This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json) Hash identifier: LUNf+5IKdkSJt+latekW21ICDSKsgQwUeMDayZvJGqs= Subject key identifier: 47:DC:0C:B3:25:D5:7F:0E:13:6E:D4:57:D3:79:B5:E0:B6:F3:18:4C Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Certificate serial: 019B413698EA3E867EF850145BBAD60E2493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft Manifest number: 0E9A Signing time: Sun 21 Dec 2025 14:00:55 +0000 Manifest this update: Sun 21 Dec 2025 14:00:55 +0000 Manifest next update: Mon 22 Dec 2025 14:00:55 +0000 Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=) 2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=) 3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: PQ0bhTlTLXEz3C+HX5Ze6nsjxyhh0duzwIJLPPTL+hI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:98:ea:3e:86:7e:f8:50:14:5b:ba:d6:0e:24:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Validity Not Before: Dec 21 14:00:55 2025 GMT Not After : Dec 22 14:00:55 2025 GMT Subject: CN=47dc0cb325d57f0e136ed457d379b5e0b6f3184c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:01:b3:42:63:ce:d4:04:3f:5d:e0:b7:08: 3b:4d:24:dc:fd:9c:e3:7d:ce:b3:92:6c:d6:55:84: 9a:cf:ee:9a:0b:ee:03:e6:d4:ae:be:c2:91:c6:3d: 1c:de:ea:8d:e9:df:0f:84:cd:57:5e:b7:11:eb:51: 72:a9:1e:03:fa:52:ea:c9:0e:a7:57:f8:6b:df:ed: c1:90:b0:25:e7:fa:42:66:c3:7c:9d:22:dd:c0:1f: 3a:fd:8f:25:54:73:32:13:31:42:9d:fc:af:e3:cc: dc:52:09:13:7f:d0:20:0d:b9:78:84:f8:09:11:22: 5d:3d:91:0b:45:67:fc:48:6e:92:6d:75:97:36:d2: 01:6f:5d:06:66:18:0b:df:e0:20:5e:d2:28:55:f3: 24:8a:49:05:73:7c:2c:f3:14:c9:20:91:a1:57:15: 51:a5:3a:8a:16:02:07:15:8b:97:16:c9:d5:40:57: 6d:6f:87:54:01:b0:f8:9e:08:78:3d:5a:95:7e:c4: e0:f5:cb:ce:e5:f1:44:38:81:41:f6:0e:44:54:be: ff:dd:55:0c:ae:ad:45:67:88:a8:fb:b5:9c:61:10: 65:ab:2f:9c:fe:66:f9:e5:85:f6:5d:70:04:24:78: 43:36:aa:df:ee:00:9f:5e:18:78:46:90:4c:c4:8e: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:0C:B3:25:D5:7F:0E:13:6E:D4:57:D3:79:B5:E0:B6:F3:18:4C X509v3 Authority Key Identifier: keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4f:fc:8c:95:48:8e:50:d2:c8:c7:b8:b1:71:3e:a4:2c:19: 69:45:82:50:a0:e7:a0:05:aa:de:1a:3e:21:08:77:3d:dc:77: 98:59:2c:bc:59:20:74:e3:91:76:a3:2b:f2:a7:20:43:52:a2: 61:7c:b5:5c:a3:fc:92:5a:08:4a:58:c6:6a:97:2e:6b:b8:58: b4:45:22:e0:8b:1c:bd:33:52:ae:f7:26:67:d3:5c:c7:3a:95: 17:6f:06:5e:9d:d5:0b:19:2e:a3:cd:71:f1:2b:62:00:47:38: 2a:40:97:80:ae:2f:ff:f2:b0:87:0e:ac:ec:ab:63:a1:74:cd: 37:0e:26:d3:3f:59:5f:f6:db:c7:02:9e:e8:98:01:e9:da:cb: b0:65:00:43:63:e9:66:20:f1:7b:5b:0f:19:bc:87:74:e4:8e: a9:43:eb:d0:0d:27:ed:48:a2:1e:c7:37:5d:30:a9:81:a4:36: 13:75:cb:15:d3:55:0f:6c:94:7e:72:9d:c7:3f:6c:a5:fe:f7: f7:76:71:82:bc:44:ce:71:cd:6c:0e:9f:ae:24:19:80:25:37: 3f:c6:4a:8e:7b:6e:e9:5b:04:71:08:b0:f9:ec:2d:49:7d:35: 4a:72:2d:fe:0a:be:2d:88:28:ab:ea:35:7a:71:b1:1d:46:be: 53:d1:2a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpjqPoZ++FAUW7rWDiSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy MzBmMTQwHhcNMjUxMjIxMTQwMDU1WhcNMjUxMjIyMTQwMDU1WjAzMTEwLwYDVQQD Eyg0N2RjMGNiMzI1ZDU3ZjBlMTM2ZWQ0NTdkMzc5YjVlMGI2ZjMxODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9cBs0JjztQEP13gtwg7TSTc/Zzj fc6zkmzWVYSaz+6aC+4D5tSuvsKRxj0c3uqN6d8PhM1XXrcR61FyqR4D+lLqyQ6n V/hr3+3BkLAl5/pCZsN8nSLdwB86/Y8lVHMyEzFCnfyv48zcUgkTf9AgDbl4hPgJ ESJdPZELRWf8SG6SbXWXNtIBb10GZhgL3+AgXtIoVfMkikkFc3ws8xTJIJGhVxVR pTqKFgIHFYuXFsnVQFdtb4dUAbD4ngh4PVqVfsTg9cvO5fFEOIFB9g5EVL7/3VUM rq1FZ4io+7WcYRBlqy+c/mb55YX2XXAEJHhDNqrf7gCfXhh4RpBMxI6LlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfcDLMl1X8OE27UV9N5teC28xhMMB8GA1UdIwQY MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt MGQ4ZmNlM2ViZmJiLzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0/8jJVI jlDSyMe4sXE+pCwZaUWCUKDnoAWq3ho+IQh3Pdx3mFksvFkgdOORdqMr8qcgQ1Ki YXy1XKP8kloISljGapcua7hYtEUi4IscvTNSrvcmZ9NcxzqVF28GXp3VCxkuo81x 8StiAEc4KkCXgK4v//Kwhw6s7KtjoXTNNw4m0z9ZX/bbxwKe6JgB6drLsGUAQ2Pp ZiDxe1sPGbyHdOSOqUPr0A0n7UiiHsc3XTCpgaQ2E3XLFdNVD2yUfnKdxz9spf73 93ZxgrxEznHNbA6friQZgCU3P8ZKjntu6VsEcQiw+ewtSX01SnIt/gq+LYgoq+o1 enGxHUa+U9Eqtg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:33 2025 by rpki-client