This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json) Hash identifier: D8CTqdMdBDBwT9oq7eEVUd/tgjsUNTlF/yqTSz2oio0= Subject key identifier: 64:65:EC:9A:71:2C:18:77:49:7A:B3:64:A4:14:81:AF:18:01:61:A0 Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Certificate serial: 019AF31BC017AC8F3D86A71A3E629E11A46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft Manifest number: 15C9 Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: DvDlZNaPASbN9USs2B9eo3+j1OJpNgjETKHMCMLwFZQ=) 2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:c0:17:ac:8f:3d:86:a7:1a:3e:62:9e:11:a4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=6465ec9a712c1877497ab364a41481af180161a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:1a:f3:77:5d:11:db:8a:b2:c9:d6:59:17: 9c:5c:39:48:3a:ea:f3:64:04:0d:0c:3e:51:40:23: 4a:50:03:be:d2:37:2b:c8:92:2f:6d:1f:68:7e:a8: 1a:ea:ad:f0:a2:80:8e:14:2a:d9:9c:3c:7f:b7:55: 65:7b:77:ef:f9:96:9b:11:d2:c5:fb:7e:7e:99:1d: df:85:96:bd:51:ab:94:05:ed:6b:0c:c5:a1:0a:bf: c6:e0:c3:a4:99:ff:7b:59:a0:f8:e3:e7:87:8a:18: a1:58:af:4e:af:a0:3a:a4:1c:c5:0e:3f:f1:7c:07: e4:21:f7:bc:95:aa:1d:86:b7:8b:45:7e:13:bd:ae: 8d:c2:e8:01:3f:cc:4e:da:a5:f0:c8:f1:3d:e4:b3: 21:7d:04:91:db:ae:48:12:ca:41:4e:76:7b:8d:2d: eb:91:87:0c:4b:4c:62:a8:2a:37:4a:6d:29:49:12: 97:49:02:d3:ce:2f:22:70:3f:a2:c9:12:ca:4a:8d: 3b:b1:0f:26:40:7f:0a:3a:9e:2f:d6:43:ec:83:79: d2:b6:98:ca:5d:f4:1b:8e:39:35:8b:c1:79:5f:be: 97:d0:9b:b4:dc:6e:04:6d:79:e2:0f:46:70:0d:0d: 62:53:f0:76:bb:2d:e9:75:3d:d0:9b:6c:42:ad:0a: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:EC:9A:71:2C:18:77:49:7A:B3:64:A4:14:81:AF:18:01:61:A0 X509v3 Authority Key Identifier: keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a5:ae:7c:1e:b3:f5:fc:71:d1:18:9c:e7:e3:0b:18:41:c8: c2:c3:01:36:4f:ca:83:4f:7d:bb:cd:af:0a:87:74:c2:06:a5: fd:dc:3f:dd:f9:18:b0:0a:1e:f8:31:97:dd:5f:22:de:44:60: cc:de:fe:f6:98:d6:25:6d:c5:fc:40:80:43:b6:3f:cb:8b:3b: 43:75:38:6f:7a:1b:47:af:ab:43:35:f1:2b:b5:11:36:9f:fa: 86:67:07:e5:10:e9:66:12:34:6d:ae:38:40:ae:47:e3:51:d1: 2d:c3:b4:46:f5:a0:fc:c9:18:2d:dd:d9:5a:0f:f8:a1:b6:00: 62:40:1b:87:5c:41:e7:8a:25:51:86:81:4b:ad:7f:11:61:a8: 4d:81:a0:1f:48:d6:1e:31:0a:52:e9:49:fd:85:a5:e1:43:6e: 51:02:2e:b3:9d:07:09:cd:36:09:e8:23:88:44:35:7e:9b:a5: 05:2c:7c:a7:58:b1:91:e6:cc:96:62:d7:98:31:1b:e2:d1:14: ef:db:0a:42:2c:56:8e:f6:95:2a:b6:aa:58:54:05:97:0f:96: 70:37:40:ea:90:01:c9:c3:58:69:e4:7f:62:8d:ed:c5:fc:0c: 50:ef:b5:00:bc:7c:b3:52:d0:05:03:0d:a2:8d:f1:ac:73:8a: 76:a6:ee:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8AXrI89hqcaPmKeEaRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk ZDMxMWEwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD Eyg2NDY1ZWM5YTcxMmMxODc3NDk3YWIzNjRhNDE0ODFhZjE4MDE2MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVca83ddEduKssnWWRecXDlIOurz ZAQNDD5RQCNKUAO+0jcryJIvbR9ofqga6q3wooCOFCrZnDx/t1Vle3fv+ZabEdLF +35+mR3fhZa9UauUBe1rDMWhCr/G4MOkmf97WaD44+eHihihWK9Or6A6pBzFDj/x fAfkIfe8laodhreLRX4Tva6NwugBP8xO2qXwyPE95LMhfQSR265IEspBTnZ7jS3r kYcMS0xiqCo3Sm0pSRKXSQLTzi8icD+iyRLKSo07sQ8mQH8KOp4v1kPsg3nStpjK XfQbjjk1i8F5X76X0Ju03G4EbXniD0ZwDQ1iU/B2uy3pdT3Qm2xCrQpk0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRl7JpxLBh3SXqzZKQUga8YAWGgMB8GA1UdIwQY MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct NjMyMGEzNTZlNDM0LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0 LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6WufB6z 9fxx0Ric5+MLGEHIwsMBNk/Kg099u82vCod0wgal/dw/3fkYsAoe+DGX3V8i3kRg zN7+9pjWJW3F/ECAQ7Y/y4s7Q3U4b3obR6+rQzXxK7URNp/6hmcH5RDpZhI0ba44 QK5H41HRLcO0RvWg/MkYLd3ZWg/4obYAYkAbh1xB54olUYaBS61/EWGoTYGgH0jW HjEKUulJ/YWl4UNuUQIus50HCc02CegjiEQ1fpulBSx8p1ixkebMlmLXmDEb4tEU 79sKQixWjvaVKraqWFQFlw+WcDdA6pABycNYaeR/Yo3txfwMUO+1ALx8s1LQBQMN oo3xrHOKdqbu5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:59 2025 by rpki-client