This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json) Hash identifier: pvDsoLMw+gsr7hH+9LEpSgaqkS62qJOcojKNd7kIsk8= Subject key identifier: 0C:88:89:B0:19:EC:E8:C3:92:E9:27:C5:62:37:73:66:83:6B:38:DA Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Certificate serial: 019AF20958343F79CD7A3892E6FF6ADBAFDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: cod1MAQQarnkA7xJpng/9vzrNHBfx0HTdLmAZ+oHrTc=) 2: lge_NhHNBFIDg0XdYly6isNJOS4.roa (hash: pDkiQ0N7P9YYqBWB2tNQa40hEDOK8eDvKfQ/EMtchvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:34:3f:79:cd:7a:38:92:e6:ff:6a:db:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=0c8889b019ece8c392e927c562377366836b38da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:98:39:96:31:a7:e5:31:00:ef:88:d5:f6: 46:f6:14:04:87:2e:8b:14:c4:89:cb:d2:46:97:09: 7c:08:94:c4:8f:7a:8b:b6:eb:16:46:bd:a0:2a:d2: b8:5e:8a:c5:da:39:84:66:b9:36:86:fb:99:81:2c: a2:20:e6:c6:b9:c8:aa:66:0d:96:55:8b:3a:98:27: e9:19:ef:09:3e:1b:f7:0d:1e:4d:27:84:3f:bc:15: 46:90:ef:3f:35:0c:76:d7:c6:72:73:1a:cf:8f:93: 75:84:02:51:87:9b:ba:06:cc:87:d2:77:5e:30:db: 6c:04:47:86:70:88:a5:cd:8c:28:23:66:14:ef:f8: 03:3f:34:e0:3d:d0:87:e6:a8:7d:2d:f0:11:aa:54: 5c:bd:6f:95:db:cb:be:38:c6:fa:8b:fd:22:3b:8b: 45:5d:a1:87:bb:37:38:16:9a:45:3c:25:3c:c8:9e: 77:8f:85:e5:d2:4d:f7:fe:3d:6f:db:68:d5:bf:c0: 3c:d4:a2:dd:20:e3:97:f2:21:53:2b:b4:b9:3c:fb: 50:b1:5d:f0:6f:82:42:b8:d2:76:b9:42:f9:4a:f0: 4c:61:c3:d6:b2:61:aa:e6:52:84:c7:3d:70:61:ce: 28:8a:b2:cf:4d:d1:b1:fa:2f:49:a7:03:bc:85:fa: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:89:B0:19:EC:E8:C3:92:E9:27:C5:62:37:73:66:83:6B:38:DA X509v3 Authority Key Identifier: keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:05:ec:44:e6:a0:e3:84:5e:7d:2f:91:ca:d6:e6:5e:45:88: 04:1b:35:9a:9c:2f:49:55:f0:55:6e:e3:c4:76:af:3f:f2:2f: d5:b8:07:02:9e:b2:07:40:3b:d9:a9:76:90:bc:9c:52:a6:45: ab:7f:86:95:72:f2:37:a0:9b:b7:5e:b6:22:51:7e:aa:5a:0e: ef:0c:5f:e1:bf:f2:70:ae:a0:88:3b:8e:57:05:9a:c3:f3:d8: 89:6f:d3:50:a2:4b:03:af:e4:07:6e:e7:eb:1d:1d:37:5e:0c: 76:36:49:c3:3b:ae:f7:ee:fe:7d:20:20:54:c9:6a:5f:e9:17: ca:35:e5:16:9b:47:b5:c5:d9:11:2f:20:b7:4b:20:20:4c:db: 6a:4f:c3:94:8f:03:3e:22:47:25:1d:f8:90:1a:26:b9:0f:d3: 72:4c:71:d6:2e:ba:2f:97:86:e9:fb:78:f6:e2:c7:6d:0b:ea: 2e:cd:ae:fb:b3:0e:6e:8f:85:a3:08:f5:2f:87:7e:87:5f:02: 5b:51:43:ea:db:3e:34:14:30:a9:0b:2f:29:6e:8f:80:30:66: 59:cc:e0:8d:04:74:19:dc:b2:43:57:32:71:2e:95:69:ff:f2: 87:62:7f:61:6f:c4:f1:85:a2:f6:37:41:32:c8:6e:13:a7:70: b5:da:c9:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVg0P3nNejiS5v9q26/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWFjZTA2NmE0NGVkMmY5NWZlNmJjMmQwYTdkYTQxMjc2 M2JmMmEwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EygwYzg4ODliMDE5ZWNlOGMzOTJlOTI3YzU2MjM3NzM2NjgzNmIzOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2OYOZYxp+UxAO+I1fZG9hQEhy6L FMSJy9JGlwl8CJTEj3qLtusWRr2gKtK4XorF2jmEZrk2hvuZgSyiIObGuciqZg2W VYs6mCfpGe8JPhv3DR5NJ4Q/vBVGkO8/NQx218ZycxrPj5N1hAJRh5u6BsyH0nde MNtsBEeGcIilzYwoI2YU7/gDPzTgPdCH5qh9LfARqlRcvW+V28u+OMb6i/0iO4tF XaGHuzc4FppFPCU8yJ53j4Xl0k33/j1v22jVv8A81KLdIOOX8iFTK7S5PPtQsV3w b4JCuNJ2uUL5SvBMYcPWsmGq5lKExz1wYc4oirLPTdGx+i9JpwO8hfrwhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyIibAZ7OjDkuknxWI3c2aDazjaMB8GA1UdIwQY MBaAFISazgZqRO0vlf5rwtCn2kEnY78qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTIt ZjdjNDY1N2I3YjhkLzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8wYTU4MTctYmE4NS00MjQ0LWEwNTItZjdjNDY1N2I3Yjhk LzEvaEpyT0JtcEU3Uy1WX212QzBLZmFRU2RqdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQXsROag 44RefS+RytbmXkWIBBs1mpwvSVXwVW7jxHavP/Iv1bgHAp6yB0A72al2kLycUqZF q3+GlXLyN6Cbt162IlF+qloO7wxf4b/ycK6giDuOVwWaw/PYiW/TUKJLA6/kB27n 6x0dN14MdjZJwzuu9+7+fSAgVMlqX+kXyjXlFptHtcXZES8gt0sgIEzbak/DlI8D PiJHJR34kBomuQ/Tckxx1i66L5eG6ft49uLHbQvqLs2u+7MObo+Fowj1L4d+h18C W1FD6ts+NBQwqQsvKW6PgDBmWczgjQR0GdyyQ1cycS6Vaf/yh2J/YW/E8YWi9jdB MshuE6dwtdrJ/w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:30 2025 by rpki-client