This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json) Hash identifier: I6S0nBnIUSQvRD2BlcVkf5G5H0NScxmZJtpwJtrJSOM= Subject key identifier: 15:BC:EB:07:70:DF:4F:37:B5:B9:1A:01:4B:5A:13:38:D3:61:55:60 Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Certificate serial: 019AF2090E34B75E7D2DC24584CDBD3AA754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft Manifest number: 0E71 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=) 2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=) 3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: mtRy1twEfHp51AGBjGLag6YL1fqV0RrRyIiPsb4++0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0e:34:b7:5e:7d:2d:c2:45:84:cd:bd:3a:a7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14 Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=15bceb0770df4f37b5b91a014b5a1338d3615560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:fa:2b:49:43:ba:76:02:8e:1e:d9:5e:ef: 08:12:09:1b:6c:16:c6:94:d6:e5:3c:84:de:68:0d: 2a:e0:91:2f:7b:3a:3f:ec:24:84:20:2e:e6:0c:f2: b8:db:6a:7f:a2:52:80:7a:1c:33:f2:83:12:54:97: 1e:ba:7f:55:df:94:72:c3:c4:42:5a:71:b9:07:2d: bf:e2:a2:9b:1c:95:b6:cb:d9:74:9e:d4:38:e8:9c: c3:57:ff:da:5a:e5:e5:a2:f3:d5:cd:f4:a8:14:11: f5:31:00:2c:e9:b9:a0:e0:9d:d5:fb:0a:37:70:7a: dd:3f:a4:6e:c8:62:22:cd:5a:8c:2e:d1:ae:ac:bb: 84:4b:82:8e:41:f1:c6:c1:cc:df:44:10:d0:87:07: 10:0f:4e:5b:94:44:a3:16:bf:ca:1b:ba:5d:2d:f3: bb:38:ef:f4:19:66:2a:3e:2e:0a:57:f2:6d:8f:b7: 09:4c:0f:57:9d:30:16:a2:4c:46:f2:d3:8b:e4:cd: 60:e3:09:f7:ba:59:e0:ad:0a:d7:48:14:51:6a:d0: fb:6c:22:b3:2c:4d:39:8f:a9:c8:3e:bc:d3:4e:f0: f3:bb:6a:8e:a9:2d:6a:0f:15:f6:72:5f:54:bc:ad: 31:af:c0:10:dd:ec:b5:c0:9e:b4:05:84:f4:7d:0c: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BC:EB:07:70:DF:4F:37:B5:B9:1A:01:4B:5A:13:38:D3:61:55:60 X509v3 Authority Key Identifier: keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b7:b6:24:9d:a9:b0:9e:af:fc:0b:37:7d:ec:ee:7e:06:4c: 74:73:36:48:9d:06:f6:48:bd:0e:9b:39:0b:ed:e3:41:89:33: 71:3c:39:50:66:76:91:a4:b8:04:d9:fc:3c:de:c2:21:97:d0: 17:84:53:b9:17:2c:55:26:f2:51:12:0c:81:2e:83:3c:46:ac: 13:f5:04:6b:45:1b:89:bf:bf:32:41:30:31:f2:84:f2:27:16: 0a:8d:62:b0:af:fe:1d:2e:08:3a:b3:71:05:a5:00:95:4a:59: 68:13:2f:7d:11:08:47:6e:54:28:d0:5f:e7:7e:6a:d1:c2:ca: b5:7a:27:75:fb:b0:c8:d2:95:d5:40:59:59:6c:70:94:e5:bd: 41:4c:5b:13:63:29:a2:d3:a9:07:8f:32:15:0d:6d:d1:cb:31: 81:e5:62:93:b3:a9:71:f4:bc:aa:7c:f0:90:68:1f:da:3f:5d: e6:86:ea:27:c7:30:ba:47:36:bf:5d:fc:ad:86:60:e9:08:e4: 42:8e:b0:9a:0f:89:b8:c1:8a:cd:47:25:76:6e:6f:93:d6:33: 90:1c:49:bb:5d:f6:1d:8a:44:cf:08:9f:9e:7a:39:be:5d:d1: dd:4a:fc:8d:35:ce:51:26:09:73:99:09:74:71:4d:56:fb:d3: 88:e5:ca:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ40t159LcJFhM29OqdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy MzBmMTQwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EygxNWJjZWIwNzcwZGY0ZjM3YjViOTFhMDE0YjVhMTMzOGQzNjE1NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw76K0lDunYCjh7ZXu8IEgkbbBbG lNblPITeaA0q4JEvezo/7CSEIC7mDPK422p/olKAehwz8oMSVJceun9V35Ryw8RC WnG5By2/4qKbHJW2y9l0ntQ46JzDV//aWuXlovPVzfSoFBH1MQAs6bmg4J3V+wo3 cHrdP6RuyGIizVqMLtGurLuES4KOQfHGwczfRBDQhwcQD05blESjFr/KG7pdLfO7 OO/0GWYqPi4KV/Jtj7cJTA9XnTAWokxG8tOL5M1g4wn3ulngrQrXSBRRatD7bCKz LE05j6nIPrzTTvDzu2qOqS1qDxX2cl9UvK0xr8AQ3ey1wJ60BYT0fQxdBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW86wdw3083tbkaAUtaEzjTYVVgMB8GA1UdIwQY MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt MGQ4ZmNlM2ViZmJiLzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbe2JJ2p sJ6v/As3fezufgZMdHM2SJ0G9ki9Dps5C+3jQYkzcTw5UGZ2kaS4BNn8PN7CIZfQ F4RTuRcsVSbyURIMgS6DPEasE/UEa0Ubib+/MkEwMfKE8icWCo1isK/+HS4IOrNx BaUAlUpZaBMvfREIR25UKNBf535q0cLKtXondfuwyNKV1UBZWWxwlOW9QUxbE2Mp otOpB48yFQ1t0csxgeVik7OpcfS8qnzwkGgf2j9d5obqJ8cwukc2v138rYZg6Qjk Qo6wmg+JuMGKzUcldm5vk9YzkBxJu132HYpEzwifnno5vl3R3Ur8jTXOUSYJc5kJ dHFNVvvTiOXKRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:58 2025 by rpki-client