This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json) Hash identifier: BbkwxWvKhgQ/izOmayQnovlTpvOi22TV1hHiRMA4H+A= Subject key identifier: 73:1B:5C:91:0E:2D:80:93:D0:3D:F9:94:09:D6:DD:0D:9C:18:3B:9A Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3 Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3 Certificate serial: 019B3BA23C54C096BA6A6EB4E6115A68D6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft Manifest number: 089E Signing time: Sat 20 Dec 2025 12:00:46 +0000 Manifest this update: Sat 20 Dec 2025 12:00:46 +0000 Manifest next update: Sun 21 Dec 2025 12:00:46 +0000 Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=) 2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: 5D26z0wR9iHHqgmGvEIxbkWqXucz5A+oftPtj57xdVk=) 3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3c:54:c0:96:ba:6a:6e:b4:e6:11:5a:68:d6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3 Validity Not Before: Dec 20 12:00:46 2025 GMT Not After : Dec 21 12:00:46 2025 GMT Subject: CN=731b5c910e2d8093d03df99409d6dd0d9c183b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:72:35:6e:9b:a2:75:4d:f5:c9:42:e5:48: 6d:5e:20:7c:34:22:4f:b1:d3:06:df:f1:8c:6b:27: 6c:95:44:25:76:fa:31:a7:f4:bd:04:68:8d:cf:7b: 2b:62:f4:f2:f0:93:52:d4:86:99:c8:b1:6c:84:60: 99:e8:b9:cc:3b:e0:ee:c6:40:fc:9c:6a:98:0c:1c: 31:1d:e9:6f:8f:60:3a:94:5b:94:d6:fb:e0:b2:7b: c3:be:18:a7:ff:7b:4f:77:3a:9a:3f:29:c5:f9:da: 3a:af:2c:8d:f1:1d:45:c6:ae:25:ea:3b:bc:f4:a6: db:39:ad:01:f0:77:a7:ab:c7:d1:e0:df:74:35:a2: 41:95:e6:e2:7b:d8:db:bf:6b:69:ba:f7:cf:80:3a: 8c:c7:f8:e5:b1:a4:68:b1:33:f7:23:eb:a5:cc:ca: 88:6f:98:da:e4:37:36:a9:30:e5:3b:49:be:8b:f9: fc:f6:9b:9f:c4:bc:f7:cd:ff:e2:80:20:10:16:81: e5:8c:b2:fc:42:53:60:c4:e8:6a:47:43:94:61:7a: 42:4a:7b:10:e5:0f:69:ca:50:e0:39:98:b3:95:e8: 6d:b2:74:60:2f:2b:21:b5:df:c6:d4:97:b8:72:66: 18:87:93:eb:92:46:bd:8d:66:53:e3:d2:e1:98:7e: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1B:5C:91:0E:2D:80:93:D0:3D:F9:94:09:D6:DD:0D:9C:18:3B:9A X509v3 Authority Key Identifier: keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a5:01:7a:ef:80:ca:6b:c4:ce:05:43:4a:28:ab:d8:de:a0: a0:e7:01:7b:86:ea:3f:ae:cc:69:ac:69:82:0c:21:1b:f7:26: a6:4f:4e:35:f3:43:5f:bb:f2:d5:3c:25:37:61:0a:38:5b:f4: ee:cc:da:f0:84:86:1b:80:32:6a:4e:3b:14:23:ec:f4:76:4a: 31:5e:70:75:ad:84:ab:3b:10:bc:8e:19:c2:61:4e:ad:e8:37: 39:54:7a:5a:fa:af:8a:25:4f:2d:c7:73:91:ca:00:f0:23:a2: 10:6d:a9:37:16:b8:bf:a6:9e:03:60:cf:4c:c6:cd:e5:9f:5b: 92:90:f9:71:ea:93:72:5e:96:8c:d3:67:74:22:bb:55:72:b0: 3b:cd:a4:1c:1f:6b:ea:5a:04:47:a7:c6:2d:4e:97:5c:54:a8: bb:da:3f:97:52:e0:18:76:98:fe:4e:c5:e1:5f:e5:ee:28:ac: e2:e9:cb:90:cb:29:c3:d0:d6:72:bf:01:3c:fc:3f:df:5f:e1: 5f:17:0b:2b:ee:73:aa:6e:4f:f1:ca:6e:57:0c:e4:1a:5c:6a: c4:88:45:4d:68:51:ec:b4:29:87:8d:f0:10:28:59:40:2d:79: 10:e3:18:b1:c4:7c:c7:35:f3:5c:a3:b2:70:2a:57:00:73:06: fd:fa:6c:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojxUwJa6am605hFaaNbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm NzViZDMwHhcNMjUxMjIwMTIwMDQ2WhcNMjUxMjIxMTIwMDQ2WjAzMTEwLwYDVQQD Eyg3MzFiNWM5MTBlMmQ4MDkzZDAzZGY5OTQwOWQ2ZGQwZDljMTgzYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDtyNW6bonVN9clC5UhtXiB8NCJP sdMG3/GMaydslUQldvoxp/S9BGiNz3srYvTy8JNS1IaZyLFshGCZ6LnMO+DuxkD8 nGqYDBwxHelvj2A6lFuU1vvgsnvDvhin/3tPdzqaPynF+do6ryyN8R1Fxq4l6ju8 9KbbOa0B8Henq8fR4N90NaJBlebie9jbv2tpuvfPgDqMx/jlsaRosTP3I+ulzMqI b5ja5Dc2qTDlO0m+i/n89pufxLz3zf/igCAQFoHljLL8QlNgxOhqR0OUYXpCSnsQ 5Q9pylDgOZizlehtsnRgLyshtd/G1Je4cmYYh5Prkka9jWZT49LhmH4pSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMbXJEOLYCT0D35lAnW3Q2cGDuaMB8GA1UdIwQY MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt NGNiYzY3MjE5YjRhLzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqUBeu+A ymvEzgVDSiir2N6goOcBe4bqP67MaaxpggwhG/cmpk9ONfNDX7vy1TwlN2EKOFv0 7sza8ISGG4Ayak47FCPs9HZKMV5wda2EqzsQvI4ZwmFOreg3OVR6WvqviiVPLcdz kcoA8COiEG2pNxa4v6aeA2DPTMbN5Z9bkpD5ceqTcl6WjNNndCK7VXKwO82kHB9r 6loER6fGLU6XXFSou9o/l1LgGHaY/k7F4V/l7iis4unLkMspw9DWcr8BPPw/31/h XxcLK+5zqm5P8cpuVwzkGlxqxIhFTWhR7LQph43wEChZQC15EOMYscR8xzXzXKOy cCpXAHMG/fpsRA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:08 2025 by rpki-client