This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json) Hash identifier: hIxxQsW9GvZGu3gqEgE9YUTyj9SfyrxObIMm1F1jFXY= Subject key identifier: 04:B1:9C:6A:12:36:5F:B3:B1:FB:87:56:D6:B2:18:6B:6A:D9:C9:4F Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a Certificate serial: 019AF0BEE57CDC7866E8057CCE7DC82D6F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: 5k55FYg/w+K97MzHjuc304W76YiSUkZGPiRybWABSZ4=) 2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e5:7c:dc:78:66:e8:05:7c:ce:7d:c8:2d:6f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=04b19c6a12365fb3b1fb8756d6b2186b6ad9c94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:fe:26:5a:81:77:dc:be:b2:f1:4e:c8:b2: 7d:0f:f4:f4:6d:ed:01:d9:f6:4c:f5:b2:bd:06:e7: 94:92:41:d3:ea:8a:2c:0e:76:7a:7a:75:9b:2c:dd: f7:d1:6a:00:fe:c3:8f:5c:1e:f6:b5:45:85:f7:1d: 42:3a:d3:3b:f7:95:6d:a4:67:40:fe:01:d2:3f:9e: 75:fc:d4:00:45:19:22:29:1e:47:5f:9d:73:6c:9e: c3:82:74:2f:32:64:6e:75:52:d2:ad:df:98:0e:69: 13:22:57:22:b0:fe:39:f9:08:5c:6f:29:9c:43:d8: e0:72:08:dd:25:ea:fc:a2:3d:54:fe:8b:f0:a5:82: a4:e0:3b:7f:61:a1:55:2e:ce:1a:da:34:39:5b:6c: b3:68:0b:5a:c3:c2:15:d8:ed:c3:78:0f:f3:ef:07: 4d:26:fc:3c:d6:64:7f:4e:db:ac:be:91:91:f6:e3: 4b:4f:c9:c5:46:ad:6b:62:a1:07:31:9c:fe:69:5c: 08:a3:ab:91:b0:39:45:f7:3b:fc:27:2a:23:aa:16: c7:fb:17:5c:a1:58:48:f4:22:5a:da:9f:9e:b3:5f: 47:73:55:ca:75:fd:d4:0a:92:d0:cc:74:4f:2f:bd: 7e:f9:0b:79:ef:19:6e:0d:2d:ae:4a:53:97:e6:0b: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B1:9C:6A:12:36:5F:B3:B1:FB:87:56:D6:B2:18:6B:6A:D9:C9:4F X509v3 Authority Key Identifier: keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:09:8e:ca:8e:41:1c:ed:05:b1:11:a0:66:32:21:20:6c:28: 65:ec:0d:be:a2:ae:82:82:3f:b5:71:d8:3a:e9:f7:7d:14:ee: 13:e4:a3:0f:b1:77:22:fd:68:a9:8d:d4:53:e0:a2:40:41:f9: 32:7c:c4:0a:10:2a:6a:60:57:86:e9:bf:82:ee:41:76:4c:b7: 6a:e9:c1:08:77:f2:51:b8:90:62:8d:59:7b:9d:5b:e7:5c:89: e4:5b:80:c6:7c:08:8f:f9:5f:2c:29:9a:5b:01:28:bf:2f:3f: 1c:9b:7d:c3:49:c0:d0:e4:69:f7:99:8c:c0:3f:6d:45:5b:59: a8:ee:c2:e3:af:8a:f9:48:89:ed:03:6c:70:bd:7b:2f:42:08: c9:1f:76:41:3c:17:b2:dd:af:1b:74:8b:12:4e:4b:05:ee:ac: 47:e4:bc:6d:7e:1a:07:d3:8a:4b:e4:59:5f:8d:3a:83:af:53: 6e:3c:a1:d2:cd:68:1e:bd:5e:e5:9e:80:00:ce:6a:62:57:0b: af:9c:a6:1d:10:6a:ab:ed:b0:d3:c5:ae:b5:80:db:49:67:03: a2:b1:c4:8b:cd:fc:37:40:c8:b9:a5:1c:32:cc:96:dd:2c:37: 61:09:f1:6a:35:f7:d9:a4:20:93:33:8b:72:4e:76:f6:06:25: 7a:9f:38:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuV83Hhm6AV8zn3ILW8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw ODJlOGEwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD EygwNGIxOWM2YTEyMzY1ZmIzYjFmYjg3NTZkNmIyMTg2YjZhZDljOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdr+JlqBd9y+svFOyLJ9D/T0be0B 2fZM9bK9BueUkkHT6oosDnZ6enWbLN330WoA/sOPXB72tUWF9x1COtM795VtpGdA /gHSP551/NQARRkiKR5HX51zbJ7DgnQvMmRudVLSrd+YDmkTIlcisP45+Qhcbymc Q9jgcgjdJer8oj1U/ovwpYKk4Dt/YaFVLs4a2jQ5W2yzaAtaw8IV2O3DeA/z7wdN Jvw81mR/TtusvpGR9uNLT8nFRq1rYqEHMZz+aVwIo6uRsDlF9zv8JyojqhbH+xdc oVhI9CJa2p+es19Hc1XKdf3UCpLQzHRPL71++Qt57xluDS2uSlOX5gtm9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASxnGoSNl+zsfuHVtayGGtq2clPMB8GA1UdIwQY MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3 LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQmOyo5B HO0FsRGgZjIhIGwoZewNvqKugoI/tXHYOun3fRTuE+SjD7F3Iv1oqY3UU+CiQEH5 MnzEChAqamBXhum/gu5Bdky3aunBCHfyUbiQYo1Ze51b51yJ5FuAxnwIj/lfLCma WwEovy8/HJt9w0nA0ORp95mMwD9tRVtZqO7C46+K+UiJ7QNscL17L0IIyR92QTwX st2vG3SLEk5LBe6sR+S8bX4aB9OKS+RZX406g69Tbjyh0s1oHr1e5Z6AAM5qYlcL r5ymHRBqq+2w08WutYDbSWcDorHEi838N0DIuaUcMsyW3Sw3YQnxajX32aQgkzOL ck529gYlep84TA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:21 2025 by rpki-client