26:c8:e7:e0:06:e2:44:c9:1d:98:0a:d8: b8:64:35:45:d9:bd:07:43:67:f5:b0:0b:d9:72:9e: 03:c4:46:28:d1:67:e9:25:ca:9f:26:45:17:f8:2b: f1:d1:70:64:bf:91:7b:08:2d:c5:21:47:62:31:44: 5b:c9:02:68:0c:c8:1f:32:84:7b:0d:a4:d7:7b:d7: 4d:6c:8c:74:24:a9:54:6c:30:f0:23:df:2a:2b:f1: a8:e3:61:26:3a:10:ef:c3:69:f5:6e:b9:47:f7:c4: 4b:a5:d3:99:4b:a2:e7:fb:57:02:55:0a:65:c0:e9: 02:f0:2e:c7:45:2f:d5:9f:17:e9:2c:8a:9a:e3:39: 06:ab:16:e4:85:16:33:70:18:0b:2e:9b:45:83:53: 68:6c:c0:b5:dc:f9:f5:a2:34:98:be:4d:23:ab:e0: cd:08:e0:65:4c:75:ba:72:96:31:c7:de:6d:5a:c2: 9b:80:0c:1e:6c:32:c3:27:2c:de:4f:53:6a:0b:d9: 69:ee:f7:28:0e:6a:ef:f4:02:a0:a7:da:5d:9c:7d: 18:3b:64:9f:36:85:c1:f6:b8:48:31:8b:b7:45:5b: 55:b7:15:d9:4e:c9:06:a3:d5:29:da:be:35:db:0a: 66:c2:c7:f6:02:98:91:20:c0:b5:fe:c2:b9:cf:67: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:58:17:31:69:99:27:2D:5D:EB:F3:26:C2:1C:62:FB:F8:C0:4F:E2 X509v3 Authority Key Identifier: keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:d4:50:89:f4:b0:a4:bd:95:ed:7e:08:f3:79:e3:83:e1: 1d:74:88:9d:0f:3f:d1:1c:67:9d:6d:59:3c:97:99:04:fe:16: 49:cf:7f:0a:79:bd:9c:78:08:b1:1b:b7:90:d2:ae:43:7c:32: fa:38:d1:90:46:be:bc:59:b4:d1:05:09:6f:c4:db:6f:35:7a: ba:4f:2e:2c:f6:17:cf:52:e9:3d:3f:e0:d4:cc:d5:87:ef:c3: 10:52:ed:94:bb:92:04:12:16:7a:02:43:ad:e6:e4:ed:aa:d5: e4:80:b2:6b:4c:d9:e3:07:a5:da:f1:56:02:c0:ae:66:95:61: 0d:37:c9:b9:a9:47:f4:8a:0f:6b:08:92:1a:fd:0d:d0:c3:3c: f0:bd:d9:3c:2b:d3:0c:f5:6a:e8:c0:4c:20:78:98:99:95:35: 3f:d8:fd:a8:9c:d0:32:74:62:dc:3e:b2:55:c4:39:a5:13:3a: af:fe:0b:fa:88:78:0d:76:f5:b0:cf:55:12:4b:ae:20:76:33: 68:96:bf:04:b9:b6:c2:1e:e9:04:eb:95:e0:28:68:30:bc:a8: b0:a8:e9:a1:cf:ba:85:51:11:6f:8a:ff:41:a9:f8:db:be:e9: 32:92:b2:2b:1e:30:8b:db:1a:51:2d:0f:2e:e5:eb:d5:47:23: f7:b1:50:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMA0rBHsKmk38naLbAQLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjQwYzFiOTBmN2YwMjAwNTNmYTA5NTMzMGZmY2ZhZGVm NTM5OWUwHhcNMjUxMjE4MDIwMDM2WhcNMjUxMjE5MDIwMDM2WjAzMTEwLwYDVQQD Eyg2ODU4MTczMTY5OTkyNzJkNWRlYmYzMjZjMjFjNjJmYmY4YzA0ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8kmyOfgBuJEyR2YCti4ZDVF2b0H Q2f1sAvZcp4DxEYo0WfpJcqfJkUX+Cvx0XBkv5F7CC3FIUdiMURbyQJoDMgfMoR7 DaTXe9dNbIx0JKlUbDDwI98qK/Go42EmOhDvw2n1brlH98RLpdOZS6Ln+1cCVQpl wOkC8C7HRS/VnxfpLIqa4zkGqxbkhRYzcBgLLptFg1NobMC13Pn1ojSYvk0jq+DN COBlTHW6cpYxx95tWsKbgAwebDLDJyzeT1NqC9lp7vcoDmrv9AKgp9pdnH0YO2Sf NoXB9rhIMYu3RVtVtxXZTskGo9Up2r412wpmwsf2ApiRIMC1/sK5z2fNnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhYFzFpmSctXevzJsIcYvv4wE/iMB8GA1UdIwQY MBaAFIwkDBuQ9/AgBT+glTMP/Pre9TmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMt ODdlMzYxODRjMGI1LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMtODdlMzYxODRjMGI1 LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUjUUIn0 sKS9le1+CPN544PhHXSInQ8/0RxnnW1ZPJeZBP4WSc9/Cnm9nHgIsRu3kNKuQ3wy +jjRkEa+vFm00QUJb8TbbzV6uk8uLPYXz1LpPT/g1MzVh+/DEFLtlLuSBBIWegJD rebk7arV5ICya0zZ4wel2vFWAsCuZpVhDTfJualH9IoPawiSGv0N0MM88L3ZPCvT DPVq6MBMIHiYmZU1P9j9qJzQMnRi3D6yVcQ5pRM6r/4L+oh4DXb1sM9VEkuuIHYz aJa/BLm2wh7pBOuV4ChoMLyosKjpoc+6hVERb4r/Qan4277pMpKyKx4wi9saUS0P LuXr1Ucj97FQ2g== -----END CERTIFICATE-----Generated at Thu Dec 18 11:15:12 2025 by rpki-client