This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json) Hash identifier: rdUB2fAU9puRsMN5PMzPjFojAUxRjQ2mEM+x1CD3S+Q= Subject key identifier: EA:9C:68:E0:32:D7:A4:37:1F:5A:5E:50:3B:37:77:E1:B9:A7:92:6C Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Certificate serial: 019B12DDB9E7DF79771641555681F9692785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 14:01:19 +0000 Manifest this update: Fri 12 Dec 2025 14:01:19 +0000 Manifest next update: Sat 13 Dec 2025 14:01:19 +0000 Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: KUEvacXEV3uJ2PbN79uSeYCtG+6hXMlezWv5Sl0d9sw=) 2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:b9:e7:df:79:77:16:41:55:56:81:f9:69:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Validity Not Before: Dec 12 14:01:19 2025 GMT Not After : Dec 13 14:01:19 2025 GMT Subject: CN=ea9c68e032d7a4371f5a5e503b3777e1b9a7926c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:63:9e:90:e8:e0:d5:50:0e:fd:18:47:15: f5:50:06:4d:1c:6c:92:5e:6d:3d:43:e6:8c:74:41: b1:b6:2c:4f:42:4e:8f:dc:22:56:a8:19:33:13:f2: 61:bb:8c:f5:ba:ef:71:3a:99:48:ce:aa:dd:1a:c5: 5d:d3:18:c5:39:78:1a:2d:85:c2:2a:b6:a8:5e:30: a2:91:23:a2:ef:3f:52:c4:97:0b:16:b1:b2:cf:2a: 5b:96:8c:f5:35:5f:34:36:7f:3a:a6:70:fa:0b:30: b5:fd:94:53:cb:cc:70:22:9f:87:9b:a9:ad:31:c8: 23:f4:93:0f:51:53:eb:7b:cb:73:e4:a5:6e:c1:56: 39:95:97:b7:01:7d:8f:0c:30:9e:3d:53:f2:ec:b5: d4:e7:c2:eb:e2:f1:0a:10:9f:12:0d:bd:d0:3e:17: e9:25:0f:53:92:f9:41:38:71:4a:43:f1:c7:39:bc: 0a:17:13:eb:c3:82:b6:32:67:f5:ff:f0:51:f4:68: fe:d9:2f:f4:6d:f0:47:ae:14:30:eb:fd:66:ba:65: 25:87:ef:f3:4d:4a:eb:68:a9:ff:e1:11:34:07:7a: 52:d6:11:80:e4:ac:05:f3:0d:a3:7e:c1:5c:43:d2: d9:e7:ae:29:7f:cd:d0:79:05:85:58:80:44:dd:54: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9C:68:E0:32:D7:A4:37:1F:5A:5E:50:3B:37:77:E1:B9:A7:92:6C X509v3 Authority Key Identifier: keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8a:91:f4:7f:2b:f9:12:b0:89:a6:6f:6d:ed:ca:8f:7f:45: 9d:ba:84:8a:db:16:29:79:e4:6f:83:37:9c:9d:5c:43:27:95: 66:5e:35:16:2f:83:f4:6c:90:ab:70:1c:ea:c1:df:fe:69:8b: ae:fd:46:a3:a0:a5:0c:e1:52:14:e9:f1:88:e6:3b:3b:fe:bf: 63:0b:96:b3:7f:7c:bc:af:83:7b:35:16:40:10:6f:64:3c:e8: 66:67:20:c1:f3:f4:82:73:6f:28:b0:e7:93:c9:13:d5:ea:cf: bd:9a:64:9e:e4:e9:77:43:a6:cd:cb:ce:24:49:bc:84:b6:7c: 0a:33:34:dd:16:88:26:26:8a:43:f2:4d:29:4d:ad:9d:0a:1f: 02:e1:6c:86:89:d6:11:11:44:56:b5:19:1a:6e:2c:9b:19:95: b9:f9:3a:52:44:1b:b5:30:35:ff:f6:a9:33:3c:e6:3e:f9:79: 75:7a:1a:31:75:ca:53:e9:4c:09:38:61:b5:34:a9:c4:a7:40: 9d:f7:9f:4e:dd:8c:39:12:3f:9c:c8:9f:64:c8:f8:e8:d4:b4: d2:16:bd:d3:9d:b0:67:af:ca:2a:30:b1:9d:01:f1:41:93:9c: 5e:e0:a4:00:e0:14:41:b9:1c:c7:2a:e5:2b:3e:9d:59:8c:ca: 63:05:33:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3bnn33l3FkFVVoH5aSeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0 MDFhMzcwHhcNMjUxMjEyMTQwMTE5WhcNMjUxMjEzMTQwMTE5WjAzMTEwLwYDVQQD EyhlYTljNjhlMDMyZDdhNDM3MWY1YTVlNTAzYjM3NzdlMWI5YTc5MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8pjnpDo4NVQDv0YRxX1UAZNHGyS Xm09Q+aMdEGxtixPQk6P3CJWqBkzE/Jhu4z1uu9xOplIzqrdGsVd0xjFOXgaLYXC KraoXjCikSOi7z9SxJcLFrGyzypbloz1NV80Nn86pnD6CzC1/ZRTy8xwIp+Hm6mt Mcgj9JMPUVPre8tz5KVuwVY5lZe3AX2PDDCePVPy7LXU58Lr4vEKEJ8SDb3QPhfp JQ9TkvlBOHFKQ/HHObwKFxPrw4K2Mmf1//BR9Gj+2S/0bfBHrhQw6/1mumUlh+/z TUrraKn/4RE0B3pS1hGA5KwF8w2jfsFcQ9LZ564pf83QeQWFWIBE3VSRNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqcaOAy16Q3H1peUDs3d+G5p5JsMB8GA1UdIwQY MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5 LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYqR9H8r +RKwiaZvbe3Kj39FnbqEitsWKXnkb4M3nJ1cQyeVZl41Fi+D9GyQq3Ac6sHf/mmL rv1Go6ClDOFSFOnxiOY7O/6/YwuWs398vK+DezUWQBBvZDzoZmcgwfP0gnNvKLDn k8kT1erPvZpknuTpd0OmzcvOJEm8hLZ8CjM03RaIJiaKQ/JNKU2tnQofAuFshonW ERFEVrUZGm4smxmVufk6UkQbtTA1//apMzzmPvl5dXoaMXXKU+lMCThhtTSpxKdA nfefTt2MORI/nMifZMj46NS00ha9052wZ6/KKjCxnQHxQZOcXuCkAOAUQbkcxyrl Kz6dWYzKYwUzFA== -----END CERTIFICATE-----Generated at Fri Dec 12 21:43:40 2025 by rpki-client