This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json) Hash identifier: NOln8TfvCC2PubzzxDMFKC7Ug7WwwkyTILcLp2s2izA= Subject key identifier: BF:7A:79:84:60:60:31:8F:C5:E1:7C:CC:26:1E:8E:BD:D8:7B:ED:DB Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019B601CD7BA486787FF450B20587509D040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft Manifest number: 105A Signing time: Sat 27 Dec 2025 14:01:01 +0000 Manifest this update: Sat 27 Dec 2025 14:01:01 +0000 Manifest next update: Sun 28 Dec 2025 14:01:01 +0000 Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=) 2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: pCaKPb4mYcOX/orlt+YmG6WEJ+nMaejPpu//EV37F6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:d7:ba:48:67:87:ff:45:0b:20:58:75:09:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Dec 27 14:01:01 2025 GMT Not After : Dec 28 14:01:01 2025 GMT Subject: CN=bf7a79846060318fc5e17ccc261e8ebdd87beddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:db:83:3c:b9:5c:e2:35:60:9d:90:5b:ce: bb:18:0f:2d:39:dc:ba:86:19:f1:ff:fa:c0:45:6c: 1f:75:c6:fd:1e:02:27:cf:ad:ff:03:76:bc:5a:a3: fc:e4:c3:7f:4c:ef:ce:4e:2e:c7:5e:c4:74:76:7c: 98:e4:65:cf:5c:1f:72:68:b3:5c:84:fa:f1:ed:c7: ea:dc:b2:a9:b1:9b:08:75:f1:06:30:35:7a:03:55: e9:04:89:45:9e:d6:0d:3d:6a:55:03:a4:32:8a:72: 63:4b:fe:e1:ba:cd:8c:41:53:c7:34:bd:39:c8:6c: 8f:0e:ec:f0:a0:b2:a8:5e:5d:b8:56:eb:82:5f:dc: 46:a2:41:a6:87:ff:9b:bb:44:12:81:38:96:ba:e2: ad:77:8a:13:3d:09:b4:db:6c:de:bd:75:36:22:38: ae:e4:93:2f:2e:36:9e:46:e5:10:ba:2a:4e:29:f0: 07:9c:64:de:20:3a:63:34:ca:07:44:6a:72:aa:f9: e7:e5:bc:68:72:2b:4f:8c:2b:d3:9d:db:d1:a0:64: 85:46:7e:1c:37:db:c1:e1:c6:ec:91:43:58:76:2d: 4d:1f:8a:b1:a8:fd:f4:2b:9c:74:ab:97:ae:e2:7b: 90:23:3f:f0:6b:d2:65:d1:76:f5:b3:3d:71:48:e1: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7A:79:84:60:60:31:8F:C5:E1:7C:CC:26:1E:8E:BD:D8:7B:ED:DB X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:ca:cb:dc:de:05:d9:3f:f4:c4:b8:c1:34:fe:ba:81:53: 04:bd:2a:7e:14:48:1d:e0:4c:65:78:54:e2:a5:2e:9e:9e:07: 4b:f9:97:c8:2e:b0:ed:d4:83:52:67:33:16:68:e7:97:bc:59: 46:ba:4e:cd:fa:a1:0e:d1:b9:ba:ac:96:b3:c0:76:e2:b3:5c: c4:6c:73:33:d3:04:d2:8f:42:cd:09:43:4d:44:19:b3:aa:5a: 72:f9:f4:69:c0:68:ec:7e:91:36:3b:bc:de:ca:bb:30:08:de: b6:c9:7e:d1:92:fa:10:ad:f0:e7:3f:8a:3a:cc:a0:62:bd:98: cf:50:67:ef:a6:7c:b1:a4:8d:97:91:10:e6:95:7e:22:8f:79: 79:ca:32:43:d8:a9:7c:7b:3e:c9:5c:71:56:03:8a:e9:0f:24: 4c:d5:f7:d3:75:1e:75:ec:b0:76:9f:4f:25:ef:c8:d3:e6:b6: 1a:15:5d:85:31:2d:8d:1b:21:f2:4b:9c:d5:63:e3:15:f6:56: 7c:be:cc:91:15:61:4f:fb:2d:e0:30:f3:d7:9f:15:93:7b:d7: 2c:4a:a0:0a:5b:4e:68:80:6b:ed:d3:19:a7:0b:ab:e3:e5:49: 47:8b:7f:58:14:28:69:0c:90:1a:19:51:98:9c:1c:31:b2:8f: 46:fb:61:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHNe6SGeH/0ULIFh1CdBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjUxMjI3MTQwMTAxWhcNMjUxMjI4MTQwMTAxWjAzMTEwLwYDVQQD EyhiZjdhNzk4NDYwNjAzMThmYzVlMTdjY2MyNjFlOGViZGQ4N2JlZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthfbgzy5XOI1YJ2QW867GA8tOdy6 hhnx//rARWwfdcb9HgInz63/A3a8WqP85MN/TO/OTi7HXsR0dnyY5GXPXB9yaLNc hPrx7cfq3LKpsZsIdfEGMDV6A1XpBIlFntYNPWpVA6QyinJjS/7hus2MQVPHNL05 yGyPDuzwoLKoXl24VuuCX9xGokGmh/+bu0QSgTiWuuKtd4oTPQm022zevXU2Ijiu 5JMvLjaeRuUQuipOKfAHnGTeIDpjNMoHRGpyqvnn5bxocitPjCvTndvRoGSFRn4c N9vB4cbskUNYdi1NH4qxqP30K5x0q5eu4nuQIz/wa9Jl0Xb1sz1xSOG2WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL96eYRgYDGPxeF8zCYejr3Ye+3bMB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBjKy9ze Bdk/9MS4wTT+uoFTBL0qfhRIHeBMZXhU4qUunp4HS/mXyC6w7dSDUmczFmjnl7xZ RrpOzfqhDtG5uqyWs8B24rNcxGxzM9ME0o9CzQlDTUQZs6pacvn0acBo7H6RNju8 3sq7MAjetsl+0ZL6EK3w5z+KOsygYr2Yz1Bn76Z8saSNl5EQ5pV+Io95ecoyQ9ip fHs+yVxxVgOK6Q8kTNX303Uedeywdp9PJe/I0+a2GhVdhTEtjRsh8kuc1WPjFfZW fL7MkRVhT/st4DDz158Vk3vXLEqgCltOaIBr7dMZpwur4+VJR4t/WBQoaQyQGhlR mJwcMbKPRvth+A== -----END CERTIFICATE-----Generated at Sat Dec 27 16:10:24 2025 by rpki-client