This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json) Hash identifier: USRATxplDMqTDyf4INb4dVn2zKYUbhguRLLz5y9DFv8= Subject key identifier: 2D:2C:E4:FE:55:C7:30:E3:2B:2E:D4:A8:4C:45:8F:1B:4C:FA:39:68 Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d Certificate serial: 019B300C049D79F389115422DC303E9C7DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft Manifest number: 0D1A Signing time: Thu 18 Dec 2025 06:00:52 +0000 Manifest this update: Thu 18 Dec 2025 06:00:52 +0000 Manifest next update: Fri 19 Dec 2025 06:00:52 +0000 Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=) 2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: S1sV1OmdUs+ecPk8RlnK8x9oBU3YQKYxpUQbRtY43mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:04:9d:79:f3:89:11:54:22:dc:30:3e:9c:7d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d Validity Not Before: Dec 18 06:00:52 2025 GMT Not After : Dec 19 06:00:52 2025 GMT Subject: CN=2d2ce4fe55c730e32b2ed4a84c458f1b4cfa3968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:59:c2:36:f8:9f:28:29:90:9d:cc:36:68: 88:26:9a:55:3b:98:8f:89:a4:91:2a:53:f4:22:f1: e6:1d:a5:a3:8c:46:8b:68:9f:60:e7:df:ea:6a:bb: 51:ad:25:8d:3c:d4:02:ec:6d:b2:bb:53:59:9f:5c: ac:ef:a7:60:ce:b3:ad:f4:46:91:e0:dc:b6:55:9d: 0c:6a:e2:ff:8a:9d:3f:72:a5:5f:85:77:ef:28:55: 60:07:0a:10:5f:ef:3a:87:54:f5:ab:5f:6d:6b:de: 4a:6a:16:90:cb:bc:02:03:c3:db:0a:b8:a0:b0:90: d8:8d:56:fe:5d:81:51:cb:c5:78:7d:ca:19:35:ef: 96:59:a7:16:ee:a9:a9:ba:81:67:47:cc:1b:14:2a: 12:6c:0a:ab:b9:b6:ec:f4:b1:1e:1a:0b:0d:a9:da: 91:4a:8e:a6:76:41:2a:45:0c:e4:64:05:21:13:8d: 87:5b:3d:1a:64:fc:28:f4:3b:90:e6:91:7a:8a:e0: b7:38:1c:3c:05:f4:c7:0e:64:7c:ef:04:65:4e:d6: cf:fd:d9:59:39:52:18:d3:78:e1:fd:ea:7f:41:f7: 8e:b5:66:47:72:94:1e:66:34:b2:90:54:b2:0e:03: ea:ef:e2:cd:0a:73:14:6b:78:26:68:66:b2:1e:2c: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2C:E4:FE:55:C7:30:E3:2B:2E:D4:A8:4C:45:8F:1B:4C:FA:39:68 X509v3 Authority Key Identifier: keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0f:d7:e7:ea:83:ac:65:f0:be:cf:fa:b1:7e:1a:25:dc:fe: 15:d4:86:8c:f7:df:6b:c1:ed:00:82:19:e8:e9:53:c2:8e:c0: 7a:0e:31:66:45:f7:f7:df:d9:bc:7e:ba:07:f5:3f:1c:a9:44: 80:f9:4f:c9:15:07:0e:9c:f9:85:fc:01:69:2b:79:e0:c3:ec: 1b:b8:ea:7b:1e:4c:71:ca:0e:0b:90:e3:72:76:c0:04:33:43: ca:3e:47:d6:2c:37:40:d9:4b:da:6d:25:68:ed:07:aa:cc:1d: 7c:fe:e1:2e:c4:3a:fa:0e:88:66:f1:f6:5b:d1:d9:26:a0:4b: 40:86:41:36:2b:71:08:48:13:ea:b8:01:7c:66:db:9a:14:b0: c1:bb:65:03:2d:1c:94:6b:24:db:65:cf:6a:24:e3:49:a2:a6: 1d:7e:55:29:34:5b:77:88:f8:e2:99:69:5a:34:34:c3:6f:cb: 82:6a:20:1f:70:7a:2d:b3:f7:c9:48:8d:cf:80:c6:f0:a2:99: 1b:40:53:85:04:f5:33:b7:8f:fb:89:aa:b3:6b:61:c8:b1:71: 4c:db:39:d0:05:d4:b7:4a:e3:bc:bb:f5:43:73:75:43:5c:73: ef:b6:d7:c2:e0:01:0e:44:6e:44:d6:f6:02:4f:32:b8:95:76: a3:4c:27:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDASdefOJEVQi3DA+nH3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjM4NjI2MjBkNDY3YzhhNzlmOGY0NGVmMzViYjYwYWY4 MjNmOWQwHhcNMjUxMjE4MDYwMDUyWhcNMjUxMjE5MDYwMDUyWjAzMTEwLwYDVQQD EygyZDJjZTRmZTU1YzczMGUzMmIyZWQ0YTg0YzQ1OGYxYjRjZmEzOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CJZwjb4nygpkJ3MNmiIJppVO5iP iaSRKlP0IvHmHaWjjEaLaJ9g59/qartRrSWNPNQC7G2yu1NZn1ys76dgzrOt9EaR 4Ny2VZ0MauL/ip0/cqVfhXfvKFVgBwoQX+86h1T1q19ta95KahaQy7wCA8PbCrig sJDYjVb+XYFRy8V4fcoZNe+WWacW7qmpuoFnR8wbFCoSbAqrubbs9LEeGgsNqdqR So6mdkEqRQzkZAUhE42HWz0aZPwo9DuQ5pF6iuC3OBw8BfTHDmR87wRlTtbP/dlZ OVIY03jh/ep/QfeOtWZHcpQeZjSykFSyDgPq7+LNCnMUa3gmaGayHizNBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0s5P5VxzDjKy7UqExFjxtM+jloMB8GA1UdIwQY MBaAFIRjhiYg1GfIp5+PRO81u2Cvgj+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgt ZmU3YWQ3ZmM0Nzg5LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgtZmU3YWQ3ZmM0Nzg5 LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig/X5+qD rGXwvs/6sX4aJdz+FdSGjPffa8HtAIIZ6OlTwo7Aeg4xZkX399/ZvH66B/U/HKlE gPlPyRUHDpz5hfwBaSt54MPsG7jqex5MccoOC5DjcnbABDNDyj5H1iw3QNlL2m0l aO0HqswdfP7hLsQ6+g6IZvH2W9HZJqBLQIZBNitxCEgT6rgBfGbbmhSwwbtlAy0c lGsk22XPaiTjSaKmHX5VKTRbd4j44plpWjQ0w2/LgmogH3B6LbP3yUiNz4DG8KKZ G0BThQT1M7eP+4mqs2thyLFxTNs50AXUt0rjvLv1Q3N1Q1xz77bXwuABDkRuRNb2 Ak8yuJV2o0wnwQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:59:04 2025 by rpki-client