This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json) Hash identifier: d1VWScif1j/rhOK77lfWZ7z3TtD63vjMLjFZgEYOth4= Subject key identifier: 44:5A:0A:AA:5C:58:AB:0A:6E:D5:52:C1:FF:76:17:56:4C:85:4E:9E Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9 Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9 Certificate serial: 019B405B482F2035256E2E42763A6B82ADC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft Manifest number: 06E6 Signing time: Sun 21 Dec 2025 10:01:22 +0000 Manifest this update: Sun 21 Dec 2025 10:01:22 +0000 Manifest next update: Mon 22 Dec 2025 10:01:22 +0000 Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=) 2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: s6dSFpqq/qRqE+qTyBcOJTynU4jBROQVx8uof2V5IoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:48:2f:20:35:25:6e:2e:42:76:3a:6b:82:ad:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9 Validity Not Before: Dec 21 10:01:22 2025 GMT Not After : Dec 22 10:01:22 2025 GMT Subject: CN=445a0aaa5c58ab0a6ed552c1ff7617564c854e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:3c:87:69:1a:4b:87:5f:a8:19:c3:48:5f: 04:92:16:e4:0e:e6:21:4e:5c:4c:4c:87:b7:1b:6c: ba:05:2b:da:e2:8e:a7:93:14:04:df:a4:c6:42:74: 7e:bd:9b:2e:4f:fb:15:6c:98:92:c6:51:fa:04:d4: ec:70:43:ed:3d:bc:d3:bf:5c:9b:c1:1f:50:e4:b0: 1d:2d:c2:33:4d:ca:c2:8b:8a:10:9b:08:da:c9:1a: 35:b1:c6:98:25:a1:c9:76:d2:d9:4d:df:bb:81:62: 1f:cf:1b:26:d3:ff:b5:2f:dd:3e:80:55:51:3a:d6: 3b:5b:96:d4:16:ad:d5:02:15:d7:70:79:44:17:74: 3b:b6:bd:0b:ce:92:4e:4a:0b:05:b0:5a:60:fb:eb: 43:b3:f7:37:63:7f:67:50:97:85:58:88:82:0b:78: a9:c8:e2:42:d3:43:43:28:25:6b:1a:0e:0e:8f:7c: f6:8e:2b:e4:66:90:1d:ad:ac:b4:5c:90:57:f1:02: 60:32:81:66:8e:a4:74:ed:c9:c6:98:46:13:b8:94: 4d:97:49:68:50:51:72:09:c6:f3:46:8c:06:58:57: b2:9f:58:2a:e1:4d:6d:98:1e:b4:bf:01:63:a3:74: 08:b8:04:2d:fd:39:cc:83:99:e0:a5:92:28:76:a4: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5A:0A:AA:5C:58:AB:0A:6E:D5:52:C1:FF:76:17:56:4C:85:4E:9E X509v3 Authority Key Identifier: keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cf:6c:08:3e:9b:b6:31:5b:5c:d2:17:c1:4f:ff:56:8a:7f: 2e:29:9b:42:f4:9f:41:fa:2c:c5:f1:89:48:e0:26:18:50:b9: 7f:b8:b2:67:5f:b2:da:c7:db:2d:ef:14:9e:1f:7d:5b:cb:fd: 45:b5:f8:25:af:2a:75:fc:2e:ab:20:af:1a:f7:53:da:13:2f: d0:a8:fd:d3:63:65:b5:81:62:85:d2:2b:31:d5:61:c6:3f:8d: b9:ab:f6:ca:f8:b5:1c:94:ca:c1:8d:4b:92:cc:21:b4:7d:86: 94:f4:29:ef:f3:2a:21:a6:95:c9:cb:a4:24:45:12:4f:d8:55: 69:68:88:01:56:6d:25:48:b7:50:ef:82:27:4c:ab:77:98:63: 34:15:73:97:6d:fb:46:bc:ec:7c:af:e4:1f:7b:d6:f8:18:64: d1:8a:72:d3:18:70:eb:84:68:19:78:95:55:c2:51:04:52:52: ec:47:9f:a1:ed:b2:66:e4:08:bb:cf:85:01:68:13:79:ef:1f: c0:c7:ea:b4:eb:20:2a:97:34:3d:6d:ed:1f:7b:1d:0c:bb:56: f2:73:da:59:cd:3b:70:6c:81:74:dd:95:d6:0e:6a:4b:65:db: 43:2b:40:47:fc:98:5d:21:71:88:79:75:14:e9:14:32:49:ad: cc:54:17:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0gvIDUlbi5Cdjprgq3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZjg1ZWZmMjQ0OGM3MzY0NmUzNTRhZmVhNjQxYmNmNzll N2M3ZjkwHhcNMjUxMjIxMTAwMTIyWhcNMjUxMjIyMTAwMTIyWjAzMTEwLwYDVQQD Eyg0NDVhMGFhYTVjNThhYjBhNmVkNTUyYzFmZjc2MTc1NjRjODU0ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl888h2kaS4dfqBnDSF8EkhbkDuYh TlxMTIe3G2y6BSva4o6nkxQE36TGQnR+vZsuT/sVbJiSxlH6BNTscEPtPbzTv1yb wR9Q5LAdLcIzTcrCi4oQmwjayRo1scaYJaHJdtLZTd+7gWIfzxsm0/+1L90+gFVR OtY7W5bUFq3VAhXXcHlEF3Q7tr0LzpJOSgsFsFpg++tDs/c3Y39nUJeFWIiCC3ip yOJC00NDKCVrGg4Oj3z2jivkZpAdray0XJBX8QJgMoFmjqR07cnGmEYTuJRNl0lo UFFyCcbzRowGWFeyn1gq4U1tmB60vwFjo3QIuAQt/TnMg5ngpZIodqQf5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERaCqpcWKsKbtVSwf92F1ZMhU6eMB8GA1UdIwQY MBaAFI/4Xv8kSMc2RuNUr+pkG89558f5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZmU1M2QtZWI0ZS00ZTZiLTkwMjIt ZTMyMjA4Nzg3MGQyLzEval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85ZmU1M2QtZWI0ZS00ZTZiLTkwMjItZTMyMjA4Nzg3MGQy LzEval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL89sCD6b tjFbXNIXwU//Vop/LimbQvSfQfosxfGJSOAmGFC5f7iyZ1+y2sfbLe8Unh99W8v9 RbX4Ja8qdfwuqyCvGvdT2hMv0Kj902NltYFihdIrMdVhxj+Nuav2yvi1HJTKwY1L kswhtH2GlPQp7/MqIaaVycukJEUST9hVaWiIAVZtJUi3UO+CJ0yrd5hjNBVzl237 RrzsfK/kH3vW+Bhk0Ypy0xhw64RoGXiVVcJRBFJS7Eefoe2yZuQIu8+FAWgTee8f wMfqtOsgKpc0PW3tH3sdDLtW8nPaWc07cGyBdN2V1g5qS2XbQytAR/yYXSFxiHl1 FOkUMkmtzFQXVw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:10:03 2025 by rpki-client