This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json) Hash identifier: p24SpPC9fWTtcFaH7CX30SkEK0cBnccZ//TcqUW5zZQ= Subject key identifier: 7C:B4:CE:37:DA:B0:E4:F5:40:57:84:A7:C8:CD:FD:E3:FC:AF:75:31 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B3DFE522F4BC055B2B38F5AF03664CDF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft Manifest number: 1132 Signing time: Sat 20 Dec 2025 23:00:35 +0000 Manifest this update: Sat 20 Dec 2025 23:00:35 +0000 Manifest next update: Sun 21 Dec 2025 23:00:35 +0000 Files and hashes: 1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=) 2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=) 3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=) 4: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=) 5: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=) 6: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=) 7: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=) 8: Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa (hash: a+cNO7NeGK0+Kekgy2ApSwORgdGKnbPR+XAAnpzOBb8=) 9: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=) 10: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=) 11: cqEZPfiDuRq1a3OKI0xyzSj-ORc.roa (hash: HZLlwTwqVGDVRhnQhZwHiZITP6bwZxdPXUhaAFygvWw=) 12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=) 13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=) 14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=) 15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: 9UNFD03qTARp/G2ReywNFCMhRvwiABSqrUgjlanDBKo=) 16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=) 17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=) 18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=) 19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=) 20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=) 21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=) 22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=) 23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=) 24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=) 25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:52:2f:4b:c0:55:b2:b3:8f:5a:f0:36:64:cd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Dec 20 23:00:35 2025 GMT Not After : Dec 21 23:00:35 2025 GMT Subject: CN=7cb4ce37dab0e4f5405784a7c8cdfde3fcaf7531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:71:2f:0a:55:ea:97:b0:3b:48:10:4f:d6: 1a:13:2b:14:5c:5e:b3:1e:82:8e:c6:df:8d:15:54: 23:d2:c0:ad:fe:82:4d:55:4f:72:39:5a:fb:6e:f4: 2f:6e:33:ec:9f:ee:ed:25:57:97:68:40:5a:18:f7: 16:13:bb:8e:6c:75:ff:fd:87:df:09:f7:79:84:3c: 93:b6:21:78:9a:6a:7d:b2:94:b7:9f:8c:6e:06:bc: 27:99:f5:f3:bd:73:ed:fb:d9:08:a6:b4:4e:21:d8: 93:be:b7:c5:20:15:6c:95:17:f9:53:c8:3d:f1:92: 19:29:dd:e9:52:0a:9d:f4:40:cc:98:d0:df:59:0b: 21:75:f9:f6:db:1c:80:75:3e:e2:5d:cb:e6:ae:29: 11:bd:d5:e4:75:7a:6a:41:92:95:cd:92:e4:b9:16: a7:ce:c9:46:b1:a6:35:0b:66:57:82:3d:47:f2:1c: 35:60:c9:49:eb:ae:67:97:bb:0f:8a:f1:85:35:af: b4:21:8a:8f:17:4e:8e:3f:e9:31:04:ad:53:63:2f: 14:91:06:07:52:f4:33:50:e9:74:02:31:52:72:f9: ce:10:5d:23:bc:5d:19:2d:47:9e:7f:24:2c:a3:16: 03:db:e4:46:a6:43:26:4e:9a:d9:2a:62:11:b4:32: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:CE:37:DA:B0:E4:F5:40:57:84:A7:C8:CD:FD:E3:FC:AF:75:31 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d0:fe:85:7f:ed:21:5e:8c:e0:8c:19:28:6a:4b:1e:0b:bb: 68:b3:16:1c:74:00:25:16:92:ec:2b:4d:c3:20:61:3c:b6:cc: df:79:4f:f0:76:ef:fe:61:1c:14:9b:35:b7:48:ae:0f:e2:2c: 9d:b9:70:ec:c9:0d:fa:c2:e7:56:e9:7d:8e:46:12:d5:5c:0e: 2e:25:b1:4a:10:e8:30:43:2a:a1:67:c4:f0:e9:71:9a:ea:c5: f2:e5:2f:30:e9:ea:88:ba:91:b8:45:69:85:0c:92:e5:f9:84: 24:8c:df:3f:3e:63:9c:2c:b7:4f:1e:a4:bb:56:4d:cd:82:23: d3:c2:e2:bc:90:d6:8b:b4:f5:db:5c:ba:a6:60:06:c3:e1:e3: 3c:7f:1e:1c:cf:21:31:10:87:93:6e:06:3e:b3:8d:ac:a4:f7: 2e:66:fe:a3:ed:a1:9a:12:60:4e:25:de:11:ba:ed:f4:8d:00: 13:84:7b:9d:0a:a4:ff:b2:30:33:03:7e:31:23:5a:22:f0:ae: cf:f6:3e:cb:ed:ab:1a:e4:be:ce:0d:3f:5e:e7:a2:75:9a:74: 1c:a8:27:1d:7a:92:3b:9e:6e:59:91:37:39:a8:74:74:05:8e: f1:fb:89:42:9d:28:f8:81:c4:9c:f7:a4:9f:ad:ea:46:9a:3b: bb:12:b2:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lIvS8BVsrOPWvA2ZM3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjUxMjIwMjMwMDM1WhcNMjUxMjIxMjMwMDM1WjAzMTEwLwYDVQQD Eyg3Y2I0Y2UzN2RhYjBlNGY1NDA1Nzg0YTdjOGNkZmRlM2ZjYWY3NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2pxLwpV6pewO0gQT9YaEysUXF6z HoKOxt+NFVQj0sCt/oJNVU9yOVr7bvQvbjPsn+7tJVeXaEBaGPcWE7uObHX//Yff Cfd5hDyTtiF4mmp9spS3n4xuBrwnmfXzvXPt+9kIprROIdiTvrfFIBVslRf5U8g9 8ZIZKd3pUgqd9EDMmNDfWQshdfn22xyAdT7iXcvmrikRvdXkdXpqQZKVzZLkuRan zslGsaY1C2ZXgj1H8hw1YMlJ665nl7sPivGFNa+0IYqPF06OP+kxBK1TYy8UkQYH UvQzUOl0AjFScvnOEF0jvF0ZLUeefyQsoxYD2+RGpkMmTprZKmIRtDKcRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHy0zjfasOT1QFeEp8jN/eP8r3UxMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtD+hX/t IV6M4IwZKGpLHgu7aLMWHHQAJRaS7CtNwyBhPLbM33lP8Hbv/mEcFJs1t0iuD+Is nblw7MkN+sLnVul9jkYS1VwOLiWxShDoMEMqoWfE8OlxmurF8uUvMOnqiLqRuEVp hQyS5fmEJIzfPz5jnCy3Tx6ku1ZNzYIj08LivJDWi7T121y6pmAGw+HjPH8eHM8h MRCHk24GPrONrKT3Lmb+o+2hmhJgTiXeEbrt9I0AE4R7nQqk/7IwMwN+MSNaIvCu z/Y+y+2rGuS+zg0/XueidZp0HKgnHXqSO55uWZE3Oah0dAWO8fuJQp0o+IHEnPek n63qRpo7uxKySw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:43 2025 by rpki-client