This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft File: JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json) Hash identifier: CbC2IBSr66sQDuSFQhjloQteQHRPjtHxmhAk/1SPuIg= Subject key identifier: 5E:36:D6:7E:54:68:EB:A8:97:DD:39:D0:29:83:E5:E3:05:B8:2E:3E Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d Certificate serial: 019B0F6E84EDFDD1991466B72C18F3A1B86F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft Manifest number: 10E7 Signing time: Thu 11 Dec 2025 22:00:59 +0000 Manifest this update: Thu 11 Dec 2025 22:00:59 +0000 Manifest next update: Fri 12 Dec 2025 22:00:59 +0000 Files and hashes: 1: BW4BmUKCyDozy984WvALErmmyWk.roa (hash: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=) 2: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: ZWM86YdFhEXKdPnhdqU9yWGgrLM8xdaZwjwtsZLUfq0=) 3: kRjRCT1hQD1ho57w--1uU8Vfnmw.roa (hash: hC2/HbU7Mf5QSInHXiOZZl8RFNv/DCEQb2nhsuAiYAk=) 4: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=) 5: mDIQfv7lheWlkNzFn-WZkIXBSMc.roa (hash: v+ukO0uJ0pKEoYLwa+X3bJdigzbF9dbIADjWYWJJUdY=) 6: wqeaVxmTKX-JD4H8O0LxYj5BDcA.roa (hash: z61rvdq/pxjCh7Rc2Im5uqBwppcKVRcSlRupK0edjoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:84:ed:fd:d1:99:14:66:b7:2c:18:f3:a1:b8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2614411899d721f343ed2a39629969417b5b655d Validity Not Before: Dec 11 22:00:59 2025 GMT Not After : Dec 12 22:00:59 2025 GMT Subject: CN=5e36d67e5468eba897dd39d02983e5e305b82e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:6d:bc:89:cc:62:5d:0b:b9:77:e8:ab:5b: 70:6e:fe:18:27:44:8c:3f:a5:70:4a:7a:c7:28:26: 0a:53:13:f7:0f:fd:9a:2b:7f:69:b4:94:68:25:b3: 27:7f:5e:50:c7:5f:d7:6a:2b:db:53:c2:be:db:67: c4:11:ae:fc:80:ef:5c:2e:c1:00:0f:81:be:b6:93: 41:85:0b:2e:d8:56:dc:b5:8b:a1:ed:0b:bb:85:3e: c3:04:e5:72:d2:8e:26:1a:03:f6:8b:85:86:88:47: 67:1a:f4:64:f3:07:9f:d8:9f:ec:de:20:ba:e2:05: 26:86:87:c6:d2:bc:b4:a2:76:89:4c:df:c5:e8:ce: ab:2d:62:82:87:8f:ac:a2:40:be:86:be:2c:08:81: 39:39:93:51:71:cb:8f:94:2c:19:c3:c2:8b:c6:49: c3:83:81:b6:6f:1c:8f:62:62:fb:78:3e:4f:9c:ae: bf:50:e0:0d:6a:d0:f6:88:69:1a:a0:65:04:ab:c3: 1c:a4:f7:27:ac:5a:68:4d:a0:51:8c:e3:e0:27:8c: 42:16:5d:1c:13:48:ad:c1:94:29:ed:4a:58:e6:71: 86:56:65:0a:0e:58:51:42:a8:cc:29:e1:5b:f6:45: 78:90:4f:e3:3d:27:ee:e3:f3:f6:01:f3:7e:43:5e: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:36:D6:7E:54:68:EB:A8:97:DD:39:D0:29:83:E5:E3:05:B8:2E:3E X509v3 Authority Key Identifier: keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5f:39:52:2b:4f:ea:e5:f8:96:a4:e9:7d:d0:c0:b9:00:d8: b7:c8:f4:43:91:23:fa:8a:cc:76:f2:2b:c6:a4:ee:53:89:92: 24:16:01:21:22:cb:16:02:1a:d1:ec:31:37:b2:97:e0:03:a6: 63:1e:de:cf:6a:3d:0b:24:80:bb:c0:69:74:b3:52:c8:a3:f8: ac:d6:7b:cc:f4:42:7c:87:c8:da:66:33:1b:08:41:96:2a:b9: aa:8f:b4:fd:54:32:cf:41:ca:ee:a2:7c:ae:f8:71:8d:bc:f4: 25:c6:ad:22:b2:0c:87:ca:f2:c3:43:3a:07:92:6b:f3:44:6e: 51:41:b0:a9:e4:91:0f:84:07:1d:66:f6:c9:d7:b1:46:a5:f7: 4f:72:9e:70:73:34:4f:9d:6f:aa:91:2e:7f:99:2d:c6:22:7d: a6:00:dd:48:57:55:a8:df:fc:d7:90:da:5c:e0:fd:10:b6:44: 67:06:b5:ed:92:44:9a:38:30:a3:07:78:ea:44:bc:4d:99:45: ea:38:27:65:36:f0:21:eb:26:4b:46:74:81:29:92:a7:11:ef: 35:8d:09:09:c2:9f:34:c3:55:fb:ec:6a:da:74:11:02:2e:f8: bb:41:27:38:3c:88:eb:ae:51:86:e3:45:33:58:ae:7a:12:c7: 6d:35:45:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPboTt/dGZFGa3LBjzobhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MTQ0MTE4OTlkNzIxZjM0M2VkMmEzOTYyOTk2OTQxN2I1 YjY1NWQwHhcNMjUxMjExMjIwMDU5WhcNMjUxMjEyMjIwMDU5WjAzMTEwLwYDVQQD Eyg1ZTM2ZDY3ZTU0NjhlYmE4OTdkZDM5ZDAyOTgzZTVlMzA1YjgyZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p9tvInMYl0LuXfoq1twbv4YJ0SM P6VwSnrHKCYKUxP3D/2aK39ptJRoJbMnf15Qx1/XaivbU8K+22fEEa78gO9cLsEA D4G+tpNBhQsu2FbctYuh7Qu7hT7DBOVy0o4mGgP2i4WGiEdnGvRk8wef2J/s3iC6 4gUmhofG0ry0onaJTN/F6M6rLWKCh4+sokC+hr4sCIE5OZNRccuPlCwZw8KLxknD g4G2bxyPYmL7eD5PnK6/UOANatD2iGkaoGUEq8McpPcnrFpoTaBRjOPgJ4xCFl0c E0itwZQp7UpY5nGGVmUKDlhRQqjMKeFb9kV4kE/jPSfu4/P2AfN+Q156NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF421n5UaOuol9050CmD5eMFuC4+MB8GA1UdIwQY MBaAFCYUQRiZ1yHzQ+0qOWKZaUF7W2VdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQt MDIxNDQ1NTEyOTlmLzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQtMDIxNDQ1NTEyOTlm LzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVl85UitP 6uX4lqTpfdDAuQDYt8j0Q5Ej+orMdvIrxqTuU4mSJBYBISLLFgIa0ewxN7KX4AOm Yx7ez2o9CySAu8BpdLNSyKP4rNZ7zPRCfIfI2mYzGwhBliq5qo+0/VQyz0HK7qJ8 rvhxjbz0JcatIrIMh8ryw0M6B5Jr80RuUUGwqeSRD4QHHWb2ydexRqX3T3KecHM0 T51vqpEuf5ktxiJ9pgDdSFdVqN/815DaXOD9ELZEZwa17ZJEmjgwowd46kS8TZlF 6jgnZTbwIesmS0Z0gSmSpxHvNY0JCcKfNMNV++xq2nQRAi74u0EnODyI665RhuNF M1iuehLHbTVFig== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:30 2025 by rpki-client