This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft File: jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json) Hash identifier: Orz+ABf0NQrM2xFPn9fG7da5bL4N372v6j4el78rYls= Subject key identifier: 0B:30:27:45:BE:E8:54:56:16:2D:DB:6F:52:84:47:15:18:07:99:8B Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58 Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58 Certificate serial: 019B2B1CDC7C8A3089D8ED1537B8764A4CB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft Manifest number: 1445 Signing time: Wed 17 Dec 2025 07:01:10 +0000 Manifest this update: Wed 17 Dec 2025 07:01:10 +0000 Manifest next update: Thu 18 Dec 2025 07:01:10 +0000 Files and hashes: 1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=) 2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: Oe6ulx6S66IsMGLrlXXCkHT/XBeN5zAX1jJ5CVuR9Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:dc:7c:8a:30:89:d8:ed:15:37:b8:76:4a:4c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58 Validity Not Before: Dec 17 07:01:10 2025 GMT Not After : Dec 18 07:01:10 2025 GMT Subject: CN=0b302745bee85456162ddb6f528447151807998b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ec:0a:96:05:28:b4:8d:35:7a:bf:5b:e0:8c: 61:ea:9b:1c:20:33:9e:32:c9:d0:d8:fc:e2:63:45: 52:00:d3:d6:c4:21:5a:36:91:eb:11:66:1d:58:79: 6c:f7:e2:74:a0:f2:2e:fb:00:aa:0c:fd:58:f8:7e: 3e:a2:1c:b3:d9:cb:f1:64:a3:e4:31:90:e6:d8:99: 8b:15:15:62:a1:5c:1d:24:be:d6:5d:7a:9d:76:be: b3:ad:e6:0e:a0:71:f7:50:20:e2:73:8e:f0:df:3d: 72:94:ae:08:76:95:7e:e2:4e:34:5d:75:02:48:0d: b1:ee:f3:b9:c3:6a:e3:1f:3a:05:22:53:63:3a:29: d6:1e:09:e6:ac:c5:a0:42:ef:9e:74:ef:7e:35:16: c6:62:55:e8:e6:62:a3:fa:53:98:2b:56:ff:4b:bd: 59:cb:0a:54:73:60:97:fb:90:57:bc:be:ca:57:5d: 9d:c5:97:dc:20:1e:f1:e2:cc:41:76:20:1f:96:f9: 65:10:54:24:4a:86:53:18:8e:e7:ea:8e:4c:4f:35: 39:e8:5a:12:79:d8:a5:fc:11:e5:61:78:e4:49:bb: 7b:6b:f1:1e:24:5d:00:ea:48:6b:69:19:47:83:d4: 2c:87:65:9d:16:76:cd:f6:4d:e1:e1:30:90:f9:29: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:30:27:45:BE:E8:54:56:16:2D:DB:6F:52:84:47:15:18:07:99:8B X509v3 Authority Key Identifier: keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7a:4e:6d:b3:2e:44:93:41:24:a6:a5:31:e9:e8:6a:b7:41: 80:63:06:a3:85:fc:34:1f:da:b3:ce:01:c5:ee:2d:d8:43:d0: f7:68:ad:bb:08:33:b9:f2:63:9e:00:d9:9e:08:d2:97:da:04: b7:24:e9:3d:13:c9:78:e5:71:45:72:c3:7d:80:cf:8f:af:77: 08:8c:f2:12:6b:1d:98:5d:65:22:13:c4:35:c7:62:58:fd:7b: 28:a3:d3:c7:61:4e:ea:45:c8:95:90:6b:01:56:1a:3e:85:bc: 89:5b:60:ee:30:99:3d:51:f2:78:a2:60:01:33:ae:06:a5:1f: 10:fd:c4:5d:72:b8:21:12:cc:a2:7d:e3:fd:dc:28:d4:6b:2f: 25:a9:89:9a:7f:f0:7b:cd:27:cd:2b:7d:05:b8:38:3a:23:77: 9c:a5:87:67:3a:ba:33:9d:17:9f:26:10:57:6d:bd:2d:81:08: 1e:d8:07:40:aa:d3:f1:23:cb:20:4a:e8:9f:fa:85:ee:93:92: d3:3b:51:b7:fb:a7:fa:dd:b1:e0:86:66:93:02:b2:51:27:45: 31:06:0d:78:37:5d:ef:bb:48:f4:72:c1:3a:17:3e:24:ab:55: 9b:93:ee:8a:7d:8d:7d:5d:ba:3c:3a:74:dd:1b:a2:1f:d2:16: 30:52:4a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHNx8ijCJ2O0VN7h2SkyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMDg0ZjNhODBiNGExZGY0ODExNjQyYWFiOGQ3OTUxNjM5 YTJlNTgwHhcNMjUxMjE3MDcwMTEwWhcNMjUxMjE4MDcwMTEwWjAzMTEwLwYDVQQD EygwYjMwMjc0NWJlZTg1NDU2MTYyZGRiNmY1Mjg0NDcxNTE4MDc5OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ewKlgUotI01er9b4Ixh6pscIDOe MsnQ2PziY0VSANPWxCFaNpHrEWYdWHls9+J0oPIu+wCqDP1Y+H4+ohyz2cvxZKPk MZDm2JmLFRVioVwdJL7WXXqddr6zreYOoHH3UCDic47w3z1ylK4IdpV+4k40XXUC SA2x7vO5w2rjHzoFIlNjOinWHgnmrMWgQu+edO9+NRbGYlXo5mKj+lOYK1b/S71Z ywpUc2CX+5BXvL7KV12dxZfcIB7x4sxBdiAflvllEFQkSoZTGI7n6o5MTzU56FoS edil/BHlYXjkSbt7a/EeJF0A6khraRlHg9Qsh2WdFnbN9k3h4TCQ+SmsfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAswJ0W+6FRWFi3bb1KERxUYB5mLMB8GA1UdIwQY MBaAFI8ITzqAtKHfSBFkKquNeVFjmi5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2Mt YjBmNmNjZDQ2Mzg3LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2MtYjBmNmNjZDQ2Mzg3 LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXpObbMu RJNBJKalMenoardBgGMGo4X8NB/as84Bxe4t2EPQ92ituwgzufJjngDZngjSl9oE tyTpPRPJeOVxRXLDfYDPj693CIzyEmsdmF1lIhPENcdiWP17KKPTx2FO6kXIlZBr AVYaPoW8iVtg7jCZPVHyeKJgATOuBqUfEP3EXXK4IRLMon3j/dwo1GsvJamJmn/w e80nzSt9Bbg4OiN3nKWHZzq6M50XnyYQV229LYEIHtgHQKrT8SPLIEron/qF7pOS 0ztRt/un+t2x4IZmkwKyUSdFMQYNeDdd77tI9HLBOhc+JKtVm5Puin2NfV26PDp0 3RuiH9IWMFJKeg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:18:22 2025 by rpki-client