This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json) Hash identifier: 3J7UOAK8LFMwqGeQvjsQBll6XX9g3KKy1/M+YAjpYZc= Subject key identifier: 16:5B:89:76:28:79:39:1E:DC:2F:15:74:5F:9A:21:C8:C8:71:08:3E Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B74ED57FBD14AF2F4BEA0C6D4A0CDAC42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft Manifest number: 17AE Signing time: Wed 31 Dec 2025 15:01:09 +0000 Manifest this update: Wed 31 Dec 2025 15:01:09 +0000 Manifest next update: Thu 01 Jan 2026 15:01:09 +0000 Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=) 2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=) 3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: QHTwroGPNzvMpDGLUtReieYXXQKHbYMMTJx5898Fv24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:57:fb:d1:4a:f2:f4:be:a0:c6:d4:a0:cd:ac:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Dec 31 15:01:09 2025 GMT Not After : Jan 1 15:01:09 2026 GMT Subject: CN=165b89762879391edc2f15745f9a21c8c871083e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:71:63:44:5e:43:e3:1a:de:30:16:66:12: d0:fd:a3:77:56:74:db:11:ca:11:79:57:29:03:57: 5b:77:59:1d:b8:55:0a:58:ed:b0:73:22:ba:88:94: 7f:4f:1f:70:e5:96:78:77:a4:39:0d:ea:61:68:26: 52:37:e3:f5:3b:b4:78:35:49:e2:3e:5c:52:fa:65: b0:39:fc:2c:71:55:2a:6c:2e:e6:b3:c3:c0:c8:60: 4a:72:22:7b:7d:fa:88:85:dc:e9:d1:0f:e6:78:f1: 60:7e:a2:56:b5:cf:2f:b3:7f:fd:d4:30:7c:dc:09: 4c:63:ea:29:ea:47:21:16:a4:fc:8b:b4:4e:b2:83: bf:26:25:eb:bf:a8:94:06:52:76:fe:6f:2b:da:65: 96:f9:6a:9f:44:a5:11:99:38:26:db:b2:09:a0:81: aa:18:b0:fe:a2:d6:67:10:f1:c7:7b:a1:91:86:8b: 5b:e9:7d:d9:1d:86:0e:ae:2f:aa:ef:e1:5b:b3:0e: b3:b9:ee:d4:57:95:ed:c2:8b:19:40:b6:0c:98:8c: 2b:f0:d5:8f:77:63:ec:54:bd:34:c4:d2:62:ee:86: bb:68:65:08:07:c7:80:ae:53:cd:98:09:9e:a4:7c: f5:48:01:d1:34:14:9a:63:82:d9:8d:5a:30:ef:57: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5B:89:76:28:79:39:1E:DC:2F:15:74:5F:9A:21:C8:C8:71:08:3E X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:25:08:34:a8:bf:b9:a4:67:fc:46:f4:24:ae:1d:62:54:8c: ac:6d:e6:e7:fe:bb:71:e7:71:a1:f5:07:ef:01:9c:f3:34:f2: b2:53:24:a5:b3:b5:fa:bd:26:0f:25:32:b1:87:dd:7f:38:7c: 12:a7:09:14:ff:bb:a6:db:29:c3:3d:89:35:68:6f:ae:a8:51: a1:67:de:8e:ae:59:c8:f0:34:df:84:41:06:30:e2:a4:86:e1: 20:b5:6c:6b:7e:9e:0e:0e:9d:ff:81:06:fc:fb:fa:69:0b:ab: 46:df:d3:5c:04:b7:e0:c0:02:dc:e1:46:58:94:bc:ac:be:cb: c7:05:4c:11:89:bf:b3:c1:6a:c7:10:07:80:03:9b:95:66:b7: 6e:e9:3d:2a:ca:2a:83:3f:e9:01:05:a7:ec:10:53:82:7d:7e: ef:dc:ae:32:54:57:da:fa:4b:e9:d5:b9:9d:55:a4:a0:e6:aa: 02:93:f6:d8:1d:b1:79:23:b9:68:c6:1d:a4:61:f6:d4:c4:fd: 8e:0d:02:00:2d:cf:07:3c:57:75:44:91:1d:b5:ab:2c:ad:69: 4f:33:61:b1:5a:5d:2e:2f:73:c9:05:4b:bc:89:06:bf:b4:84: 5f:39:75:8d:7c:70:97:ab:42:29:a5:57:ca:25:27:22:95:67: 44:5d:94:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07Vf70Ury9L6gxtSgzaxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjUxMjMxMTUwMTA5WhcNMjYwMTAxMTUwMTA5WjAzMTEwLwYDVQQD EygxNjViODk3NjI4NzkzOTFlZGMyZjE1NzQ1ZjlhMjFjOGM4NzEwODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGRxY0ReQ+Ma3jAWZhLQ/aN3VnTb EcoReVcpA1dbd1kduFUKWO2wcyK6iJR/Tx9w5ZZ4d6Q5DephaCZSN+P1O7R4NUni PlxS+mWwOfwscVUqbC7ms8PAyGBKciJ7ffqIhdzp0Q/mePFgfqJWtc8vs3/91DB8 3AlMY+op6kchFqT8i7ROsoO/JiXrv6iUBlJ2/m8r2mWW+WqfRKURmTgm27IJoIGq GLD+otZnEPHHe6GRhotb6X3ZHYYOri+q7+Fbsw6zue7UV5XtwosZQLYMmIwr8NWP d2PsVL00xNJi7oa7aGUIB8eArlPNmAmepHz1SAHRNBSaY4LZjVow71ed7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZbiXYoeTke3C8VdF+aIcjIcQg+MB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCUINKi/ uaRn/Eb0JK4dYlSMrG3m5/67cedxofUH7wGc8zTyslMkpbO1+r0mDyUysYfdfzh8 EqcJFP+7ptspwz2JNWhvrqhRoWfejq5ZyPA034RBBjDipIbhILVsa36eDg6d/4EG /Pv6aQurRt/TXAS34MAC3OFGWJS8rL7LxwVMEYm/s8FqxxAHgAOblWa3buk9Ksoq gz/pAQWn7BBTgn1+79yuMlRX2vpL6dW5nVWkoOaqApP22B2xeSO5aMYdpGH21MT9 jg0CAC3PBzxXdUSRHbWrLK1pTzNhsVpdLi9zyQVLvIkGv7SEXzl1jXxwl6tCKaVX yiUnIpVnRF2U8Q== -----END CERTIFICATE-----Generated at Wed Dec 31 23:31:27 2025 by rpki-client