This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json) Hash identifier: +LAmAtcrQa5le3jVVDCFt+dMugOtx8FWHZP+pGIXkGI= Subject key identifier: 90:CF:0A:72:DC:C8:BC:D0:65:1D:A4:26:41:9B:8A:99:D1:B6:68:E3 Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7 Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7 Certificate serial: 019B2061EBE0253425DBA0DD96FDF32905BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft Manifest number: 0888 Signing time: Mon 15 Dec 2025 05:00:46 +0000 Manifest this update: Mon 15 Dec 2025 05:00:46 +0000 Manifest next update: Tue 16 Dec 2025 05:00:46 +0000 Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: qkH61nySXUAhe95FWJB8GjZ0Z6ML7hJHH64OvQiYkSc=) 2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:eb:e0:25:34:25:db:a0:dd:96:fd:f3:29:05:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7 Validity Not Before: Dec 15 05:00:46 2025 GMT Not After : Dec 16 05:00:46 2025 GMT Subject: CN=90cf0a72dcc8bcd0651da426419b8a99d1b668e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:b0:14:b6:de:07:b7:fa:30:fe:d3:59:3f: 0e:e8:31:39:34:36:96:d4:d8:3e:1a:81:84:3b:f1: c9:21:d6:50:fa:9f:53:28:2c:fd:b7:ea:ff:66:b5: 2e:c9:b4:58:e2:f7:2e:5c:8c:98:cd:b7:79:60:f8: 39:f4:89:3c:c6:44:4d:a0:c0:ad:30:40:e2:9a:8d: 5c:52:26:bc:dd:2a:bb:64:9e:0b:9f:68:b4:41:29: 43:fe:bb:c4:a9:ec:b9:28:2f:0e:78:34:d9:ed:5c: af:43:b5:41:22:7f:4f:a0:d9:f9:c3:fb:70:8d:ce: d3:09:37:f0:76:c8:ce:07:33:b2:f1:bd:17:e8:80: a8:db:ac:73:81:35:45:6e:3a:13:72:b1:dd:fc:cb: 29:d7:ec:68:34:89:f2:d1:cd:56:1a:b6:07:85:bf: 88:f8:f4:35:da:57:84:6b:14:c2:02:a6:f8:90:e5: 18:fd:62:ea:99:27:9f:f5:eb:c6:14:0a:a9:5d:23: 85:40:59:85:1f:6e:e6:f5:73:7f:78:12:49:71:65: 84:52:10:23:12:f5:d6:c6:96:b3:f3:fe:74:9a:2e: 57:e3:78:33:4b:84:60:54:b4:96:ba:ba:7f:8d:31: a8:24:d4:58:ef:26:2a:54:ad:1a:f3:e4:da:31:cf: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CF:0A:72:DC:C8:BC:D0:65:1D:A4:26:41:9B:8A:99:D1:B6:68:E3 X509v3 Authority Key Identifier: keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:86:95:33:1e:81:f6:e5:38:e3:1e:76:fc:ec:93:6a:ee:02: 24:36:6e:98:5f:98:c9:a2:6f:a8:25:e2:01:bb:b2:cd:e0:f4: e2:fe:53:43:8d:30:a8:ba:43:df:4f:10:96:4e:21:fe:5f:86: 30:5b:e1:21:72:17:c2:09:c8:ff:ae:0c:73:40:f3:7e:6d:1e: d0:77:41:ea:57:b8:20:cc:c0:1b:15:73:b2:83:ee:25:e5:ef: 5d:1e:f1:e6:b3:28:f8:0e:44:8c:c3:29:00:05:84:25:80:44: e2:e3:2b:64:7e:f3:8d:97:b8:ee:bd:0a:18:01:8a:2d:01:10: 47:5f:45:dd:00:e5:e0:5c:7f:0c:c2:46:cb:f8:ad:a4:6a:9b: e0:79:2c:a2:19:22:3f:52:ea:f8:f7:17:47:3f:de:72:fe:ff: 40:fd:3c:9d:ee:1d:a7:b4:8c:2c:64:24:14:58:36:7e:1f:e6: 1c:64:21:e9:0d:3a:bb:43:7c:72:b0:87:9b:a1:f7:fa:44:70: b1:c3:3f:03:c1:de:1d:1f:1f:dc:00:3d:d4:cf:90:87:f1:b4: 46:86:58:e4:f3:eb:ae:c2:93:e2:17:c6:b2:33:79:44:a4:0e: 9b:42:ca:66:44:a9:72:d3:5e:95:b1:5d:a2:6c:18:8f:e3:d3: cd:37:07:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYevgJTQl26Ddlv3zKQW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMTk1YzE2MzJhYTliMDI0ZTI4YmZmMjJlYzZmMGE3ZTI3 NzYwYTcwHhcNMjUxMjE1MDUwMDQ2WhcNMjUxMjE2MDUwMDQ2WjAzMTEwLwYDVQQD Eyg5MGNmMGE3MmRjYzhiY2QwNjUxZGE0MjY0MTliOGE5OWQxYjY2OGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmOwFLbeB7f6MP7TWT8O6DE5NDaW 1Ng+GoGEO/HJIdZQ+p9TKCz9t+r/ZrUuybRY4vcuXIyYzbd5YPg59Ik8xkRNoMCt MEDimo1cUia83Sq7ZJ4Ln2i0QSlD/rvEqey5KC8OeDTZ7VyvQ7VBIn9PoNn5w/tw jc7TCTfwdsjOBzOy8b0X6ICo26xzgTVFbjoTcrHd/Msp1+xoNIny0c1WGrYHhb+I +PQ12leEaxTCAqb4kOUY/WLqmSef9evGFAqpXSOFQFmFH27m9XN/eBJJcWWEUhAj EvXWxpaz8/50mi5X43gzS4RgVLSWurp/jTGoJNRY7yYqVK0a8+TaMc9xrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDPCnLcyLzQZR2kJkGbipnRtmjjMB8GA1UdIwQY MBaAFI4ZXBYyqpsCTii/8i7G8Kfid2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDdhNjQtMzAxYS00OWU3LWFjNjUt ZWFkODA5MWRiYzEzLzEvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDdhNjQtMzAxYS00OWU3LWFjNjUtZWFkODA5MWRiYzEz LzEvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIaVMx6B 9uU44x52/OyTau4CJDZumF+YyaJvqCXiAbuyzeD04v5TQ40wqLpD308Qlk4h/l+G MFvhIXIXwgnI/64Mc0Dzfm0e0HdB6le4IMzAGxVzsoPuJeXvXR7x5rMo+A5EjMMp AAWEJYBE4uMrZH7zjZe47r0KGAGKLQEQR19F3QDl4Fx/DMJGy/itpGqb4Hksohki P1Lq+PcXRz/ecv7/QP08ne4dp7SMLGQkFFg2fh/mHGQh6Q06u0N8crCHm6H3+kRw scM/A8HeHR8f3AA91M+Qh/G0RoZY5PPrrsKT4hfGsjN5RKQOm0LKZkSpctNelbFd omwYj+PTzTcHiw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:54:06 2025 by rpki-client