This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json) Hash identifier: lE/2mD9wzkym+pS5fTlh8w+875sb3kIYluLJoob0zFc= Subject key identifier: 51:42:CA:6D:8E:69:07:F8:C3:A5:16:34:DE:FA:C4:5D:87:93:0D:47 Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3 Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3 Certificate serial: 019AF31D085E97BE29AB7E41B5270DD0F4A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=) 2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: FW7H1H3M7R6WJd9ho1bvPThfswnwmYTC/LPnIrIHf7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:08:5e:97:be:29:ab:7e:41:b5:27:0d:d0:f4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3 Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=5142ca6d8e6907f8c3a51634defac45d87930d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:8b:ae:da:9f:f5:69:dd:d7:39:43:8f:86: 68:b6:de:28:78:17:9f:b4:2b:d4:67:09:37:09:a8: 69:dd:dd:1a:71:f4:8c:12:d3:4f:ea:de:c8:3b:68: af:fc:e5:df:51:a2:36:3f:13:e6:a4:dc:93:8c:b1: 55:13:82:8d:b5:0f:88:35:88:b0:ed:0e:64:50:bf: 0a:64:a6:c5:71:44:83:9d:05:79:2c:96:4a:d6:cd: 67:c2:39:f4:3e:17:e5:ae:d8:14:e7:69:f1:f9:28: 01:10:56:a6:83:ec:3d:6a:d2:26:d7:a7:5e:6b:ae: 4d:bb:5c:db:07:86:34:bd:b0:b6:21:4d:79:59:17: 7f:a3:2a:52:27:32:39:e6:69:4c:78:97:95:2f:32: 93:22:bb:45:0c:20:e4:35:61:09:6d:ef:c9:e5:28: e0:a6:75:88:23:b6:5d:9c:cc:83:0a:ce:f5:ee:28: 26:ac:32:63:b5:d1:9a:19:0a:52:a7:62:db:21:28: ce:43:57:0e:ec:10:25:8e:f1:73:d4:53:73:4c:4f: 08:c2:22:b6:7b:5f:34:73:41:93:19:98:2c:f4:b9: b3:73:96:d2:a8:94:8f:be:f2:5f:0d:68:d4:d2:0b: 2b:f7:f4:8d:cc:51:27:9e:1a:c4:a5:93:6a:e6:28: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:42:CA:6D:8E:69:07:F8:C3:A5:16:34:DE:FA:C4:5D:87:93:0D:47 X509v3 Authority Key Identifier: keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3f:c8:18:87:9e:c0:70:1c:6c:e6:d6:94:7c:f8:d1:2a:df: 2a:1b:06:85:f8:82:fc:4c:4c:3a:e3:87:d6:8e:1d:79:86:67: 7a:1f:71:57:27:e7:65:70:9c:2a:ae:51:17:6d:0c:f6:23:af: 7d:d6:a5:11:90:b6:e3:be:66:38:c7:e3:f4:67:3f:43:ac:91: fa:7d:f2:83:93:5c:bf:73:54:50:3e:d0:01:ac:39:ea:9f:10: 4d:cb:3a:a4:52:3c:63:67:cb:5e:d7:58:79:4f:99:ab:2e:65: 2d:1f:ad:41:bc:06:00:a0:9a:d4:aa:51:9e:56:46:96:ee:71: 8c:b4:cd:92:11:f3:c6:2a:3f:8e:bd:44:ce:21:70:94:76:7b: a4:6d:06:a1:6c:59:df:c9:1e:da:72:d8:d2:d1:0e:e6:a5:29: 69:62:59:f8:5b:44:10:f9:9b:94:ff:50:70:f8:dd:f0:2e:cf: 0a:d5:2b:3b:6d:31:0e:8c:7f:d3:c0:4a:b0:2f:06:9d:35:5d: 72:13:12:46:2b:c7:14:49:38:0c:ca:5a:40:65:47:77:b9:dd: 6c:56:94:e9:18:72:48:bb:fe:45:32:93:36:e9:11:b2:c4:59: d3:89:93:31:19:84:4b:1a:4e:6d:4b:61:c9:54:a6:91:ab:52: 9f:4d:28:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQhel74pq35BtScN0PSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWUzYWRmZjAzYWFiNjJkNWRiMjIzYWMzYjM1ZTJhOWJh YTRlYTMwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD Eyg1MTQyY2E2ZDhlNjkwN2Y4YzNhNTE2MzRkZWZhYzQ1ZDg3OTMwZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrOLrtqf9Wnd1zlDj4Zott4oeBef tCvUZwk3Cahp3d0acfSMEtNP6t7IO2iv/OXfUaI2PxPmpNyTjLFVE4KNtQ+INYiw 7Q5kUL8KZKbFcUSDnQV5LJZK1s1nwjn0PhflrtgU52nx+SgBEFamg+w9atIm16de a65Nu1zbB4Y0vbC2IU15WRd/oypSJzI55mlMeJeVLzKTIrtFDCDkNWEJbe/J5Sjg pnWII7ZdnMyDCs717igmrDJjtdGaGQpSp2LbISjOQ1cO7BAljvFz1FNzTE8IwiK2 e180c0GTGZgs9Lmzc5bSqJSPvvJfDWjU0gsr9/SNzFEnnhrEpZNq5ijldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFCym2OaQf4w6UWNN76xF2Hkw1HMB8GA1UdIwQY MBaAFISeOt/wOqti1dsiOsOzXiqbqk6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUt ZWQxNjAwZjg3MmJiLzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUtZWQxNjAwZjg3MmJi LzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjz/IGIee wHAcbObWlHz40SrfKhsGhfiC/ExMOuOH1o4deYZneh9xVyfnZXCcKq5RF20M9iOv fdalEZC2475mOMfj9Gc/Q6yR+n3yg5Ncv3NUUD7QAaw56p8QTcs6pFI8Y2fLXtdY eU+Zqy5lLR+tQbwGAKCa1KpRnlZGlu5xjLTNkhHzxio/jr1EziFwlHZ7pG0GoWxZ 38ke2nLY0tEO5qUpaWJZ+FtEEPmblP9QcPjd8C7PCtUrO20xDox/08BKsC8GnTVd chMSRivHFEk4DMpaQGVHd7ndbFaU6RhySLv+RTKTNukRssRZ04mTMRmESxpObUth yVSmkatSn00oFA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:43 2025 by rpki-client