This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json) Hash identifier: V/DSN+IF8U6JmSW8fBDhtqGh0sLmmpswuTmZ/hBz5zA= Subject key identifier: 20:FB:BE:64:C0:32:DD:42:10:87:3F:0F:79:57:0D:4B:9E:2E:05:41 Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af Certificate serial: 019AF653DBDFFCFAAB416367E7904844F18E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft Manifest number: 0E43 Signing time: Sun 07 Dec 2025 01:01:22 +0000 Manifest this update: Sun 07 Dec 2025 01:01:22 +0000 Manifest next update: Mon 08 Dec 2025 01:01:22 +0000 Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: 21jepRJfWVDdIeHDNXKFV+6KmO30QJKaiSRqmPTkW7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:db:df:fc:fa:ab:41:63:67:e7:90:48:44:f1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af Validity Not Before: Dec 7 01:01:22 2025 GMT Not After : Dec 8 01:01:22 2025 GMT Subject: CN=20fbbe64c032dd4210873f0f79570d4b9e2e0541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:3d:89:5c:82:ae:7d:09:6d:03:68:8e:b9: 4c:e7:cf:6c:0c:13:c9:6d:35:a1:58:1c:17:6d:2d: f8:ea:d0:6b:4a:05:43:bf:22:6c:04:2e:93:f4:f2: e4:68:57:c1:70:7e:3b:8a:c5:c6:c6:4d:15:83:87: 74:19:0d:db:82:2d:72:9c:27:04:f4:60:d6:51:1b: 93:f7:23:e7:df:85:9b:2c:1d:b0:bf:f4:db:45:ed: 3a:ec:41:7d:02:8c:7e:65:11:fa:32:ad:16:7b:15: 13:b0:7e:94:c7:31:88:64:e6:c3:11:06:e5:75:26: 55:58:bd:f8:5e:51:26:34:a0:43:b9:0c:7b:da:c4: 5a:b7:62:72:34:a0:60:af:67:f4:53:0c:62:04:0a: b9:b4:2b:c5:9d:c9:0a:29:38:a5:df:34:01:f9:37: 2f:99:ee:c9:99:8f:3d:ba:15:ee:de:cb:c9:78:01: d6:66:d4:7d:fa:d3:3f:a1:cc:05:50:46:50:29:46: 7f:38:eb:ec:ce:41:2a:60:0f:2b:fa:61:52:7a:23: 74:52:c0:76:1d:72:a1:73:9e:c3:dc:4c:bc:69:4c: 96:d7:f0:96:c7:a4:72:4a:d0:d5:ca:56:fd:d4:1f: 62:6d:3b:c9:6f:f0:57:32:7d:a9:f6:45:7b:82:66: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:BE:64:C0:32:DD:42:10:87:3F:0F:79:57:0D:4B:9E:2E:05:41 X509v3 Authority Key Identifier: keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:59:fc:de:fd:2d:b8:5c:23:31:b5:54:ff:28:c6:cf:92:26: fc:ea:14:15:10:b2:08:04:7d:11:d8:cd:3c:2c:ad:88:09:e4: 12:cd:05:e1:02:30:97:d5:c8:88:3c:09:cc:27:c8:7f:25:55: 8d:c1:e3:65:32:f6:23:7c:09:a7:0a:3f:52:27:a3:e7:d5:6a: 68:d4:82:b0:c7:19:44:21:5d:82:c5:d5:a0:8f:d6:24:89:47: e7:d3:49:f4:62:12:f6:bd:6e:62:b2:7d:9b:4f:2b:50:0d:76: 5d:20:0b:59:8e:4c:aa:bd:99:f1:62:72:64:f7:1e:97:11:d8: 85:d3:ea:d4:5f:24:fa:61:e6:45:b9:b8:61:c6:3a:6e:02:57: 5e:e9:eb:c1:97:c3:be:5b:a7:c9:35:29:81:a3:4d:a9:fb:83: 84:25:2e:40:aa:5c:0f:2e:36:3d:f3:28:c8:d2:b3:22:0a:06: 7f:d3:61:c7:14:a9:d7:0e:08:34:9a:2e:ce:be:6c:bd:74:7f: 83:ff:ed:cd:4c:7c:63:59:63:4a:f9:9a:07:61:5d:48:2f:6b: ce:23:c1:20:9a:a3:44:bd:50:ac:3a:1b:38:c4:88:25:1f:3a: 59:b5:b6:e5:b7:9d:9b:3b:ad:3e:02:d9:cd:40:72:00:0f:60: 18:b1:63:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U9vf/PqrQWNn55BIRPGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWM1YmE2ZDQwYWI0ZTRlMzliN2I2OWI2ZDJkOTg0NGFh MjQ4YWYwHhcNMjUxMjA3MDEwMTIyWhcNMjUxMjA4MDEwMTIyWjAzMTEwLwYDVQQD EygyMGZiYmU2NGMwMzJkZDQyMTA4NzNmMGY3OTU3MGQ0YjllMmUwNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa49iVyCrn0JbQNojrlM589sDBPJ bTWhWBwXbS346tBrSgVDvyJsBC6T9PLkaFfBcH47isXGxk0Vg4d0GQ3bgi1ynCcE 9GDWURuT9yPn34WbLB2wv/TbRe067EF9Aox+ZRH6Mq0WexUTsH6UxzGIZObDEQbl dSZVWL34XlEmNKBDuQx72sRat2JyNKBgr2f0UwxiBAq5tCvFnckKKTil3zQB+Tcv me7JmY89uhXu3svJeAHWZtR9+tM/ocwFUEZQKUZ/OOvszkEqYA8r+mFSeiN0UsB2 HXKhc57D3Ey8aUyW1/CWx6RyStDVylb91B9ibTvJb/BXMn2p9kV7gmbRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD7vmTAMt1CEIc/D3lXDUueLgVBMB8GA1UdIwQY MBaAFIScW6bUCrTk45t7abbS2YRKokivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEp4YnB0UUt0T1RqbTN0cHR0TFpoRXFpU0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zN2M1MTQtODIxMy00MzhjLWExNjQt ZDk4NDg3YmRlZTQ4LzEvaEp4YnB0UUt0T1RqbTN0cHR0TFpoRXFpU0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zN2M1MTQtODIxMy00MzhjLWExNjQtZDk4NDg3YmRlZTQ4 LzEvaEp4YnB0UUt0T1RqbTN0cHR0TFpoRXFpU0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFn83v0t uFwjMbVU/yjGz5Im/OoUFRCyCAR9EdjNPCytiAnkEs0F4QIwl9XIiDwJzCfIfyVV jcHjZTL2I3wJpwo/Uiej59VqaNSCsMcZRCFdgsXVoI/WJIlH59NJ9GIS9r1uYrJ9 m08rUA12XSALWY5Mqr2Z8WJyZPcelxHYhdPq1F8k+mHmRbm4YcY6bgJXXunrwZfD vlunyTUpgaNNqfuDhCUuQKpcDy42PfMoyNKzIgoGf9NhxxSp1w4INJouzr5svXR/ g//tzUx8Y1ljSvmaB2FdSC9rziPBIJqjRL1QrDobOMSIJR86WbW25bedmzutPgLZ zUByAA9gGLFjyA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:03:47 2025 by rpki-client