This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json) Hash identifier: rHGDmNzwt8xrf9B/CE4V3Ed1vEmp54/xNdWc9lwAlYY= Subject key identifier: 50:1A:57:9E:C0:50:A5:D1:2D:E9:C3:11:8C:EE:7E:91:B6:74:45:5C Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Certificate serial: 019B115D2613319CD0F9880C8D3BDC58FFA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft Manifest number: 1774 Signing time: Fri 12 Dec 2025 07:01:15 +0000 Manifest this update: Fri 12 Dec 2025 07:01:15 +0000 Manifest next update: Sat 13 Dec 2025 07:01:15 +0000 Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: y3N3QDIeOSjyj1cqDyHn3dQY8labE05ROctKeIK6tYQ=) 2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:26:13:31:9c:d0:f9:88:0c:8d:3b:dc:58:ff:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Validity Not Before: Dec 12 07:01:15 2025 GMT Not After : Dec 13 07:01:15 2025 GMT Subject: CN=501a579ec050a5d12de9c3118cee7e91b674455c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:d9:dd:bd:4a:1e:00:35:62:6d:11:bc:41: 9b:52:0b:a0:4c:83:0a:dc:ff:1d:eb:78:9a:45:ed: e0:38:de:e2:3f:cf:c7:ca:79:86:3d:96:5d:f9:a6: b4:10:e5:eb:c0:65:77:ec:3c:c0:17:55:4f:f8:d0: 28:8d:3f:f4:09:b9:a4:79:9b:8e:9a:a7:b8:fc:0b: 75:93:84:0f:dc:ee:d3:b0:3f:79:32:8f:21:fe:ef: 86:87:0a:56:68:26:61:51:d7:0c:f7:c2:a3:25:29: 93:95:ce:76:49:0e:4d:5e:d1:ff:81:2a:fb:92:00: f8:15:bf:ec:62:2b:95:83:9f:43:8e:99:e1:05:03: d5:87:6c:3b:26:41:92:d2:28:d4:fa:d4:dc:2f:4b: e1:a5:6d:48:ba:a0:36:88:1f:4d:b4:5e:0c:12:29: 40:d6:4c:7f:5d:3a:e5:b4:fe:4a:d9:4f:a0:14:9b: 8a:0f:60:c6:e1:5f:5d:9b:97:eb:7e:22:e6:4f:9b: be:08:96:e3:72:f1:06:10:ba:1f:30:d5:0d:da:a7: 2c:1e:b8:07:88:fa:36:9e:c7:35:a6:55:8a:39:24: 31:42:fd:d9:5d:95:7d:4d:01:2c:e0:78:af:53:c1: de:64:b6:1c:f4:84:39:b5:02:90:b3:5d:67:9a:31: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:57:9E:C0:50:A5:D1:2D:E9:C3:11:8C:EE:7E:91:B6:74:45:5C X509v3 Authority Key Identifier: keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:ab:60:d5:f3:a0:22:12:31:0f:9e:b2:7f:10:1a:00:03: dc:3b:35:03:26:31:8c:f0:2c:d2:65:d5:59:65:b9:ca:ba:30: 98:6e:45:bf:a9:c1:05:69:c4:f4:f2:f1:17:37:df:59:49:10: 7a:1f:25:59:91:c1:ef:d6:dc:88:89:72:2e:ee:20:48:17:4b: f5:27:a7:24:c9:3f:99:86:5a:6c:b4:31:d3:65:d3:e4:94:32: 1f:71:1e:0e:2d:20:5f:b4:ce:c0:a8:50:1e:2e:94:ab:76:23: b3:b2:60:2f:20:31:0b:14:6f:33:e1:b0:18:14:80:23:a9:98: 7d:23:60:e6:cd:d4:12:af:76:da:6b:b3:f1:81:48:a7:c7:3a: 65:25:93:f1:13:6a:f3:a4:2d:0f:28:22:8e:9d:b4:04:c3:9a: 0c:aa:2b:f4:1a:1b:5d:f3:89:be:ba:1d:65:fb:63:c6:f0:c7: 2f:23:4b:8d:21:13:12:ca:92:c9:13:53:ff:86:52:b5:9f:5c: dd:8a:0b:3b:1b:0e:a3:a5:c6:6a:91:b2:36:4d:c9:0b:29:d1: c3:e5:16:ef:8b:d9:40:8f:90:8f:af:ed:f1:49:41:4e:03:44: 6f:1d:4c:a2:e5:80:37:15:63:ea:6f:91:a5:56:46:3c:fb:c8: f9:2d:a6:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXSYTMZzQ+YgMjTvcWP+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl MjEwM2MwHhcNMjUxMjEyMDcwMTE1WhcNMjUxMjEzMDcwMTE1WjAzMTEwLwYDVQQD Eyg1MDFhNTc5ZWMwNTBhNWQxMmRlOWMzMTE4Y2VlN2U5MWI2NzQ0NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO3Z3b1KHgA1Ym0RvEGbUgugTIMK 3P8d63iaRe3gON7iP8/HynmGPZZd+aa0EOXrwGV37DzAF1VP+NAojT/0CbmkeZuO mqe4/At1k4QP3O7TsD95Mo8h/u+GhwpWaCZhUdcM98KjJSmTlc52SQ5NXtH/gSr7 kgD4Fb/sYiuVg59DjpnhBQPVh2w7JkGS0ijU+tTcL0vhpW1IuqA2iB9NtF4MEilA 1kx/XTrltP5K2U+gFJuKD2DG4V9dm5frfiLmT5u+CJbjcvEGELofMNUN2qcsHrgH iPo2nsc1plWKOSQxQv3ZXZV9TQEs4HivU8HeZLYc9IQ5tQKQs11nmjFV6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAaV57AUKXRLenDEYzufpG2dEVcMB8GA1UdIwQY MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKSrYNXz oCISMQ+esn8QGgAD3Ds1AyYxjPAs0mXVWWW5yrowmG5Fv6nBBWnE9PLxFzffWUkQ eh8lWZHB79bciIlyLu4gSBdL9SenJMk/mYZabLQx02XT5JQyH3EeDi0gX7TOwKhQ Hi6Uq3Yjs7JgLyAxCxRvM+GwGBSAI6mYfSNg5s3UEq922muz8YFIp8c6ZSWT8RNq 86QtDygijp20BMOaDKor9BobXfOJvrodZftjxvDHLyNLjSETEsqSyRNT/4ZStZ9c 3YoLOxsOo6XGapGyNk3JCynRw+UW74vZQI+Qj6/t8UlBTgNEbx1MouWANxVj6m+R pVZGPPvI+S2mcA== -----END CERTIFICATE-----Generated at Fri Dec 12 12:38:22 2025 by rpki-client