This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json) Hash identifier: Ifclr6p/mLVzWxksDskOj9js2Dkz0ENo0ioJPu8pi7o= Subject key identifier: 75:2E:96:1B:D7:44:4D:AD:9D:0D:02:3A:8A:AB:56:00:09:A3:CD:E7 Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d Certificate serial: 019AF23F9D94A4F1AA0C131A111D416308CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft Manifest number: 0CFA Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=) 2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: my+T5jznEcXHOjmfCUUCw17nmjKgt1XwWR+FQD6+Juc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9d:94:a4:f1:aa:0c:13:1a:11:1d:41:63:08:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=752e961bd7444dad9d0d023a8aab560009a3cde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d8:3b:fd:62:0e:77:dc:d0:6c:ae:3e:e5:e5: ab:10:7b:5e:87:5e:00:13:e3:3d:49:0a:35:af:46: 1f:12:81:fe:36:f6:c2:72:3f:34:52:3e:30:98:e4: 54:12:40:5b:15:8d:10:f3:6b:c4:6e:4c:a3:5c:6e: 0f:b2:64:66:85:b9:09:86:4e:db:64:b8:ff:19:f2: 46:09:44:62:3b:09:c0:eb:64:e2:10:18:3f:e9:13: 66:f2:3a:7a:7d:7a:c7:ad:f5:37:08:af:4b:79:55: 6a:a6:53:b5:dd:f7:ec:e7:92:10:49:ec:ca:16:16: 50:10:7d:13:e1:50:d4:e1:ee:f2:78:41:78:33:37: fa:de:6f:58:5e:82:ce:be:1d:81:c1:3e:9e:a8:34: 0f:a5:8b:37:b5:58:c6:35:1e:da:04:0c:ce:57:e7: f0:11:2c:d8:15:09:21:e2:47:8b:ae:ce:dd:d5:1e: a1:08:0b:f4:80:d0:6f:e3:98:d5:4e:cf:71:2d:86: 61:8f:c0:c0:fe:a7:fd:21:29:43:c6:53:99:39:7f: ff:5d:7f:58:05:e3:b2:67:71:06:0a:90:ff:94:b5: c3:84:b8:84:7f:22:f0:38:e7:60:32:4b:29:42:f6: 3d:be:e1:de:49:f1:55:4d:fc:34:01:2d:b3:cb:de: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2E:96:1B:D7:44:4D:AD:9D:0D:02:3A:8A:AB:56:00:09:A3:CD:E7 X509v3 Authority Key Identifier: keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:26:ef:72:c4:e6:07:2c:05:d1:77:78:2d:6e:f6:40:ab:4f: db:97:ec:8b:89:bf:de:49:1a:d5:68:94:9b:9e:cd:99:48:0a: 1d:f1:79:8c:b3:f9:95:68:5d:e6:f3:69:f7:9b:b4:4e:e5:ee: ac:ce:f8:6c:e2:9d:04:cb:ff:12:6b:32:4d:7b:8b:b2:c5:70: 7f:c8:8d:34:cd:04:4f:97:85:5a:bc:e0:c6:c5:e9:84:88:f2: 19:a1:f1:6f:e6:37:67:d3:91:10:7f:92:f5:ee:41:49:81:49: ac:06:d9:33:0b:5d:0f:0c:1d:c9:4b:2b:30:4a:79:f4:2f:d8: 82:a0:22:b0:80:6f:2c:5a:2e:24:b9:78:ac:53:20:0b:d6:21: 9b:0e:ae:a5:66:c1:78:8f:90:30:7b:f3:59:fc:6a:df:05:4e: cb:e4:37:31:59:32:2d:45:f8:60:40:5f:75:08:ea:17:e4:50: 70:e4:d1:ef:5a:62:2a:c7:cb:a8:b1:f8:41:ff:80:32:5d:bd: 94:6f:14:c2:f3:7b:35:81:7c:19:e7:c6:9d:ec:c2:b4:dd:d5: db:d6:42:37:49:b8:98:95:21:f6:f1:5c:f8:5a:c1:8f:e9:1e: e8:4d:cc:0a:be:f6:53:b8:ae:a8:d5:4c:19:44:d5:8a:6f:ba: e9:45:3d:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP52UpPGqDBMaER1BYwjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjM4NjI2MjBkNDY3YzhhNzlmOGY0NGVmMzViYjYwYWY4 MjNmOWQwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg3NTJlOTYxYmQ3NDQ0ZGFkOWQwZDAyM2E4YWFiNTYwMDA5YTNjZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ng7/WIOd9zQbK4+5eWrEHteh14A E+M9SQo1r0YfEoH+NvbCcj80Uj4wmORUEkBbFY0Q82vEbkyjXG4PsmRmhbkJhk7b ZLj/GfJGCURiOwnA62TiEBg/6RNm8jp6fXrHrfU3CK9LeVVqplO13ffs55IQSezK FhZQEH0T4VDU4e7yeEF4Mzf63m9YXoLOvh2BwT6eqDQPpYs3tVjGNR7aBAzOV+fw ESzYFQkh4keLrs7d1R6hCAv0gNBv45jVTs9xLYZhj8DA/qf9ISlDxlOZOX//XX9Y BeOyZ3EGCpD/lLXDhLiEfyLwOOdgMkspQvY9vuHeSfFVTfw0AS2zy96IxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUulhvXRE2tnQ0COoqrVgAJo83nMB8GA1UdIwQY MBaAFIRjhiYg1GfIp5+PRO81u2Cvgj+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgt ZmU3YWQ3ZmM0Nzg5LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgtZmU3YWQ3ZmM0Nzg5 LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCbvcsTm BywF0Xd4LW72QKtP25fsi4m/3kka1WiUm57NmUgKHfF5jLP5lWhd5vNp95u0TuXu rM74bOKdBMv/EmsyTXuLssVwf8iNNM0ET5eFWrzgxsXphIjyGaHxb+Y3Z9OREH+S 9e5BSYFJrAbZMwtdDwwdyUsrMEp59C/YgqAisIBvLFouJLl4rFMgC9Yhmw6upWbB eI+QMHvzWfxq3wVOy+Q3MVkyLUX4YEBfdQjqF+RQcOTR71piKsfLqLH4Qf+AMl29 lG8UwvN7NYF8GefGnezCtN3V29ZCN0m4mJUh9vFc+FrBj+ke6E3MCr72U7iuqNVM GUTVim+66UU9hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:08 2025 by rpki-client