This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json) Hash identifier: BrRTEr4NHDl0bOsCr4c4arRnnF+HvpKiCLxJr3XC9OM= Subject key identifier: E7:3A:93:F6:4A:92:5A:AC:33:93:6A:0B:EE:92:81:1C:18:38:29:0A Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B4882A0726767E76622CD077CB91120DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft Manifest number: 1797 Signing time: Tue 23 Dec 2025 00:01:18 +0000 Manifest this update: Tue 23 Dec 2025 00:01:18 +0000 Manifest next update: Wed 24 Dec 2025 00:01:18 +0000 Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=) 2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=) 3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: QVKxDCk23Iq46maFP+QpW4PNhEbpz2QqoncfnOdBoXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:a0:72:67:67:e7:66:22:cd:07:7c:b9:11:20:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Dec 23 00:01:18 2025 GMT Not After : Dec 24 00:01:18 2025 GMT Subject: CN=e73a93f64a925aac33936a0bee92811c1838290a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:19:2d:15:53:b2:1c:48:fc:8d:ec:64:d2:b9: 98:1f:56:a2:66:34:4d:b9:7c:74:18:bc:4d:bd:1e: 87:a8:07:ae:8f:02:ee:6d:bc:88:bf:99:4d:53:d4: b3:72:82:1d:df:cb:18:4c:bd:0c:a6:6f:64:60:00: a1:aa:1b:b7:f3:43:3b:b6:b4:2c:b5:01:e2:ff:36: 85:d7:a5:a4:0b:53:c3:5a:fe:06:f7:10:31:61:a0: ad:59:01:df:c4:a5:b0:08:7c:7f:78:1f:1f:15:62: 5e:a0:80:cc:59:a3:88:74:b7:7c:cf:ac:ea:46:7e: 8e:22:4a:db:e8:f0:9a:0e:68:b9:33:5e:a9:87:68: 0d:38:2d:4b:02:87:8e:a9:31:24:2d:44:8e:bd:18: a0:e7:9c:ba:0f:0f:bb:59:14:68:52:a9:31:9a:76: 3c:6e:3a:35:6b:b7:28:a3:47:34:34:aa:5b:f5:7d: 8c:4e:c7:a3:bd:f0:bf:8f:b0:e0:af:da:fc:a8:b6: 1b:f2:52:76:d4:47:fc:9f:0d:c6:d8:29:2a:15:0b: 96:9c:68:18:f7:7e:6a:16:25:13:c9:7b:df:de:95: 52:4c:10:29:db:d5:22:86:45:1f:44:99:e2:b7:4b: 81:a8:52:f1:98:f7:ca:80:5e:12:12:53:61:83:f5: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3A:93:F6:4A:92:5A:AC:33:93:6A:0B:EE:92:81:1C:18:38:29:0A X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:85:bb:99:0d:82:8b:3f:73:80:0c:d0:32:98:f8:bd:5f:95: 3b:e2:47:b9:7f:22:90:62:ad:0b:a0:ba:4b:3c:d5:aa:be:9e: 64:42:f7:70:bd:c6:dc:39:c1:5f:68:9e:d5:20:53:f2:9c:f9: 22:65:54:37:f7:08:96:89:e5:5e:2c:d1:12:e2:7b:f3:8f:78: 9a:19:5e:47:a0:d7:3e:7c:ce:d1:4e:46:1b:82:86:91:33:27: 3b:94:de:ca:c3:ef:59:50:e6:e3:77:39:df:4e:32:54:8e:14: 81:1f:7c:1b:f3:ba:d8:88:af:fd:8b:94:84:96:38:83:13:f5: 04:69:18:79:f0:1b:bb:9c:ac:0b:81:ab:b8:ef:ef:3c:ed:97: ae:e5:b7:7d:b8:b9:5d:04:38:96:49:00:70:f3:78:9e:da:01: b2:39:a4:09:7d:9d:48:ef:df:fb:58:40:89:13:71:12:25:6d: 6a:af:3d:16:a2:33:54:d7:67:45:55:d6:dd:03:4a:5d:a8:fa: 76:f8:0b:aa:6f:ae:ca:6b:2f:de:85:66:cb:67:e1:e8:bb:dd: 8e:f1:b2:39:d5:9d:10:b1:be:95:81:8f:f8:4b:61:fd:f6:1a: b3:49:62:a1:b4:22:f9:b7:46:69:4a:e5:cb:07:f6:32:48:24: 2c:25:94:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgqByZ2fnZiLNB3y5ESDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjUxMjIzMDAwMTE4WhcNMjUxMjI0MDAwMTE4WjAzMTEwLwYDVQQD EyhlNzNhOTNmNjRhOTI1YWFjMzM5MzZhMGJlZTkyODExYzE4MzgyOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hktFVOyHEj8jexk0rmYH1aiZjRN uXx0GLxNvR6HqAeujwLubbyIv5lNU9SzcoId38sYTL0Mpm9kYAChqhu380M7trQs tQHi/zaF16WkC1PDWv4G9xAxYaCtWQHfxKWwCHx/eB8fFWJeoIDMWaOIdLd8z6zq Rn6OIkrb6PCaDmi5M16ph2gNOC1LAoeOqTEkLUSOvRig55y6Dw+7WRRoUqkxmnY8 bjo1a7coo0c0NKpb9X2MTsejvfC/j7Dgr9r8qLYb8lJ21Ef8nw3G2CkqFQuWnGgY 935qFiUTyXvf3pVSTBAp29UihkUfRJnit0uBqFLxmPfKgF4SElNhg/VlAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc6k/ZKklqsM5NqC+6SgRwYOCkKMB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4W7mQ2C iz9zgAzQMpj4vV+VO+JHuX8ikGKtC6C6SzzVqr6eZEL3cL3G3DnBX2ie1SBT8pz5 ImVUN/cIlonlXizREuJ78494mhleR6DXPnzO0U5GG4KGkTMnO5TeysPvWVDm43c5 304yVI4UgR98G/O62Iiv/YuUhJY4gxP1BGkYefAbu5ysC4GruO/vPO2XruW3fbi5 XQQ4lkkAcPN4ntoBsjmkCX2dSO/f+1hAiRNxEiVtaq89FqIzVNdnRVXW3QNKXaj6 dvgLqm+uymsv3oVmy2fh6LvdjvGyOdWdELG+lYGP+Eth/fYas0liobQi+bdGaUrl ywf2MkgkLCWU7g== -----END CERTIFICATE-----Generated at Tue Dec 23 03:14:40 2025 by rpki-client