This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json) Hash identifier: lv4zudFK1Rprm9R4Y4GmaxNdEtifTfwO//adX+uuCEU= Subject key identifier: FD:FC:B6:17:AD:24:09:17:20:D5:E2:D6:05:22:6B:28:B6:E1:12:98 Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea Certificate serial: 019AF208D61A9AF7DED36AF0761565CFCB89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft Manifest number: 0989 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=) 2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: UIgVd5GSQXdISC+uVAD4TTlVFOdmRe11MRQdbhJSbiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d6:1a:9a:f7:de:d3:6a:f0:76:15:65:cf:cb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=fdfcb617ad24091720d5e2d605226b28b6e11298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:73:21:a2:1b:3f:de:9a:5d:58:8a:74:9d: 7c:cd:74:e9:5f:ce:52:c7:72:0a:76:bf:47:fc:0e: 56:5f:f1:6e:cc:a7:e9:ab:7c:7b:cf:90:ad:84:59: 1c:c6:77:66:b9:7d:14:b2:0e:cb:56:15:3f:d6:be: ae:a6:6e:29:5b:52:c7:c7:6d:fb:cd:5a:5e:e8:15: 68:71:16:49:02:77:32:15:02:4c:e4:89:0a:63:8b: ce:25:41:b9:cd:37:f1:f8:49:5a:77:a1:3c:d5:7c: e1:df:7b:f6:05:2d:ad:0d:b9:d2:55:39:ce:e3:cb: 3b:5a:1b:7d:a1:3e:86:b3:89:17:53:e4:e5:fe:b3: d5:e4:9f:c5:34:97:3e:21:45:b9:00:8f:2b:a0:60: fb:90:f7:c9:82:3a:d0:ca:53:21:c5:4a:88:7b:5d: ed:86:34:b4:66:cc:9d:cd:82:71:f7:1d:57:0f:15: c1:b1:20:ce:9b:8f:ed:16:ee:47:5b:78:b6:f3:d5: 2f:46:c6:e7:4a:97:24:08:28:1c:52:9e:7d:f9:9a: 9e:63:cb:65:ca:59:10:02:16:87:13:11:a6:84:fc: 56:10:89:d9:65:cc:73:04:78:e6:dd:c9:b0:4d:c2: 8f:07:b8:f7:f7:97:55:f5:0a:90:bb:87:42:d4:26: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FC:B6:17:AD:24:09:17:20:D5:E2:D6:05:22:6B:28:B6:E1:12:98 X509v3 Authority Key Identifier: keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:09:08:90:2f:a4:34:76:80:6a:40:a0:ff:3b:d0:82:22:79: 8a:48:29:51:75:b2:73:ea:9c:f0:e9:aa:1d:89:44:0c:c8:58: 6f:b8:09:d7:75:48:25:21:b5:a9:81:98:90:a7:55:4a:ef:77: 0f:2b:96:56:28:98:d9:ea:b7:d7:1c:e1:2b:5c:d6:6a:b0:2a: f9:2c:62:4b:4c:60:8d:73:66:99:26:56:a0:aa:d8:21:ea:cf: 44:3a:6d:7d:0e:0d:a5:8f:2f:54:d0:15:9f:b8:ca:48:9d:bd: 9e:81:c0:74:65:ec:67:4d:71:43:05:33:98:e8:42:1b:15:bd: 74:39:60:ec:71:e7:34:1c:e6:7c:2e:d1:9d:30:f9:a2:18:6e: c8:fe:d0:d7:60:8d:62:52:bc:9f:bc:52:c7:47:b0:85:35:32: b0:a7:1e:b6:48:2c:74:1a:9e:40:c3:45:d2:81:f2:39:ae:89: ef:7f:df:57:49:29:75:62:37:fe:f9:28:17:5a:30:e2:7d:d0: 9a:91:53:58:90:f7:cd:a6:7a:5c:43:6e:d8:00:42:c9:f7:b5: af:2d:65:3d:24:02:22:8c:d8:e0:18:ed:9b:f3:20:cf:27:2b: f8:b4:a4:fa:e6:87:b1:98:30:ce:46:c8:68:3a:bc:95:b7:b8: 4a:16:73:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNYamvfe02rwdhVlz8uJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjNzQ4NDlhOTcwYTkzMDRkZjQ1ZjhlMjhiNmViODdmZjA5 ZTBiZWEwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhmZGZjYjYxN2FkMjQwOTE3MjBkNWUyZDYwNTIyNmIyOGI2ZTExMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpRzIaIbP96aXViKdJ18zXTpX85S x3IKdr9H/A5WX/FuzKfpq3x7z5CthFkcxndmuX0Usg7LVhU/1r6upm4pW1LHx237 zVpe6BVocRZJAncyFQJM5IkKY4vOJUG5zTfx+Elad6E81Xzh33v2BS2tDbnSVTnO 48s7Wht9oT6Gs4kXU+Tl/rPV5J/FNJc+IUW5AI8roGD7kPfJgjrQylMhxUqIe13t hjS0ZsydzYJx9x1XDxXBsSDOm4/tFu5HW3i289UvRsbnSpckCCgcUp59+ZqeY8tl ylkQAhaHExGmhPxWEInZZcxzBHjm3cmwTcKPB7j395dV9QqQu4dC1CbtrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP38thetJAkXINXi1gUiayi24RKYMB8GA1UdIwQY MBaAFIx0hJqXCpME30X44otuuH/wngvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjkt MjlmZmQwZWY1NjBhLzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjktMjlmZmQwZWY1NjBh LzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgkIkC+k NHaAakCg/zvQgiJ5ikgpUXWyc+qc8OmqHYlEDMhYb7gJ13VIJSG1qYGYkKdVSu93 DyuWViiY2eq31xzhK1zWarAq+SxiS0xgjXNmmSZWoKrYIerPRDptfQ4NpY8vVNAV n7jKSJ29noHAdGXsZ01xQwUzmOhCGxW9dDlg7HHnNBzmfC7RnTD5ohhuyP7Q12CN YlK8n7xSx0ewhTUysKcetkgsdBqeQMNF0oHyOa6J73/fV0kpdWI3/vkoF1ow4n3Q mpFTWJD3zaZ6XENu2ABCyfe1ry1lPSQCIozY4Bjtm/Mgzycr+LSk+uaHsZgwzkbI aDq8lbe4ShZzsw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:53 2025 by rpki-client