This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json) Hash identifier: Clvu2RkAc8WzV7AmNWYL2Lk7MrAFq92KAWNhP53Y1f4= Subject key identifier: B4:12:21:49:B0:95:99:68:F8:CC:E5:14:28:E3:1F:10:D6:DE:2A:35 Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Certificate serial: 019B27E4A3660EEEA690FA3146359BF3B164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft Manifest number: 02A0 Signing time: Tue 16 Dec 2025 16:00:53 +0000 Manifest this update: Tue 16 Dec 2025 16:00:53 +0000 Manifest next update: Wed 17 Dec 2025 16:00:53 +0000 Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=) 2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: dZ91SfvkmIEHt5BZU5UtCrDeCPQkUalIw215KShcwzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:a3:66:0e:ee:a6:90:fa:31:46:35:9b:f3:b1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Validity Not Before: Dec 16 16:00:53 2025 GMT Not After : Dec 17 16:00:53 2025 GMT Subject: CN=b4122149b0959968f8cce51428e31f10d6de2a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:fa:43:ab:af:13:c5:af:10:31:f1:b7:0d: 1b:5d:c1:d5:90:17:1e:b5:80:7a:01:d8:0d:cb:85: ca:f6:20:7a:4a:e5:1d:c6:4f:b3:28:8d:e9:d2:c5: e0:e4:40:8c:3a:27:05:fe:28:1c:92:41:dc:cc:67: 06:63:50:73:3f:75:83:6d:ee:15:f3:9e:95:3d:c0: 99:5c:c5:40:70:71:61:ab:3b:af:2e:5e:e6:c2:d0: f6:21:58:cd:82:78:a0:00:c0:51:1c:8f:59:9d:f2: 08:3e:c5:44:50:2b:0c:a0:f5:b1:6d:2f:46:3b:eb: 61:0e:41:86:24:7c:fa:f9:0e:94:76:a8:f3:e4:ba: 6b:d0:80:d4:03:01:c8:63:d1:ce:3e:17:a8:65:08: 6d:9f:84:b1:7a:78:c1:3c:42:f1:94:86:00:a8:73: 50:31:1d:67:5b:63:59:ec:7d:29:58:a1:2b:51:1b: 96:06:c0:d0:da:95:06:8b:b3:30:be:9c:0e:a0:51: 00:b6:e5:54:a5:11:49:da:53:74:ef:e5:78:a7:e6: c6:a1:5a:e5:0c:95:76:0c:c6:0d:a8:ef:c5:70:c5: c5:34:b7:82:ff:fc:7f:0d:4b:1b:74:8e:d4:f6:8c: db:e1:4e:da:54:f4:76:ac:12:1e:db:c6:eb:1e:89: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:12:21:49:B0:95:99:68:F8:CC:E5:14:28:E3:1F:10:D6:DE:2A:35 X509v3 Authority Key Identifier: keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5f:be:31:41:65:e6:ee:2e:f8:89:33:a8:77:85:9b:1d:89: f1:65:34:2d:90:5a:f0:7d:fd:6d:01:f2:a4:4a:2d:80:45:e4: 3a:dd:be:a0:f3:d0:f4:da:3b:ce:c8:b2:37:be:8a:18:7e:d3: 54:94:41:41:16:20:5b:fb:c3:79:01:43:8a:16:69:ee:ab:2c: c4:84:4d:a0:27:07:80:fd:58:15:65:62:6a:28:76:c4:ab:5c: 23:c6:e7:4a:aa:03:a4:17:ea:9c:7d:31:6b:f7:c0:c0:ed:7f: 12:c1:98:d7:f9:66:93:9d:fa:57:2d:14:99:19:6f:7b:39:2d: 3f:17:a1:4e:14:2a:79:06:65:fb:46:15:b4:bd:9d:d7:26:40: 70:3b:5e:1e:fe:dc:1a:19:ee:8a:1b:09:3a:1c:4f:8b:21:7e: 7c:75:52:2c:8f:8e:69:43:6a:b0:ed:4b:be:b9:be:95:47:8c: 89:c5:3f:7e:8c:be:65:37:36:27:f8:4a:cf:93:a2:cb:34:81: f8:86:e1:7e:18:ed:f9:5e:c3:bc:71:a8:f6:20:7a:9d:a4:b9: a0:f0:1b:4b:7b:fb:03:0a:d7:f6:a4:c9:25:6a:b4:c6:0f:0d: 59:45:3c:68:9d:8b:34:88:8a:35:f2:52:ad:c4:58:1e:29:e2: 36:bf:a0:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5KNmDu6mkPoxRjWb87FkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YWY5OGFlZTM3YTEyODE1YjQ0YmZkNmJlYjRiZTY0YWMw ZWY2ZTUwHhcNMjUxMjE2MTYwMDUzWhcNMjUxMjE3MTYwMDUzWjAzMTEwLwYDVQQD EyhiNDEyMjE0OWIwOTU5OTY4ZjhjY2U1MTQyOGUzMWYxMGQ2ZGUyYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseX6Q6uvE8WvEDHxtw0bXcHVkBce tYB6AdgNy4XK9iB6SuUdxk+zKI3p0sXg5ECMOicF/igckkHczGcGY1BzP3WDbe4V 856VPcCZXMVAcHFhqzuvLl7mwtD2IVjNgnigAMBRHI9ZnfIIPsVEUCsMoPWxbS9G O+thDkGGJHz6+Q6Udqjz5Lpr0IDUAwHIY9HOPheoZQhtn4SxenjBPELxlIYAqHNQ MR1nW2NZ7H0pWKErURuWBsDQ2pUGi7MwvpwOoFEAtuVUpRFJ2lN07+V4p+bGoVrl DJV2DMYNqO/FcMXFNLeC//x/DUsbdI7U9ozb4U7aVPR2rBIe28brHomchwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQSIUmwlZlo+MzlFCjjHxDW3io1MB8GA1UdIwQY MBaAFISvmK7jehKBW0S/1r60vmSsDvblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUt NzRlMTAwOTlmODFjLzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUtNzRlMTAwOTlmODFj LzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACF++MUFl 5u4u+IkzqHeFmx2J8WU0LZBa8H39bQHypEotgEXkOt2+oPPQ9No7zsiyN76KGH7T VJRBQRYgW/vDeQFDihZp7qssxIRNoCcHgP1YFWViaih2xKtcI8bnSqoDpBfqnH0x a/fAwO1/EsGY1/lmk536Vy0UmRlvezktPxehThQqeQZl+0YVtL2d1yZAcDteHv7c GhnuihsJOhxPiyF+fHVSLI+OaUNqsO1Lvrm+lUeMicU/foy+ZTc2J/hKz5OiyzSB +Ibhfhjt+V7DvHGo9iB6naS5oPAbS3v7AwrX9qTJJWq0xg8NWUU8aJ2LNIiKNfJS rcRYHiniNr+gHw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:59:15 2025 by rpki-client