This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json) Hash identifier: Pd6IaU0YFW0TN0Tgwj9mYZps7AlVrq4N6AzJ7q+eu44= Subject key identifier: F4:5B:EB:51:8C:E3:26:54:2D:CC:8B:15:1C:25:E4:97:67:EF:D7:3D Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c Certificate serial: 019AF5776F2E40D6343D01A4F3095ABEA974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 21:00:36 +0000 Manifest this update: Sat 06 Dec 2025 21:00:36 +0000 Manifest next update: Sun 07 Dec 2025 21:00:36 +0000 Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=) 2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: 8NVt1apTjj2A+AG+Npg4UAvErF75hwwLt/zapaKhyUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:6f:2e:40:d6:34:3d:01:a4:f3:09:5a:be:a9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c Validity Not Before: Dec 6 21:00:36 2025 GMT Not After : Dec 7 21:00:36 2025 GMT Subject: CN=f45beb518ce326542dcc8b151c25e49767efd73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:57:0f:86:22:b4:3d:94:6c:6b:5f:2b:5a: df:a4:ae:61:ea:a2:0c:b3:6f:8c:a0:ba:32:3f:6f: f7:41:f7:02:e7:3c:14:61:91:ab:8f:b1:9d:d7:ba: e3:6d:0b:90:b9:de:ef:aa:bc:6d:2c:aa:a4:b0:b4: 03:fe:57:16:6e:e1:75:2f:26:9a:b7:bd:f6:aa:98: 3d:a4:f2:55:a9:60:cd:2b:bd:92:ce:cb:1d:02:a6: ed:e3:a5:a8:e2:b3:3f:b1:93:c2:08:ac:28:89:ab: 80:6e:a9:d4:34:7a:02:ff:b1:45:04:99:b8:67:75: 71:1b:5a:d0:20:4a:15:5b:d6:c3:20:1d:2a:48:9f: c2:1a:79:da:f6:37:62:23:be:7d:aa:03:f7:25:cc: a1:85:08:d1:5b:77:a5:95:0c:40:c9:02:62:36:5b: e8:be:8b:15:e6:01:ca:e1:a2:01:8f:c3:4a:ee:cd: b6:74:4d:1f:3d:12:e3:7a:02:a9:1d:51:24:a2:43: b2:d8:aa:90:d2:d4:9b:80:26:48:42:36:2d:5f:c1: 36:c4:3a:11:8e:be:4f:d2:f7:d6:98:4a:66:f1:de: 3c:23:0b:85:1e:03:a1:12:4e:b9:a4:df:87:2b:3d: c8:84:15:a6:df:20:cd:52:fc:84:a9:fe:65:62:ea: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5B:EB:51:8C:E3:26:54:2D:CC:8B:15:1C:25:E4:97:67:EF:D7:3D X509v3 Authority Key Identifier: keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f7:b0:5c:fe:d3:9b:f7:4b:f6:62:f9:c6:ea:88:2d:9b:26: 35:9e:a9:46:8d:90:a4:f6:c2:66:44:99:3a:7e:4d:9b:20:e9: 17:6a:8d:33:5c:60:d4:34:2d:f7:f4:85:8d:a5:4b:54:51:6f: 2e:8e:85:67:be:53:86:51:ae:b8:c9:76:9e:a3:54:f1:84:12: 47:99:53:60:06:64:f2:2e:65:7e:46:3a:5f:cb:b6:46:d4:e2: 67:51:3d:04:c7:1c:8f:e6:d7:fc:61:69:f8:aa:dd:e1:0b:b7: 59:23:e6:97:1f:8e:45:be:ba:5d:29:43:b8:af:11:a7:25:c3: 76:9d:11:0b:57:e0:8d:5e:ff:5e:07:f6:18:bc:45:38:34:8e: d3:af:9f:08:1f:49:6f:ad:75:2b:aa:e5:88:a5:88:16:af:e7: 06:e2:c8:c8:bc:d0:3d:ee:4a:fb:27:45:95:d2:d9:56:0a:f8: 5b:8b:8b:dc:e4:e4:dd:fd:f0:bb:8e:4d:a9:1b:7c:f5:8d:03: e5:f4:9d:f1:74:37:84:eb:7b:24:4c:d4:7d:63:93:86:5a:fc: 61:92:31:e8:e7:22:40:80:4b:a0:8c:87:84:da:3d:78:df:ad: 40:80:4c:5b:9d:6f:cc:cb:37:8c:6f:8b:a1:16:77:fc:e8:03: b7:31:ed:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d28uQNY0PQGk8wlavql0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMzg3NWE4MGFkMjMzZTljMjg3MTU5ODgzNzFmNzdlZWMz ZjYyMGMwHhcNMjUxMjA2MjEwMDM2WhcNMjUxMjA3MjEwMDM2WjAzMTEwLwYDVQQD EyhmNDViZWI1MThjZTMyNjU0MmRjYzhiMTUxYzI1ZTQ5NzY3ZWZkNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIlXD4YitD2UbGtfK1rfpK5h6qIM s2+MoLoyP2/3QfcC5zwUYZGrj7Gd17rjbQuQud7vqrxtLKqksLQD/lcWbuF1Lyaa t732qpg9pPJVqWDNK72SzssdAqbt46Wo4rM/sZPCCKwoiauAbqnUNHoC/7FFBJm4 Z3VxG1rQIEoVW9bDIB0qSJ/CGnna9jdiI759qgP3JcyhhQjRW3ellQxAyQJiNlvo vosV5gHK4aIBj8NK7s22dE0fPRLjegKpHVEkokOy2KqQ0tSbgCZIQjYtX8E2xDoR jr5P0vfWmEpm8d48IwuFHgOhEk65pN+HKz3IhBWm3yDNUvyEqf5lYupapwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRb61GM4yZULcyLFRwl5Jdn79c9MB8GA1UdIwQY MBaAFI44dagK0jPpwocVmINx937sP2IMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEt MTljNGZmMTg3N2JiLzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84NjY1OTktM2ZhMC00MjMwLWJhOWEtMTljNGZmMTg3N2Ji LzEvampoMXFBclNNLW5DaHhXWWczSDNmdXdfWWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvewXP7T m/dL9mL5xuqILZsmNZ6pRo2QpPbCZkSZOn5NmyDpF2qNM1xg1DQt9/SFjaVLVFFv Lo6FZ75ThlGuuMl2nqNU8YQSR5lTYAZk8i5lfkY6X8u2RtTiZ1E9BMccj+bX/GFp +Krd4Qu3WSPmlx+ORb66XSlDuK8RpyXDdp0RC1fgjV7/Xgf2GLxFODSO06+fCB9J b611K6rliKWIFq/nBuLIyLzQPe5K+ydFldLZVgr4W4uL3OTk3f3wu45NqRt89Y0D 5fSd8XQ3hOt7JEzUfWOThlr8YZIx6OciQIBLoIyHhNo9eN+tQIBMW51vzMs3jG+L oRZ3/OgDtzHttA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:13 2025 by rpki-client