This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json) Hash identifier: O3luqUseurddB7EeP2H+u4y0bVZVprKXePU5ucQBrBk= Subject key identifier: 52:E7:9D:FE:3F:EE:01:50:06:B7:39:CA:67:88:D8:BF:30:0F:C1:70 Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Certificate serial: 019B4324EE7EFF65FFA03DA50F1246E815C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 23:00:52 +0000 Manifest this update: Sun 21 Dec 2025 23:00:52 +0000 Manifest next update: Mon 22 Dec 2025 23:00:52 +0000 Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: bkD52g+WwoDpjaqujGXFL2vhlT5ZXYHiIhbmjfe7UU4=) 2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ee:7e:ff:65:ff:a0:3d:a5:0f:12:46:e8:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Validity Not Before: Dec 21 23:00:52 2025 GMT Not After : Dec 22 23:00:52 2025 GMT Subject: CN=52e79dfe3fee015006b739ca6788d8bf300fc170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:cb:92:6c:b9:3a:b2:76:2a:9f:d6:68:32: 55:6d:c6:72:5a:ac:6c:e6:e6:20:16:60:78:fa:2e: a3:69:9b:e0:0b:da:f9:d4:35:06:cb:42:cc:22:8e: 79:75:31:49:e2:30:79:d0:ee:fb:39:71:f1:0a:40: 89:83:9c:6c:89:dd:ac:90:37:e6:1f:c1:57:3a:b4: 18:e9:5d:a7:47:a3:9d:17:24:b2:3d:77:c3:10:31: 1a:55:3a:1b:be:4e:ad:87:73:a2:bf:46:34:25:76: 96:ea:69:9f:af:d4:3a:90:1b:f6:be:94:bc:cb:bb: 43:de:13:41:c7:ae:de:64:a1:50:37:97:4f:ad:d3: 4e:77:c9:c9:74:ba:16:e3:31:00:88:22:8d:e5:f4: 3e:d2:76:2f:a1:58:1c:2e:07:f0:ac:5a:df:79:b5: eb:16:0c:ee:dc:b5:dc:cd:2f:60:b5:95:dd:f6:e0: 8a:e5:33:0d:4e:ce:7a:68:5e:94:7e:2e:8e:d2:ce: 5a:21:6c:4b:50:4c:a5:25:62:2f:92:48:82:79:09: 4d:45:ed:1b:bd:c8:01:9e:53:e0:ce:7d:d0:43:ac: de:bf:f8:ec:e5:29:c9:a2:be:3a:c3:78:8d:f9:12: 64:c5:46:1e:ad:af:cb:f4:fe:14:9e:7a:fa:d9:fb: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E7:9D:FE:3F:EE:01:50:06:B7:39:CA:67:88:D8:BF:30:0F:C1:70 X509v3 Authority Key Identifier: keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8d:c3:1a:31:7b:56:65:b1:04:2d:f8:0a:84:6a:8a:0f:bc: e8:14:08:48:94:3c:23:70:f6:eb:4f:34:ab:5e:1b:0e:be:b8: 55:3d:55:ad:fe:32:0c:98:aa:67:2c:dd:97:fb:b1:55:c6:2f: a7:83:39:d1:6a:98:f7:9a:39:ab:c1:80:01:a2:b0:22:f9:5f: 8e:55:a9:18:38:57:4b:a5:2c:be:d0:f5:5a:a9:2a:e2:7c:a8: ba:6d:83:75:8f:a3:52:e3:6e:8d:68:eb:37:e8:74:b5:33:a7: 53:f8:78:d1:9e:1c:09:2b:8e:7d:b3:d4:a8:31:d5:36:6a:bc: 5f:81:aa:e8:74:33:7e:37:cd:e1:e0:84:84:a1:6d:ae:50:92: e2:36:ec:ef:52:b4:2c:64:f1:d3:0f:8a:b9:37:db:3e:3f:4b: e8:e8:94:25:e4:6f:14:4a:b3:74:89:ba:3d:82:9b:2c:67:b1: e4:d1:b2:4c:7c:d3:12:eb:17:51:a9:be:b9:6f:0c:0e:8f:0c: 34:9e:03:f3:62:85:9e:c9:a8:bc:0f:20:fc:b3:6c:61:ba:ef: cc:6c:e8:3e:59:75:45:2a:07:c1:e0:0c:44:8a:37:9e:05:4c: 22:27:d9:92:c6:14:f6:6c:c0:55:0f:d9:17:75:b1:56:4a:a5: 48:82:d0:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJO5+/2X/oD2lDxJG6BXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0 MDFhMzcwHhcNMjUxMjIxMjMwMDUyWhcNMjUxMjIyMjMwMDUyWjAzMTEwLwYDVQQD Eyg1MmU3OWRmZTNmZWUwMTUwMDZiNzM5Y2E2Nzg4ZDhiZjMwMGZjMTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E7Lkmy5OrJ2Kp/WaDJVbcZyWqxs 5uYgFmB4+i6jaZvgC9r51DUGy0LMIo55dTFJ4jB50O77OXHxCkCJg5xsid2skDfm H8FXOrQY6V2nR6OdFySyPXfDEDEaVTobvk6th3Oiv0Y0JXaW6mmfr9Q6kBv2vpS8 y7tD3hNBx67eZKFQN5dPrdNOd8nJdLoW4zEAiCKN5fQ+0nYvoVgcLgfwrFrfebXr Fgzu3LXczS9gtZXd9uCK5TMNTs56aF6Ufi6O0s5aIWxLUEylJWIvkkiCeQlNRe0b vcgBnlPgzn3QQ6zev/js5SnJor46w3iN+RJkxUYera/L9P4Unnr62fv9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLnnf4/7gFQBrc5ymeI2L8wD8FwMB8GA1UdIwQY MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5 LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY3DGjF7 VmWxBC34CoRqig+86BQISJQ8I3D26080q14bDr64VT1Vrf4yDJiqZyzdl/uxVcYv p4M50WqY95o5q8GAAaKwIvlfjlWpGDhXS6UsvtD1Wqkq4nyoum2DdY+jUuNujWjr N+h0tTOnU/h40Z4cCSuOfbPUqDHVNmq8X4Gq6HQzfjfN4eCEhKFtrlCS4jbs71K0 LGTx0w+KuTfbPj9L6OiUJeRvFEqzdIm6PYKbLGex5NGyTHzTEusXUam+uW8MDo8M NJ4D82KFnsmovA8g/LNsYbrvzGzoPll1RSoHweAMRIo3ngVMIifZksYU9mzAVQ/Z F3WxVkqlSILQLg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:28:37 2025 by rpki-client