This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json) Hash identifier: CqsXKaBAqncIJ+UpZ5Zzt6YXtAGnY7PmwJmRoA6cH/o= Subject key identifier: B4:DE:AC:B6:C0:13:96:72:10:D7:D7:78:E1:52:0D:6C:D1:7D:94:B5 Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e Certificate serial: 019AF31C3AAFD27F68888D48C59E087B1832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft Manifest number: 0BA4 Signing time: Sat 06 Dec 2025 10:01:44 +0000 Manifest this update: Sat 06 Dec 2025 10:01:44 +0000 Manifest next update: Sun 07 Dec 2025 10:01:44 +0000 Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=) 2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: Hv1mmFZ2KjkPVGo2NK/Ju5nN4zlIApy4Hn8VgQZq3DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3a:af:d2:7f:68:88:8d:48:c5:9e:08:7b:18:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84827de36da383801ec42a8043c787253776037e Validity Not Before: Dec 6 10:01:44 2025 GMT Not After : Dec 7 10:01:44 2025 GMT Subject: CN=b4deacb6c013967210d7d778e1520d6cd17d94b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:3a:7f:d2:18:94:4b:3b:00:9e:51:4a:81: b9:1a:60:2c:ed:8a:3e:82:f1:93:93:32:6a:68:7d: 81:12:95:89:01:17:f3:ba:21:52:89:22:98:07:5b: 36:ea:e8:b0:89:a7:44:07:e2:3d:7e:4a:77:23:74: 92:79:ab:38:19:de:4d:14:90:63:e1:2a:ea:67:1d: e5:33:83:dc:57:68:75:d8:ad:48:68:1a:41:07:dd: e6:9d:a2:fd:a8:0a:ca:b5:f9:1b:18:ba:3f:35:d2: ef:39:7f:10:9c:61:a6:32:88:f2:22:f9:6c:be:44: 72:fe:48:6e:f8:b8:6e:46:df:f0:1d:58:af:7f:15: cb:39:fb:d3:56:61:c8:c8:99:b6:a5:16:1f:b3:35: 85:3a:e1:7d:4c:b8:3f:d2:31:84:37:3c:17:d7:d8: 77:df:74:a2:60:65:4a:34:2e:68:c0:e2:43:8a:3e: 83:b4:4e:7e:06:cd:15:38:17:02:18:c5:8f:2d:2b: 58:93:b8:63:3e:7b:0b:4f:64:6b:7b:53:ba:ed:f4: 91:d8:6c:b5:d6:2f:0b:b1:f8:86:61:95:0c:ea:08: 5a:4d:5d:a6:53:3b:66:5c:6d:59:c2:e7:87:e3:f9: 9d:ef:a5:52:fd:e4:36:cf:c8:22:c5:72:3d:64:52: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DE:AC:B6:C0:13:96:72:10:D7:D7:78:E1:52:0D:6C:D1:7D:94:B5 X509v3 Authority Key Identifier: keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:51:8a:e6:a5:96:67:ec:88:99:8c:24:9f:2e:65:37:ff:14: 95:94:53:c8:db:01:1b:fe:3a:47:6b:67:a0:2c:91:a2:12:cd: b0:79:bd:37:81:02:72:f7:fe:ba:93:65:4b:01:0d:eb:47:96: 68:3f:99:1e:29:bf:b3:14:eb:56:d6:00:73:7d:38:a9:c7:12: e7:64:07:4f:36:de:49:79:2d:e3:f0:d8:8c:6d:5c:a1:84:a7: 2e:7b:f6:24:8d:7f:01:48:6b:ff:2c:c0:38:6d:b5:1f:0c:25: 47:8e:b9:da:8c:dc:d7:62:13:55:7e:77:aa:bd:bc:73:85:a2: 90:9a:c5:1d:1e:ee:8a:13:e5:bc:86:e5:f9:55:d5:f4:52:88: 47:be:40:08:22:9a:c4:03:c1:37:d9:c1:01:f3:f7:62:e4:ca: a8:d8:cd:52:45:94:bb:b6:50:cb:38:77:ac:ef:8e:fc:df:70: c6:14:61:4c:e0:77:f7:f2:d5:27:55:3a:65:88:c6:80:29:ae: 6f:32:c9:44:42:b0:a3:fe:06:fc:2b:a7:c5:d3:c9:bf:d2:77: e6:c0:b8:44:d4:a6:52:fa:cf:28:9b:3a:59:d3:6a:6c:76:33: 18:30:7e:8a:13:e9:6c:a7:04:3a:51:4a:3f:d9:a4:eb:2d:52: a4:21:b3:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDqv0n9oiI1IxZ4IexgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ODI3ZGUzNmRhMzgzODAxZWM0MmE4MDQzYzc4NzI1Mzc3 NjAzN2UwHhcNMjUxMjA2MTAwMTQ0WhcNMjUxMjA3MTAwMTQ0WjAzMTEwLwYDVQQD EyhiNGRlYWNiNmMwMTM5NjcyMTBkN2Q3NzhlMTUyMGQ2Y2QxN2Q5NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN46f9IYlEs7AJ5RSoG5GmAs7Yo+ gvGTkzJqaH2BEpWJARfzuiFSiSKYB1s26uiwiadEB+I9fkp3I3SSeas4Gd5NFJBj 4SrqZx3lM4PcV2h12K1IaBpBB93mnaL9qArKtfkbGLo/NdLvOX8QnGGmMojyIvls vkRy/khu+LhuRt/wHVivfxXLOfvTVmHIyJm2pRYfszWFOuF9TLg/0jGENzwX19h3 33SiYGVKNC5owOJDij6DtE5+Bs0VOBcCGMWPLStYk7hjPnsLT2Rre1O67fSR2Gy1 1i8LsfiGYZUM6ghaTV2mUztmXG1ZwueH4/md76VS/eQ2z8gixXI9ZFIuCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTerLbAE5ZyENfXeOFSDWzRfZS1MB8GA1UdIwQY MBaAFISCfeNto4OAHsQqgEPHhyU3dgN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjkt MThlNjVlNjRkZjcxLzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjktMThlNjVlNjRkZjcx LzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVGK5qWW Z+yImYwkny5lN/8UlZRTyNsBG/46R2tnoCyRohLNsHm9N4ECcvf+upNlSwEN60eW aD+ZHim/sxTrVtYAc304qccS52QHTzbeSXkt4/DYjG1coYSnLnv2JI1/AUhr/yzA OG21HwwlR4652ozc12ITVX53qr28c4WikJrFHR7uihPlvIbl+VXV9FKIR75ACCKa xAPBN9nBAfP3YuTKqNjNUkWUu7ZQyzh3rO+O/N9wxhRhTOB39/LVJ1U6ZYjGgCmu bzLJREKwo/4G/CunxdPJv9J35sC4RNSmUvrPKJs6WdNqbHYzGDB+ihPpbKcEOlFK P9mk6y1SpCGz8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:37 2025 by rpki-client