This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json) Hash identifier: 9v//8kwKFd0FJLnv1XqFwUzwKIjldiApK/26lpBYZlI= Subject key identifier: BB:60:EC:A9:1A:AC:AC:D1:D1:00:D0:DB:15:BA:B3:3E:58:66:CA:E1 Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72 Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272 Certificate serial: 019AF276CA45CB188193E2B506875A5B2963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft Manifest number: 0EF2 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: OtnHcmz53qk2Vmz8SG2y4XpdNNnhTE/ehRd18LYv1Zc=) 2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ca:45:cb:18:81:93:e2:b5:06:87:5a:5b:29:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=bb60eca91aacacd1d100d0db15bab33e5866cae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:58:f3:b2:d2:e3:c6:d9:9f:56:a3:96:eb: 7d:62:e5:66:ea:aa:0c:f8:45:d6:55:89:3f:dd:35: 45:a2:08:fc:a1:24:ad:04:d2:2e:22:b7:4c:c6:c9: 14:fe:5c:0a:ae:75:dd:48:e5:fd:27:64:13:ad:bc: 02:72:14:2f:0b:e1:84:f1:4f:de:7f:63:64:8d:8d: ca:27:b9:c9:bf:b7:64:d2:cc:0d:f4:db:59:5b:67: 3e:0a:93:63:9a:31:74:66:e6:a6:a2:e3:a0:32:a4: 74:ce:0d:df:4b:33:ae:65:5f:c0:c5:5f:ad:8a:11: c9:52:e2:06:63:95:5b:90:b0:5c:d7:bd:3b:1d:df: c5:dd:63:83:04:86:5f:58:04:ea:ff:6d:d7:f1:0c: 19:c8:db:c3:66:41:b5:00:e6:af:83:8e:45:46:06: ad:63:7c:3e:03:91:19:a2:25:99:a2:be:fb:a6:53: 0f:06:98:78:5d:5d:af:f6:c1:67:46:2c:e8:99:e8: 8f:64:4b:60:81:b1:8d:4b:d2:da:db:8c:b1:07:d9: b1:f8:46:5f:3c:b5:31:8b:9a:31:35:83:ad:90:11: 4d:89:24:8f:54:4a:07:95:b1:86:10:69:30:46:70: a0:d0:a5:a5:aa:ca:c4:3e:fe:88:6d:e2:be:5f:4c: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:EC:A9:1A:AC:AC:D1:D1:00:D0:DB:15:BA:B3:3E:58:66:CA:E1 X509v3 Authority Key Identifier: keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fe:d9:a8:33:c7:2d:3d:d1:4d:ff:6f:c5:17:14:30:64:92: 99:de:41:f0:64:f9:29:be:41:d2:05:89:79:37:10:27:d0:11: f5:b7:4c:f4:a2:2f:c4:44:5f:46:47:b5:a1:df:12:7b:7b:15: 2c:5f:f7:5f:7b:35:36:d9:d9:64:a3:37:d5:e7:a6:26:ca:86: 50:8b:6d:0f:18:26:74:8b:6b:02:43:86:20:37:15:6a:b9:36: 54:6f:60:d1:7b:67:d8:81:1c:85:26:73:9f:18:2c:d3:e2:8f: 32:cc:f4:2c:c8:bc:fe:6c:68:1a:95:04:7f:eb:e4:fb:e6:97: df:7c:92:e7:0b:0d:23:56:de:6d:2b:6d:e0:28:a7:3a:30:78: 53:b0:6c:71:f3:07:f0:f8:82:85:47:77:86:da:4b:cb:95:a9: 33:09:c1:5b:4a:a4:df:09:33:ed:b6:6e:5f:80:29:74:59:8f: 93:02:b6:68:54:b1:5d:54:58:3d:14:9f:a0:10:72:a0:5e:d1: c2:51:06:ac:c3:77:37:d5:96:51:0b:c0:d2:18:23:d1:65:45: 20:69:d6:8a:69:1b:c7:45:d0:3e:5a:89:a5:3a:5b:a1:d3:7d: 58:1a:c8:dc:ed:e5:7e:d6:37:73:37:7a:1f:a1:d7:28:95:c0: 5c:38:a4:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydspFyxiBk+K1BodaWyljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MmUxNzhhODVkNmMzMGI1NzJiMjAyNjFjNDRmOGU3YTRi ZmMyNzIwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EyhiYjYwZWNhOTFhYWNhY2QxZDEwMGQwZGIxNWJhYjMzZTU4NjZjYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3xY87LS48bZn1ajlut9YuVm6qoM +EXWVYk/3TVFogj8oSStBNIuIrdMxskU/lwKrnXdSOX9J2QTrbwCchQvC+GE8U/e f2NkjY3KJ7nJv7dk0swN9NtZW2c+CpNjmjF0ZuamouOgMqR0zg3fSzOuZV/AxV+t ihHJUuIGY5VbkLBc1707Hd/F3WODBIZfWATq/23X8QwZyNvDZkG1AOavg45FRgat Y3w+A5EZoiWZor77plMPBph4XV2v9sFnRizomeiPZEtggbGNS9La24yxB9mx+EZf PLUxi5oxNYOtkBFNiSSPVEoHlbGGEGkwRnCg0KWlqsrEPv6IbeK+X0yerwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtg7KkarKzR0QDQ2xW6sz5YZsrhMB8GA1UdIwQY MBaAFIQuF4qF1sMLVysgJhxE+Oekv8JyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEt ZTE4N2JlOWI2YzIzLzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEtZTE4N2JlOWI2YzIz LzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsP7ZqDPH LT3RTf9vxRcUMGSSmd5B8GT5Kb5B0gWJeTcQJ9AR9bdM9KIvxERfRke1od8Se3sV LF/3X3s1NtnZZKM31eemJsqGUIttDxgmdItrAkOGIDcVark2VG9g0Xtn2IEchSZz nxgs0+KPMsz0LMi8/mxoGpUEf+vk++aX33yS5wsNI1bebStt4CinOjB4U7BscfMH 8PiChUd3htpLy5WpMwnBW0qk3wkz7bZuX4ApdFmPkwK2aFSxXVRYPRSfoBByoF7R wlEGrMN3N9WWUQvA0hgj0WVFIGnWimkbx0XQPlqJpTpbodN9WBrI3O3lftY3czd6 H6HXKJXAXDikJw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:16 2025 by rpki-client