This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json) Hash identifier: ROWa2iYkXnSoHd/uyYYhpAqioQGTLe5ztIKi73GhJXo= Subject key identifier: 72:18:AD:CD:01:99:AC:BC:1A:D5:96:53:18:32:EA:68:AC:79:C5:57 Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Certificate serial: 019B20D032CE56A70BE8E76585AD07E78065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 07:01:13 +0000 Manifest this update: Mon 15 Dec 2025 07:01:13 +0000 Manifest next update: Tue 16 Dec 2025 07:01:13 +0000 Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: Gg6q5cCPxm8D/AApn9r/CK2ASyAbLGTazmjLQUg77OA=) 2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:32:ce:56:a7:0b:e8:e7:65:85:ad:07:e7:80:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Validity Not Before: Dec 15 07:01:13 2025 GMT Not After : Dec 16 07:01:13 2025 GMT Subject: CN=7218adcd0199acbc1ad596531832ea68ac79c557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:39:98:86:45:2f:a1:29:ec:7f:80:b7:8a: 15:fd:79:81:d6:a3:33:16:d5:64:62:05:31:9c:9c: f9:bb:1e:64:51:db:af:0b:0a:b6:44:cc:c8:5d:d6: 5a:85:ec:05:02:69:91:59:c8:75:01:87:92:48:d1: f1:3f:4b:7f:70:94:c8:8b:86:11:b8:ff:a0:05:23: d6:19:db:5a:37:b8:fc:9f:e4:ee:d4:e5:97:2f:e7: 6b:90:87:5c:40:81:18:43:d2:48:76:40:20:f4:7f: 88:08:b4:79:ba:8c:4b:32:7a:fc:b2:08:95:0e:da: 0e:f4:9a:e8:2f:c9:77:28:cc:46:90:0d:f1:44:80: fa:33:5c:d1:c7:df:0e:c8:aa:ba:01:a7:1b:25:a2: 5c:8c:eb:b2:42:1b:61:a5:2f:57:50:bf:61:a5:12: 54:ea:38:a7:27:86:9d:ab:d1:9d:a4:e0:28:4c:43: 71:49:91:7a:b7:7a:f9:8b:10:23:76:02:f9:59:49: 5a:6e:bd:e6:56:13:22:bb:0e:ca:21:f8:36:fa:34: 4f:27:62:ac:33:18:a9:68:0f:a1:17:c9:b2:34:d2: 33:66:99:aa:44:df:5f:d7:95:4e:95:4b:c5:83:e9: 22:36:e2:6c:5a:7a:d8:3a:22:29:19:90:51:53:42: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:18:AD:CD:01:99:AC:BC:1A:D5:96:53:18:32:EA:68:AC:79:C5:57 X509v3 Authority Key Identifier: keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:98:84:5b:70:c4:1e:70:cc:50:3a:56:90:f8:2a:28:58:38: 6a:72:ec:ae:f2:4e:41:d5:8e:bb:f7:fb:cb:db:ab:5f:08:41: f7:6c:2a:7a:b6:b0:ba:b0:bc:51:f0:d2:8e:02:be:de:a0:06: ac:18:f5:34:e7:16:5a:43:08:35:27:dd:e5:a6:33:b6:f3:16: 67:ce:94:c3:dc:6a:c1:12:3f:4e:a3:42:3e:c4:9e:98:80:0d: e0:2c:a0:cf:e2:d0:15:3d:44:85:25:d1:87:d0:2e:c7:fe:fe: 8a:ce:43:37:38:c7:7d:b1:32:7a:40:68:a3:b1:b7:30:d6:8a: 31:0a:92:31:f2:0b:2e:68:a5:f0:df:4e:a5:e8:17:66:c5:19: 88:31:47:54:82:c5:9b:cf:0a:d8:8f:93:32:fb:ec:1f:93:c5: d3:61:cb:4b:fc:b4:2b:76:16:fc:16:21:c1:97:f3:bb:b3:44: 48:69:2d:74:ca:2c:25:9d:a1:b3:72:cb:62:c5:2f:7d:bc:7b: ce:5e:f9:f2:3c:bf:d2:99:62:8f:4b:ef:84:ed:7c:d1:a3:30: ec:7e:87:73:3d:d6:f4:c6:e3:bf:bf:13:a2:16:79:22:3a:e0: 27:e7:32:ba:0c:e4:60:99:9b:31:c3:18:a7:cd:ca:82:63:04: 87:14:cf:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0DLOVqcL6Odlha0H54BlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl MjEwM2MwHhcNMjUxMjE1MDcwMTEzWhcNMjUxMjE2MDcwMTEzWjAzMTEwLwYDVQQD Eyg3MjE4YWRjZDAxOTlhY2JjMWFkNTk2NTMxODMyZWE2OGFjNzljNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVQ5mIZFL6Ep7H+At4oV/XmB1qMz FtVkYgUxnJz5ux5kUduvCwq2RMzIXdZahewFAmmRWch1AYeSSNHxP0t/cJTIi4YR uP+gBSPWGdtaN7j8n+Tu1OWXL+drkIdcQIEYQ9JIdkAg9H+ICLR5uoxLMnr8sgiV DtoO9JroL8l3KMxGkA3xRID6M1zRx98OyKq6AacbJaJcjOuyQhthpS9XUL9hpRJU 6jinJ4adq9GdpOAoTENxSZF6t3r5ixAjdgL5WUlabr3mVhMiuw7KIfg2+jRPJ2Ks MxipaA+hF8myNNIzZpmqRN9f15VOlUvFg+kiNuJsWnrYOiIpGZBRU0IaswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIYrc0Bmay8GtWWUxgy6misecVXMB8GA1UdIwQY MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpiEW3DE HnDMUDpWkPgqKFg4anLsrvJOQdWOu/f7y9urXwhB92wqerawurC8UfDSjgK+3qAG rBj1NOcWWkMINSfd5aYztvMWZ86Uw9xqwRI/TqNCPsSemIAN4Cygz+LQFT1EhSXR h9Aux/7+is5DNzjHfbEyekBoo7G3MNaKMQqSMfILLmil8N9OpegXZsUZiDFHVILF m88K2I+TMvvsH5PF02HLS/y0K3YW/BYhwZfzu7NESGktdMosJZ2hs3LLYsUvfbx7 zl758jy/0plij0vvhO180aMw7H6Hcz3W9Mbjv78TohZ5IjrgJ+cyugzkYJmbMcMY p83KgmMEhxTPMQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:06:10 2025 by rpki-client