This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json) Hash identifier: X/Vsz8fyagBFepaPdt0o+1RWawwc1SJgF3xHuyTgajQ= Subject key identifier: 46:36:44:6B:E1:A2:C9:FB:52:27:F8:34:2E:52:3B:C8:78:87:D1:A4 Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7 Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7 Certificate serial: 019AF98BD4CDD7E28C92054E681FD83EE29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 16:01:22 +0000 Manifest this update: Sun 07 Dec 2025 16:01:22 +0000 Manifest next update: Mon 08 Dec 2025 16:01:22 +0000 Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=) 2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: fGtU70+prIkbz3+hx9gs+eXaHJ0JFnA2pPcq1G4WmQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:d4:cd:d7:e2:8c:92:05:4e:68:1f:d8:3e:e2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7 Validity Not Before: Dec 7 16:01:22 2025 GMT Not After : Dec 8 16:01:22 2025 GMT Subject: CN=4636446be1a2c9fb5227f8342e523bc87887d1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:ab:3c:56:79:30:d0:97:24:51:4a:f2:f8: 8e:9a:26:f9:c7:54:c8:53:ed:5d:dc:7d:07:ea:15: 0a:41:db:4c:61:05:a6:e7:29:aa:70:1e:29:a3:d4: e5:e8:2f:91:ef:83:22:25:23:03:44:dd:f6:96:ff: 8b:f5:f0:86:b4:2f:75:4e:c5:64:0c:fe:f5:db:08: b0:8f:02:15:b6:e8:23:91:86:d4:b2:fd:0a:72:73: 08:29:22:1c:c0:fb:07:2b:1f:11:96:ae:8f:0f:56: 01:6e:64:74:41:8a:51:c6:12:f5:ad:09:99:10:f1: b2:49:ca:6a:14:4b:45:76:b6:58:72:e5:28:5b:0a: 74:47:2c:aa:e3:88:bb:45:21:e4:bb:60:46:d2:0e: ee:b3:14:9a:a3:80:52:a5:b3:be:b7:9e:31:47:e7: a5:a6:15:33:b9:7e:5f:e4:60:b7:93:98:7a:2e:06: 82:4b:86:12:b1:3c:60:61:51:74:25:ea:d7:42:89: f4:81:1e:23:c3:d1:37:37:0f:44:1a:8e:c6:b1:4f: 9b:f7:d0:57:e8:b8:3e:6d:d3:ff:e0:18:54:3b:75: 71:7b:fb:f5:7c:65:88:e2:ca:ba:52:b9:4a:75:a7: ee:c4:25:d4:df:36:84:bc:da:ff:8f:de:84:c2:2f: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:36:44:6B:E1:A2:C9:FB:52:27:F8:34:2E:52:3B:C8:78:87:D1:A4 X509v3 Authority Key Identifier: keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:95:fe:f1:88:44:54:b6:e5:04:1d:70:69:61:f9:94:c1:f2: 38:9b:e1:fe:14:5b:0f:3d:94:a0:58:1a:82:b7:a4:ea:4b:dc: 03:48:ac:37:fa:e0:db:7c:9a:5f:9f:2c:a4:f9:1b:b6:5d:45: 58:f5:59:15:19:b5:cc:be:23:ac:40:e3:9f:63:bd:8f:4c:4b: 7e:db:d9:7c:68:ae:cd:39:4b:9b:b9:39:5b:52:ed:79:21:9c: 4f:d2:8d:20:15:c7:4d:d6:1f:db:c1:a4:30:eb:d9:c0:d0:a1: 70:7a:22:c7:b5:26:a5:e1:d4:a3:91:47:1c:56:88:f0:5d:83: fb:a8:ad:e0:e6:6e:a5:8b:05:ae:c0:a8:57:aa:c7:23:f3:14: 5f:47:3f:69:be:cc:5c:82:7b:e9:c7:f7:0a:30:bb:f3:4a:d2: ae:10:a7:c1:c4:1f:a6:6b:71:10:05:d3:6d:0a:25:da:db:c5: 63:35:5d:59:d5:24:a0:e9:e0:0a:ef:3f:6a:1e:dd:51:b9:ef: 32:0e:20:67:a0:4e:5a:ce:fe:f6:62:3f:5e:96:d0:71:08:e6: 01:c4:69:02:72:1c:e7:92:ca:5a:90:f5:34:7d:a4:c3:a5:e5: 13:a6:c6:67:1a:b9:10:f6:48:19:ca:0d:36:8d:8e:e1:82:42: b8:a7:99:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i9TN1+KMkgVOaB/YPuKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MzU4OWZlZWNiZTRjNGFiNDQ0ZDkzODY0NDU0ZGJjZDdj ZDBkZTcwHhcNMjUxMjA3MTYwMTIyWhcNMjUxMjA4MTYwMTIyWjAzMTEwLwYDVQQD Eyg0NjM2NDQ2YmUxYTJjOWZiNTIyN2Y4MzQyZTUyM2JjODc4ODdkMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGyrPFZ5MNCXJFFK8viOmib5x1TI U+1d3H0H6hUKQdtMYQWm5ymqcB4po9Tl6C+R74MiJSMDRN32lv+L9fCGtC91TsVk DP712wiwjwIVtugjkYbUsv0KcnMIKSIcwPsHKx8Rlq6PD1YBbmR0QYpRxhL1rQmZ EPGyScpqFEtFdrZYcuUoWwp0Ryyq44i7RSHku2BG0g7usxSao4BSpbO+t54xR+el phUzuX5f5GC3k5h6LgaCS4YSsTxgYVF0JerXQon0gR4jw9E3Nw9EGo7GsU+b99BX 6Lg+bdP/4BhUO3Vxe/v1fGWI4sq6UrlKdafuxCXU3zaEvNr/j96Ewi8P7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY2RGvhosn7Uif4NC5SO8h4h9GkMB8GA1UdIwQY MBaAFIY1if7svkxKtETZOGRFTbzXzQ3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3Yzgt NTllODE4YzZiNzFiLzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3YzgtNTllODE4YzZiNzFi LzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZX+8YhE VLblBB1waWH5lMHyOJvh/hRbDz2UoFgagrek6kvcA0isN/rg23yaX58spPkbtl1F WPVZFRm1zL4jrEDjn2O9j0xLftvZfGiuzTlLm7k5W1LteSGcT9KNIBXHTdYf28Gk MOvZwNChcHoix7UmpeHUo5FHHFaI8F2D+6it4OZupYsFrsCoV6rHI/MUX0c/ab7M XIJ76cf3CjC780rSrhCnwcQfpmtxEAXTbQol2tvFYzVdWdUkoOngCu8/ah7dUbnv Mg4gZ6BOWs7+9mI/XpbQcQjmAcRpAnIc55LKWpD1NH2kw6XlE6bGZxq5EPZIGcoN No2O4YJCuKeZFw== -----END CERTIFICATE-----Generated at Sun Dec 7 16:58:17 2025 by rpki-client