This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json) Hash identifier: 9OHBmsG45q7xHsQz40dgVj+4DwfS2vn5OXTTrocW3N0= Subject key identifier: E7:B2:FA:EA:10:AE:B3:A3:CD:44:BA:F1:59:0B:E3:A9:91:AB:37:E9 Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Certificate serial: 019B39EB5BAD1EB511AFCDB3230E9F3C20D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:01:24 +0000 Manifest this update: Sat 20 Dec 2025 04:01:24 +0000 Manifest next update: Sun 21 Dec 2025 04:01:24 +0000 Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: 0/KW1qPj5R3D6jrl9Q4DbKvm03ixY5EeuamXX2LkSVM=) 2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:5b:ad:1e:b5:11:af:cd:b3:23:0e:9f:3c:20:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Validity Not Before: Dec 20 04:01:24 2025 GMT Not After : Dec 21 04:01:24 2025 GMT Subject: CN=e7b2faea10aeb3a3cd44baf1590be3a991ab37e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:c4:ef:58:10:86:dc:97:bf:5a:39:58:3c: f0:2c:c8:21:6a:47:4b:ba:e9:ba:50:00:1c:30:55: c8:5d:25:a2:ea:82:5a:1c:de:50:87:ad:75:63:f4: d7:53:a7:54:35:cc:a8:b9:d6:b6:5f:f7:15:65:a2: f8:49:58:fb:7c:f3:88:e4:b8:3b:1f:53:d6:a0:78: 5c:0c:db:69:6e:9e:dc:6f:4b:00:58:d2:b5:c8:aa: de:b9:52:e4:3d:2a:f8:f2:ff:41:73:59:60:4e:b0: 47:83:7a:3d:8e:a4:cd:b1:5f:bb:ff:37:3e:a3:5f: 7b:2a:e0:6b:9a:a1:4e:d0:d5:c1:34:97:81:e7:a5: c4:b8:30:32:f1:e0:c0:80:9f:c4:c7:fb:43:a8:2f: 4c:a5:f0:94:fd:97:b7:3d:df:87:5c:f5:31:a3:2c: 73:3c:af:fa:8f:ff:e7:24:0c:9b:18:e6:72:75:09: 40:87:bf:c7:08:8a:10:96:fa:23:35:1f:e4:8c:08: ab:e1:9f:e6:14:08:29:b3:2e:72:62:b4:7e:f6:4e: 01:c2:19:e2:24:87:52:87:6b:65:06:d6:fa:22:e5: 60:e8:e3:b9:da:fc:2f:88:11:09:67:ac:42:fa:f6: d2:13:b7:32:6b:e6:fc:98:5b:06:71:26:f2:b0:90: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B2:FA:EA:10:AE:B3:A3:CD:44:BA:F1:59:0B:E3:A9:91:AB:37:E9 X509v3 Authority Key Identifier: keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7d:5b:39:e1:6d:b2:be:49:a8:59:4b:fc:a1:fb:71:1f:07: 9e:93:f1:72:54:d7:5e:4a:62:87:d0:c4:1b:f4:c4:d3:49:03: 69:ab:7f:77:99:ba:c0:e7:86:cb:a5:91:3c:b8:5d:ff:5a:7b: 71:f8:84:3e:4a:01:58:2c:41:64:d4:12:15:3c:65:44:9d:b2: 99:a7:d2:f4:41:6e:41:e1:28:8d:bb:09:a3:5b:de:4d:70:be: f4:e8:7d:30:06:d5:9d:6c:40:09:57:f2:5a:00:ce:ec:71:ed: 6e:22:4a:57:b7:1c:45:62:0c:db:e0:1c:5d:36:9b:b4:17:08: f6:c7:80:ba:68:88:ea:c0:6d:98:50:13:1c:82:5f:11:79:b1: 7c:a5:c3:30:e0:5d:8a:70:d3:db:9b:97:73:f3:5a:ce:b8:a7: 97:cc:4a:3a:26:f6:9f:1a:48:49:35:48:be:52:96:1b:e8:0a: 85:97:4e:a6:75:7b:9c:00:8d:c3:90:85:c7:39:b7:3a:10:03: 9c:6d:ae:9d:e0:2b:aa:3a:4f:51:1b:c9:6d:35:d2:81:a7:b3: 62:31:bd:d4:e5:0d:c6:d7:82:5c:56:6d:c7:db:30:1a:d2:7d: 76:8a:30:8c:71:a8:6f:29:3a:86:0b:e8:07:ce:9f:cf:73:85: 66:e3:d1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs561utHrURr82zIw6fPCDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl MjEwM2MwHhcNMjUxMjIwMDQwMTI0WhcNMjUxMjIxMDQwMTI0WjAzMTEwLwYDVQQD EyhlN2IyZmFlYTEwYWViM2EzY2Q0NGJhZjE1OTBiZTNhOTkxYWIzN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtTE71gQhtyXv1o5WDzwLMghakdL uum6UAAcMFXIXSWi6oJaHN5Qh611Y/TXU6dUNcyouda2X/cVZaL4SVj7fPOI5Lg7 H1PWoHhcDNtpbp7cb0sAWNK1yKreuVLkPSr48v9Bc1lgTrBHg3o9jqTNsV+7/zc+ o197KuBrmqFO0NXBNJeB56XEuDAy8eDAgJ/Ex/tDqC9MpfCU/Ze3Pd+HXPUxoyxz PK/6j//nJAybGOZydQlAh7/HCIoQlvojNR/kjAir4Z/mFAgpsy5yYrR+9k4Bwhni JIdSh2tlBtb6IuVg6OO52vwviBEJZ6xC+vbSE7cya+b8mFsGcSbysJBG7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOey+uoQrrOjzUS68VkL46mRqzfpMB8GA1UdIwQY MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbH1bOeFt sr5JqFlL/KH7cR8HnpPxclTXXkpih9DEG/TE00kDaat/d5m6wOeGy6WRPLhd/1p7 cfiEPkoBWCxBZNQSFTxlRJ2ymafS9EFuQeEojbsJo1veTXC+9Oh9MAbVnWxACVfy WgDO7HHtbiJKV7ccRWIM2+AcXTabtBcI9seAumiI6sBtmFATHIJfEXmxfKXDMOBd inDT25uXc/Nazrinl8xKOib2nxpISTVIvlKWG+gKhZdOpnV7nACNw5CFxzm3OhAD nG2uneArqjpPURvJbTXSgaezYjG91OUNxteCXFZtx9swGtJ9doowjHGobyk6hgvo B86fz3OFZuPRqg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:37:45 2025 by rpki-client