This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft File: jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json) Hash identifier: Bqubo1o/mp+YCYsiCJmffBl//4vF2E63zr45xCd+MlQ= Subject key identifier: BF:87:44:34:BC:A9:EC:E7:E8:C1:EF:4C:DC:E6:14:33:22:C9:C8:43 Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec Certificate serial: 019B1D97DC7C07A746D8EF2AC212A98EF4F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft Manifest number: 16F4 Signing time: Sun 14 Dec 2025 16:00:50 +0000 Manifest this update: Sun 14 Dec 2025 16:00:50 +0000 Manifest next update: Mon 15 Dec 2025 16:00:50 +0000 Files and hashes: 1: hi5ZHldjJLIMs_WwcUjXAobxn_E.roa (hash: K7O/p6BErwsTAP5GquRxOQd6mPGtBXsqXpbnYVE78oE=) 2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: /+Tc2v0bJcYrooUOrztWwgtIzDKOar2blvebbABkerg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:97:dc:7c:07:a7:46:d8:ef:2a:c2:12:a9:8e:f4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec Validity Not Before: Dec 14 16:00:50 2025 GMT Not After : Dec 15 16:00:50 2025 GMT Subject: CN=bf874434bca9ece7e8c1ef4cdce6143322c9c843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0d:92:1b:87:3d:3c:2d:5c:7f:b8:83:d8:55: 8e:8a:45:65:a5:91:7f:ff:3b:1f:fd:0a:ce:91:94: 91:59:04:7b:b8:14:74:f2:e6:69:13:b8:2f:96:62: 6d:6c:2e:dd:4e:3c:8d:ea:13:8c:5b:85:7f:6d:08: 03:4d:df:d1:86:8f:9f:a8:d0:39:df:cb:da:3e:1d: e7:f5:83:93:85:de:eb:86:ba:da:f1:09:b2:fb:69: 10:b4:74:66:33:82:2a:d4:65:2d:32:fb:36:f9:26: d3:38:4f:07:e4:ba:21:ff:1c:53:d4:d3:e5:57:be: 02:4d:bf:3e:5d:8e:98:cb:b8:70:a4:5f:e0:33:26: 1c:8f:b4:08:3e:c2:ce:97:f7:1a:86:58:56:87:eb: 06:59:89:bc:41:37:07:c0:25:fc:cd:0c:01:61:ae: 4a:3f:cd:91:89:50:8c:54:f0:b9:1b:23:a9:e9:38: 20:f5:da:97:50:3d:0e:f0:01:87:63:8a:25:1f:ae: 74:55:b3:54:af:c6:5a:48:05:ae:17:7b:33:5e:45: 0d:79:9f:4b:af:80:b1:90:6c:62:93:57:96:12:7e: 7d:7a:8d:53:be:4f:a8:65:5f:cd:d9:8d:b4:79:00: 75:26:26:04:5e:cc:dd:57:f1:81:af:f4:55:c9:ca: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:44:34:BC:A9:EC:E7:E8:C1:EF:4C:DC:E6:14:33:22:C9:C8:43 X509v3 Authority Key Identifier: keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1d:2a:f9:8f:50:bc:98:38:a5:a7:9e:97:33:06:44:b5:5f: e3:4e:b7:3a:56:fd:60:73:eb:8c:91:b0:9f:2e:72:f0:1e:4d: 05:de:62:bd:3c:c6:f8:a1:f2:48:be:f7:44:3f:19:52:bd:3d: 79:ce:2c:55:9b:56:56:c5:cd:00:c1:d8:67:24:f5:87:ac:ea: 51:e3:3b:01:4d:72:06:a5:c2:c8:9a:bf:b1:fb:49:f7:c2:b1: 4d:55:65:be:a4:62:6b:35:cc:43:83:18:e2:e2:fa:8f:d2:37: 2a:ba:59:c5:d9:11:55:9c:5e:e2:0b:de:dc:9e:b3:e4:8f:dd: 77:6a:60:75:8b:80:80:2f:dc:fd:01:c7:a7:b6:19:fa:94:b0: 8a:c3:9d:a3:87:b7:93:72:43:bd:53:e9:d9:f1:8e:fb:15:79: a6:55:c2:40:1c:f3:b6:6e:38:b0:25:20:14:1b:19:5a:c1:f9: 10:c8:2e:e5:aa:c1:8d:0c:bd:65:7d:7e:c9:15:5e:4d:b5:36: 89:58:28:27:ea:f2:cb:49:cb:4b:b1:b2:5e:47:2a:83:bc:15: 4a:54:4c:06:72:ee:02:38:b1:bc:25:4b:91:91:1e:8f:fe:67: 37:91:05:cf:68:a3:6d:4c:ff:d7:34:78:3b:e6:a4:df:11:be: e2:08:35:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdl9x8B6dG2O8qwhKpjvTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2I2ZTE4M2M4ZDUyY2M0NjA1YmE4YjVkYWRkYzY2MzI2 MjkzZWMwHhcNMjUxMjE0MTYwMDUwWhcNMjUxMjE1MTYwMDUwWjAzMTEwLwYDVQQD EyhiZjg3NDQzNGJjYTllY2U3ZThjMWVmNGNkY2U2MTQzMzIyYzljODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA2SG4c9PC1cf7iD2FWOikVlpZF/ /zsf/QrOkZSRWQR7uBR08uZpE7gvlmJtbC7dTjyN6hOMW4V/bQgDTd/Rho+fqNA5 38vaPh3n9YOThd7rhrra8Qmy+2kQtHRmM4Iq1GUtMvs2+SbTOE8H5Loh/xxT1NPl V74CTb8+XY6Yy7hwpF/gMyYcj7QIPsLOl/cahlhWh+sGWYm8QTcHwCX8zQwBYa5K P82RiVCMVPC5GyOp6Tgg9dqXUD0O8AGHY4olH650VbNUr8ZaSAWuF3szXkUNeZ9L r4CxkGxik1eWEn59eo1Tvk+oZV/N2Y20eQB1JiYEXszdV/GBr/RVycpevwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+HRDS8qezn6MHvTNzmFDMiychDMB8GA1UdIwQY MBaAFIx7bhg8jVLMRgW6i12t3GYyYpPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUt YjZlODY3OTQxZjdlLzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lMjJmMTUtODVhOC00MzE4LWFiNzUtYjZlODY3OTQxZjdl LzEvakh0dUdEeU5Vc3hHQmJxTFhhM2Naakppay13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR0q+Y9Q vJg4paeelzMGRLVf4063Olb9YHPrjJGwny5y8B5NBd5ivTzG+KHySL73RD8ZUr09 ec4sVZtWVsXNAMHYZyT1h6zqUeM7AU1yBqXCyJq/sftJ98KxTVVlvqRiazXMQ4MY 4uL6j9I3KrpZxdkRVZxe4gve3J6z5I/dd2pgdYuAgC/c/QHHp7YZ+pSwisOdo4e3 k3JDvVPp2fGO+xV5plXCQBzztm44sCUgFBsZWsH5EMgu5arBjQy9ZX1+yRVeTbU2 iVgoJ+ryy0nLS7GyXkcqg7wVSlRMBnLuAjixvCVLkZEej/5nN5EFz2ijbUz/1zR4 O+ak3xG+4gg1VQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:07:13 2025 by rpki-client