This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json) Hash identifier: rZyOl0afzFpJS/StX4GS2hUOsocpjNp5lXoMuTSPz2w= Subject key identifier: 71:DA:00:E9:F8:24:BD:99:5D:E8:B3:84:F1:FA:BE:C0:D8:38:B3:56 Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019B10EE9F9E60437A863D53DE5859A03CCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft Manifest number: 1031 Signing time: Fri 12 Dec 2025 05:00:31 +0000 Manifest this update: Fri 12 Dec 2025 05:00:31 +0000 Manifest next update: Sat 13 Dec 2025 05:00:31 +0000 Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=) 2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: CGYvJP6YRn4egYSWcJDVrREUi7IXfaQtvoftQmo60Yk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:9f:9e:60:43:7a:86:3d:53:de:58:59:a0:3c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Dec 12 05:00:31 2025 GMT Not After : Dec 13 05:00:31 2025 GMT Subject: CN=71da00e9f824bd995de8b384f1fabec0d838b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:a5:59:4d:d4:77:9c:72:25:80:ce:b9:18: c1:cc:41:43:20:73:05:98:09:b0:a4:9d:bc:9b:77: d0:1e:0b:2f:46:e6:18:ba:1b:17:35:a6:80:8b:2a: a7:1f:af:d1:0b:c7:db:bb:6b:0a:7d:bc:9e:72:ae: ac:7f:86:58:4d:c5:80:3c:31:fc:69:b8:f3:a0:2d: a4:db:00:fb:f0:76:c5:f6:38:dd:43:8a:62:6b:8d: 00:2b:37:9d:02:b2:87:69:22:27:b4:d4:a9:4c:c6: d8:d6:e2:df:4b:f0:54:0f:1d:4f:91:4e:0d:1b:90: 8f:48:f7:60:c0:66:79:00:ac:56:54:3c:77:67:a2: 17:7f:d3:e4:5f:dc:a3:b1:60:92:00:7b:b7:9c:a5: b5:44:a1:fd:68:2a:97:b4:1d:74:b3:70:c8:5c:d5: 1a:f4:d9:6c:96:b6:14:a3:f0:49:fd:7d:86:f7:89: ea:03:54:77:94:7c:96:87:07:6b:a1:03:02:20:96: 14:a9:31:85:cc:27:70:e8:98:e0:67:df:46:df:39: e4:47:2e:ec:1b:50:98:82:81:77:5b:0a:58:78:ae: 8f:53:b8:92:bc:18:b1:69:ac:df:9a:bc:0b:24:76: 50:b3:57:d9:cf:e2:71:da:4f:8a:0b:3a:93:f6:95: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DA:00:E9:F8:24:BD:99:5D:E8:B3:84:F1:FA:BE:C0:D8:38:B3:56 X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a1:22:6d:d5:fd:97:4d:ae:44:0a:b6:e5:4b:1d:a3:5a:c5: a8:b1:91:df:72:05:6c:a1:8d:f2:5f:b1:9d:bf:a9:8e:6f:a1: a9:aa:9c:77:66:e9:8c:bd:d0:f1:4a:0c:8f:76:65:56:67:c7: c9:52:26:bd:6a:d5:29:72:2c:db:a2:74:b5:f6:26:82:ef:26: d6:95:6c:72:05:c1:ff:bb:a9:5a:aa:05:82:e3:4e:18:a2:40: d3:fc:f1:93:a3:a0:5e:d0:d1:19:30:e5:8d:fa:08:ed:2a:cb: c9:6c:7c:f4:56:68:4e:1d:43:82:09:04:fc:42:a8:4a:6f:4e: 63:c2:2d:25:67:5c:c8:4b:10:91:73:54:73:63:02:6a:9e:b8: 56:2a:80:49:57:ea:30:ce:36:af:ae:37:ce:a9:fe:0b:14:56: 57:9b:c8:92:58:e7:bc:4b:0e:a6:f3:54:e8:91:31:c2:84:f8: 08:60:e1:f8:c6:ca:aa:82:63:a9:ec:7c:23:c4:91:c7:d5:d7: 0a:52:07:cb:ab:c7:9c:dc:60:43:60:97:70:03:3c:4b:d6:1f: ac:96:0d:e3:71:60:69:45:29:30:e5:4b:e2:0d:12:cd:a2:c7: 0b:c5:c7:26:56:d6:b2:16:3a:f9:4a:ef:db:f1:c7:a3:20:f0: d6:3e:d5:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7p+eYEN6hj1T3lhZoDzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjUxMjEyMDUwMDMxWhcNMjUxMjEzMDUwMDMxWjAzMTEwLwYDVQQD Eyg3MWRhMDBlOWY4MjRiZDk5NWRlOGIzODRmMWZhYmVjMGQ4MzhiMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPWlWU3Ud5xyJYDOuRjBzEFDIHMF mAmwpJ28m3fQHgsvRuYYuhsXNaaAiyqnH6/RC8fbu2sKfbyecq6sf4ZYTcWAPDH8 abjzoC2k2wD78HbF9jjdQ4pia40AKzedArKHaSIntNSpTMbY1uLfS/BUDx1PkU4N G5CPSPdgwGZ5AKxWVDx3Z6IXf9PkX9yjsWCSAHu3nKW1RKH9aCqXtB10s3DIXNUa 9NlslrYUo/BJ/X2G94nqA1R3lHyWhwdroQMCIJYUqTGFzCdw6JjgZ99G3znkRy7s G1CYgoF3WwpYeK6PU7iSvBixaazfmrwLJHZQs1fZz+Jx2k+KCzqT9pWEpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHaAOn4JL2ZXeizhPH6vsDYOLNWMB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaEibdX9 l02uRAq25Usdo1rFqLGR33IFbKGN8l+xnb+pjm+hqaqcd2bpjL3Q8UoMj3ZlVmfH yVImvWrVKXIs26J0tfYmgu8m1pVscgXB/7upWqoFguNOGKJA0/zxk6OgXtDRGTDl jfoI7SrLyWx89FZoTh1DggkE/EKoSm9OY8ItJWdcyEsQkXNUc2MCap64ViqASVfq MM42r643zqn+CxRWV5vIkljnvEsOpvNU6JExwoT4CGDh+MbKqoJjqex8I8SRx9XX ClIHy6vHnNxgQ2CXcAM8S9YfrJYN43FgaUUpMOVL4g0SzaLHC8XHJlbWshY6+Urv 2/HHoyDw1j7V0g== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:26 2025 by rpki-client