This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json) Hash identifier: 7f4O288gihuYebkMOZq61tx0Pu7OO+VuUNvqTiCzOXA= Subject key identifier: AA:66:E4:24:C1:30:95:82:4F:48:12:CD:36:70:6B:1B:00:D9:86:FE Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B3EDA3137B92735670D8F8831055EF564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 03:00:45 +0000 Manifest this update: Sun 21 Dec 2025 03:00:45 +0000 Manifest next update: Mon 22 Dec 2025 03:00:45 +0000 Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=) 2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=) 3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: gerqlc4twiEjQUSv8B/89TCXHrjrLi+T7JekmbIM5kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:31:37:b9:27:35:67:0d:8f:88:31:05:5e:f5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Dec 21 03:00:45 2025 GMT Not After : Dec 22 03:00:45 2025 GMT Subject: CN=aa66e424c13095824f4812cd36706b1b00d986fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:bc:78:ad:f6:2d:ab:be:70:37:2c:0e:53: f9:4f:70:aa:b7:14:dc:60:78:f3:22:5a:a4:78:a6: fd:7d:81:d6:4a:4a:7b:02:45:04:5d:c2:ee:17:46: 5e:aa:34:cb:e7:17:c6:0f:ff:7d:89:49:e8:a9:7d: ed:14:62:09:e3:69:7c:27:99:28:ca:0d:67:f3:1f: 2f:80:0c:a5:8e:91:23:87:b1:29:f0:39:99:c0:5a: f1:15:c4:d1:9f:2f:19:98:c2:7b:6c:30:61:27:8e: 95:e5:77:d1:aa:ae:58:e6:68:35:88:3c:2c:5f:b7: e9:33:81:4c:22:70:a8:20:f3:e3:14:3c:ee:e3:f2: 92:9d:5b:90:14:6e:d8:97:bf:98:78:f6:4a:ec:86: 0e:09:6b:f0:ff:a1:04:43:3a:ac:13:c6:da:02:70: fb:cc:3c:96:1f:3b:36:7f:53:44:eb:ce:7b:69:bc: c4:03:3d:2c:b1:84:04:de:ca:c8:df:2d:b9:d8:a5: 6f:e8:e9:18:5e:cf:36:6e:a1:8a:6d:af:5a:e7:e4: 76:2d:b6:03:40:88:e0:a0:e5:00:88:e2:31:bd:57: 33:37:2b:ad:ce:dc:f5:f0:2f:2f:45:5d:14:27:7b: c9:0d:73:2a:8e:64:ab:33:7e:1b:8f:50:d4:35:80: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:66:E4:24:C1:30:95:82:4F:48:12:CD:36:70:6B:1B:00:D9:86:FE X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f0:26:83:82:21:6f:99:8f:75:b1:37:a2:85:bb:dd:1e:a9: 86:93:3f:eb:f9:2d:61:db:85:69:90:b9:4f:ef:73:7c:bd:0f: 9c:bf:83:ba:8c:5a:24:0f:4d:9b:e7:a8:8e:2b:fc:fb:c6:a8: 8c:7f:0a:18:e3:6b:ee:60:05:a4:4b:a5:1f:58:92:51:4e:e1: d9:d2:88:c3:10:1a:09:1b:0d:6c:61:13:d5:69:f3:12:eb:d6: f2:b9:a1:80:83:1f:bd:7f:9d:d8:35:14:a0:15:38:90:3b:8b: e0:e4:76:c0:8c:90:12:47:1a:aa:e2:32:ed:9b:67:32:71:4a: 25:8c:e7:a8:c0:da:38:51:9e:8b:df:ae:f8:97:02:68:03:a2: 18:34:7f:48:19:f7:6f:a1:6b:8b:9d:fd:f5:f3:17:76:1f:bb: 56:78:60:3d:e6:73:1f:7f:85:91:8f:57:5e:07:39:48:74:e2: da:ab:f5:08:5a:57:d1:d9:c6:11:23:91:15:30:cf:c3:46:37: e5:94:4c:44:4e:0b:a1:8c:04:64:10:e5:f3:c4:e5:84:c3:61: f6:e5:14:66:6b:ea:7b:01:cb:cf:e1:c6:53:40:9d:cc:82:07: 5d:1f:f3:e7:cc:51:ca:69:ec:c8:a9:f0:95:84:b8:b8:43:cf: cc:c6:a4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2jE3uSc1Zw2PiDEFXvVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjUxMjIxMDMwMDQ1WhcNMjUxMjIyMDMwMDQ1WjAzMTEwLwYDVQQD EyhhYTY2ZTQyNGMxMzA5NTgyNGY0ODEyY2QzNjcwNmIxYjAwZDk4NmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ia8eK32Lau+cDcsDlP5T3CqtxTc YHjzIlqkeKb9fYHWSkp7AkUEXcLuF0ZeqjTL5xfGD/99iUnoqX3tFGIJ42l8J5ko yg1n8x8vgAyljpEjh7Ep8DmZwFrxFcTRny8ZmMJ7bDBhJ46V5XfRqq5Y5mg1iDws X7fpM4FMInCoIPPjFDzu4/KSnVuQFG7Yl7+YePZK7IYOCWvw/6EEQzqsE8baAnD7 zDyWHzs2f1NE6857abzEAz0ssYQE3srI3y252KVv6OkYXs82bqGKba9a5+R2LbYD QIjgoOUAiOIxvVczNyutztz18C8vRV0UJ3vJDXMqjmSrM34bj1DUNYDsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpm5CTBMJWCT0gSzTZwaxsA2Yb+MB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfAmg4Ih b5mPdbE3ooW73R6phpM/6/ktYduFaZC5T+9zfL0PnL+DuoxaJA9Nm+eojiv8+8ao jH8KGONr7mAFpEulH1iSUU7h2dKIwxAaCRsNbGET1WnzEuvW8rmhgIMfvX+d2DUU oBU4kDuL4OR2wIyQEkcaquIy7ZtnMnFKJYznqMDaOFGei9+u+JcCaAOiGDR/SBn3 b6Fri5399fMXdh+7VnhgPeZzH3+FkY9XXgc5SHTi2qv1CFpX0dnGESORFTDPw0Y3 5ZRMRE4LoYwEZBDl88TlhMNh9uUUZmvqewHLz+HGU0CdzIIHXR/z58xRymnsyKnw lYS4uEPPzMaktw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:18:03 2025 by rpki-client