This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json) Hash identifier: opXmsitgn6mHujcxoqE9oKZZvHMFkCDFb6mCsegXlz0= Subject key identifier: BE:40:9F:27:04:BA:96:33:07:4B:1E:DE:93:E4:17:0E:1E:5B:57:4E Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Certificate serial: 019AF0F5CAD1916A1DB0CAC41B4342F35614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft Manifest number: 043D Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: /JEleR7zXzDAr9ICmfXHL+XT/O00JyNkdjPH4kvBmcE=) 2: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=) 3: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:ca:d1:91:6a:1d:b0:ca:c4:1b:43:42:f3:56:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=be409f2704ba9633074b1ede93e4170e1e5b574e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:48:a2:bb:ab:b1:1d:6b:f5:01:e2:37:b8: a4:ee:24:f4:89:01:a2:31:f2:ea:c0:ab:6e:b6:e5: 0f:f5:eb:c7:c5:b2:be:ed:b7:7c:57:d5:6c:0e:a0: 4c:51:68:07:39:8c:5b:c2:5c:19:8d:2f:ce:2f:ef: 69:94:47:b4:ff:2c:ab:30:a5:57:07:ce:67:26:c2: c1:0a:96:88:10:e2:ce:15:4c:75:1c:34:1d:c0:1b: 0a:d3:a3:25:9e:14:46:24:53:39:68:9d:30:6e:76: 2b:d4:e5:95:04:85:70:e0:24:7b:12:62:69:35:90: a6:39:31:83:b5:b9:19:7e:89:7b:95:7d:81:3e:55: 2c:b1:34:6a:92:a0:4d:5f:72:b2:a8:c2:e3:98:34: 7c:69:34:67:03:af:30:06:6e:e9:19:38:c6:10:ef: be:2e:b1:f2:3c:54:2a:47:19:56:47:b1:ad:05:1b: 71:90:9c:e3:c7:04:50:66:07:b6:87:52:9d:f4:97: 89:68:50:ee:67:a0:d9:65:32:f1:02:2f:6c:76:89: 25:dd:18:9f:4b:be:e9:29:c2:87:be:0d:ed:6d:5e: c1:4c:f3:b9:95:6d:77:98:0e:23:a5:9a:6e:ff:98: 02:56:0f:83:2c:1c:7a:78:0e:aa:d1:ce:a8:f2:18: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:9F:27:04:BA:96:33:07:4B:1E:DE:93:E4:17:0E:1E:5B:57:4E X509v3 Authority Key Identifier: keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:62:26:7f:c7:a4:77:20:12:53:2c:32:74:bb:ef:1c:7d:e2: 0a:e4:f8:d6:7b:df:17:11:d7:bc:3a:fd:24:15:d7:9b:a1:fd: 96:0e:2c:00:2b:7f:7e:3d:da:a7:2f:40:48:e7:d9:8d:85:3c: ba:3a:2c:59:d3:ef:d7:11:e3:e3:0d:2e:db:47:90:b3:c1:b2: e8:1e:9d:62:5d:28:96:40:47:ee:a9:ca:4d:65:3a:7c:74:57: 2a:db:73:57:09:4a:b8:50:e9:31:60:dc:6b:a1:84:43:cb:92: 8c:31:c2:97:8b:41:4b:60:ef:22:39:ee:4c:d2:72:e1:98:b2: a0:11:0b:d3:cd:92:bd:44:b4:00:ea:bd:1c:fd:7a:99:5a:a8: bd:f3:47:85:ee:5f:d6:5a:ec:86:1e:7f:fa:f8:f6:22:28:e8: b3:db:ea:3f:8c:e7:1f:45:6f:6b:b3:7b:7c:9b:a1:49:fc:9d: 23:aa:85:97:e8:f5:70:49:bf:dc:14:62:56:f5:b2:3c:84:0e: 24:e5:10:58:f5:ea:93:7d:a7:25:8a:b3:aa:2c:7c:ec:c3:f9: 8a:31:63:11:c9:41:1d:68:b8:af:e3:3c:51:03:c2:dc:39:37: 1a:19:ae:41:bb:88:e2:11:2c:93:b8:a9:ab:55:2c:10:29:60: 68:7a:54:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9crRkWodsMrEG0NC81YUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3 NTRlYzQwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EyhiZTQwOWYyNzA0YmE5NjMzMDc0YjFlZGU5M2U0MTcwZTFlNWI1NzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvtIorursR1r9QHiN7ik7iT0iQGi MfLqwKtutuUP9evHxbK+7bd8V9VsDqBMUWgHOYxbwlwZjS/OL+9plEe0/yyrMKVX B85nJsLBCpaIEOLOFUx1HDQdwBsK06MlnhRGJFM5aJ0wbnYr1OWVBIVw4CR7EmJp NZCmOTGDtbkZfol7lX2BPlUssTRqkqBNX3KyqMLjmDR8aTRnA68wBm7pGTjGEO++ LrHyPFQqRxlWR7GtBRtxkJzjxwRQZge2h1Kd9JeJaFDuZ6DZZTLxAi9sdokl3Rif S77pKcKHvg3tbV7BTPO5lW13mA4jpZpu/5gCVg+DLBx6eA6q0c6o8hg/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5AnycEupYzB0se3pPkFw4eW1dOMB8GA1UdIwQY MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1 LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmImf8ek dyASUywydLvvHH3iCuT41nvfFxHXvDr9JBXXm6H9lg4sACt/fj3apy9ASOfZjYU8 ujosWdPv1xHj4w0u20eQs8Gy6B6dYl0olkBH7qnKTWU6fHRXKttzVwlKuFDpMWDc a6GEQ8uSjDHCl4tBS2DvIjnuTNJy4ZiyoBEL082SvUS0AOq9HP16mVqovfNHhe5f 1lrshh5/+vj2Iijos9vqP4znH0Vva7N7fJuhSfydI6qFl+j1cEm/3BRiVvWyPIQO JOUQWPXqk32nJYqzqix87MP5ijFjEclBHWi4r+M8UQPC3Dk3GhmuQbuI4hEsk7ip q1UsEClgaHpUvA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:26 2025 by rpki-client