This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json) Hash identifier: 4Zuk2+TmYfegjTsqxBe+oCWJKhVGgy3xOQKxmS6MBVY= Subject key identifier: D4:42:D7:88:DC:C6:E1:38:3F:8C:A9:CB:89:38:FA:F0:6B:FD:77:54 Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e Certificate serial: 019AF4659B843C37949A83353B3F7410E0FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft Manifest number: 0294 Signing time: Sat 06 Dec 2025 16:01:30 +0000 Manifest this update: Sat 06 Dec 2025 16:01:30 +0000 Manifest next update: Sun 07 Dec 2025 16:01:30 +0000 Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: JMoc4iZ7K7dYGvF+Wh9DDEtgkEyW56qGkR6bz2DlECk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9b:84:3c:37:94:9a:83:35:3b:3f:74:10:e0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e Validity Not Before: Dec 6 16:01:30 2025 GMT Not After : Dec 7 16:01:30 2025 GMT Subject: CN=d442d788dcc6e1383f8ca9cb8938faf06bfd7754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:6e:e7:dc:62:7f:2d:dc:3c:47:5d:a1:87: 4a:4c:d5:22:54:64:c1:6d:6e:8b:f0:7b:83:fe:03: 67:30:3b:97:a1:ca:a3:e2:d5:16:1d:fc:64:3f:1e: 22:93:74:93:2a:61:04:9d:33:89:62:11:70:46:ea: f6:19:bd:f6:0c:23:d4:ec:9a:0e:6d:dd:f0:de:2d: b2:c7:25:bc:b9:df:cd:d0:cd:52:18:61:9c:7b:72: 7e:d2:52:4b:49:a8:15:d8:40:0e:39:1d:a3:8c:7e: 09:1e:95:f5:b9:d9:23:e6:54:73:a6:c3:c9:65:ce: 48:72:e5:ca:18:78:7c:39:89:12:f8:fa:6d:96:58: a1:b9:95:48:49:c2:70:14:64:8f:a2:6d:c0:84:1e: b9:46:53:72:10:b8:e8:7e:c8:39:6a:ff:35:59:eb: 5e:1d:52:ff:48:69:b7:44:dc:5f:2b:cf:f4:1c:69: f1:ac:f7:94:89:7d:ac:27:1f:0e:86:48:9c:a6:18: d6:b6:7b:33:03:87:ba:8b:f0:a2:6e:3e:24:95:8b: f1:b1:91:23:09:ff:90:5d:fd:c6:9f:34:d9:0f:a6: 0f:97:1a:11:49:59:d1:a7:05:a4:0d:8f:80:89:af: 82:e6:b9:6d:2b:d2:b4:c9:3a:14:f3:fa:a6:ea:b3: 78:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:D7:88:DC:C6:E1:38:3F:8C:A9:CB:89:38:FA:F0:6B:FD:77:54 X509v3 Authority Key Identifier: keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:49:ac:a7:57:c4:cc:b4:03:de:6d:79:03:e6:4c:6f:28: 7a:55:db:2c:3b:d7:76:1a:a6:95:d1:7c:7b:fc:1d:23:ae:f3: 23:d4:f2:07:ae:0c:36:9e:5b:b8:ee:c1:5a:93:e6:2b:40:14: 2d:71:41:f9:e5:cb:45:3b:b7:1a:5f:75:7d:c9:dd:d9:f3:46: 82:33:87:b9:13:3b:5f:c9:fb:8b:8f:66:39:93:c3:de:b2:35: 4f:6b:ef:97:48:0f:67:88:d7:53:35:f7:ea:a1:46:73:4e:6c: 91:8b:df:76:aa:46:a8:d4:3c:d1:21:4c:5c:d4:0e:6c:ed:4a: 49:8d:6b:15:3e:66:37:89:16:18:58:ac:8b:fc:55:ac:5c:18: 03:f0:f4:fe:0f:ab:fc:04:f9:a4:0a:f1:6b:5a:17:7e:03:d9: b4:d5:5e:50:13:f7:d1:d8:f1:2f:1e:86:0c:19:9f:75:d1:86: 26:bc:fe:60:36:b8:e5:9e:2e:5a:7c:1c:7f:89:8e:64:c9:2d: 67:7e:78:5e:a9:e5:f2:d2:94:61:36:a6:cc:ad:fe:77:82:b4: e0:b7:1e:f5:73:be:8e:3b:74:32:4e:00:ac:05:ab:92:80:c5: d6:f4:99:36:a9:2f:c3:e8:12:db:2d:e8:d9:6f:f9:d0:cd:45: b8:12:46:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZuEPDeUmoM1Oz90EOD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTliNjZhMjY5OTZlYmQ1Y2FiMGMyZWMzYjY3YzAyNWJm MTA5NGUwHhcNMjUxMjA2MTYwMTMwWhcNMjUxMjA3MTYwMTMwWjAzMTEwLwYDVQQD EyhkNDQyZDc4OGRjYzZlMTM4M2Y4Y2E5Y2I4OTM4ZmFmMDZiZmQ3NzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6pu59xify3cPEddoYdKTNUiVGTB bW6L8HuD/gNnMDuXocqj4tUWHfxkPx4ik3STKmEEnTOJYhFwRur2Gb32DCPU7JoO bd3w3i2yxyW8ud/N0M1SGGGce3J+0lJLSagV2EAOOR2jjH4JHpX1udkj5lRzpsPJ Zc5IcuXKGHh8OYkS+PptllihuZVIScJwFGSPom3AhB65RlNyELjofsg5av81Wete HVL/SGm3RNxfK8/0HGnxrPeUiX2sJx8OhkicphjWtnszA4e6i/Cibj4klYvxsZEj Cf+QXf3GnzTZD6YPlxoRSVnRpwWkDY+Aia+C5rltK9K0yToU8/qm6rN44wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRC14jcxuE4P4ypy4k4+vBr/XdUMB8GA1UdIwQY MBaAFISZtmommW69XKsMLsO2fAJb8QlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgt NWM5ZjliYjJkYjExLzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgtNWM5ZjliYjJkYjEx LzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBJJrKdX xMy0A95teQPmTG8oelXbLDvXdhqmldF8e/wdI67zI9TyB64MNp5buO7BWpPmK0AU LXFB+eXLRTu3Gl91fcnd2fNGgjOHuRM7X8n7i49mOZPD3rI1T2vvl0gPZ4jXUzX3 6qFGc05skYvfdqpGqNQ80SFMXNQObO1KSY1rFT5mN4kWGFisi/xVrFwYA/D0/g+r /AT5pArxa1oXfgPZtNVeUBP30djxLx6GDBmfddGGJrz+YDa45Z4uWnwcf4mOZMkt Z354Xqnl8tKUYTamzK3+d4K04Lce9XO+jjt0Mk4ArAWrkoDF1vSZNqkvw+gS2y3o 2W/50M1FuBJGew== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:42 2025 by rpki-client