This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json) Hash identifier: a8maxvrz8EkaXVhQqphbw6fzLoSr4VIrzv/ijyGLxrU= Subject key identifier: 39:79:78:DA:B7:C9:F6:54:BC:55:EE:AD:7A:41:0A:F3:F6:72:DC:08 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B0DB6E8EA79BD5E630618543673B472FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft Manifest number: 1119 Signing time: Thu 11 Dec 2025 14:00:49 +0000 Manifest this update: Thu 11 Dec 2025 14:00:49 +0000 Manifest next update: Fri 12 Dec 2025 14:00:49 +0000 Files and hashes: 1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=) 2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=) 3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=) 4: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=) 5: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=) 6: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=) 7: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=) 8: Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa (hash: a+cNO7NeGK0+Kekgy2ApSwORgdGKnbPR+XAAnpzOBb8=) 9: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=) 10: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=) 11: cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa (hash: HZLlwTwqVGDVRhnQhZwHiZITP6bwZxdPXUhaAFygvWw=) 12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=) 13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=) 14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=) 15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: hy56X7uHFUsbkm0qGYWGphslwfhtQDA2YXSxfKJrAJs=) 16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=) 17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=) 18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=) 19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=) 20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=) 21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=) 22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=) 23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=) 24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=) 25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e8:ea:79:bd:5e:63:06:18:54:36:73:b4:72:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Dec 11 14:00:49 2025 GMT Not After : Dec 12 14:00:49 2025 GMT Subject: CN=397978dab7c9f654bc55eead7a410af3f672dc08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:d3:27:66:7b:94:e9:88:fe:19:60:9a:0f: 38:62:28:a4:41:83:5e:9c:f4:c4:7a:70:44:15:25: e3:b7:73:14:89:ef:bd:02:ec:c1:4f:7f:4e:c5:5c: 1f:de:58:5b:eb:79:49:1b:b6:de:0b:45:e4:d9:72: 2f:92:73:16:f0:f7:4c:40:29:83:8e:c5:f8:df:ab: cd:2f:62:d9:d1:d2:c5:56:b4:1e:c1:7d:31:b4:12: 4a:aa:43:79:e0:c7:5a:94:2b:d2:92:08:56:5c:97: ee:cb:55:ad:2b:b4:b7:1d:a1:cb:a3:82:42:82:5d: bf:3b:1d:2d:bb:20:64:da:af:1f:33:b1:21:c4:36: 6a:f0:32:0e:42:8a:d0:b5:8f:28:f2:bc:8c:e9:a1: 5b:94:21:e0:8c:18:86:64:58:8c:2e:78:62:b7:fc: 91:a1:f6:4d:44:82:82:20:12:51:73:d4:8c:83:62: 68:bc:46:c1:2f:a1:14:dd:9e:ca:8b:df:11:92:03: 58:2b:b7:90:35:32:35:d8:a3:bf:c3:51:7d:4e:69: b5:40:5c:e9:c5:cb:25:b8:a9:14:d7:25:db:a5:01: 3e:09:06:33:fb:37:01:ec:c9:6e:b1:b4:db:9c:22: 3e:c3:a8:85:8b:05:f1:24:7d:82:a8:ee:a8:c1:ee: df:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:78:DA:B7:C9:F6:54:BC:55:EE:AD:7A:41:0A:F3:F6:72:DC:08 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:51:01:44:2c:09:47:a2:14:da:9e:10:71:dc:6a:40:55:7d: 5d:41:a0:7b:f3:d7:80:65:7e:68:11:81:7c:ed:d6:56:da:6f: d3:e4:c9:4c:9e:9b:48:c5:b1:dd:db:26:74:15:f7:1a:6a:52: 23:4b:71:49:30:32:06:a5:45:99:8f:aa:fb:63:40:5d:ab:37: 45:8d:6c:a5:8d:f6:5e:c8:1e:2c:9b:18:66:eb:c8:30:f8:6a: d8:ba:7c:82:29:49:ae:ed:30:94:5d:67:a1:a3:57:72:37:7f: 8e:25:29:a8:ce:c4:de:7e:31:0a:48:8c:b3:c7:6d:77:30:79: 3c:b8:25:e6:1b:70:1e:59:e5:47:d0:ab:c4:33:16:ab:f8:56: 8c:45:7c:87:4c:99:ae:cd:60:c6:23:99:79:84:a2:06:9b:ad: 78:73:ea:65:3d:7a:a2:34:b1:48:b8:f9:2b:6c:7f:50:4f:a7: 9b:4c:26:ad:36:ea:20:4b:69:a4:2f:17:62:a7:ae:0d:a9:23: 85:c5:8c:c4:86:f0:75:59:17:45:a6:46:20:ae:89:f4:dc:65: 7b:67:66:de:ea:02:f5:f3:c5:35:93:f6:86:13:a7:cf:ee:cf: 3b:41:23:54:3f:13:9b:a6:33:f0:49:97:00:47:e1:51:9c:37: e8:57:37:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtujqeb1eYwYYVDZztHL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjUxMjExMTQwMDQ5WhcNMjUxMjEyMTQwMDQ5WjAzMTEwLwYDVQQD EygzOTc5NzhkYWI3YzlmNjU0YmM1NWVlYWQ3YTQxMGFmM2Y2NzJkYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx07TJ2Z7lOmI/hlgmg84YiikQYNe nPTEenBEFSXjt3MUie+9AuzBT39OxVwf3lhb63lJG7beC0Xk2XIvknMW8PdMQCmD jsX436vNL2LZ0dLFVrQewX0xtBJKqkN54MdalCvSkghWXJfuy1WtK7S3HaHLo4JC gl2/Ox0tuyBk2q8fM7EhxDZq8DIOQorQtY8o8ryM6aFblCHgjBiGZFiMLnhit/yR ofZNRIKCIBJRc9SMg2JovEbBL6EU3Z7Ki98RkgNYK7eQNTI12KO/w1F9Tmm1QFzp xcsluKkU1yXbpQE+CQYz+zcB7MlusbTbnCI+w6iFiwXxJH2CqO6owe7frQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl5eNq3yfZUvFXurXpBCvP2ctwIMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVEBRCwJ R6IU2p4QcdxqQFV9XUGge/PXgGV+aBGBfO3WVtpv0+TJTJ6bSMWx3dsmdBX3GmpS I0txSTAyBqVFmY+q+2NAXas3RY1spY32XsgeLJsYZuvIMPhq2Lp8gilJru0wlF1n oaNXcjd/jiUpqM7E3n4xCkiMs8dtdzB5PLgl5htwHlnlR9CrxDMWq/hWjEV8h0yZ rs1gxiOZeYSiBputeHPqZT16ojSxSLj5K2x/UE+nm0wmrTbqIEtppC8XYqeuDakj hcWMxIbwdVkXRaZGIK6J9Nxle2dm3uoC9fPFNZP2hhOnz+7PO0EjVD8Tm6Yz8EmX AEfhUZw36Fc3Ig== -----END CERTIFICATE-----Generated at Thu Dec 11 21:26:37 2025 by rpki-client