This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json) Hash identifier: bCAXfRzw9ZWEKK1xWd7/JTb2rmNZPrh+tGeHsq8n4oQ= Subject key identifier: 9F:EA:0D:B0:05:3B:79:DD:8F:F1:64:D1:07:52:69:8C:D4:E6:2F:0A Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05 Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505 Certificate serial: 019B4DE103CB79ABCB5591CC285DEBF0E505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft Manifest number: 0512 Signing time: Wed 24 Dec 2025 01:02:30 +0000 Manifest this update: Wed 24 Dec 2025 01:02:30 +0000 Manifest next update: Thu 25 Dec 2025 01:02:30 +0000 Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: GuyS0winNQclOhl3A6dtAkZXr/QzFSpPUbXQ+MdpF74=) 2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:03:cb:79:ab:cb:55:91:cc:28:5d:eb:f0:e5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505 Validity Not Before: Dec 24 01:02:30 2025 GMT Not After : Dec 25 01:02:30 2025 GMT Subject: CN=9fea0db0053b79dd8ff164d10752698cd4e62f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:68:33:03:da:50:79:7f:35:96:e0:16:57: f0:a0:3c:10:e6:0a:bb:6d:5c:2a:31:1b:d7:2a:fd: 07:3d:54:8d:d0:20:19:50:2a:5a:80:84:04:48:19: 62:7f:9b:51:b7:d5:8c:9c:1f:e4:09:5a:04:7d:9f: 3a:41:9b:bc:b0:5f:a1:6c:01:32:fd:29:8f:bc:26: 60:9a:56:47:17:e8:7a:71:02:1b:c2:31:62:ca:9a: 8e:b3:e1:5e:c1:f2:23:15:4f:55:cb:17:68:4c:2a: 5e:87:99:7b:b7:81:ba:84:b6:ea:8b:3f:28:6d:ab: 3c:17:77:45:d2:05:04:f9:13:51:58:da:48:e0:e9: 1d:02:47:9e:14:0b:05:dd:01:72:57:68:86:45:b5: 54:e3:ce:50:3c:69:7f:bb:68:ac:34:de:4e:be:8c: eb:03:e0:63:16:25:6a:84:78:f3:93:23:b3:db:31: 17:4b:72:a6:93:5e:5c:8a:94:77:13:7a:7c:94:fd: e7:fa:05:3c:58:ce:b8:c8:16:ae:dd:39:12:e7:ad: e4:34:a5:85:09:c9:7b:63:f8:55:ed:32:36:d0:08: 1e:92:bb:24:e4:11:ca:81:ac:0b:63:0a:02:77:de: f4:d2:a1:b6:d1:30:86:ad:8f:9e:b3:2a:7c:61:cd: f7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:0D:B0:05:3B:79:DD:8F:F1:64:D1:07:52:69:8C:D4:E6:2F:0A X509v3 Authority Key Identifier: keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ec:d6:0f:08:ca:36:bd:74:c3:e3:18:ee:a4:fd:2c:49:27: 5b:d7:fe:ad:75:ae:ed:5c:92:f7:76:0e:1b:42:a6:3a:43:70: 65:41:03:80:b6:ac:4f:4e:5e:5f:ab:5a:d2:c7:57:ad:ed:1a: 0c:85:02:59:f9:1e:3e:ea:19:c4:72:16:81:9a:fc:3b:8d:f8: d5:88:e7:7e:c4:3a:af:62:af:51:be:d9:2f:eb:97:b7:87:64: de:e7:a0:f8:70:0c:cc:36:83:e6:1d:c3:4c:40:93:cc:84:a7: ab:59:c8:f6:2d:a6:94:ad:aa:98:51:be:6b:c8:b2:72:23:bb: ff:2b:6b:8b:27:38:e8:b7:54:9d:b7:b6:d8:fb:17:67:1b:3e: 5b:ed:7e:74:7c:be:22:56:15:4d:3f:a9:48:47:62:eb:fc:2a: b0:c9:c9:fa:e1:11:2a:62:20:ed:c4:d8:e4:87:e6:ad:a0:64: 04:5c:4e:38:bb:2d:41:73:4b:88:9a:78:21:27:d0:65:26:6c: ae:e0:4d:43:c9:b5:71:d3:56:14:5e:79:1e:b6:49:46:d1:16: 1b:9e:ef:e5:78:d3:66:b4:5e:5a:5f:91:8d:dd:06:30:d0:ad: 96:19:88:c8:f2:c9:7d:a1:9d:2a:5d:d4:6f:a7:d3:d1:69:94: bd:c0:71:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4QPLeavLVZHMKF3r8OUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MWM4ZTJiMDBhM2Q1OTU3ZDQxMTJkYWYzNWI2NmU0Mjkz NzU1MDUwHhcNMjUxMjI0MDEwMjMwWhcNMjUxMjI1MDEwMjMwWjAzMTEwLwYDVQQD Eyg5ZmVhMGRiMDA1M2I3OWRkOGZmMTY0ZDEwNzUyNjk4Y2Q0ZTYyZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4loMwPaUHl/NZbgFlfwoDwQ5gq7 bVwqMRvXKv0HPVSN0CAZUCpagIQESBlif5tRt9WMnB/kCVoEfZ86QZu8sF+hbAEy /SmPvCZgmlZHF+h6cQIbwjFiypqOs+FewfIjFU9VyxdoTCpeh5l7t4G6hLbqiz8o bas8F3dF0gUE+RNRWNpI4OkdAkeeFAsF3QFyV2iGRbVU485QPGl/u2isNN5Ovozr A+BjFiVqhHjzkyOz2zEXS3Kmk15cipR3E3p8lP3n+gU8WM64yBau3TkS563kNKWF Ccl7Y/hV7TI20Agekrsk5BHKgawLYwoCd9700qG20TCGrY+esyp8Yc33EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/qDbAFO3ndj/Fk0QdSaYzU5i8KMB8GA1UdIwQY MBaAFCYcjisAo9WVfUES2vNbZuQpN1UFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAt Mjk4ODM4NTU2ZDA5LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAtMjk4ODM4NTU2ZDA5 LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOzWDwjK Nr10w+MY7qT9LEknW9f+rXWu7VyS93YOG0KmOkNwZUEDgLasT05eX6ta0sdXre0a DIUCWfkePuoZxHIWgZr8O4341YjnfsQ6r2KvUb7ZL+uXt4dk3ueg+HAMzDaD5h3D TECTzISnq1nI9i2mlK2qmFG+a8iyciO7/ytriyc46LdUnbe22PsXZxs+W+1+dHy+ IlYVTT+pSEdi6/wqsMnJ+uERKmIg7cTY5IfmraBkBFxOOLstQXNLiJp4ISfQZSZs ruBNQ8m1cdNWFF55HrZJRtEWG57v5XjTZrReWl+Rjd0GMNCtlhmIyPLJfaGdKl3U b6fT0WmUvcBxpw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:32 2025 by rpki-client