This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json) Hash identifier: 8yB6WzTaDT+5ijpevM/Hetnh+8d4hqdJxCTqfGsFSnI= Subject key identifier: 93:93:E2:4F:03:85:DD:BB:13:C8:E7:26:0B:89:1E:30:D8:D8:D3:2B Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B3CECB19B5264DA4C9F87B31EA80E942D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 18:01:43 +0000 Manifest this update: Sat 20 Dec 2025 18:01:43 +0000 Manifest next update: Sun 21 Dec 2025 18:01:43 +0000 Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=) 2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=) 3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: UpZwZ1O3lzlgm6i0oUzSt/tbA5lvMKccj2uwsYsIdiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b1:9b:52:64:da:4c:9f:87:b3:1e:a8:0e:94:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Dec 20 18:01:43 2025 GMT Not After : Dec 21 18:01:43 2025 GMT Subject: CN=9393e24f0385ddbb13c8e7260b891e30d8d8d32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:60:06:15:42:5b:3e:27:6b:48:c4:d8:32: f8:6c:8e:ba:30:6e:16:08:af:ed:72:5d:5a:5a:6b: 10:c4:f4:87:8c:b5:89:74:88:1f:82:74:c0:ca:40: 95:a4:2b:fc:cd:7a:e0:fd:6d:59:a7:23:c3:7f:57: 9e:d8:5c:86:41:b9:4c:ae:87:85:19:b4:8a:ea:55: 90:28:2f:98:c8:fa:a8:0d:55:02:22:c9:1d:71:5c: 4d:f3:87:b5:f7:06:f6:33:04:a7:03:bc:b9:4d:bc: 9b:67:67:97:b7:fc:82:4b:19:3e:47:fa:8b:00:e5: cc:25:30:f9:af:e0:ec:2c:0d:45:a8:f8:6a:c0:ba: db:fb:66:e6:bd:63:48:ec:42:cd:1d:35:01:e2:d9: 7d:e8:ee:b8:e2:78:f0:8d:86:43:2c:da:79:14:9d: 77:e1:94:cc:bc:4d:71:eb:91:c1:aa:35:57:22:57: 88:29:2f:eb:97:3c:53:22:72:e1:dd:1e:45:1a:6a: 6f:9c:b9:94:b5:84:ad:d3:92:e9:40:63:4b:13:86: 88:84:3d:ab:6b:1f:85:e0:27:79:5f:49:1f:25:c6: 7b:9a:0d:7c:57:b0:11:a3:69:89:fc:70:80:fc:72: 55:e8:a9:76:7e:8b:f4:a5:0b:fc:3b:71:6d:43:b0: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:93:E2:4F:03:85:DD:BB:13:C8:E7:26:0B:89:1E:30:D8:D8:D3:2B X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e2:da:bf:9d:e8:c9:3e:6b:5f:57:90:f2:bf:be:36:3d:f6: 09:6a:cc:36:84:5f:16:01:82:75:c2:c6:e4:5d:f2:ab:51:85: 39:65:43:2d:86:e1:80:04:eb:b7:76:c0:32:63:7b:52:4e:f3: 1c:bd:de:74:8b:89:af:4b:a1:72:02:da:70:c4:4b:50:05:b7: 84:32:f5:df:ce:9a:fb:07:6c:36:fb:18:7c:a7:a5:c0:05:e8: ee:d7:bf:de:3b:05:ce:f3:98:17:0c:56:46:fa:65:e2:7f:2e: f0:c0:35:ca:09:27:0b:54:32:84:db:a5:d5:43:43:c1:66:07: fd:36:8a:be:fd:0e:44:de:09:ff:84:df:d5:c7:51:46:28:f1: dd:3c:af:52:e5:82:4f:54:b7:5e:c8:b3:a7:b1:38:06:27:40: 7c:c2:dd:3f:cc:66:36:56:b9:da:2f:72:f6:fd:13:dc:94:85: 32:5f:06:01:8d:7b:67:b6:7d:42:d2:a8:24:ed:4b:78:82:09: a9:69:98:11:42:f5:53:84:3c:37:62:4b:23:3c:0c:49:93:d2: cb:dd:6b:8e:d9:e3:f2:6e:34:ca:66:c8:b2:a4:65:6a:a1:89: 87:6a:6c:1a:94:0a:e6:61:1c:8b:30:34:ac:05:7e:01:76:0a: 44:e8:2c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LGbUmTaTJ+Hsx6oDpQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjUxMjIwMTgwMTQzWhcNMjUxMjIxMTgwMTQzWjAzMTEwLwYDVQQD Eyg5MzkzZTI0ZjAzODVkZGJiMTNjOGU3MjYwYjg5MWUzMGQ4ZDhkMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor1gBhVCWz4na0jE2DL4bI66MG4W CK/tcl1aWmsQxPSHjLWJdIgfgnTAykCVpCv8zXrg/W1ZpyPDf1ee2FyGQblMroeF GbSK6lWQKC+YyPqoDVUCIskdcVxN84e19wb2MwSnA7y5TbybZ2eXt/yCSxk+R/qL AOXMJTD5r+DsLA1FqPhqwLrb+2bmvWNI7ELNHTUB4tl96O644njwjYZDLNp5FJ13 4ZTMvE1x65HBqjVXIleIKS/rlzxTInLh3R5FGmpvnLmUtYSt05LpQGNLE4aIhD2r ax+F4Cd5X0kfJcZ7mg18V7ARo2mJ/HCA/HJV6Kl2fov0pQv8O3FtQ7CC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOT4k8Dhd27E8jnJguJHjDY2NMrMB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOLav53o yT5rX1eQ8r++Nj32CWrMNoRfFgGCdcLG5F3yq1GFOWVDLYbhgATrt3bAMmN7Uk7z HL3edIuJr0uhcgLacMRLUAW3hDL1386a+wdsNvsYfKelwAXo7te/3jsFzvOYFwxW Rvpl4n8u8MA1ygknC1QyhNul1UNDwWYH/TaKvv0ORN4J/4Tf1cdRRijx3TyvUuWC T1S3Xsizp7E4BidAfMLdP8xmNla52i9y9v0T3JSFMl8GAY17Z7Z9QtKoJO1LeIIJ qWmYEUL1U4Q8N2JLIzwMSZPSy91rjtnj8m40ymbIsqRlaqGJh2psGpQK5mEcizA0 rAV+AXYKROgsVg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:17 2025 by rpki-client