This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json) Hash identifier: wY4Dx5ZMfDzWC1ALgvwUzLVr0WtmcH9pCfNbt+6Sdc4= Subject key identifier: 28:17:EB:50:C8:33:6C:7E:EA:A7:37:14:83:2F:06:0C:C8:4D:D5:C6 Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Certificate serial: 019B2BF8867FDD1A30A4802EEB1955AC8496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft Manifest number: 0E8F Signing time: Wed 17 Dec 2025 11:01:06 +0000 Manifest this update: Wed 17 Dec 2025 11:01:06 +0000 Manifest next update: Thu 18 Dec 2025 11:01:06 +0000 Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=) 2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=) 3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: iQDiZhF7DRtUMlm54S1aEOl4YesIiMn+mYfJdXY5Tps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:86:7f:dd:1a:30:a4:80:2e:eb:19:55:ac:84:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Validity Not Before: Dec 17 11:01:06 2025 GMT Not After : Dec 18 11:01:06 2025 GMT Subject: CN=2817eb50c8336c7eeaa73714832f060cc84dd5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:d7:b2:99:52:df:d4:ba:20:2e:40:35:a2: 9d:d5:77:b4:95:50:fb:f4:99:ad:2d:31:17:eb:f6: 3a:26:87:2f:cc:0e:08:d6:fe:87:81:49:45:a1:ad: 67:75:63:b3:f2:a3:22:b8:45:58:bf:85:64:54:4d: 71:dc:fd:cb:4d:39:f1:29:dc:25:de:cf:61:63:10: 3a:59:09:49:f2:15:e3:06:af:45:74:a2:dc:3a:7b: 31:a7:fc:6b:c6:c3:4a:08:d9:13:1d:ee:17:22:43: cf:54:f0:aa:b5:f7:9d:93:98:f3:e5:67:12:f2:45: 93:b4:79:f3:69:a0:2f:96:1f:98:02:59:f4:af:75: e8:b4:7e:4e:d7:fe:7e:56:44:a0:01:c3:6f:9a:89: f8:51:5b:eb:d5:d1:ee:7e:3e:32:8e:a9:46:85:82: a1:24:92:f8:e9:01:1f:22:ea:73:9e:14:e0:59:dd: 77:3e:81:a9:e6:2c:5d:6e:07:0e:a7:73:8e:02:d9: f2:bd:bd:17:3b:a4:07:50:3b:c6:ab:94:30:14:a2: 13:ab:f3:bb:31:75:bf:b8:3b:c7:3e:5c:b2:64:e5: af:2b:5e:5f:35:1b:1c:12:d5:aa:80:59:81:6c:ee: 08:9c:25:e7:27:8b:b8:75:42:d4:69:80:c8:06:d8: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:17:EB:50:C8:33:6C:7E:EA:A7:37:14:83:2F:06:0C:C8:4D:D5:C6 X509v3 Authority Key Identifier: keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e5:79:07:36:70:98:a3:ed:41:8c:77:0d:9b:8b:a7:e6:bf: bc:46:d1:1d:2e:36:e4:5a:73:c4:e9:23:01:25:93:d0:62:18: 4e:62:9c:68:7f:28:fc:b7:3a:f3:95:77:7e:ce:d3:86:eb:a9: 6c:a5:cf:ce:4c:ef:fd:79:ef:fa:3c:98:a0:e8:2d:86:46:7e: 1d:fd:cb:fd:ef:14:d9:fe:b3:05:b5:49:df:86:3e:8e:c0:63: 8d:95:e9:65:58:28:c0:57:62:f1:bc:05:4d:ce:0a:6f:2f:11: db:3c:ee:e5:16:d9:50:24:b1:46:5c:49:81:5c:21:2b:f0:65: bb:fc:e5:c9:06:0f:68:f8:ac:35:a8:0f:2e:c5:70:63:a0:2b: 8d:e8:db:32:31:8c:be:dc:85:1c:bb:72:ca:6d:b6:bb:e8:c2: 9b:8a:ce:07:93:35:15:6e:01:61:c6:d4:02:7b:1b:f6:3e:8b: 50:17:18:99:1c:ce:b0:15:f3:88:6f:f5:71:d8:c0:54:a0:1d: 48:de:2f:a0:f2:c3:ec:f2:0c:8b:ef:8e:d2:66:10:4d:6f:e8: ff:a0:cc:04:be:7b:2c:a6:f6:69:af:b9:a6:60:b5:5d:94:19: 71:34:65:2f:1a:ef:f4:19:f6:30:66:ff:35:dc:91:56:88:de: 48:82:06:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IZ/3RowpIAu6xlVrISWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy MzBmMTQwHhcNMjUxMjE3MTEwMTA2WhcNMjUxMjE4MTEwMTA2WjAzMTEwLwYDVQQD EygyODE3ZWI1MGM4MzM2YzdlZWFhNzM3MTQ4MzJmMDYwY2M4NGRkNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9bXsplS39S6IC5ANaKd1Xe0lVD7 9JmtLTEX6/Y6JocvzA4I1v6HgUlFoa1ndWOz8qMiuEVYv4VkVE1x3P3LTTnxKdwl 3s9hYxA6WQlJ8hXjBq9FdKLcOnsxp/xrxsNKCNkTHe4XIkPPVPCqtfedk5jz5WcS 8kWTtHnzaaAvlh+YAln0r3XotH5O1/5+VkSgAcNvmon4UVvr1dHufj4yjqlGhYKh JJL46QEfIupznhTgWd13PoGp5ixdbgcOp3OOAtnyvb0XO6QHUDvGq5QwFKITq/O7 MXW/uDvHPlyyZOWvK15fNRscEtWqgFmBbO4InCXnJ4u4dULUaYDIBtgHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgX61DIM2x+6qc3FIMvBgzITdXGMB8GA1UdIwQY MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt MGQ4ZmNlM2ViZmJiLzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+V5BzZw mKPtQYx3DZuLp+a/vEbRHS425FpzxOkjASWT0GIYTmKcaH8o/Lc685V3fs7Thuup bKXPzkzv/Xnv+jyYoOgthkZ+Hf3L/e8U2f6zBbVJ34Y+jsBjjZXpZVgowFdi8bwF Tc4Kby8R2zzu5RbZUCSxRlxJgVwhK/Blu/zlyQYPaPisNagPLsVwY6ArjejbMjGM vtyFHLtyym22u+jCm4rOB5M1FW4BYcbUAnsb9j6LUBcYmRzOsBXziG/1cdjAVKAd SN4voPLD7PIMi++O0mYQTW/o/6DMBL57LKb2aa+5pmC1XZQZcTRlLxrv9Bn2MGb/ NdyRVojeSIIGJw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:17 2025 by rpki-client