This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json) Hash identifier: XAxRe3DH2r23OxbMwutpvhOQ4z1o0OwiUm975emYOzQ= Subject key identifier: B8:F5:5F:E8:F5:90:9A:93:E5:4F:A0:86:19:31:E9:3E:DE:B8:63:5A Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Certificate serial: 019AF19B848612C6C7991C4B353748A7640B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft Manifest number: 126E Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=) 2: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: cwBUjBTPHiRZs9rul3FqGS17tiPPtgYGn7+KPrH+xNY=) 3: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=) 4: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (hash: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:84:86:12:c6:c7:99:1c:4b:35:37:48:a7:64:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=b8f55fe8f5909a93e54fa0861931e93edeb8635a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:f9:e3:ee:71:36:b7:62:1f:ee:0d:56:82: ae:39:28:6a:57:22:ed:b2:be:af:11:00:7d:6e:5a: c4:9b:2d:be:14:41:4f:b4:8e:66:7e:ca:4b:7e:bd: 9b:9a:9a:03:af:81:51:57:ba:c3:7e:9e:f8:62:fd: 3d:b6:53:53:0d:3d:8a:41:ec:c9:bd:bc:48:6f:4a: a4:f8:55:d3:ac:a0:c4:70:53:12:04:59:da:0a:d3: 59:b3:0b:8e:ee:fb:e8:0a:09:95:9b:a6:2a:10:0e: 8a:c0:4b:d8:90:16:b5:fa:47:f6:6f:82:89:9c:6e: 14:fa:58:c8:6a:63:83:e0:f0:a7:99:bc:d2:d4:12: 2f:1f:80:b1:17:a0:2f:17:73:73:c9:a3:26:f5:03: 47:e7:53:0f:b0:b1:ac:82:7f:74:f3:d2:6e:f4:ba: e5:72:17:91:5b:1c:f3:b1:07:d3:3d:13:31:61:14: d6:7c:7f:24:0e:eb:04:15:34:d7:88:3c:e1:ca:fa: ae:38:05:62:7c:4c:9f:31:ec:e8:3f:74:4f:01:cc: d5:7d:2c:b6:c1:01:07:86:43:37:c6:4f:2c:cf:46: 0b:2a:0f:f7:04:2f:28:30:e2:ea:4e:7f:b6:5b:30: a7:4c:db:4b:7f:2c:cb:5c:6e:38:99:64:b5:1a:3e: fb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:5F:E8:F5:90:9A:93:E5:4F:A0:86:19:31:E9:3E:DE:B8:63:5A X509v3 Authority Key Identifier: keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:4d:23:2b:d1:2e:33:00:b5:cd:57:3b:df:40:81:37:be:8e: c4:65:87:d0:7a:be:70:9b:99:6c:af:3f:08:c5:0c:3e:9c:24: c7:6a:70:80:f8:79:d5:a4:e4:ff:6b:18:a5:97:30:d7:88:93: bf:ac:61:d6:89:9a:6b:97:af:9b:cf:f0:4d:12:ba:1e:b0:9b: 6b:e5:0d:a4:52:11:c6:db:80:f4:5c:ed:cf:6f:a1:7b:70:ba: e8:1a:17:d7:74:c3:69:d5:19:55:06:fc:c0:20:71:80:5b:52: af:f3:4c:36:9a:7c:38:d9:30:1d:33:44:fb:73:d8:b3:01:e1: 02:ab:99:0c:8c:43:45:07:7f:89:e1:15:c5:11:89:29:2e:cd: ff:1e:b0:b9:6f:cf:16:b1:9e:ff:ed:7f:08:a2:23:2b:c2:35: 36:fa:bf:5f:79:15:0e:be:97:c9:eb:32:a0:72:10:dc:8d:04: 0d:5f:a0:c8:34:ea:2e:f8:42:3b:5f:f7:b9:53:58:28:31:e6: 3b:1a:82:15:7c:7e:49:35:94:3e:b7:da:da:79:e5:54:02:3f: 30:4c:60:6a:62:88:b1:f5:6f:b2:55:33:8a:95:61:af:5c:7e: be:3a:d0:47:26:b8:d3:cd:d5:7d:aa:85:19:f9:c0:94:96:87: 74:c4:e0:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4SGEsbHmRxLNTdIp2QLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5 YWRiMWUwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EyhiOGY1NWZlOGY1OTA5YTkzZTU0ZmEwODYxOTMxZTkzZWRlYjg2MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX754+5xNrdiH+4NVoKuOShqVyLt sr6vEQB9blrEmy2+FEFPtI5mfspLfr2bmpoDr4FRV7rDfp74Yv09tlNTDT2KQezJ vbxIb0qk+FXTrKDEcFMSBFnaCtNZswuO7vvoCgmVm6YqEA6KwEvYkBa1+kf2b4KJ nG4U+ljIamOD4PCnmbzS1BIvH4CxF6AvF3NzyaMm9QNH51MPsLGsgn9089Ju9Lrl cheRWxzzsQfTPRMxYRTWfH8kDusEFTTXiDzhyvquOAVifEyfMezoP3RPAczVfSy2 wQEHhkM3xk8sz0YLKg/3BC8oMOLqTn+2WzCnTNtLfyzLXG44mWS1Gj771QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj1X+j1kJqT5U+ghhkx6T7euGNaMB8GA1UdIwQY MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt NDdiYmFjYTA3OGZmLzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA200jK9Eu MwC1zVc730CBN76OxGWH0Hq+cJuZbK8/CMUMPpwkx2pwgPh51aTk/2sYpZcw14iT v6xh1omaa5evm8/wTRK6HrCba+UNpFIRxtuA9Fztz2+he3C66BoX13TDadUZVQb8 wCBxgFtSr/NMNpp8ONkwHTNE+3PYswHhAquZDIxDRQd/ieEVxRGJKS7N/x6wuW/P FrGe/+1/CKIjK8I1Nvq/X3kVDr6XyesyoHIQ3I0EDV+gyDTqLvhCO1/3uVNYKDHm OxqCFXx+STWUPrfa2nnlVAI/MExgamKIsfVvslUzipVhr1x+vjrQRya4083VfaqF GfnAlJaHdMTgMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:10 2025 by rpki-client