This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json) Hash identifier: Q4BP/7EcbeaoRKo6AVREahDqNHFAeKb+DFhW+CquPko= Subject key identifier: 25:1C:D2:6B:85:A0:8B:2A:91:F5:73:55:2F:09:32:75:4E:CA:5E:CA Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05 Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505 Certificate serial: 019AF12EBFADBD02A57AC6DDAABD733CFCF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft Manifest number: 04E2 Signing time: Sat 06 Dec 2025 01:02:43 +0000 Manifest this update: Sat 06 Dec 2025 01:02:43 +0000 Manifest next update: Sun 07 Dec 2025 01:02:43 +0000 Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: TtF+pGScdLaCXyawGJWXiWVwmSyNtrXgemnqczS09io=) 2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:bf:ad:bd:02:a5:7a:c6:dd:aa:bd:73:3c:fc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505 Validity Not Before: Dec 6 01:02:43 2025 GMT Not After : Dec 7 01:02:43 2025 GMT Subject: CN=251cd26b85a08b2a91f573552f0932754eca5eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:20:b2:aa:06:d9:55:3f:33:3b:ee:f1:f5: 91:8a:4e:bb:1c:57:bb:6d:49:d6:b5:c2:e3:88:1c: ab:b8:a4:a1:b1:f6:2d:a1:2d:56:32:0e:65:c3:10: 31:04:ad:4e:d4:a5:50:62:c5:9c:44:8b:eb:46:77: fa:6a:fe:65:32:07:93:59:47:f8:8a:28:dc:f7:ac: 9c:7a:72:cb:b1:5f:49:36:0f:e4:ac:03:d4:8d:9f: c6:1e:97:c4:f5:af:4d:64:4d:fd:61:bc:82:69:89: 04:71:47:43:cf:d8:01:bc:88:ef:de:de:f7:66:6f: 89:b3:b4:53:a6:de:67:bd:5f:14:74:d0:b2:26:21: c9:7b:23:60:d2:32:39:8f:09:d2:a1:1f:79:10:cb: 84:d9:5f:ac:47:cb:c5:91:c0:25:df:35:71:77:03: 14:41:ba:a7:50:f2:49:f5:0d:cd:8f:88:0f:1a:bb: 39:8a:7c:f6:c8:88:9d:27:6e:6e:44:47:3a:0b:ed: f9:28:e3:3d:ef:38:c3:c4:ca:a5:72:31:a7:f3:4c: 33:04:00:45:f7:d6:24:a9:98:0b:5f:34:f4:11:e5: bf:a9:30:3f:29:12:dd:76:a8:58:95:97:53:7c:51: 9d:80:79:f0:b2:48:23:57:d5:19:3c:4d:f9:1d:2c: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1C:D2:6B:85:A0:8B:2A:91:F5:73:55:2F:09:32:75:4E:CA:5E:CA X509v3 Authority Key Identifier: keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ef:6a:ed:52:99:8e:9f:97:bc:82:03:be:16:7d:7b:4b:11: 4d:62:27:ba:96:09:3b:15:23:8c:ba:81:9d:44:ea:b2:9a:a5: 94:c3:0f:2a:56:ef:85:01:f5:ac:91:46:3a:df:b8:ea:5b:f5: b9:45:79:d2:26:0e:bb:af:ab:97:19:27:15:c6:da:e1:38:0d: 14:cf:c7:9b:43:32:86:45:4d:14:ca:31:52:49:4c:40:32:6f: 2f:c8:e8:a7:30:b0:55:31:34:7b:d1:36:58:e0:b6:7d:1a:ac: 23:f5:19:cd:16:e1:8a:74:4d:76:45:a3:11:b1:f8:79:e5:57: cc:b7:6d:58:db:a6:ab:2c:b9:2d:43:88:fe:9a:fc:f3:3f:56: 2c:70:1e:db:59:fe:6c:9b:a4:5e:e7:86:bd:12:0c:ba:d3:42: 0f:43:d5:84:4a:18:ae:df:f3:43:a9:b5:1f:c6:b4:83:10:f4: 53:1b:2c:44:65:4e:76:0b:68:d5:19:63:7e:5f:4a:74:c9:1c: 68:95:71:f7:00:ac:97:51:89:4f:7f:00:db:91:e1:6a:a9:5e: 18:c1:cd:53:12:14:a2:b0:c3:6a:ab:56:f3:21:ec:c9:5c:f3: 75:6f:c6:05:92:15:1b:cc:5f:19:8e:00:5e:5a:2e:ee:30:b7: cb:c0:95:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLr+tvQKlesbdqr1zPPzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MWM4ZTJiMDBhM2Q1OTU3ZDQxMTJkYWYzNWI2NmU0Mjkz NzU1MDUwHhcNMjUxMjA2MDEwMjQzWhcNMjUxMjA3MDEwMjQzWjAzMTEwLwYDVQQD EygyNTFjZDI2Yjg1YTA4YjJhOTFmNTczNTUyZjA5MzI3NTRlY2E1ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogEgsqoG2VU/Mzvu8fWRik67HFe7 bUnWtcLjiByruKShsfYtoS1WMg5lwxAxBK1O1KVQYsWcRIvrRnf6av5lMgeTWUf4 iijc96ycenLLsV9JNg/krAPUjZ/GHpfE9a9NZE39YbyCaYkEcUdDz9gBvIjv3t73 Zm+Js7RTpt5nvV8UdNCyJiHJeyNg0jI5jwnSoR95EMuE2V+sR8vFkcAl3zVxdwMU QbqnUPJJ9Q3Nj4gPGrs5inz2yIidJ25uREc6C+35KOM97zjDxMqlcjGn80wzBABF 99YkqZgLXzT0EeW/qTA/KRLddqhYlZdTfFGdgHnwskgjV9UZPE35HSwjIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUc0muFoIsqkfVzVS8JMnVOyl7KMB8GA1UdIwQY MBaAFCYcjisAo9WVfUES2vNbZuQpN1UFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAt Mjk4ODM4NTU2ZDA5LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAtMjk4ODM4NTU2ZDA5 LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+9q7VKZ jp+XvIIDvhZ9e0sRTWInupYJOxUjjLqBnUTqspqllMMPKlbvhQH1rJFGOt+46lv1 uUV50iYOu6+rlxknFcba4TgNFM/Hm0MyhkVNFMoxUklMQDJvL8jopzCwVTE0e9E2 WOC2fRqsI/UZzRbhinRNdkWjEbH4eeVXzLdtWNumqyy5LUOI/pr88z9WLHAe21n+ bJukXueGvRIMutNCD0PVhEoYrt/zQ6m1H8a0gxD0UxssRGVOdgto1Rljfl9KdMkc aJVx9wCsl1GJT38A25HhaqleGMHNUxIUorDDaqtW8yHsyVzzdW/GBZIVG8xfGY4A Xlou7jC3y8CVLw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:36 2025 by rpki-client