This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft File: JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json) Hash identifier: e/VoPgjICx/0TxAwz+Vve3tcH29KF2FiFZ/MC+L4p9M= Subject key identifier: A5:C5:F8:F4:7E:7C:4C:AA:B4:5D:E2:84:06:21:BB:3C:41:ED:8D:22 Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35 Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635 Certificate serial: 019AF352C35214235EC161687A21AE560819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft Manifest number: 0D50 Signing time: Sat 06 Dec 2025 11:01:18 +0000 Manifest this update: Sat 06 Dec 2025 11:01:18 +0000 Manifest next update: Sun 07 Dec 2025 11:01:18 +0000 Files and hashes: 1: C03oYsQeKmNqstjprcrpWU_C_FA.roa (hash: XjHgFgaeV7edOP+rVRUhxH/PoL1vk7vdaF1YjoWE+DE=) 2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: e4Zd/uikjofL+zvJwA5KDRtQYujL6fQFFZxgy1OeOXg=) 3: _5zMdOWOnuF29ViyjTYdqmiabT0.roa (hash: bOHD6ebnTlGjO2kqvQSoKN6+pQ2e9dKaoGGov9ljW5w=) 4: iz1oLphOz4C0RKqGaCjwgWp4k-4.roa (hash: Spyiz27gUIj8vniKoNjV++85gF3fncVYgrGF+1dIJog=) 5: j4xQMv8fOD6vNafgvqaj-sinhSA.roa (hash: g/n7i1hhBBo3Q/tKawsn3d1mvtP+3frbkbuj6wZhZkE=) 6: uXwQWRGTbp4iQG2hqxNhBERgVfM.roa (hash: ZMVua8ZiPI5nY6upqsZo7sTjSdm1cARPTecfc5Wvr3E=) 7: zhL3mw3tfGz22FNWwzYf3uLwlM0.roa (hash: zAOff2Kw1dbM05MiGj7aU4wK2pL5mdV5s1R3xN1PATI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c3:52:14:23:5e:c1:61:68:7a:21:ae:56:08:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635 Validity Not Before: Dec 6 11:01:18 2025 GMT Not After : Dec 7 11:01:18 2025 GMT Subject: CN=a5c5f8f47e7c4caab45de2840621bb3c41ed8d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:3d:4c:89:5c:a6:2b:b5:89:82:0a:e5:94: 55:7b:b4:12:89:a8:fe:58:f4:13:cb:87:b8:9e:d3: 15:7b:05:0d:1f:58:22:92:0a:36:80:ae:aa:9c:b8: 47:b6:27:93:40:38:a7:62:29:23:34:91:40:e7:4b: fe:cf:08:0c:f6:74:c2:c6:05:63:ef:79:20:81:ad: 91:2d:f3:95:6b:be:10:48:7e:88:f0:9a:d1:14:ba: 71:0a:d0:d7:60:ce:cc:c7:cd:3d:40:1f:da:32:d3: 6f:88:f7:3b:bb:74:ad:f7:57:d7:7d:a1:d9:83:ce: b1:ae:bb:49:ca:2c:55:c7:22:f7:e9:7d:09:c5:1c: 37:ca:52:c0:e9:17:c5:66:47:5f:2e:24:2b:68:29: 23:45:95:d2:a9:91:ea:0f:25:a0:c5:c0:e4:60:7e: a5:0f:26:55:a7:3f:e8:a8:89:90:90:53:7d:a1:8d: 5c:39:f2:e5:39:84:79:df:bd:44:00:3c:60:a3:16: 5b:78:c6:c0:79:55:0d:4e:f8:e6:45:18:44:e2:12: cc:66:a2:b5:eb:12:3b:a9:bd:4f:9c:f1:f6:b8:fe: 27:e4:fd:e2:aa:f7:bc:48:19:7d:80:ed:11:58:6f: dd:84:2f:34:cd:fe:b9:52:cb:a3:e7:9a:9c:61:4b: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C5:F8:F4:7E:7C:4C:AA:B4:5D:E2:84:06:21:BB:3C:41:ED:8D:22 X509v3 Authority Key Identifier: keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ba:4f:b4:d9:7e:d9:c6:6c:76:50:0b:8f:01:9f:60:06:fa: 7b:60:8f:09:5b:3d:02:8f:78:db:67:6d:26:9c:a4:fb:10:ac: 6f:f1:03:48:55:70:a6:d5:ab:02:71:0b:ad:15:ee:79:1e:60: 10:09:49:a8:d2:89:dd:5f:1f:79:9b:be:fc:89:d4:d5:e6:15: 99:c9:1f:5c:2c:98:f0:cf:21:d0:64:82:e0:86:78:5e:0c:3c: 40:68:62:61:f0:5b:37:d2:ac:0b:20:84:5c:dc:6e:b8:11:b4: 45:2f:04:b9:13:0e:dd:5c:8b:b8:2c:1c:2f:11:6b:7f:2c:71: 95:7b:cc:c1:66:13:64:bd:d1:8e:4f:e9:d4:5c:33:5b:9e:83: 9d:8f:41:1c:77:76:b0:c7:c2:ab:5a:d5:7d:3a:ec:9c:20:27: e1:26:1c:99:b1:38:d1:f0:cc:98:80:8a:24:72:3c:d2:5a:8c: ff:6f:28:16:a6:86:1f:21:a4:2d:1d:bb:f6:28:0c:c1:c5:76: a0:57:47:49:5e:36:1c:03:1b:1f:5f:57:7f:0e:3a:b2:c9:2c: 9c:47:58:f6:98:ce:fe:48:3f:cc:00:fa:8d:70:55:7f:d3:e5: 50:af:b2:b3:88:5a:8a:b1:d0:76:a4:bf:0c:29:ea:f6:0a:48: 47:1e:4e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsNSFCNewWFoeiGuVggZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl ZGI2MzUwHhcNMjUxMjA2MTEwMTE4WhcNMjUxMjA3MTEwMTE4WjAzMTEwLwYDVQQD EyhhNWM1ZjhmNDdlN2M0Y2FhYjQ1ZGUyODQwNjIxYmIzYzQxZWQ4ZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS09TIlcpiu1iYIK5ZRVe7QSiaj+ WPQTy4e4ntMVewUNH1gikgo2gK6qnLhHtieTQDinYikjNJFA50v+zwgM9nTCxgVj 73kgga2RLfOVa74QSH6I8JrRFLpxCtDXYM7Mx809QB/aMtNviPc7u3St91fXfaHZ g86xrrtJyixVxyL36X0JxRw3ylLA6RfFZkdfLiQraCkjRZXSqZHqDyWgxcDkYH6l DyZVpz/oqImQkFN9oY1cOfLlOYR5371EADxgoxZbeMbAeVUNTvjmRRhE4hLMZqK1 6xI7qb1PnPH2uP4n5P3iqve8SBl9gO0RWG/dhC80zf65Usuj55qcYUsQkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXF+PR+fEyqtF3ihAYhuzxB7Y0iMB8GA1UdIwQY MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt Yjk4ZGY1NDRiYzIwLzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrpPtNl+ 2cZsdlALjwGfYAb6e2CPCVs9Ao9422dtJpyk+xCsb/EDSFVwptWrAnELrRXueR5g EAlJqNKJ3V8feZu+/InU1eYVmckfXCyY8M8h0GSC4IZ4Xgw8QGhiYfBbN9KsCyCE XNxuuBG0RS8EuRMO3VyLuCwcLxFrfyxxlXvMwWYTZL3Rjk/p1FwzW56DnY9BHHd2 sMfCq1rVfTrsnCAn4SYcmbE40fDMmICKJHI80lqM/28oFqaGHyGkLR279igMwcV2 oFdHSV42HAMbH19Xfw46ssksnEdY9pjO/kg/zAD6jXBVf9PlUK+ys4hairHQdqS/ DCnq9gpIRx5ObA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:51 2025 by rpki-client