This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json) Hash identifier: gxymWR3p6xQPqgn0N6DmQ6ZtLDrmzjL6LtxTbFir4q4= Subject key identifier: 76:79:AA:C1:85:4B:A7:13:3E:59:69:9A:FF:19:30:4D:6D:8D:A8:9D Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Certificate serial: 019B4F605E572128E97DABA9C8208A614955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft Manifest number: 16E9 Signing time: Wed 24 Dec 2025 08:01:14 +0000 Manifest this update: Wed 24 Dec 2025 08:01:14 +0000 Manifest next update: Thu 25 Dec 2025 08:01:14 +0000 Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: yV9XGC6MiQOgb1dXlmcQIgjzUoSWuz068/QKAO7yLFQ=) 2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:5e:57:21:28:e9:7d:ab:a9:c8:20:8a:61:49:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6 Validity Not Before: Dec 24 08:01:14 2025 GMT Not After : Dec 25 08:01:14 2025 GMT Subject: CN=7679aac1854ba7133e59699aff19304d6d8da89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:94:3f:01:28:af:91:3c:d0:3d:5d:1e:6a: 5a:3e:fb:70:44:ef:f8:36:45:aa:f9:c7:d0:1e:82: 35:8b:15:82:7b:8f:cd:26:fd:55:81:96:eb:a7:2a: 13:82:35:5d:a9:ee:82:50:7e:62:7b:04:6c:0d:93: 7e:87:b7:1e:40:37:b2:32:fb:f8:46:e0:34:78:16: b2:22:7b:6b:bf:69:c6:84:ba:e6:ae:d0:c9:86:b6: 7a:82:f3:97:07:30:e7:61:a1:e1:d3:d2:09:3d:6c: cb:81:99:a8:60:ac:74:df:09:cd:7e:40:9a:0b:d1: b2:c6:b5:ac:7d:3a:05:aa:f0:aa:8a:bb:8c:73:27: f3:d0:aa:ef:28:58:48:e8:62:d4:87:bb:c6:77:e0: 24:c9:6f:a1:5d:b9:8c:18:42:86:d2:63:a8:7e:00: 7a:c7:b1:31:04:f3:dc:d0:4c:ca:a5:ff:b4:b3:31: 0b:b3:e9:dd:51:f2:86:4c:9a:3e:bd:46:bd:ee:4f: 03:55:c6:7a:76:e7:4d:c4:bc:24:cc:f2:18:36:35: 4e:01:e6:18:01:be:f2:c4:b7:b8:38:f4:27:40:2e: d7:3f:dd:d3:0d:bb:82:5c:2a:7e:7f:c0:a0:74:6d: e0:ad:75:e4:2e:6a:1c:06:f7:ef:68:e7:5f:53:e9: e7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:79:AA:C1:85:4B:A7:13:3E:59:69:9A:FF:19:30:4D:6D:8D:A8:9D X509v3 Authority Key Identifier: keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:bb:74:a3:8a:96:49:1b:12:b7:4f:4e:5b:06:2c:59:85:ef: c4:f9:15:2b:52:fc:a2:dc:ce:7d:5b:06:8a:7f:1f:df:f6:15: 49:d6:de:81:cf:8d:ef:0c:2e:db:19:34:fe:77:bd:23:61:bc: 62:54:ab:f8:8c:60:93:c3:d3:0f:47:6b:44:b3:4d:76:a4:93: ea:c1:c7:0e:59:a1:53:74:46:c4:07:be:20:00:b4:69:29:0d: f7:77:b1:70:e3:93:8a:8e:6a:b1:41:5d:23:d4:68:60:53:a3: ce:bd:d3:7e:37:f3:05:ca:ad:9a:3f:52:57:97:d3:28:9a:27: 41:19:18:b9:a6:08:4c:f1:b9:d7:97:e4:d6:74:40:a0:78:f4: 08:21:2b:e8:83:13:ea:9d:00:e2:d9:bb:0d:f3:0e:53:bc:00: e0:49:39:71:5e:05:d8:9e:bb:52:ef:98:3d:fb:7a:d9:57:97: db:ae:7b:69:8a:db:80:59:24:b2:45:40:3e:71:bd:2a:63:e9: e8:08:f8:66:27:28:0a:d9:da:6b:89:5b:7e:b4:9e:0b:85:14: ce:76:22:3a:bf:8e:37:e6:5c:08:2f:c0:0a:d6:aa:dd:2f:aa: 68:fc:4a:21:04:48:6d:e1:d5:68:aa:dc:06:77:2a:2b:88:14: ba:ee:ae:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYF5XISjpfaupyCCKYUlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4 NTk4YjYwHhcNMjUxMjI0MDgwMTE0WhcNMjUxMjI1MDgwMTE0WjAzMTEwLwYDVQQD Eyg3Njc5YWFjMTg1NGJhNzEzM2U1OTY5OWFmZjE5MzA0ZDZkOGRhODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DqUPwEor5E80D1dHmpaPvtwRO/4 NkWq+cfQHoI1ixWCe4/NJv1VgZbrpyoTgjVdqe6CUH5iewRsDZN+h7ceQDeyMvv4 RuA0eBayIntrv2nGhLrmrtDJhrZ6gvOXBzDnYaHh09IJPWzLgZmoYKx03wnNfkCa C9GyxrWsfToFqvCqiruMcyfz0KrvKFhI6GLUh7vGd+AkyW+hXbmMGEKG0mOofgB6 x7ExBPPc0EzKpf+0szELs+ndUfKGTJo+vUa97k8DVcZ6dudNxLwkzPIYNjVOAeYY Ab7yxLe4OPQnQC7XP93TDbuCXCp+f8CgdG3grXXkLmocBvfvaOdfU+nnNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ5qsGFS6cTPllpmv8ZME1tjaidMB8GA1UdIwQY MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILt0o4qW SRsSt09OWwYsWYXvxPkVK1L8otzOfVsGin8f3/YVSdbegc+N7wwu2xk0/ne9I2G8 YlSr+Ixgk8PTD0drRLNNdqST6sHHDlmhU3RGxAe+IAC0aSkN93excOOTio5qsUFd I9RoYFOjzr3TfjfzBcqtmj9SV5fTKJonQRkYuaYITPG515fk1nRAoHj0CCEr6IMT 6p0A4tm7DfMOU7wA4Ek5cV4F2J67Uu+YPft62VeX2657aYrbgFkkskVAPnG9KmPp 6Aj4ZicoCtnaa4lbfrSeC4UUznYiOr+ON+ZcCC/ACtaq3S+qaPxKIQRIbeHVaKrc BncqK4gUuu6uOA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:56:44 2025 by rpki-client