This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json) Hash identifier: mtoM/Dsda+UFolcgGAxxZ/mj3DjQubmEFtX+n205OUM= Subject key identifier: C4:98:D3:E3:17:B7:29:2B:1A:5A:84:27:EB:F1:52:B2:CB:6D:2A:F7 Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538 Certificate serial: 019B409215587954708B14DD2915CB2F789F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 11:01:14 +0000 Manifest this update: Sun 21 Dec 2025 11:01:14 +0000 Manifest next update: Mon 22 Dec 2025 11:01:14 +0000 Files and hashes: 1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=) 2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=) 3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=) 4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: znZmwAslRRqJvlTT0QL1q+AAbDPOFX1uxH+zN1LNC9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:15:58:79:54:70:8b:14:dd:29:15:cb:2f:78:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c77013e488a09c709b632246d9405da458c5538 Validity Not Before: Dec 21 11:01:14 2025 GMT Not After : Dec 22 11:01:14 2025 GMT Subject: CN=c498d3e317b7292b1a5a8427ebf152b2cb6d2af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:4a:59:5b:dd:59:b2:8d:87:8b:b3:43:67: 4c:e6:04:37:6a:ae:9a:0f:71:d1:4d:41:d1:ae:06: 82:e1:70:a6:4f:82:e2:29:e2:0c:6c:a3:38:42:0d: 91:4c:9c:83:cf:63:a2:38:5e:99:c9:86:ab:d4:13: d9:cf:88:a9:f0:2a:2b:e8:b7:98:6d:34:3e:33:ee: 0e:c6:6c:db:df:69:86:d1:0e:78:af:3e:7b:b8:ec: 89:9e:02:e7:b4:3c:b2:9d:8e:19:ea:5c:1a:59:38: 44:f4:76:36:32:0f:fd:4d:5b:34:72:73:9d:56:ec: 32:49:45:96:9f:21:97:64:07:27:0b:b6:21:73:25: 35:b7:18:77:9a:1f:be:93:2a:a7:d3:fc:03:0f:65: 51:c4:07:fb:91:5e:61:48:66:85:cc:bb:78:02:49: f5:cf:0d:d1:1b:b1:57:dd:09:b6:96:26:22:c2:79: e8:a2:4f:bb:9b:db:9f:1d:f2:7f:0c:1f:8f:ba:5b: 06:38:df:92:d0:f2:78:f3:40:21:32:ce:fa:1a:9d: 87:6d:ba:cd:20:72:a9:38:a2:13:58:8c:50:d0:43: 92:89:76:e6:82:f3:dc:e6:c9:88:1f:50:cb:18:33: 0c:00:6c:ca:78:77:f2:66:ee:28:b0:c8:b1:b5:2a: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:98:D3:E3:17:B7:29:2B:1A:5A:84:27:EB:F1:52:B2:CB:6D:2A:F7 X509v3 Authority Key Identifier: keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9c:12:1f:1f:c0:4a:c5:6b:64:44:74:cc:f3:8f:22:60:b3: eb:79:da:64:22:84:e2:54:06:fe:9d:8d:6f:e1:60:bf:91:eb: 3f:43:23:bd:e1:d4:4b:c9:e1:c2:85:95:e6:4f:09:60:28:8f: 2c:6d:ea:bf:a1:3f:da:0c:74:87:67:51:82:65:c0:e5:c0:cf: 68:0c:a5:fa:4b:92:12:0a:d7:b5:ae:df:76:4b:f1:46:05:0a: 36:47:ea:5c:a8:68:44:19:78:e0:7e:83:c7:14:67:ac:05:5c: 6f:3f:af:54:0a:9c:0b:30:ec:e0:25:92:49:78:f1:f9:b4:d3: 80:df:79:3b:8c:67:65:e1:db:7f:2c:25:48:4e:b7:34:c3:a2: fc:a7:4f:62:8d:e3:f3:59:a5:9e:53:73:4e:f4:ee:af:f1:d0: 74:39:e8:8a:b1:2e:b3:00:2a:ab:04:a5:fc:5f:a3:95:79:74: 1c:7e:ff:3d:3f:cb:0a:0d:43:2b:6d:b5:da:cd:82:9d:d6:f9: 75:67:de:7e:91:12:ef:b0:93:67:81:ef:a1:ad:58:b0:dc:11: 23:6c:68:aa:2d:d5:0f:49:98:fe:67:c5:21:70:95:6d:2e:41: 3e:13:e9:4a:e1:ca:28:40:ff:31:a1:01:5c:01:c3:a9:13:9d: cd:72:cc:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkhVYeVRwixTdKRXLL3ifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4 YzU1MzgwHhcNMjUxMjIxMTEwMTE0WhcNMjUxMjIyMTEwMTE0WjAzMTEwLwYDVQQD EyhjNDk4ZDNlMzE3YjcyOTJiMWE1YTg0MjdlYmYxNTJiMmNiNmQyYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4JKWVvdWbKNh4uzQ2dM5gQ3aq6a D3HRTUHRrgaC4XCmT4LiKeIMbKM4Qg2RTJyDz2OiOF6ZyYar1BPZz4ip8Cor6LeY bTQ+M+4Oxmzb32mG0Q54rz57uOyJngLntDyynY4Z6lwaWThE9HY2Mg/9TVs0cnOd VuwySUWWnyGXZAcnC7YhcyU1txh3mh++kyqn0/wDD2VRxAf7kV5hSGaFzLt4Akn1 zw3RG7FX3Qm2liYiwnnook+7m9ufHfJ/DB+PulsGON+S0PJ480AhMs76Gp2HbbrN IHKpOKITWIxQ0EOSiXbmgvPc5smIH1DLGDMMAGzKeHfyZu4osMixtSrZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSY0+MXtykrGlqEJ+vxUrLLbSr3MB8GA1UdIwQY MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt MDIxMjk1MzNhMzNkLzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZwSHx/A SsVrZER0zPOPImCz63naZCKE4lQG/p2Nb+Fgv5HrP0MjveHUS8nhwoWV5k8JYCiP LG3qv6E/2gx0h2dRgmXA5cDPaAyl+kuSEgrXta7fdkvxRgUKNkfqXKhoRBl44H6D xxRnrAVcbz+vVAqcCzDs4CWSSXjx+bTTgN95O4xnZeHbfywlSE63NMOi/KdPYo3j 81mlnlNzTvTur/HQdDnoirEuswAqqwSl/F+jlXl0HH7/PT/LCg1DK2212s2Cndb5 dWfefpES77CTZ4Hvoa1YsNwRI2xoqi3VD0mY/mfFIXCVbS5BPhPpSuHKKED/MaEB XAHDqROdzXLM6g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:59 2025 by rpki-client