This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json) Hash identifier: VhyPDKdXFWtDQ3w27jQsxQiUtFvls80f92evWIYl5GQ= Subject key identifier: 43:34:D0:06:2B:45:1D:27:4F:FF:AB:76:F5:BC:C6:68:14:BA:3B:4F Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac Certificate serial: 019AF12DEFFC6C18FE4810031304F9A187A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: 2yxKt3CKmW9B+yiVb6jueuJTTkkwKDTCOS/Ru1payyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ef:fc:6c:18:fe:48:10:03:13:04:f9:a1:87:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=4334d0062b451d274fffab76f5bcc66814ba3b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:8c:43:c9:69:72:f7:67:fc:1d:4e:33:6e: aa:17:d1:65:55:77:ec:0a:7b:55:94:f4:f5:db:8b: 4b:91:d5:14:aa:82:d1:b5:23:93:f5:14:bf:d4:4b: 67:14:00:44:a1:f5:2a:5b:3d:97:8e:e8:a1:a5:39: c7:92:2f:08:04:2f:9e:f1:01:4d:76:68:75:a9:52: 34:6e:fe:16:49:eb:0f:ff:d7:04:6c:d6:cd:1b:fe: 56:24:3f:3c:7f:72:68:a2:ef:a4:75:ff:1c:e4:f0: 30:a9:c2:db:5d:ec:ea:3f:c9:20:96:6d:c0:50:ae: 66:65:12:63:1f:73:a3:68:92:81:f0:7c:30:69:29: ab:8b:e6:79:9a:66:e2:16:4a:57:25:6e:62:bc:da: 2e:a5:3a:e7:3b:9f:79:d0:81:d6:bf:9f:05:4f:6b: 84:7f:33:92:fd:a0:f9:de:c4:1e:3c:18:73:cc:22: 84:0e:6f:f2:6f:e4:26:d6:bf:17:d7:40:85:9b:7b: 7d:32:c2:90:11:26:b1:8d:bb:a9:73:c9:b6:12:d3: 4d:39:a5:46:58:6d:27:68:e9:2a:c0:69:43:ce:cc: c2:b9:85:e9:40:fb:cc:ee:1e:f7:29:a6:c8:b5:27: 6d:1a:f5:91:fb:e9:54:fd:d1:76:ca:be:74:0d:a2: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:D0:06:2B:45:1D:27:4F:FF:AB:76:F5:BC:C6:68:14:BA:3B:4F X509v3 Authority Key Identifier: keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:dc:3b:83:24:5d:6d:63:70:a0:16:52:93:cc:89:e1:92:3f: f1:74:d4:ee:ac:bc:80:c5:52:aa:dc:ea:b0:08:6b:05:2d:0c: 96:78:80:0c:c9:19:ad:0d:0f:9b:38:37:4d:7d:48:24:e1:f9: 2e:ec:40:1d:cc:69:6e:2e:a4:57:c2:54:ed:f4:f3:77:8f:9d: 36:18:f7:88:ba:8d:96:96:73:2b:a1:83:19:29:8a:6f:a0:16: 00:c6:7c:06:3f:01:37:ee:08:cc:3d:76:50:c3:cd:57:5a:de: 63:b8:06:fa:91:4c:17:e9:4c:13:0c:99:38:a9:b4:52:51:97: dc:6a:ba:d2:f6:d1:f4:10:ce:b6:a5:49:c4:fd:6e:2d:d3:e9: 52:6e:93:b1:38:38:2d:05:66:16:c5:b6:fb:5f:42:51:20:b0: 02:56:46:0b:9e:e6:04:69:7a:65:ab:73:b7:f8:71:6f:b7:ad: 42:3a:ca:f5:18:be:4f:ec:9c:f6:a6:0e:fb:cd:cd:2b:b5:6f: 17:c5:79:6b:8b:a5:b0:b6:3c:60:43:6a:da:5e:64:2a:5b:12: 0c:c3:47:28:12:d6:42:88:aa:cb:4d:51:7d:cc:68:1f:c6:a9: d0:02:b7:d4:68:06:11:92:3c:dd:9c:b3:ca:c4:d6:58:78:5f: ab:64:e7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe/8bBj+SBADEwT5oYeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MzRmOWQ0OTNhY2NiNjgwOTAwZjQ0N2ExZjJjOWY3YjJi MzU4YWMwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD Eyg0MzM0ZDAwNjJiNDUxZDI3NGZmZmFiNzZmNWJjYzY2ODE0YmEzYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrGMQ8lpcvdn/B1OM26qF9FlVXfs CntVlPT124tLkdUUqoLRtSOT9RS/1EtnFABEofUqWz2XjuihpTnHki8IBC+e8QFN dmh1qVI0bv4WSesP/9cEbNbNG/5WJD88f3Joou+kdf8c5PAwqcLbXezqP8kglm3A UK5mZRJjH3OjaJKB8HwwaSmri+Z5mmbiFkpXJW5ivNoupTrnO5950IHWv58FT2uE fzOS/aD53sQePBhzzCKEDm/yb+Qm1r8X10CFm3t9MsKQESaxjbupc8m2EtNNOaVG WG0naOkqwGlDzszCuYXpQPvM7h73KabItSdtGvWR++lU/dF2yr50DaJpKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM00AYrRR0nT/+rdvW8xmgUujtPMB8GA1UdIwQY MBaAFIY0+dSTrMtoCQD0R6Hyyfeys1isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYt YjQzMGJkMjFhMjliLzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYtYjQzMGJkMjFhMjli LzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9w7gyRd bWNwoBZSk8yJ4ZI/8XTU7qy8gMVSqtzqsAhrBS0MlniADMkZrQ0Pmzg3TX1IJOH5 LuxAHcxpbi6kV8JU7fTzd4+dNhj3iLqNlpZzK6GDGSmKb6AWAMZ8Bj8BN+4IzD12 UMPNV1reY7gG+pFMF+lMEwyZOKm0UlGX3Gq60vbR9BDOtqVJxP1uLdPpUm6TsTg4 LQVmFsW2+19CUSCwAlZGC57mBGl6Zatzt/hxb7etQjrK9Ri+T+yc9qYO+83NK7Vv F8V5a4ulsLY8YENq2l5kKlsSDMNHKBLWQoiqy01RfcxoH8ap0AK31GgGEZI83Zyz ysTWWHhfq2TnYA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:10 2025 by rpki-client