This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json) Hash identifier: ibHrbfVupPhXgFqSEnZbf2kTxXv/UBW7U3Yx35R0ZnQ= Subject key identifier: 8F:E8:BF:0B:AE:33:9A:CB:B6:74:6A:D3:F2:A7:68:89:35:BA:99:63 Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e Certificate serial: 019B2EFA5F4D957458C1FD751409ABEAE11C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft Manifest number: 0BC3 Signing time: Thu 18 Dec 2025 01:01:58 +0000 Manifest this update: Thu 18 Dec 2025 01:01:58 +0000 Manifest next update: Fri 19 Dec 2025 01:01:58 +0000 Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=) 2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: 8tQidbB0xZ5Cbh0XjCGymp9V72oIDlvM+TQoS+mhTZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:5f:4d:95:74:58:c1:fd:75:14:09:ab:ea:e1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84827de36da383801ec42a8043c787253776037e Validity Not Before: Dec 18 01:01:58 2025 GMT Not After : Dec 19 01:01:58 2025 GMT Subject: CN=8fe8bf0bae339acbb6746ad3f2a7688935ba9963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:27:82:70:28:19:5a:21:9f:95:2f:66:bb: 20:14:61:af:f1:d8:01:bd:12:0a:b9:2e:64:c5:3f: e6:ef:e3:f9:58:26:c8:63:2d:e4:d9:3e:ba:86:b0: 67:a4:6a:a4:3d:13:ff:7b:ff:b0:a1:3e:64:5e:33: 75:5f:6b:ab:28:4b:0e:71:6a:c2:3c:1f:0e:97:ac: 60:fa:59:20:a1:ec:74:6a:c4:6c:bc:ee:16:aa:d7: d3:3e:2f:35:39:39:d9:0d:09:d8:e4:37:d6:b9:ee: 10:60:47:ed:b2:ca:62:da:0f:a3:06:0b:84:d9:7a: e7:cb:71:66:ee:c7:f3:a4:25:54:cd:7b:1e:23:ba: c1:81:2c:a6:1c:64:12:9b:e8:a3:61:10:e9:5c:da: 55:32:2f:76:aa:40:0c:7c:4a:3c:cd:f3:39:6a:84: 96:01:de:b2:7b:0d:62:96:64:c9:27:3a:78:b4:af: 3a:2f:c9:10:ac:c0:e3:cc:03:62:73:db:63:de:63: 2d:5e:e5:1d:ca:eb:ad:c4:68:f4:fc:95:f7:00:82: 78:74:ee:be:3c:dd:40:2b:c9:04:4e:f0:98:b7:6f: 1e:aa:09:df:8a:51:4c:9d:b3:87:29:16:72:58:29: c5:02:48:b0:05:40:cb:28:0e:b6:c2:ed:c5:a9:77: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:BF:0B:AE:33:9A:CB:B6:74:6A:D3:F2:A7:68:89:35:BA:99:63 X509v3 Authority Key Identifier: keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:de:50:61:40:6c:f0:c3:b3:da:a3:9c:66:ba:1c:90:5b:15: 2a:00:f5:4b:17:84:32:64:ad:c8:ce:64:16:0f:7e:c3:85:e6: b3:f2:37:8c:18:2a:e3:c6:00:e8:09:a7:a8:9a:30:f8:35:fc: 8b:38:64:c8:70:e7:c2:f4:53:34:08:4e:6b:48:d6:17:bc:6e: 41:70:9e:bb:86:3e:65:5a:2b:50:d8:d4:2a:19:e5:26:3a:65: 03:c8:c4:79:80:d4:27:43:23:70:05:64:26:4a:df:a5:96:b3: 68:e0:0c:7a:86:38:38:58:f2:c4:44:04:53:f8:03:9b:e8:bc: 22:dd:57:04:8c:8c:4c:67:e5:5d:4c:68:d9:d6:ae:ac:c5:bf: 19:13:9c:16:49:28:c0:61:08:49:03:d2:8b:51:1a:32:a2:46: 5f:81:d3:d8:de:b7:de:75:cd:83:b4:0d:4f:4e:a0:ec:52:bd: d1:4e:05:2f:3d:89:78:c3:79:19:c1:f7:f6:9f:55:eb:c0:f7: 1a:12:96:e2:ea:33:bb:88:21:cd:14:d0:2e:d1:76:db:cb:f3: c0:9c:01:d1:67:04:0e:5c:84:6b:af:f4:d7:2f:ce:19:b8:5d: ef:e0:76:25:fa:c5:5a:25:b5:3f:69:b5:87:fd:df:f1:c4:66: 65:13:48:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+l9NlXRYwf11FAmr6uEcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ODI3ZGUzNmRhMzgzODAxZWM0MmE4MDQzYzc4NzI1Mzc3 NjAzN2UwHhcNMjUxMjE4MDEwMTU4WhcNMjUxMjE5MDEwMTU4WjAzMTEwLwYDVQQD Eyg4ZmU4YmYwYmFlMzM5YWNiYjY3NDZhZDNmMmE3Njg4OTM1YmE5OTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGsngnAoGVohn5UvZrsgFGGv8dgB vRIKuS5kxT/m7+P5WCbIYy3k2T66hrBnpGqkPRP/e/+woT5kXjN1X2urKEsOcWrC PB8Ol6xg+lkgoex0asRsvO4WqtfTPi81OTnZDQnY5DfWue4QYEftsspi2g+jBguE 2Xrny3Fm7sfzpCVUzXseI7rBgSymHGQSm+ijYRDpXNpVMi92qkAMfEo8zfM5aoSW Ad6yew1ilmTJJzp4tK86L8kQrMDjzANic9tj3mMtXuUdyuutxGj0/JX3AIJ4dO6+ PN1AK8kETvCYt28eqgnfilFMnbOHKRZyWCnFAkiwBUDLKA62wu3FqXcXHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/ovwuuM5rLtnRq0/KnaIk1upljMB8GA1UdIwQY MBaAFISCfeNto4OAHsQqgEPHhyU3dgN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjkt MThlNjVlNjRkZjcxLzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjktMThlNjVlNjRkZjcx LzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP95QYUBs 8MOz2qOcZrockFsVKgD1SxeEMmStyM5kFg9+w4Xms/I3jBgq48YA6AmnqJow+DX8 izhkyHDnwvRTNAhOa0jWF7xuQXCeu4Y+ZVorUNjUKhnlJjplA8jEeYDUJ0MjcAVk JkrfpZazaOAMeoY4OFjyxEQEU/gDm+i8It1XBIyMTGflXUxo2daurMW/GROcFkko wGEISQPSi1EaMqJGX4HT2N633nXNg7QNT06g7FK90U4FLz2JeMN5GcH39p9V68D3 GhKW4uozu4ghzRTQLtF228vzwJwB0WcEDlyEa6/01y/OGbhd7+B2JfrFWiW1P2m1 h/3f8cRmZRNIKQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:01 2025 by rpki-client