This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json) Hash identifier: bxwRPx6aLvdPXwrRmKEp4nKwevHap3Yy5fP5BQKqoyg= Subject key identifier: E9:67:83:0E:60:06:15:B0:27:18:93:95:26:AC:DE:7B:DD:8D:64:42 Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Certificate serial: 019B41A433B2736CACC0AA15406B0566A8A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 16:00:38 +0000 Manifest this update: Sun 21 Dec 2025 16:00:38 +0000 Manifest next update: Mon 22 Dec 2025 16:00:38 +0000 Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: uiHX6FNvgotWWjOi8V6HbXi1Leo4AazdKs80UTXN8dk=) 2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:33:b2:73:6c:ac:c0:aa:15:40:6b:05:66:a8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c Validity Not Before: Dec 21 16:00:38 2025 GMT Not After : Dec 22 16:00:38 2025 GMT Subject: CN=e967830e600615b02718939526acde7bdd8d6442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:3a:65:c1:da:64:2e:df:37:7d:d8:8f:45: ff:27:11:89:0b:8c:33:2a:45:a8:cd:02:ab:97:1f: 1a:11:8e:9b:61:c8:d9:98:57:91:60:47:90:96:fd: 99:7e:41:72:d3:a3:9c:32:74:10:89:f7:ed:2f:cb: 3e:12:0a:3b:0f:eb:b6:a4:72:b9:fa:e0:a0:22:f1: f9:1b:b2:1f:6b:1d:49:17:ae:9a:2e:4c:83:6b:bb: 70:d9:ba:f6:38:4c:0c:88:19:32:26:1f:32:01:da: d3:9f:ee:3e:23:1e:b5:b0:f2:4c:ac:a5:bf:b7:fc: de:c2:d7:23:93:d6:be:67:0b:16:4c:58:2e:21:37: 95:e6:e2:93:df:68:3b:f5:c1:07:f0:a8:8f:18:3b: 40:eb:fe:d3:df:9a:24:ac:b5:a6:33:2a:9f:03:de: fa:f2:07:f8:db:58:99:80:a3:33:61:6b:60:d3:83: 9e:2a:cc:43:a3:28:2c:a1:16:f5:19:ff:02:7a:d1: 57:e9:24:d7:7b:43:c9:32:4a:72:9c:80:f8:3e:65: cc:9a:cc:1f:55:49:61:24:68:9f:7b:de:aa:d9:ea: 0b:ff:99:69:49:f1:01:75:0d:16:42:77:d5:97:d9: e1:8c:ee:2e:0c:f7:e5:01:76:10:bd:a8:cd:6b:e7: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:83:0E:60:06:15:B0:27:18:93:95:26:AC:DE:7B:DD:8D:64:42 X509v3 Authority Key Identifier: keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e1:1b:05:87:7d:cb:27:9b:a5:74:53:85:c7:2e:eb:24:8c: 3c:65:38:d7:e7:a1:7b:d1:4b:f1:6f:8c:62:0d:f9:e1:70:53: 23:06:82:60:d3:58:fc:74:69:09:18:da:cb:16:f0:c2:fc:3a: 1c:25:d1:4e:95:9f:7a:78:15:58:df:cd:3c:15:4e:bb:66:e2: d7:4e:0f:32:0c:17:06:93:1d:ef:08:c6:a2:82:7f:71:2f:0e: c7:f4:69:68:b4:ab:f6:11:85:53:b8:f1:be:0d:27:73:d8:84: e2:93:7e:ac:ad:2e:a5:ba:8c:3b:c3:54:31:81:43:ac:2d:39: 5b:bd:ec:1f:ff:f1:8e:57:9c:e4:2d:df:88:3d:cb:14:a2:53: 56:21:a6:30:54:b6:e6:31:a3:00:87:21:e5:dc:f4:02:fb:33: 9e:cc:b8:62:bc:f3:c2:ee:3d:8a:fc:3c:c3:b1:10:e0:26:0a: 38:96:41:e4:4b:2c:62:8a:df:91:8c:08:e4:30:4b:77:b6:8c: b4:f5:e8:35:ab:03:07:da:af:c8:5d:1b:ab:a2:92:82:96:ff: b2:e9:c2:8d:c4:bf:6c:fd:cd:67:11:01:0c:06:43:0c:b6:ff: 63:ee:4b:b7:08:c8:3e:ff:ff:dc:3d:0a:d5:a4:4f:a4:01:6b: 96:75:b4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpDOyc2yswKoVQGsFZqiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0N2JmMGI5ZDcyOThhMTZiOTg2ZmQ2OTU0ZjBhNDQ1ZjJl MjEwM2MwHhcNMjUxMjIxMTYwMDM4WhcNMjUxMjIyMTYwMDM4WjAzMTEwLwYDVQQD EyhlOTY3ODMwZTYwMDYxNWIwMjcxODkzOTUyNmFjZGU3YmRkOGQ2NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjw6ZcHaZC7fN33Yj0X/JxGJC4wz KkWozQKrlx8aEY6bYcjZmFeRYEeQlv2ZfkFy06OcMnQQifftL8s+Ego7D+u2pHK5 +uCgIvH5G7Ifax1JF66aLkyDa7tw2br2OEwMiBkyJh8yAdrTn+4+Ix61sPJMrKW/ t/zewtcjk9a+ZwsWTFguITeV5uKT32g79cEH8KiPGDtA6/7T35okrLWmMyqfA976 8gf421iZgKMzYWtg04OeKsxDoygsoRb1Gf8CetFX6STXe0PJMkpynID4PmXMmswf VUlhJGife96q2eoL/5lpSfEBdQ0WQnfVl9nhjO4uDPflAXYQvajNa+eJqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlngw5gBhWwJxiTlSas3nvdjWRCMB8GA1UdIwQY MBaAFCR78LnXKYoWuYb9aVTwpEXy4hA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMt YmUwMWQ2OWMwMzNiLzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mODM2MjAtOTlhYy00YTQxLWFkMGMtYmUwMWQ2OWMwMzNi LzEvSkh2d3VkY3BpaGE1aHYxcFZQQ2tSZkxpRUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOEbBYd9 yyebpXRThccu6ySMPGU41+ehe9FL8W+MYg354XBTIwaCYNNY/HRpCRjayxbwwvw6 HCXRTpWfengVWN/NPBVOu2bi104PMgwXBpMd7wjGooJ/cS8Ox/RpaLSr9hGFU7jx vg0nc9iE4pN+rK0upbqMO8NUMYFDrC05W73sH//xjlec5C3fiD3LFKJTViGmMFS2 5jGjAIch5dz0Avsznsy4Yrzzwu49ivw8w7EQ4CYKOJZB5EssYorfkYwI5DBLd7aM tPXoNasDB9qvyF0bq6KSgpb/sunCjcS/bP3NZxEBDAZDDLb/Y+5LtwjIPv//3D0K 1aRPpAFrlnW02w== -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:48 2025 by rpki-client