This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json) Hash identifier: o5Uw5fceK47p/kUrxSAZMWz94LkWNqRAwdlJrBYqdlg= Subject key identifier: 84:2E:20:E6:D3:50:92:39:68:67:B7:14:11:7F:EB:E6:65:8E:F7:6C Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb Certificate serial: 019AF1D1F11827A1F0B4B43CB7C630C4C86C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: ZF2LQmi5YRMncVfH4xQBIulX7uVrXEhK/1E5Ua57MpQ=) 2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f1:18:27:a1:f0:b4:b4:3c:b7:c6:30:c4:c8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=842e20e6d35092396867b714117febe6658ef76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:4b:b3:5b:40:3c:d6:3b:d3:f2:9b:7a:89: de:8e:ac:99:2a:53:88:9f:0a:96:c9:72:eb:b0:a3: 7c:3b:0a:4d:e1:35:df:db:33:cb:3e:95:2f:ce:7c: 32:29:b3:c0:1b:82:51:ba:f5:25:94:d4:5c:37:e4: bd:21:f2:ab:ed:0f:fd:be:14:80:ac:c8:4b:90:ad: 1f:64:3a:f1:44:73:c6:7e:d6:fd:10:5c:31:87:2f: 1c:e9:4d:24:6f:fa:5d:44:82:0d:2b:b0:f3:6d:86: 6a:bc:c3:0a:b5:d6:7a:8f:e1:2d:d6:8d:9c:e4:1d: c1:69:58:e2:d5:21:d3:ab:75:19:d4:68:ce:03:8a: 9e:2a:1f:28:60:06:85:8d:ac:9d:28:e2:b5:0d:be: 06:1f:13:d0:19:38:12:d6:dc:9b:69:db:ff:07:a8: 05:75:8d:76:04:c3:5c:75:a2:f5:73:bd:1d:16:ab: 6f:fe:3f:26:55:24:1c:95:6c:58:e2:60:00:2e:58: fa:58:d3:16:e8:22:34:81:41:6e:36:bd:c8:fb:78: dc:d2:bd:e8:4f:71:87:40:08:67:f3:d6:57:a5:0d: 53:71:78:f6:99:ae:c4:96:dc:a3:0a:e1:a9:3d:b3: af:0c:39:a5:cd:16:c4:f4:eb:bb:49:8f:f7:8c:43: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:20:E6:D3:50:92:39:68:67:B7:14:11:7F:EB:E6:65:8E:F7:6C X509v3 Authority Key Identifier: keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:35:23:4a:c3:a8:f4:fc:0c:23:08:a7:49:56:ea:3d:7e:7a: 44:8a:a9:c1:a6:89:4c:03:a2:e6:f9:c3:6b:28:c0:d5:8b:43: 26:20:ad:fb:8a:ee:25:ac:d1:ab:83:9a:1d:cc:83:c4:d5:72: 10:8e:52:9c:3f:13:9a:2d:e5:2c:0c:5c:37:e5:1b:af:cd:5b: 33:15:7b:a7:09:4e:4b:17:2c:79:0d:d6:10:bd:f6:91:93:6b: 3e:02:a1:3a:a8:ab:ec:bb:41:cc:fe:97:7d:ee:d1:96:0c:51: 2b:2e:75:44:28:bd:04:e0:c9:f1:ff:90:f6:87:bf:e1:3c:41: 6b:ba:43:3f:d8:dd:fc:c0:37:7c:fe:49:61:f4:37:4a:24:93: d0:54:85:ef:75:8f:79:87:99:be:8a:fd:d8:c5:eb:bc:9b:60: 1f:8e:1a:bd:6e:c0:d5:b8:1d:cf:21:95:a5:3b:fc:f0:f0:d5: 11:34:30:ac:a9:43:76:6e:05:78:74:19:62:32:ce:53:5f:2e: 0a:e9:0e:29:aa:6f:29:bc:f6:a9:ed:49:3d:95:76:8b:26:da: 47:ba:4c:b2:22:ac:f1:95:10:40:f2:70:b0:db:54:f2:52:8a: b8:0e:a7:00:2a:2f:37:40:a3:7b:aa:5c:7e:ea:af:38:95:2b: be:62:6d:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fEYJ6HwtLQ8t8YwxMhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZGY1NGJkYzEwNDEwNmNkYjI5OWUwMWVmMDhhNjA5ODVl YzM1ZmIwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg4NDJlMjBlNmQzNTA5MjM5Njg2N2I3MTQxMTdmZWJlNjY1OGVmNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLRLs1tAPNY70/KbeonejqyZKlOI nwqWyXLrsKN8OwpN4TXf2zPLPpUvznwyKbPAG4JRuvUllNRcN+S9IfKr7Q/9vhSA rMhLkK0fZDrxRHPGftb9EFwxhy8c6U0kb/pdRIINK7DzbYZqvMMKtdZ6j+Et1o2c 5B3BaVji1SHTq3UZ1GjOA4qeKh8oYAaFjaydKOK1Db4GHxPQGTgS1tybadv/B6gF dY12BMNcdaL1c70dFqtv/j8mVSQclWxY4mAALlj6WNMW6CI0gUFuNr3I+3jc0r3o T3GHQAhn89ZXpQ1TcXj2ma7EltyjCuGpPbOvDDmlzRbE9Ou7SY/3jEOMtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQuIObTUJI5aGe3FBF/6+ZljvdsMB8GA1UdIwQY MBaAFITfVL3BBBBs2ymeAe8IpgmF7DX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMt ODA2YTMxNWRkMWZkLzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMtODA2YTMxNWRkMWZk LzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDUjSsOo 9PwMIwinSVbqPX56RIqpwaaJTAOi5vnDayjA1YtDJiCt+4ruJazRq4OaHcyDxNVy EI5SnD8Tmi3lLAxcN+Ubr81bMxV7pwlOSxcseQ3WEL32kZNrPgKhOqir7LtBzP6X fe7RlgxRKy51RCi9BODJ8f+Q9oe/4TxBa7pDP9jd/MA3fP5JYfQ3SiST0FSF73WP eYeZvor92MXrvJtgH44avW7A1bgdzyGVpTv88PDVETQwrKlDdm4FeHQZYjLOU18u CukOKapvKbz2qe1JPZV2iybaR7pMsiKs8ZUQQPJwsNtU8lKKuA6nACovN0Cje6pc fuqvOJUrvmJtUA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:53 2025 by rpki-client