This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json) Hash identifier: ZwGJzUjej4nlic5YXkferGrjGQoa3PIIK7+kOUQYMXw= Subject key identifier: 7A:E9:F7:41:17:74:19:CB:15:88:FF:D7:78:D7:1C:F7:DE:3C:8B:DA Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade Certificate serial: 019B435C1762F5CC6AC5B023781EECB35015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft Manifest number: 058A Signing time: Mon 22 Dec 2025 00:01:07 +0000 Manifest this update: Mon 22 Dec 2025 00:01:07 +0000 Manifest next update: Tue 23 Dec 2025 00:01:07 +0000 Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: YxVhUNV7L+sl/oEpVmJHEuCBVTtFHAgxYz+986jNw14=) 2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:17:62:f5:cc:6a:c5:b0:23:78:1e:ec:b3:50:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade Validity Not Before: Dec 22 00:01:07 2025 GMT Not After : Dec 23 00:01:07 2025 GMT Subject: CN=7ae9f741177419cb1588ffd778d71cf7de3c8bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:4a:6c:37:8c:45:08:e4:6e:b2:99:84:04: 36:fb:c0:3f:13:b1:01:22:4f:1f:cc:6b:d5:aa:d6: 20:b7:f9:4c:f9:0d:f3:41:6d:87:1a:46:39:68:73: 3a:7f:b2:85:b0:b0:69:3e:9c:d8:18:cc:a6:bc:de: 0f:0e:91:1e:1e:6c:de:b4:82:1f:d0:ac:7c:b0:69: 6d:f4:4b:7b:2f:e5:31:30:c2:51:bd:a3:79:8a:e6: 71:f2:f1:a6:19:a1:ad:43:dc:46:bd:85:93:13:e3: 57:08:e9:5b:b0:37:66:df:9f:bc:bb:3b:e0:3e:1a: 0f:e1:4a:8a:f6:0e:9e:e0:30:ed:56:ca:7c:82:8d: 56:7d:92:ee:70:a7:3d:6f:bb:1d:bd:41:26:38:3c: 71:77:4a:86:ea:03:c7:f7:34:6d:12:01:1f:46:3c: 64:3a:8e:97:06:c4:2d:ca:67:0f:68:b1:63:cf:7b: 11:d1:20:0a:53:5e:08:02:17:5b:79:8c:14:6e:b8: e6:09:64:87:20:c3:89:e9:c0:ae:8e:6a:ef:31:0b: d2:67:37:9f:c5:89:35:a8:0c:7b:6b:f7:dc:4f:67: 3d:39:0e:bd:c2:69:ad:58:ed:1a:5d:49:ba:79:87: f0:75:bd:cb:e2:d5:57:02:1e:27:52:1b:a9:94:04: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E9:F7:41:17:74:19:CB:15:88:FF:D7:78:D7:1C:F7:DE:3C:8B:DA X509v3 Authority Key Identifier: keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fd:27:df:97:e3:1a:bd:dc:15:15:1b:17:ac:69:d4:4c:ef: c7:70:17:9d:c9:bd:4f:15:f9:84:8a:94:de:cc:a0:6a:20:dc: 30:93:6d:04:52:ef:d7:cb:30:f6:44:e4:7a:44:60:8e:e7:d7: 7f:7c:76:bc:08:26:bb:fe:6b:b6:32:f2:3d:73:01:b4:91:24: 6d:9b:e7:bd:22:b4:01:99:a0:38:eb:ad:ce:41:67:0f:d8:5d: d7:e9:81:10:87:a7:71:21:a0:bc:ac:dd:cb:71:c3:f6:5d:df: 5d:6c:53:34:a7:eb:6b:dd:ed:dc:87:17:71:38:ef:f1:98:0f: 3a:fc:4f:dc:ed:f5:80:de:e8:9a:21:42:2c:69:b4:d3:85:b0: 47:bb:62:7d:50:1a:2d:58:39:6a:09:f7:f1:62:52:67:fd:94: 8f:6f:ca:99:4d:7a:89:5c:85:23:04:f5:05:74:f6:13:fa:fa: 93:00:fa:b3:67:b4:95:38:10:bb:d3:72:3e:fb:d5:ce:17:6e: 0e:87:92:4c:19:52:9d:5e:7c:29:78:19:58:96:e2:2c:b7:71: 47:11:c1:57:5f:51:66:a8:29:a0:c2:17:57:80:66:e9:0a:d6: d1:2d:50:c3:67:7c:70:f3:ed:c5:ea:ff:c0:ae:29:29:1c:c6: 62:de:b9:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXBdi9cxqxbAjeB7ss1AVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZTFjNTExMGUwZTkwMzAyZTQ3MDEyZmY1YzgyMzAzYTQ2 NjFhZGUwHhcNMjUxMjIyMDAwMTA3WhcNMjUxMjIzMDAwMTA3WjAzMTEwLwYDVQQD Eyg3YWU5Zjc0MTE3NzQxOWNiMTU4OGZmZDc3OGQ3MWNmN2RlM2M4YmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl75KbDeMRQjkbrKZhAQ2+8A/E7EB Ik8fzGvVqtYgt/lM+Q3zQW2HGkY5aHM6f7KFsLBpPpzYGMymvN4PDpEeHmzetIIf 0Kx8sGlt9Et7L+UxMMJRvaN5iuZx8vGmGaGtQ9xGvYWTE+NXCOlbsDdm35+8uzvg PhoP4UqK9g6e4DDtVsp8go1WfZLucKc9b7sdvUEmODxxd0qG6gPH9zRtEgEfRjxk Oo6XBsQtymcPaLFjz3sR0SAKU14IAhdbeYwUbrjmCWSHIMOJ6cCujmrvMQvSZzef xYk1qAx7a/fcT2c9OQ69wmmtWO0aXUm6eYfwdb3L4tVXAh4nUhuplAREtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrp90EXdBnLFYj/13jXHPfePIvaMB8GA1UdIwQY MBaAFCThxREODpAwLkcBL/XIIwOkZhreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYt NjdkYTU0MDkxMTZmLzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYtNjdkYTU0MDkxMTZm LzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf0n35fj Gr3cFRUbF6xp1Ezvx3AXncm9TxX5hIqU3sygaiDcMJNtBFLv18sw9kTkekRgjufX f3x2vAgmu/5rtjLyPXMBtJEkbZvnvSK0AZmgOOutzkFnD9hd1+mBEIencSGgvKzd y3HD9l3fXWxTNKfra93t3IcXcTjv8ZgPOvxP3O31gN7omiFCLGm004WwR7tifVAa LVg5agn38WJSZ/2Uj2/KmU16iVyFIwT1BXT2E/r6kwD6s2e0lTgQu9NyPvvVzhdu DoeSTBlSnV58KXgZWJbiLLdxRxHBV19RZqgpoMIXV4Bm6QrW0S1Qw2d8cPPtxer/ wK4pKRzGYt65Kw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:21:45 2025 by rpki-client