This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json) Hash identifier: 09itRjG70pkLNNP4aXvRrmNs/rMWAUT9VXTAwVRFV9k= Subject key identifier: 7F:AB:E5:88:7A:2F:CD:83:3A:D4:C6:3F:9F:1F:74:70:F8:1F:D6:B2 Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Certificate serial: 019AF464DE908D97D17F475B12CC3D071B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft Manifest number: 0DF9 Signing time: Sat 06 Dec 2025 16:00:42 +0000 Manifest this update: Sat 06 Dec 2025 16:00:42 +0000 Manifest next update: Sun 07 Dec 2025 16:00:42 +0000 Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: 1nqfzMWSuXk8IKVKlfiZlk1eSGIHPSj5lnxecaBkcys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:de:90:8d:97:d1:7f:47:5b:12:cc:3d:07:1b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Validity Not Before: Dec 6 16:00:42 2025 GMT Not After : Dec 7 16:00:42 2025 GMT Subject: CN=7fabe5887a2fcd833ad4c63f9f1f7470f81fd6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:91:d5:3a:33:6d:0b:2d:d4:40:85:7f:79: 0d:3d:ed:85:54:34:39:31:79:7d:67:45:08:d3:75: 73:a3:2d:2e:9f:4d:2a:9a:d0:ea:18:f0:da:8a:af: d0:72:18:13:a5:17:bd:93:ff:cc:3c:31:a6:81:0c: e7:6b:0e:91:b7:a1:e6:d1:b6:a9:3e:ce:bf:76:9a: 71:2b:81:9b:3a:b3:c1:9d:53:9c:99:55:d9:5b:bc: 43:0e:ba:4a:fe:50:4f:e5:1f:3d:89:ca:60:38:76: ab:27:cd:cf:5d:2d:85:27:30:d5:e6:a4:10:9b:46: 63:06:cf:71:89:2e:02:3c:ed:11:c8:e4:66:c3:b8: 18:67:36:83:0a:89:f2:c2:2b:19:23:95:a6:ea:63: ac:30:d9:87:17:ea:6b:a6:3e:dc:66:62:53:f8:c8: 5f:9d:9a:6e:0b:0e:95:07:06:93:51:31:47:52:9d: c9:8b:e7:13:43:aa:b6:4c:49:f1:20:c4:61:9b:14: a7:29:03:81:6e:cf:ca:34:89:87:7e:2c:20:5e:24: fb:aa:1b:54:53:77:38:1a:0a:56:12:7f:80:6c:1f: a0:13:de:08:1e:47:d2:06:95:e8:28:2a:e7:72:a7: 99:cd:95:69:69:87:32:3f:57:bd:46:f3:0a:3d:af: 26:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AB:E5:88:7A:2F:CD:83:3A:D4:C6:3F:9F:1F:74:70:F8:1F:D6:B2 X509v3 Authority Key Identifier: keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2e:6e:bb:91:a7:65:e1:86:0d:37:58:6e:4e:39:d2:39:19: 7b:0c:eb:74:33:97:3f:e8:24:73:6c:2c:53:bd:c6:bf:6b:a5: f0:b6:44:c9:74:90:78:a6:83:82:1e:51:6e:d0:1e:1f:14:20: 91:e9:41:c9:7b:3b:c6:fa:e6:78:44:bc:a0:71:68:27:bf:69: 71:e2:38:51:17:01:f0:68:f7:5a:0e:70:ef:ab:31:24:38:48: 2b:e3:6d:e9:da:ff:91:a3:83:6d:29:29:c5:7b:0a:2f:04:32: 8f:be:1f:07:02:da:c0:3c:b6:23:1d:85:02:ff:67:1d:88:2e: 31:ce:0d:fd:09:dd:ea:53:89:8e:aa:21:04:bc:e1:12:07:61: 79:f9:93:93:1e:d8:d6:14:50:b7:7e:07:68:14:bb:63:13:f8: 22:66:3d:a4:a1:47:66:5b:58:ed:71:c8:84:af:08:16:3b:04: f5:c6:d8:98:a7:86:7c:91:9b:e6:89:17:2f:b6:11:41:fc:72: 15:d1:11:e7:0b:6d:fa:4c:76:19:00:40:12:e3:dc:62:af:23: 7c:a5:44:0c:36:f5:9f:f2:2d:99:a3:b1:bb:ea:15:a2:1d:94: b6:19:fb:3d:da:50:8d:95:ab:d4:ba:09:59:6a:2e:ff:ec:a4: 69:51:df:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZN6QjZfRf0dbEsw9BxtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjFlYWE1YzMzMWJlY2YzMjc3MDFhMmViZGNmMWExYmI1 ZjA3MGMwHhcNMjUxMjA2MTYwMDQyWhcNMjUxMjA3MTYwMDQyWjAzMTEwLwYDVQQD Eyg3ZmFiZTU4ODdhMmZjZDgzM2FkNGM2M2Y5ZjFmNzQ3MGY4MWZkNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uqR1TozbQst1ECFf3kNPe2FVDQ5 MXl9Z0UI03Vzoy0un00qmtDqGPDaiq/QchgTpRe9k//MPDGmgQznaw6Rt6Hm0bap Ps6/dppxK4GbOrPBnVOcmVXZW7xDDrpK/lBP5R89icpgOHarJ83PXS2FJzDV5qQQ m0ZjBs9xiS4CPO0RyORmw7gYZzaDConywisZI5Wm6mOsMNmHF+prpj7cZmJT+Mhf nZpuCw6VBwaTUTFHUp3Ji+cTQ6q2TEnxIMRhmxSnKQOBbs/KNImHfiwgXiT7qhtU U3c4GgpWEn+AbB+gE94IHkfSBpXoKCrncqeZzZVpaYcyP1e9RvMKPa8mqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+r5Yh6L82DOtTGP58fdHD4H9ayMB8GA1UdIwQY MBaAFGvx6qXDMb7PMncBouvc8aG7XwcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQt OTYxZWNjM2E2Y2QwLzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQtOTYxZWNjM2E2Y2Qw LzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOi5uu5Gn ZeGGDTdYbk450jkZewzrdDOXP+gkc2wsU73Gv2ul8LZEyXSQeKaDgh5RbtAeHxQg kelByXs7xvrmeES8oHFoJ79pceI4URcB8Gj3Wg5w76sxJDhIK+Nt6dr/kaODbSkp xXsKLwQyj74fBwLawDy2Ix2FAv9nHYguMc4N/Qnd6lOJjqohBLzhEgdhefmTkx7Y 1hRQt34HaBS7YxP4ImY9pKFHZltY7XHIhK8IFjsE9cbYmKeGfJGb5okXL7YRQfxy FdER5wtt+kx2GQBAEuPcYq8jfKVEDDb1n/ItmaOxu+oVoh2Uthn7PdpQjZWr1LoJ WWou/+ykaVHfTg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:26 2025 by rpki-client