This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json) Hash identifier: lplDtVMeQAmux7d8HDqJGLjl9sdi1uLsgJ6BTK30+ng= Subject key identifier: 65:1E:C3:C7:9B:7A:94:B9:C1:9D:AA:38:D7:DB:5D:7B:C9:5A:50:A2 Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Certificate serial: 019AF2097061CAEC01F6D6FBF32CC14B54F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft Manifest number: 0829 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=) 2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: BMUdIQGACR6yZ9cHIBFFtc6AYdOcbtjxOymAFGzk0Iw=) 3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:70:61:ca:ec:01:f6:d6:fb:f3:2c:c1:4b:54:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=651ec3c79b7a94b9c19daa38d7db5d7bc95a50a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:b0:10:f1:a3:dc:23:c1:89:3d:68:aa:69: c2:06:2d:08:b8:3d:d5:58:4f:5b:64:d8:fc:12:33: 5f:b1:6c:21:b6:9a:85:33:50:1b:60:f2:8e:03:0d: b1:df:93:4d:80:1c:b1:7e:92:48:4c:bb:a6:98:8c: 52:15:f5:3b:2c:73:37:d3:16:9a:6c:7a:5b:16:a7: a7:6f:af:39:ad:a3:1a:e8:4d:09:aa:70:8b:09:31: b0:85:b0:69:66:55:98:3f:d2:5d:b1:f4:54:8c:71: 33:a2:71:a8:a1:04:c1:12:6f:2d:c0:5c:c9:d1:db: a3:c9:9a:4a:de:aa:37:69:13:b7:62:80:40:f5:bc: 88:6d:12:22:ce:1e:17:89:80:9f:f5:66:c1:55:aa: 76:94:cb:fa:ab:9f:0e:20:1b:8b:91:50:73:fa:76: 76:82:d4:24:98:36:90:ba:76:ce:55:9f:e5:3c:0c: a3:91:ad:d0:74:25:c8:50:3a:50:e9:20:36:24:e0: 64:47:b1:9a:04:08:7a:7d:cf:2c:80:1a:ee:9b:c5: 55:3c:de:a1:f5:d4:13:1d:9d:a7:f9:bf:5b:d9:d8: d8:bf:df:14:9b:dd:7b:28:90:ac:fe:44:55:01:bf: 6e:fc:54:f2:8a:18:ef:c2:76:f6:e0:fb:17:74:af: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1E:C3:C7:9B:7A:94:B9:C1:9D:AA:38:D7:DB:5D:7B:C9:5A:50:A2 X509v3 Authority Key Identifier: keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:88:8a:cf:f5:8e:26:6e:13:ab:37:a9:d0:39:e9:de:b5:9b: 6d:1e:d7:e4:32:ce:45:06:92:a6:80:92:1e:18:0d:a3:de:8f: 87:78:48:0b:39:0c:0b:cc:a8:30:12:e8:73:48:3f:41:58:04: cf:3d:09:0e:43:40:38:6d:64:07:08:d4:86:33:c7:58:87:56: 0b:0c:55:d9:f6:be:5e:83:f3:d3:bb:24:04:75:66:a8:52:7b: 4e:48:f5:d7:2b:84:76:04:f1:2f:41:7b:32:e1:8a:71:e7:94: b2:34:ec:1e:a7:0f:22:92:50:91:7c:ea:98:01:c9:0a:16:b5: b7:b9:04:80:09:98:6c:2f:d3:8d:2b:a5:56:76:cb:29:4f:f2: 43:3a:5a:b6:6a:07:80:b4:15:fd:f4:da:2d:39:ea:be:be:bd: dc:89:d1:b4:b5:9b:12:f8:8f:73:0d:34:42:f0:26:67:d1:81: fd:7d:3f:0b:a9:dc:36:d7:64:a7:31:1f:6a:e6:c6:79:c7:73: c0:57:66:0f:71:a2:ca:58:b2:1e:94:a7:d6:85:81:58:e4:d1: af:d6:58:f5:5b:b1:b9:b7:fc:6d:1c:92:8f:29:0f:5e:8f:e5: 02:3a:ae:0e:6c:3b:f5:21:a5:36:c0:89:5d:3a:c1:a5:0b:58: 47:a4:e6:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXBhyuwB9tb78yzBS1TzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3 NTk1M2EwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD Eyg2NTFlYzNjNzliN2E5NGI5YzE5ZGFhMzhkN2RiNWQ3YmM5NWE1MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsmwEPGj3CPBiT1oqmnCBi0IuD3V WE9bZNj8EjNfsWwhtpqFM1AbYPKOAw2x35NNgByxfpJITLummIxSFfU7LHM30xaa bHpbFqenb685raMa6E0JqnCLCTGwhbBpZlWYP9JdsfRUjHEzonGooQTBEm8twFzJ 0dujyZpK3qo3aRO3YoBA9byIbRIizh4XiYCf9WbBVap2lMv6q58OIBuLkVBz+nZ2 gtQkmDaQunbOVZ/lPAyjka3QdCXIUDpQ6SA2JOBkR7GaBAh6fc8sgBrum8VVPN6h 9dQTHZ2n+b9b2djYv98Um917KJCs/kRVAb9u/FTyihjvwnb24PsXdK+WJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUew8ebepS5wZ2qONfbXXvJWlCiMB8GA1UdIwQY MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt MmY3Y2Y4NDQ2YTMxLzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4iKz/WO Jm4Tqzep0Dnp3rWbbR7X5DLORQaSpoCSHhgNo96Ph3hICzkMC8yoMBLoc0g/QVgE zz0JDkNAOG1kBwjUhjPHWIdWCwxV2fa+XoPz07skBHVmqFJ7Tkj11yuEdgTxL0F7 MuGKceeUsjTsHqcPIpJQkXzqmAHJCha1t7kEgAmYbC/TjSulVnbLKU/yQzpatmoH gLQV/fTaLTnqvr693InRtLWbEviPcw00QvAmZ9GB/X0/C6ncNtdkpzEfaubGecdz wFdmD3GiyliyHpSn1oWBWOTRr9ZY9Vuxubf8bRySjykPXo/lAjquDmw79SGlNsCJ XTrBpQtYR6Tmiw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:24 2025 by rpki-client