This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json) Hash identifier: ANxEMcOzYaUrUhnPjq8HKfUlV0P7vhiw+SIp2xlo2Lg= Subject key identifier: 83:1A:BC:38:79:A1:28:E6:FA:4C:EB:1C:BF:44:7B:A4:F3:DE:A8:C4 Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538 Certificate serial: 019B2B5407B1517F999370C123F72A97E722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:01:25 +0000 Manifest this update: Wed 17 Dec 2025 08:01:25 +0000 Manifest next update: Thu 18 Dec 2025 08:01:25 +0000 Files and hashes: 1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=) 2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=) 3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=) 4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: NqXl7qyl/vjK4pUVfOfudOrF/ImZjtXZscCo/eMW2Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:07:b1:51:7f:99:93:70:c1:23:f7:2a:97:e7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c77013e488a09c709b632246d9405da458c5538 Validity Not Before: Dec 17 08:01:25 2025 GMT Not After : Dec 18 08:01:25 2025 GMT Subject: CN=831abc3879a128e6fa4ceb1cbf447ba4f3dea8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6e:bf:69:a0:a8:56:93:66:4e:00:ff:e6:be: aa:40:7e:b1:a4:aa:91:e7:89:91:b3:fe:a3:dc:f0: d9:11:8c:19:81:69:5e:70:76:79:4f:6a:53:43:b1: 9e:52:86:21:1c:2e:c1:1d:1e:e8:16:41:cb:fd:f6: 7b:60:59:f0:e5:99:d7:dc:b0:b3:7d:d3:cd:9a:a3: 0e:d2:a8:26:3a:3e:02:39:dd:e2:d7:76:4c:fc:f3: 11:f3:4a:91:ec:29:f9:39:6c:00:38:e8:79:92:e9: 6a:d1:8b:17:4e:d6:1b:68:4d:4c:89:e9:52:3b:ee: 33:52:05:af:08:12:8c:e5:64:3b:60:0d:06:ac:a6: 98:23:d6:54:d9:3f:f0:5f:80:6c:93:1c:bf:a5:70: ff:ba:ca:2a:a9:f0:6b:41:97:a8:bc:a0:53:a0:38: 51:a9:20:bc:d0:f9:4d:fd:b9:3e:71:04:0b:5a:bc: d9:9b:66:36:d0:96:b1:59:cd:b2:84:89:32:dd:34: 37:e1:5c:dc:54:49:b2:eb:7e:74:49:c7:e3:83:5e: 7a:06:85:1c:72:40:7b:8e:ad:bc:24:c8:04:1d:27: fc:3c:6d:7b:0e:3d:23:ec:a4:12:dd:86:7b:82:57: e9:47:f0:0c:a6:b4:46:f8:21:b8:96:61:6d:a7:45: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:BC:38:79:A1:28:E6:FA:4C:EB:1C:BF:44:7B:A4:F3:DE:A8:C4 X509v3 Authority Key Identifier: keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b4:21:1f:a8:95:9a:e8:44:d2:aa:a6:79:07:b6:44:1c:8e: 16:bf:f6:c1:55:e7:27:a8:74:75:67:75:0b:35:80:ff:20:3e: ac:8e:ab:bf:32:71:90:51:77:e2:c2:89:ff:45:a4:a3:4e:1d: 10:28:a6:7c:b6:83:dd:1f:ab:ba:1d:09:fa:b7:5a:9c:94:d0: 89:4d:a0:f8:7c:f6:39:09:45:82:e7:59:ef:aa:0c:00:cf:24: 86:11:49:a3:fc:cd:99:d7:e8:a8:2e:c2:a4:2e:09:f6:58:56: ed:b2:2f:4a:19:d6:b3:a0:e6:5c:fa:5f:b8:2d:15:ad:45:7a: c8:1c:9a:a1:13:0e:d2:01:63:14:aa:fe:44:6d:0f:07:b0:2b: e9:6b:f2:01:7a:6f:f3:25:34:a0:ed:b2:35:5c:0e:49:0c:96: bf:1e:e7:ee:bd:0f:45:ea:6a:10:2e:de:5e:a9:6d:ac:a7:79: 26:1c:93:07:fb:c8:a2:78:e5:6b:c1:13:30:bf:43:af:af:0b: 54:7a:c4:7b:4a:32:e3:7b:73:b0:77:f2:47:8f:a6:84:6e:20: cf:f2:56:2a:48:c3:46:c0:28:d5:da:46:07:7f:e0:7f:35:31: d5:bd:c4:f2:03:ce:e4:3a:cd:a9:14:2b:55:98:bd:37:da:2b: 6c:22:19:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVAexUX+Zk3DBI/cql+ciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4 YzU1MzgwHhcNMjUxMjE3MDgwMTI1WhcNMjUxMjE4MDgwMTI1WjAzMTEwLwYDVQQD Eyg4MzFhYmMzODc5YTEyOGU2ZmE0Y2ViMWNiZjQ0N2JhNGYzZGVhOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G6/aaCoVpNmTgD/5r6qQH6xpKqR 54mRs/6j3PDZEYwZgWlecHZ5T2pTQ7GeUoYhHC7BHR7oFkHL/fZ7YFnw5ZnX3LCz fdPNmqMO0qgmOj4COd3i13ZM/PMR80qR7Cn5OWwAOOh5kulq0YsXTtYbaE1MielS O+4zUgWvCBKM5WQ7YA0GrKaYI9ZU2T/wX4Bskxy/pXD/usoqqfBrQZeovKBToDhR qSC80PlN/bk+cQQLWrzZm2Y20JaxWc2yhIky3TQ34VzcVEmy6350Scfjg156BoUc ckB7jq28JMgEHSf8PG17Dj0j7KQS3YZ7glfpR/AMprRG+CG4lmFtp0WNRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMavDh5oSjm+kzrHL9Ee6Tz3qjEMB8GA1UdIwQY MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt MDIxMjk1MzNhMzNkLzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLQhH6iV muhE0qqmeQe2RByOFr/2wVXnJ6h0dWd1CzWA/yA+rI6rvzJxkFF34sKJ/0Wko04d ECimfLaD3R+ruh0J+rdanJTQiU2g+Hz2OQlFgudZ76oMAM8khhFJo/zNmdfoqC7C pC4J9lhW7bIvShnWs6DmXPpfuC0VrUV6yByaoRMO0gFjFKr+RG0PB7Ar6WvyAXpv 8yU0oO2yNVwOSQyWvx7n7r0PRepqEC7eXqltrKd5JhyTB/vIonjla8ETML9Dr68L VHrEe0oy43tzsHfyR4+mhG4gz/JWKkjDRsAo1dpGB3/gfzUx1b3E8gPO5DrNqRQr VZi9N9orbCIZIg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:52:52 2025 by rpki-client