This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json) Hash identifier: 323oCLb5zZh2xzP+jHeGFUhJyR3vympD14xSqNx8nPY= Subject key identifier: 58:90:26:B4:EA:3E:09:DA:5A:5C:DE:8D:77:1C:DE:F9:7D:9C:17:87 Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Certificate serial: 019B6BB29956108FB2144A4379CAABC95D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 20:00:25 +0000 Manifest this update: Mon 29 Dec 2025 20:00:25 +0000 Manifest next update: Tue 30 Dec 2025 20:00:25 +0000 Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: Aw31K2WD9qQ5uMaxGDrmzMNqZM84KsZrkAQvep25ZEg=) 2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:99:56:10:8f:b2:14:4a:43:79:ca:ab:c9:5d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37 Validity Not Before: Dec 29 20:00:25 2025 GMT Not After : Dec 30 20:00:25 2025 GMT Subject: CN=589026b4ea3e09da5a5cde8d771cdef97d9c1787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:07:c3:8a:7b:09:75:27:fd:cd:ef:03:b9: 36:f4:89:e8:cc:83:f4:c3:57:ca:2a:d3:9a:3f:bf: 84:46:a4:3d:87:59:a3:3c:95:c3:48:bf:3c:6f:7a: 8e:90:34:f3:2b:c5:a5:28:d3:2b:bc:48:1e:13:09: d2:dd:3e:2e:01:0f:c5:08:56:d8:6e:e0:b5:c2:3f: 6c:ac:7f:34:49:f9:28:32:c5:a7:e3:ed:c7:0b:83: 58:c8:3e:b3:0a:25:60:02:ef:8e:b9:74:8e:19:ad: 9e:f5:47:c6:9d:25:b2:30:75:9b:2b:cd:4c:48:f9: ec:f5:11:fd:ad:b1:6d:e9:5c:77:61:ba:cf:f7:e1: b8:86:0e:3e:bb:81:3b:1b:db:c2:1b:08:2e:82:07: 31:c9:3c:63:5c:9b:a7:5c:4c:72:21:9d:da:92:7d: 71:61:c2:21:58:92:7e:e1:69:32:e3:74:93:7b:34: 2e:c6:1a:32:39:05:31:c2:c3:64:d8:29:56:6c:34: 15:13:f1:3b:c3:26:f9:9e:44:17:e3:e2:7a:e3:83: e3:b2:cf:58:10:8c:d4:a6:6e:ab:14:ac:40:02:ee: 05:41:29:29:2e:ae:f8:b7:e9:9f:06:98:0b:f7:96: cf:21:fa:00:a9:c7:b5:48:83:00:7c:90:10:eb:7f: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:90:26:B4:EA:3E:09:DA:5A:5C:DE:8D:77:1C:DE:F9:7D:9C:17:87 X509v3 Authority Key Identifier: keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4b:1e:a0:dc:d8:53:2f:8d:1f:49:7c:a8:c8:13:a3:d8:94: d9:c0:c7:45:87:c3:b6:23:09:71:32:3b:2a:7e:06:d2:63:2d: d7:24:5f:5b:b1:9e:bb:51:72:a7:8c:e1:7e:17:22:ec:b4:a1: 1e:3e:2f:d7:1e:74:61:1c:b5:62:55:aa:7d:08:c3:2b:ce:43: 6d:f3:5b:37:6f:99:bd:5a:8f:c7:a9:2b:e0:8a:4a:aa:b9:2f: d5:d1:d2:71:a6:77:8d:ed:98:da:cc:b1:36:c8:42:9f:47:e2: 0a:ca:21:b1:df:36:95:88:b1:00:11:6b:d0:f3:5d:2f:f2:da: 5b:39:4f:32:78:e8:e6:b6:94:6e:d8:f5:98:30:0d:52:ff:0a: 5d:d3:65:b3:ca:b8:28:24:1f:d3:3e:8b:7e:55:0c:a3:c0:65: de:25:8c:c0:69:af:bf:7d:5b:ac:b3:9a:de:ac:49:e8:18:53: 32:b9:ef:a2:21:2c:b2:44:1a:ee:b3:9a:ed:d4:f7:c5:49:fc: 67:7a:54:f9:6a:4b:ec:39:4d:55:58:a7:2f:e2:99:b9:f8:ab: f7:fe:be:de:0c:bc:6e:f1:f3:d2:68:f8:dc:aa:bf:29:0e:a0: d1:b1:f5:54:a9:4a:fe:f0:c6:a3:15:a1:95:a5:c8:d5:d9:92: 72:53:a9:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsplWEI+yFEpDecqryV1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0 MDFhMzcwHhcNMjUxMjI5MjAwMDI1WhcNMjUxMjMwMjAwMDI1WjAzMTEwLwYDVQQD Eyg1ODkwMjZiNGVhM2UwOWRhNWE1Y2RlOGQ3NzFjZGVmOTdkOWMxNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZkHw4p7CXUn/c3vA7k29InozIP0 w1fKKtOaP7+ERqQ9h1mjPJXDSL88b3qOkDTzK8WlKNMrvEgeEwnS3T4uAQ/FCFbY buC1wj9srH80SfkoMsWn4+3HC4NYyD6zCiVgAu+OuXSOGa2e9UfGnSWyMHWbK81M SPns9RH9rbFt6Vx3YbrP9+G4hg4+u4E7G9vCGwguggcxyTxjXJunXExyIZ3akn1x YcIhWJJ+4Wky43STezQuxhoyOQUxwsNk2ClWbDQVE/E7wyb5nkQX4+J644Pjss9Y EIzUpm6rFKxAAu4FQSkpLq74t+mfBpgL95bPIfoAqce1SIMAfJAQ639KmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiQJrTqPgnaWlzejXcc3vl9nBeHMB8GA1UdIwQY MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5 LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0seoNzY Uy+NH0l8qMgTo9iU2cDHRYfDtiMJcTI7Kn4G0mMt1yRfW7Geu1Fyp4zhfhci7LSh Hj4v1x50YRy1YlWqfQjDK85DbfNbN2+ZvVqPx6kr4IpKqrkv1dHScaZ3je2Y2syx NshCn0fiCsohsd82lYixABFr0PNdL/LaWzlPMnjo5raUbtj1mDANUv8KXdNls8q4 KCQf0z6LflUMo8Bl3iWMwGmvv31brLOa3qxJ6BhTMrnvoiEsskQa7rOa7dT3xUn8 Z3pU+WpL7DlNVVinL+KZufir9/6+3gy8bvHz0mj43Kq/KQ6g0bH1VKlK/vDGoxWh laXI1dmSclOpFQ== -----END CERTIFICATE-----Generated at Tue Dec 30 06:22:30 2025 by rpki-client