This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json) Hash identifier: Thl133wAT/VGkBqU7lxx26FzWMhefQblU/9TY+GUg+Y= Subject key identifier: BB:9A:DD:E7:A7:41:48:F9:1F:14:19:85:A5:D4:60:B9:54:E2:2B:F4 Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B3AFE439C0E60E4CA6742453EC9DF97A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 09:01:40 +0000 Manifest this update: Sat 20 Dec 2025 09:01:40 +0000 Manifest next update: Sun 21 Dec 2025 09:01:40 +0000 Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=) 2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=) 3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: gUTBuO00G0/2jGa8VS0CYAXTgtNj7JQD7e/LZO5CO4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:43:9c:0e:60:e4:ca:67:42:45:3e:c9:df:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Dec 20 09:01:40 2025 GMT Not After : Dec 21 09:01:40 2025 GMT Subject: CN=bb9adde7a74148f91f141985a5d460b954e22bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:de:77:d5:ed:9a:fa:08:30:31:d3:ed:8d: 29:13:ab:25:86:c7:5c:de:0d:3a:b6:51:6d:01:94: ab:20:ee:b5:24:58:81:a4:38:14:b4:e2:9e:84:09: 53:c7:9c:a0:50:6a:cd:9e:8c:b0:0d:0f:c6:23:56: 8b:8d:0c:4d:c5:b2:09:d4:66:af:b6:bd:1f:ff:b7: 4b:8e:1b:4b:bd:56:02:a1:5c:86:58:9a:52:a4:1d: 7f:f2:f4:6d:d2:31:b8:b9:e8:6c:f8:ce:3c:85:16: 48:b3:9a:d2:d2:6d:83:9b:61:b9:d9:6d:6f:35:83: e1:2b:60:fd:49:f2:14:54:ae:38:e0:a0:71:1d:20: e2:a6:a3:d5:08:14:b4:13:ee:b0:4b:f5:b2:19:f6: eb:4e:e5:21:45:27:42:1d:ec:b6:d3:f4:f4:86:04: 3e:36:07:ec:ae:50:49:a2:51:a5:20:d1:31:58:c6: 78:89:66:5a:88:4a:ec:1e:b0:5a:44:f7:64:7e:68: bd:bf:c9:b9:40:b6:f5:f2:e1:04:4d:1d:6a:d7:ba: b9:89:71:77:95:05:98:27:7e:69:f4:90:a5:54:f2: ac:32:60:a5:9b:05:53:b4:34:a8:c0:2f:ab:d1:4d: 0a:cd:59:cd:be:bf:7d:84:7a:5e:8f:77:7c:ee:71: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9A:DD:E7:A7:41:48:F9:1F:14:19:85:A5:D4:60:B9:54:E2:2B:F4 X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:d3:1c:96:47:ba:0e:81:f7:09:52:bf:2d:31:cf:ac:b0: 32:3c:a8:9f:86:65:be:70:c7:d0:0d:a2:b4:3c:cc:ed:84:83: db:32:74:c5:43:fb:94:e2:7a:a1:66:41:75:04:f5:db:3f:90: 39:be:d0:66:4c:7d:9c:68:82:7b:4c:d2:92:6d:c2:7b:19:bd: a0:58:33:12:ba:71:49:2d:71:56:fe:87:a8:e6:08:5c:07:eb: 64:55:af:34:9e:1f:b2:ae:d6:e5:49:77:f6:81:1d:91:b5:db: ea:6b:4e:f6:4e:35:5d:e5:92:02:d9:64:38:4c:90:90:6c:58: 4e:77:c3:ce:c3:15:6e:32:8b:eb:53:96:41:e2:10:fb:7c:a1: 18:86:dd:0b:6b:db:c4:58:09:03:e6:43:cc:62:83:2a:b9:4f: a4:e5:9e:6f:f0:4c:6a:54:10:01:f2:ac:52:1e:fe:03:98:f9: e9:86:ff:77:67:f5:64:82:f9:50:0a:42:db:1a:4f:a7:1d:c1: b4:4c:b7:a3:3a:5e:45:31:fb:14:62:c5:46:2f:af:33:d8:7b: 59:f5:9c:2e:4d:ec:de:95:0a:d7:a7:78:8f:10:00:99:dd:ed: 5a:ff:ec:99:e0:51:0f:be:ed:7e:5b:f2:33:ae:38:eb:8d:c8: 06:2a:aa:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kOcDmDkymdCRT7J35ekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjUxMjIwMDkwMTQwWhcNMjUxMjIxMDkwMTQwWjAzMTEwLwYDVQQD EyhiYjlhZGRlN2E3NDE0OGY5MWYxNDE5ODVhNWQ0NjBiOTU0ZTIyYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLed9XtmvoIMDHT7Y0pE6slhsdc 3g06tlFtAZSrIO61JFiBpDgUtOKehAlTx5ygUGrNnoywDQ/GI1aLjQxNxbIJ1Gav tr0f/7dLjhtLvVYCoVyGWJpSpB1/8vRt0jG4uehs+M48hRZIs5rS0m2Dm2G52W1v NYPhK2D9SfIUVK444KBxHSDipqPVCBS0E+6wS/WyGfbrTuUhRSdCHey20/T0hgQ+ NgfsrlBJolGlINExWMZ4iWZaiErsHrBaRPdkfmi9v8m5QLb18uEETR1q17q5iXF3 lQWYJ35p9JClVPKsMmClmwVTtDSowC+r0U0KzVnNvr99hHpej3d87nFe5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLua3eenQUj5HxQZhaXUYLlU4iv0MB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn3THJZH ug6B9wlSvy0xz6ywMjyon4ZlvnDH0A2itDzM7YSD2zJ0xUP7lOJ6oWZBdQT12z+Q Ob7QZkx9nGiCe0zSkm3Cexm9oFgzErpxSS1xVv6HqOYIXAfrZFWvNJ4fsq7W5Ul3 9oEdkbXb6mtO9k41XeWSAtlkOEyQkGxYTnfDzsMVbjKL61OWQeIQ+3yhGIbdC2vb xFgJA+ZDzGKDKrlPpOWeb/BMalQQAfKsUh7+A5j56Yb/d2f1ZIL5UApC2xpPpx3B tEy3ozpeRTH7FGLFRi+vM9h7WfWcLk3s3pUK16d4jxAAmd3tWv/smeBRD77tflvy M644643IBiqqzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:58 2025 by rpki-client