This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft File: jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft (raw, json) Hash identifier: SeBj2vLryCJ+u2EV9blhV+JlYjBUEkyIeqjs9Jo8cQ0= Subject key identifier: 9A:5A:75:F8:7B:C7:38:15:F3:76:78:1D:7B:0B:A6:B8:39:09:89:80 Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7 Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7 Certificate serial: 019B601CB0A9F2E329095C415A3952B4D29C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft Manifest number: 08A9 Signing time: Sat 27 Dec 2025 14:00:51 +0000 Manifest this update: Sat 27 Dec 2025 14:00:51 +0000 Manifest next update: Sun 28 Dec 2025 14:00:51 +0000 Files and hashes: 1: jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl (hash: DQTbgaDNkQ4jRb4emOpsQHrjiHE8U983IKBOVl1Ztmk=) 2: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (hash: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:b0:a9:f2:e3:29:09:5c:41:5a:39:52:b4:d2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7 Validity Not Before: Dec 27 14:00:51 2025 GMT Not After : Dec 28 14:00:51 2025 GMT Subject: CN=9a5a75f87bc73815f376781d7b0ba6b839098980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:c0:e1:6c:b9:df:56:16:29:ff:fe:27:b6: d3:a5:e7:c8:af:b4:b7:73:d7:81:a8:12:8e:93:fb: 36:14:02:87:d1:13:fa:80:30:43:44:c8:4d:60:a7: 66:c2:4b:42:f9:b6:97:42:39:fd:05:2c:11:f6:83: af:46:ab:27:8d:0f:74:23:65:f2:84:93:25:7a:15: ba:f1:66:c7:6c:14:5f:e3:7d:11:fc:38:8e:27:22: db:3e:0a:e1:4c:f8:97:4f:9d:08:cf:fb:b7:ff:bc: 25:30:f0:f9:57:d5:0e:2a:22:51:76:27:b6:e2:ec: 33:07:40:13:35:d2:46:9c:d5:6f:0d:46:6f:c5:ec: 9c:cd:78:2f:e6:da:89:9f:2e:df:b6:27:7e:d9:ba: 81:0c:4c:01:05:5a:25:94:38:1c:4b:bb:db:40:f0: fe:22:f7:e9:0b:3d:c7:a6:15:b1:36:0e:25:19:72: 6c:7f:f6:ec:ba:c8:3a:2a:fd:14:6b:49:0b:1f:28: 8a:fb:a6:7d:f5:d8:30:ed:0d:8d:5a:83:09:3e:5a: cd:a9:67:59:9e:79:18:dd:3d:97:9f:87:ca:d8:8b: 72:c1:67:79:6e:df:45:5a:0b:48:bb:fd:33:48:4d: 5f:49:48:3d:b9:ff:d4:1d:f8:35:a0:46:05:bd:39: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5A:75:F8:7B:C7:38:15:F3:76:78:1D:7B:0B:A6:B8:39:09:89:80 X509v3 Authority Key Identifier: keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:af:b8:61:ac:77:4f:8a:ab:b0:61:08:88:7e:7c:fb:2c: 3f:18:97:ea:b8:4f:f0:e1:a7:96:8b:99:6c:65:1d:ac:c5:f4: ea:c4:7b:92:dd:59:3f:02:3d:8c:de:73:ad:b5:d0:48:a9:e9: fe:c0:28:2f:0f:56:e9:95:84:10:5d:ed:fe:2d:fa:59:ec:57: 35:76:a2:ed:65:79:71:12:d1:cb:7c:ba:51:3c:aa:b3:88:0c: 84:5a:ba:ef:48:92:70:13:bc:58:1c:b6:a6:63:96:13:93:3a: 07:88:45:9a:25:11:54:f7:1c:0d:e9:7d:3a:96:7b:86:ac:e4: 54:6f:7e:1f:5e:5b:7f:32:56:62:ce:9d:6b:5b:a7:b0:4a:00: 7f:2e:e0:cc:36:72:a2:47:39:ce:de:9d:41:99:82:6e:f7:89: 34:18:a1:09:96:95:dc:c5:7c:d7:3e:ae:90:45:fa:27:07:47: 5c:d6:27:b7:25:58:71:eb:a4:68:ce:0e:e7:6a:a3:32:1c:75: 78:91:c5:18:d1:d1:1c:67:1d:d4:a6:d0:67:5e:4e:9b:c8:c6: 8a:ac:7f:7f:17:95:6a:60:73:18:f3:2f:b7:a3:f9:c5:e9:95: b9:80:38:ef:34:5b:65:77:e5:89:4b:f3:b9:62:aa:09:1b:82: b8:23:51:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHLCp8uMpCVxBWjlStNKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMTk1YzE2MzJhYTliMDI0ZTI4YmZmMjJlYzZmMGE3ZTI3 NzYwYTcwHhcNMjUxMjI3MTQwMDUxWhcNMjUxMjI4MTQwMDUxWjAzMTEwLwYDVQQD Eyg5YTVhNzVmODdiYzczODE1ZjM3Njc4MWQ3YjBiYTZiODM5MDk4OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrjA4Wy531YWKf/+J7bTpefIr7S3 c9eBqBKOk/s2FAKH0RP6gDBDRMhNYKdmwktC+baXQjn9BSwR9oOvRqsnjQ90I2Xy hJMlehW68WbHbBRf430R/DiOJyLbPgrhTPiXT50Iz/u3/7wlMPD5V9UOKiJRdie2 4uwzB0ATNdJGnNVvDUZvxeyczXgv5tqJny7ftid+2bqBDEwBBVollDgcS7vbQPD+ IvfpCz3HphWxNg4lGXJsf/bsusg6Kv0Ua0kLHyiK+6Z99dgw7Q2NWoMJPlrNqWdZ nnkY3T2Xn4fK2ItywWd5bt9FWgtIu/0zSE1fSUg9uf/UHfg1oEYFvTm3HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpadfh7xzgV83Z4HXsLprg5CYmAMB8GA1UdIwQY MBaAFI4ZXBYyqpsCTii/8i7G8Kfid2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDdhNjQtMzAxYS00OWU3LWFjNjUt ZWFkODA5MWRiYzEzLzEvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDdhNjQtMzAxYS00OWU3LWFjNjUtZWFkODA5MWRiYzEz LzEvamhsY0ZqS3Ftd0pPS0xfeUxzYndwLUozWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2WvuGGs d0+Kq7BhCIh+fPssPxiX6rhP8OGnlouZbGUdrMX06sR7kt1ZPwI9jN5zrbXQSKnp /sAoLw9W6ZWEEF3t/i36WexXNXai7WV5cRLRy3y6UTyqs4gMhFq670iScBO8WBy2 pmOWE5M6B4hFmiURVPccDel9OpZ7hqzkVG9+H15bfzJWYs6da1unsEoAfy7gzDZy okc5zt6dQZmCbveJNBihCZaV3MV81z6ukEX6JwdHXNYntyVYceukaM4O52qjMhx1 eJHFGNHRHGcd1KbQZ15Om8jGiqx/fxeVamBzGPMvt6P5xemVuYA47zRbZXfliUvz uWKqCRuCuCNRqA== -----END CERTIFICATE-----Generated at Sat Dec 27 20:48:28 2025 by rpki-client