This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json) Hash identifier: l5UhxKHlk4xitG6KKq85FtzZs88qJHY3ppWlGZwDVo8= Subject key identifier: 02:9F:E4:3D:29:25:48:B9:0D:8E:4D:B0:4B:87:33:04:97:CB:3C:5C Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019AF5E572665F8A372369D076A8B593B203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft Manifest number: 1023 Signing time: Sat 06 Dec 2025 23:00:46 +0000 Manifest this update: Sat 06 Dec 2025 23:00:46 +0000 Manifest next update: Sun 07 Dec 2025 23:00:46 +0000 Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=) 2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: Eu3aWsDnaKkV3cc0ODkER7A0cqAIoij8fCr/2cmGvDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:72:66:5f:8a:37:23:69:d0:76:a8:b5:93:b2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Dec 6 23:00:46 2025 GMT Not After : Dec 7 23:00:46 2025 GMT Subject: CN=029fe43d292548b90d8e4db04b87330497cb3c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:b2:17:9f:ce:cf:de:91:cd:40:4d:fc:cb: f7:fc:56:bd:76:80:e4:a1:b1:12:a5:a6:4c:64:94: d3:66:e7:1f:82:7a:bf:8a:13:fa:9d:1d:c8:fe:f6: df:0f:cd:49:fd:8a:4c:af:14:bc:01:62:9a:f6:73: 13:20:d0:bb:a4:4a:27:93:98:1f:11:04:ae:ab:c1: d7:5d:45:e8:9c:8f:a8:6e:d4:5f:de:b6:b8:34:04: 20:3e:5f:da:f3:8c:c8:80:24:74:f8:c6:00:f4:df: cf:88:a4:a6:03:11:81:f5:d1:cf:1f:63:ef:d8:fe: fb:51:5f:2b:d0:8f:4d:87:c4:9c:7e:f3:b4:e4:63: 69:51:04:b0:c6:a6:1b:7e:6f:6d:3c:1c:90:0a:2d: 76:09:f3:00:4b:5b:20:ed:83:0a:29:1f:77:9b:98: d1:f4:7f:f9:ff:1e:91:c1:40:94:bb:63:e5:4f:4a: a4:7c:3f:e5:0e:85:9f:eb:79:5f:43:75:b6:f0:35: ac:2c:fa:c9:81:21:c3:34:e6:78:e1:bc:26:65:ae: 56:16:5c:33:46:bd:8e:26:cc:0f:e7:50:da:42:c1: 5b:cb:26:43:79:38:06:c8:e5:97:35:6a:b5:65:d5: fb:f8:40:72:d6:92:87:b6:02:12:9f:9d:7c:73:3c: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9F:E4:3D:29:25:48:B9:0D:8E:4D:B0:4B:87:33:04:97:CB:3C:5C X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0b:ed:35:57:fa:93:2e:c3:a4:89:80:30:9b:a4:1a:d7:86: b4:b2:ee:69:0c:aa:52:3e:18:0f:13:62:e2:15:f4:5b:16:c4: 19:b9:cd:0c:65:10:39:17:ef:c7:08:d2:f3:6d:f0:ef:e2:3c: 3c:15:2a:ac:bc:fa:62:10:96:de:66:e5:a1:8e:1e:f0:2d:fa: d4:e3:a0:65:42:13:67:1f:35:2d:90:6d:b9:87:b0:40:d5:ea: 1f:66:62:a2:44:f6:8e:5a:db:57:af:58:23:77:20:f2:b5:a5: b7:46:5f:41:38:33:9d:71:d9:7f:3f:91:55:d6:b5:ab:2b:78: 90:71:5d:32:4b:8f:52:09:d5:d0:7b:73:8b:67:7d:7d:1c:4b: ac:7e:04:9c:7e:4f:0f:94:83:ab:e5:93:36:8f:36:1e:fc:de: fb:97:a8:24:c1:a8:74:3c:28:fe:8e:61:15:61:69:da:c9:06: 14:8e:1a:2d:d7:2b:c0:db:9b:94:5e:3d:7d:f1:a3:1f:80:bc: b9:df:03:39:66:d5:b0:6a:41:e9:53:36:d7:a7:cd:35:f3:f7: aa:1e:fc:7e:be:9a:86:52:a5:f8:34:90:89:ff:d7:09:9d:5f: 8a:96:36:b4:2d:01:c0:f5:59:4a:d3:74:ac:89:8f:f2:eb:2e: d0:b8:cf:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XJmX4o3I2nQdqi1k7IDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjUxMjA2MjMwMDQ2WhcNMjUxMjA3MjMwMDQ2WjAzMTEwLwYDVQQD EygwMjlmZTQzZDI5MjU0OGI5MGQ4ZTRkYjA0Yjg3MzMwNDk3Y2IzYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYeyF5/Oz96RzUBN/Mv3/Fa9doDk obESpaZMZJTTZucfgnq/ihP6nR3I/vbfD81J/YpMrxS8AWKa9nMTINC7pEonk5gf EQSuq8HXXUXonI+obtRf3ra4NAQgPl/a84zIgCR0+MYA9N/PiKSmAxGB9dHPH2Pv 2P77UV8r0I9Nh8ScfvO05GNpUQSwxqYbfm9tPByQCi12CfMAS1sg7YMKKR93m5jR 9H/5/x6RwUCUu2PlT0qkfD/lDoWf63lfQ3W28DWsLPrJgSHDNOZ44bwmZa5WFlwz Rr2OJswP51DaQsFbyyZDeTgGyOWXNWq1ZdX7+EBy1pKHtgISn518czz2lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKf5D0pJUi5DY5NsEuHMwSXyzxcMB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAvtNVf6 ky7DpImAMJukGteGtLLuaQyqUj4YDxNi4hX0WxbEGbnNDGUQORfvxwjS823w7+I8 PBUqrLz6YhCW3mbloY4e8C361OOgZUITZx81LZBtuYewQNXqH2ZiokT2jlrbV69Y I3cg8rWlt0ZfQTgznXHZfz+RVda1qyt4kHFdMkuPUgnV0Htzi2d9fRxLrH4EnH5P D5SDq+WTNo82Hvze+5eoJMGodDwo/o5hFWFp2skGFI4aLdcrwNublF49ffGjH4C8 ud8DOWbVsGpB6VM216fNNfP3qh78fr6ahlKl+DSQif/XCZ1fipY2tC0BwPVZStN0 rImP8usu0LjPeA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:59 2025 by rpki-client