This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json) Hash identifier: 8mZme9EkDs9POawgc6vu3BSU7onB+/6A7IWA1JUEp58= Subject key identifier: 76:57:49:E0:93:F8:7E:3A:5C:14:12:38:E3:9F:6D:4D:05:D6:37:EE Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7 Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7 Certificate serial: 019AF208F4AC1B1425A26584611AE7A52328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft Manifest number: 16BA Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=) 2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: MzjhfKZ09uSW9fqDuJpcMGdipaVeFRJxPDLHAN9g8y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f4:ac:1b:14:25:a2:65:84:61:1a:e7:a5:23:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=765749e093f87e3a5c141238e39f6d4d05d637ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:58:ee:35:a2:e0:51:02:f3:03:90:23:3d: d7:ef:f5:ce:9e:37:e1:1e:b9:e7:87:bd:aa:25:94: 4c:8a:b4:b4:c9:3c:ac:7b:90:a6:ee:f0:60:d3:a2: 80:c4:f7:7c:38:b2:d4:ef:1a:79:a2:e1:64:76:6a: 9c:39:8b:7d:b9:6e:89:50:06:a0:dd:d4:b4:6e:49: 22:d1:f3:9c:7d:1c:c4:77:50:7f:ef:fa:0b:90:23: 13:2f:5d:5f:32:29:27:ba:8b:a7:18:27:1e:00:1a: c8:ce:a9:ba:09:63:a2:33:06:a4:95:52:1a:09:00: ab:ca:1b:99:f9:e4:0d:7b:45:a0:a9:c4:61:ba:9c: f6:98:83:91:fc:04:23:5b:8d:f0:59:27:02:e9:9a: 8b:9b:8d:c1:8d:7c:aa:d4:dc:b6:38:15:92:21:9c: e7:9e:50:03:fb:2d:fd:a8:a6:5b:4f:03:16:cd:75: ad:ac:53:93:1d:e9:7c:d3:92:d8:0e:29:67:df:83: be:98:eb:40:16:12:91:ab:8e:f9:10:dc:a4:f6:32: fd:45:4d:60:37:2a:2b:a9:10:9d:0b:75:e6:11:41: b1:40:5c:47:0d:7c:68:7d:0d:d2:28:13:f6:f6:23: 29:b4:51:d6:c6:25:17:36:a0:4f:62:88:ac:9c:0f: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:49:E0:93:F8:7E:3A:5C:14:12:38:E3:9F:6D:4D:05:D6:37:EE X509v3 Authority Key Identifier: keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:5c:42:9f:3e:3c:fa:19:8b:8b:46:37:34:28:b6:7c:5d:4d: c1:5a:22:59:fd:c6:b3:4c:55:72:46:ca:b6:22:98:68:0b:ae: 38:00:12:54:6c:40:82:6a:29:da:d7:6f:13:de:68:98:fb:ee: 1c:d9:55:2b:f8:e8:99:3a:35:a2:e8:fd:66:cc:88:f1:1b:17: 09:4e:78:33:31:df:f2:5f:63:a3:61:c4:cf:77:73:bf:4d:44: 0d:03:1e:c5:43:15:52:25:b9:d7:08:ca:6b:b4:93:34:ec:64: 6b:73:b1:d4:3d:5a:90:20:54:cc:35:fb:03:9c:56:42:75:98: 16:d6:be:dc:7f:eb:15:02:31:73:82:04:c1:e4:29:6c:1b:ef: c2:fa:db:74:df:7b:6d:a7:f4:e7:15:06:57:7d:14:90:f6:5f: b3:1f:4f:d9:d7:e7:55:9d:cc:a7:5d:cb:e0:60:38:a6:13:b1: 7f:00:3f:c2:92:b9:50:b9:8a:d0:13:2a:18:ce:e1:dd:31:fb: 46:b9:c9:56:ae:d5:2b:e5:35:ee:b9:b5:52:ec:72:d2:18:59: 7c:28:d7:fe:3d:b1:73:1d:d3:08:25:5b:1e:d5:4b:86:5e:db: b7:fd:01:d0:25:c8:4d:3d:5c:a4:9c:5f:32:9d:37:c7:2f:95: fc:a7:15:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPSsGxQlomWEYRrnpSMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5 NTA2ZjcwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD Eyg3NjU3NDllMDkzZjg3ZTNhNWMxNDEyMzhlMzlmNmQ0ZDA1ZDYzN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30pY7jWi4FEC8wOQIz3X7/XOnjfh Hrnnh72qJZRMirS0yTyse5Cm7vBg06KAxPd8OLLU7xp5ouFkdmqcOYt9uW6JUAag 3dS0bkki0fOcfRzEd1B/7/oLkCMTL11fMiknuounGCceABrIzqm6CWOiMwaklVIa CQCryhuZ+eQNe0WgqcRhupz2mIOR/AQjW43wWScC6ZqLm43BjXyq1Ny2OBWSIZzn nlAD+y39qKZbTwMWzXWtrFOTHel805LYDiln34O+mOtAFhKRq475ENyk9jL9RU1g NyorqRCdC3XmEUGxQFxHDXxofQ3SKBP29iMptFHWxiUXNqBPYoisnA+UgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZXSeCT+H46XBQSOOOfbU0F1jfuMB8GA1UdIwQY MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt MDU5ZGJjYzhkY2VmLzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFxCnz48 +hmLi0Y3NCi2fF1NwVoiWf3Gs0xVckbKtiKYaAuuOAASVGxAgmop2tdvE95omPvu HNlVK/jomTo1ouj9ZsyI8RsXCU54MzHf8l9jo2HEz3dzv01EDQMexUMVUiW51wjK a7STNOxka3Ox1D1akCBUzDX7A5xWQnWYFta+3H/rFQIxc4IEweQpbBvvwvrbdN97 baf05xUGV30UkPZfsx9P2dfnVZ3Mp13L4GA4phOxfwA/wpK5ULmK0BMqGM7h3TH7 RrnJVq7VK+U17rm1Uuxy0hhZfCjX/j2xcx3TCCVbHtVLhl7bt/0B0CXITT1cpJxf Mp03xy+V/KcVWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:45 2025 by rpki-client