This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json) Hash identifier: WZMIwJbDEb0rh2kf66ViECD32BelH+RMmCAgfBvo6l0= Subject key identifier: F9:02:40:32:CA:23:41:A1:4F:C8:E0:72:17:31:76:79:61:81:C8:95 Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Certificate serial: 019AF42E6046ECB01C0CD870BC9036B1C190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft Manifest number: 1263 Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=) 2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=) 3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: RrEfQkxhfB8iiqv2ZhqF2okJHCcun0LjMoca5DlHYR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:60:46:ec:b0:1c:0c:d8:70:bc:90:36:b1:c1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=f9024032ca2341a14fc8e072173176796181c895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:35:45:de:9c:0c:5c:2f:03:d6:20:ca:48: c8:59:af:91:be:98:75:f4:ba:63:d7:91:e8:52:45: a8:75:29:85:ff:5a:ee:1e:b3:43:00:28:cd:a0:b4: 85:b5:2f:ad:bd:a4:e3:ec:44:a8:8a:a4:09:a5:48: bf:7c:f4:70:dd:81:8b:7a:2f:b7:d1:a3:69:70:e3: 30:87:0d:4f:9e:c6:1b:26:7e:53:5f:b8:0c:cb:b8: 8b:c0:24:0e:35:97:66:04:5f:c3:11:e9:55:cb:10: 00:ad:55:51:90:ae:c3:d4:59:43:ae:17:c0:96:81: 4c:e4:b9:0b:ca:63:d5:42:52:c6:a9:ba:cd:82:5f: c2:71:2f:92:f9:92:9f:d5:7d:57:5d:c0:43:94:38: c8:61:52:33:35:a3:ef:68:e0:fc:4b:4f:2e:c6:26: d0:b9:e8:b6:63:e2:68:12:9b:cc:df:02:cc:a0:0f: 61:0e:29:49:95:e8:80:b0:c8:7e:d6:eb:9a:45:42: 2f:7c:9f:74:58:cc:4d:05:83:90:ba:ff:3b:7a:44: 37:e7:51:79:d4:a9:d6:aa:06:8b:23:b6:75:ff:84: 34:a0:86:6e:5c:d1:d4:f4:65:75:69:b0:8e:6a:77: 2e:c2:f3:d2:37:7f:3a:a8:a8:2b:1f:a0:a6:c1:0b: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:02:40:32:CA:23:41:A1:4F:C8:E0:72:17:31:76:79:61:81:C8:95 X509v3 Authority Key Identifier: keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ca:39:4d:4b:1a:50:97:83:9a:9a:ca:13:e4:ea:62:8a:a9: 6e:5e:00:c9:71:fe:ab:29:e1:a8:a1:18:c7:b2:4b:d2:f9:57: 20:6f:83:98:a1:d8:d0:0e:45:c6:28:71:84:a1:71:fe:05:9c: 71:19:2c:46:8f:96:1e:48:a0:b4:ea:0b:43:f3:e9:38:98:89: 2a:95:d9:be:30:d2:29:99:8e:d0:f2:95:50:09:67:44:00:f6: 9f:56:43:99:33:d2:98:ee:17:32:93:44:50:f9:8d:9c:58:7d: 22:c7:32:51:34:db:ec:ac:b4:bd:5e:70:e3:03:42:1d:b3:c3: 48:51:6a:77:bb:34:12:e3:88:91:0a:c6:2e:e4:01:4d:ec:48: 41:96:7d:18:ec:61:bc:95:1d:a6:dc:32:27:63:ec:4a:dd:35: d0:c3:4c:5b:47:c2:93:e8:cc:22:90:e8:22:bf:29:d5:51:d2: fd:37:6e:9a:7c:db:ba:72:3b:92:21:35:53:ee:ec:07:db:32: b9:a6:3a:33:0c:f7:4a:69:ff:dc:31:77:cb:c0:39:c2:de:dd: 63:d8:b3:b7:db:b2:06:d1:47:f7:1b:4d:eb:45:51:06:db:c6: 68:b6:8c:74:a7:72:7e:96:3a:f3:29:a0:de:03:11:99:07:10: 63:a6:5f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmBG7LAcDNhwvJA2scGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj NzZhMzQwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD EyhmOTAyNDAzMmNhMjM0MWExNGZjOGUwNzIxNzMxNzY3OTYxODFjODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCY1Rd6cDFwvA9YgykjIWa+Rvph1 9Lpj15HoUkWodSmF/1ruHrNDACjNoLSFtS+tvaTj7ESoiqQJpUi/fPRw3YGLei+3 0aNpcOMwhw1PnsYbJn5TX7gMy7iLwCQONZdmBF/DEelVyxAArVVRkK7D1FlDrhfA loFM5LkLymPVQlLGqbrNgl/CcS+S+ZKf1X1XXcBDlDjIYVIzNaPvaOD8S08uxibQ uei2Y+JoEpvM3wLMoA9hDilJleiAsMh+1uuaRUIvfJ90WMxNBYOQuv87ekQ351F5 1KnWqgaLI7Z1/4Q0oIZuXNHU9GV1abCOancuwvPSN386qKgrH6CmwQu1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkCQDLKI0GhT8jgchcxdnlhgciVMB8GA1UdIwQY MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5 LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApso5TUsa UJeDmprKE+TqYoqpbl4AyXH+qynhqKEYx7JL0vlXIG+DmKHY0A5FxihxhKFx/gWc cRksRo+WHkigtOoLQ/PpOJiJKpXZvjDSKZmO0PKVUAlnRAD2n1ZDmTPSmO4XMpNE UPmNnFh9IscyUTTb7Ky0vV5w4wNCHbPDSFFqd7s0EuOIkQrGLuQBTexIQZZ9GOxh vJUdptwyJ2PsSt010MNMW0fCk+jMIpDoIr8p1VHS/TdumnzbunI7kiE1U+7sB9sy uaY6Mwz3Smn/3DF3y8A5wt7dY9izt9uyBtFH9xtN60VRBtvGaLaMdKdyfpY68ymg 3gMRmQcQY6ZflQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:56 2025 by rpki-client