This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json) Hash identifier: epHrwzhFwrHlEJe+kzNdKt6q3V3HLKi/Ex5v/NxPZCw= Subject key identifier: 8D:08:43:75:A2:F4:9B:1B:D2:BE:5A:06:2E:D3:7E:03:F5:2D:F3:27 Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019B3D59E64DB048B2B21C19B364BBED3B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft Manifest number: 1048 Signing time: Sat 20 Dec 2025 20:01:00 +0000 Manifest this update: Sat 20 Dec 2025 20:01:00 +0000 Manifest next update: Sun 21 Dec 2025 20:01:00 +0000 Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=) 2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: cTLgFbVCnFVlDewiUUh2uFUMZdoVovkN+hylM+7VNAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e6:4d:b0:48:b2:b2:1c:19:b3:64:bb:ed:3b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Dec 20 20:01:00 2025 GMT Not After : Dec 21 20:01:00 2025 GMT Subject: CN=8d084375a2f49b1bd2be5a062ed37e03f52df327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:93:cb:11:cc:cd:aa:bd:29:12:d7:3e:16: 4e:ec:62:50:d5:03:7a:8b:b1:b1:93:f1:77:96:0b: 9f:23:48:e8:49:97:a5:9c:6b:98:ce:96:a1:98:4b: 3b:d1:71:18:c1:e7:a2:32:f4:2b:8a:38:8a:3e:4d: c1:e7:ba:74:ed:ef:1a:7e:22:4e:e1:90:4f:27:fa: d5:63:c9:65:f6:b1:db:d5:da:95:e8:0d:60:5d:97: ed:08:4c:2d:99:34:d8:54:f1:67:21:18:f8:08:de: bc:ed:62:9a:9a:61:43:84:ec:d2:f3:61:21:a9:ea: bd:7b:87:90:18:25:f5:a3:d2:ca:72:7d:42:bd:c1: 47:aa:d6:aa:12:d2:9b:b2:9f:9f:42:9e:cc:36:89: 86:1a:d1:7e:f5:b0:78:8e:72:ed:27:e7:19:b1:45: 11:e4:42:1f:81:14:51:0f:3b:0f:ed:68:f8:24:2a: 59:5d:e7:37:f7:a1:b5:d9:1e:70:8a:90:1f:c0:44: de:4e:25:51:83:20:d1:bf:af:64:fc:03:49:1f:c9: b6:5b:4e:7c:02:a3:a1:6f:f4:39:33:1b:d7:77:f0: 65:52:71:93:1e:fd:52:f4:7a:89:ef:7e:90:26:14: b7:d5:ed:c7:92:54:3e:71:e7:73:27:0b:99:c1:ce: 37:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:08:43:75:A2:F4:9B:1B:D2:BE:5A:06:2E:D3:7E:03:F5:2D:F3:27 X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ce:28:d5:24:83:d0:ef:24:4d:22:76:77:bb:ef:f3:bb:8c: 88:e2:f7:00:67:9c:a5:dc:75:18:0e:75:59:dd:00:31:a9:c8: 91:37:5e:29:01:f5:55:6f:f0:e8:49:1d:44:19:3a:37:5f:c0: e8:93:8a:b3:52:7e:69:35:fc:a6:a6:ae:2d:43:52:1d:6e:cd: 7a:22:53:ff:35:07:f2:2d:6f:b5:25:0f:91:17:37:f2:1f:07: 31:50:7a:58:5d:50:42:04:09:da:08:2d:a9:07:ab:c1:9b:51: f6:08:e2:c0:1d:d4:c4:8c:88:ea:92:45:53:7f:1c:6c:6a:c1: 28:aa:c1:78:31:90:63:83:b1:e3:48:10:8f:f0:d9:80:04:24: e5:72:36:31:c4:b9:70:8f:98:40:7d:69:5d:a1:76:ed:35:b8: c2:b9:64:c2:6d:30:70:de:fd:fd:e2:f8:a6:d8:5b:ff:43:d4: bf:b6:22:20:f9:08:92:53:2e:62:20:a6:cb:ec:34:f9:d4:df: 1a:46:1e:64:2d:1a:a4:8d:95:88:24:44:3d:a3:6b:16:a0:ca: ca:39:f3:7d:97:78:d6:c4:07:8a:5e:96:62:5b:9e:ac:fa:92: 6f:ff:66:64:a3:1f:80:0f:f9:9d:ab:9c:67:34:a6:41:45:d6: 02:2c:ab:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeZNsEiyshwZs2S77TuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjUxMjIwMjAwMTAwWhcNMjUxMjIxMjAwMTAwWjAzMTEwLwYDVQQD Eyg4ZDA4NDM3NWEyZjQ5YjFiZDJiZTVhMDYyZWQzN2UwM2Y1MmRmMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmCTyxHMzaq9KRLXPhZO7GJQ1QN6 i7Gxk/F3lgufI0joSZelnGuYzpahmEs70XEYweeiMvQrijiKPk3B57p07e8afiJO 4ZBPJ/rVY8ll9rHb1dqV6A1gXZftCEwtmTTYVPFnIRj4CN687WKammFDhOzS82Eh qeq9e4eQGCX1o9LKcn1CvcFHqtaqEtKbsp+fQp7MNomGGtF+9bB4jnLtJ+cZsUUR 5EIfgRRRDzsP7Wj4JCpZXec396G12R5wipAfwETeTiVRgyDRv69k/ANJH8m2W058 AqOhb/Q5MxvXd/BlUnGTHv1S9HqJ736QJhS31e3HklQ+cedzJwuZwc43swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0IQ3Wi9Jsb0r5aBi7TfgP1LfMnMB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV84o1SSD 0O8kTSJ2d7vv87uMiOL3AGecpdx1GA51Wd0AManIkTdeKQH1VW/w6EkdRBk6N1/A 6JOKs1J+aTX8pqauLUNSHW7NeiJT/zUH8i1vtSUPkRc38h8HMVB6WF1QQgQJ2ggt qQerwZtR9gjiwB3UxIyI6pJFU38cbGrBKKrBeDGQY4Ox40gQj/DZgAQk5XI2McS5 cI+YQH1pXaF27TW4wrlkwm0wcN79/eL4pthb/0PUv7YiIPkIklMuYiCmy+w0+dTf GkYeZC0apI2ViCREPaNrFqDKyjnzfZd41sQHil6WYluerPqSb/9mZKMfgA/5nauc ZzSmQUXWAiyrOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:55 2025 by rpki-client