This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json) Hash identifier: qxtMbUGCH5PcPlMqA0OvUv0beByuFJYwXAAnM4XWYhw= Subject key identifier: DC:B7:C3:DD:55:79:5A:0C:5F:2A:15:67:D9:B6:A3:2B:9F:FE:F1:62 Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65 Certificate issuer: /CN=842e1583c6d2b94878c5a9839ef67f56144b8565 Certificate serial: 019AF68A0526C2B9C0AEA88BC7762789A673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft Manifest number: 93 Signing time: Sun 07 Dec 2025 02:00:31 +0000 Manifest this update: Sun 07 Dec 2025 02:00:31 +0000 Manifest next update: Mon 08 Dec 2025 02:00:31 +0000 Files and hashes: 1: KO1fsPW5WsiblhObCxnGWsbz8RY.roa (hash: YNVGCapIIz5fFc5b4tML70CA2D7xNVMhrzbQveusosk=) 2: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: Pd3wGUxlp9hXoT4rjn8Nm6/2UOrjX/vO5Qkt0gQxDzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:05:26:c2:b9:c0:ae:a8:8b:c7:76:27:89:a6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565 Validity Not Before: Dec 7 02:00:31 2025 GMT Not After : Dec 8 02:00:31 2025 GMT Subject: CN=dcb7c3dd55795a0c5f2a1567d9b6a32b9ffef162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:95:e6:de:85:a8:07:6f:08:c6:ad:a3:04: 42:e6:90:e1:9b:ba:dc:60:f7:e8:12:a5:4c:3b:25: 45:b1:c5:df:c6:cf:d3:1d:bf:61:70:53:e8:cd:c3: 6f:d5:73:97:4a:9c:45:ee:e3:2a:32:e9:17:b9:1b: 22:b7:f0:0b:2a:2a:56:b9:df:7f:6e:26:89:75:48: 46:bc:f6:e8:45:04:a3:8c:2d:2f:79:da:d3:34:bc: 70:d0:09:5a:41:9a:59:ae:29:84:cb:bc:6a:e5:64: e9:24:f2:e3:03:d1:97:2a:13:b7:f1:c0:20:cb:51: 99:bd:4e:0f:9b:f7:c5:c5:6c:0c:cc:9d:e8:87:64: 1f:d6:ee:fe:e0:08:47:04:d9:f8:b2:2c:24:42:fe: 28:ea:fc:43:8a:67:08:23:42:50:45:34:64:56:45: f7:e9:20:a6:d5:ba:70:32:85:53:2c:0d:3b:06:60: a2:81:0d:5c:48:41:9a:da:eb:e4:d0:5d:45:2f:8d: 8e:ea:dc:14:b9:73:75:eb:3e:13:d6:d2:91:e8:67: e1:57:68:0e:2f:47:26:ce:f9:46:54:ad:3c:9f:c7: 8b:c4:2b:da:03:00:e7:f2:29:0a:9c:94:27:e5:8c: 12:70:07:c8:c1:84:c6:99:d1:01:49:06:bf:46:24: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B7:C3:DD:55:79:5A:0C:5F:2A:15:67:D9:B6:A3:2B:9F:FE:F1:62 X509v3 Authority Key Identifier: keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:88:04:fd:ea:12:69:c0:dc:ff:4b:f8:5c:33:60:81:36:aa: 0e:7e:cd:74:03:ef:4f:b1:3b:48:d1:ae:41:40:6e:89:58:83: 62:ca:49:fc:85:ef:a5:34:b5:fb:54:0f:f2:ed:4f:43:9f:c3: d0:d6:fd:e8:03:5c:b1:be:62:54:42:5d:92:08:67:9b:aa:2d: a0:55:df:d8:af:5b:c2:0a:cd:bf:0f:07:d5:b0:48:ce:15:db: 4e:4e:e9:35:0e:bc:01:f1:f9:d3:e6:c7:12:f2:8d:03:09:d4: fb:74:88:86:8c:81:5c:94:0f:92:4e:01:98:e5:8d:ab:72:d7: bd:6c:d4:16:41:89:27:f7:0a:5e:87:c6:21:e7:0c:6d:4e:11: 18:c0:26:77:f9:a9:a4:1d:e1:9c:df:5f:38:8c:fc:93:54:0e: 8b:29:28:8f:b5:2c:57:80:f7:fa:45:71:69:29:2e:03:d9:5d: a8:25:d6:f0:5e:e6:06:c9:3d:28:0f:bd:45:58:c2:48:eb:0f: 10:79:05:30:b2:a5:8f:a2:92:bc:5c:a2:b4:91:48:0b:e4:47: 12:a3:c1:46:d8:7f:30:24:ac:30:82:91:6e:95:4a:5b:12:6a: ec:83:ee:70:59:89:7a:d6:0b:e7:95:56:f9:67:1d:38:59:17: 00:68:4a:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2igUmwrnArqiLx3YniaZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MmUxNTgzYzZkMmI5NDg3OGM1YTk4MzllZjY3ZjU2MTQ0 Yjg1NjUwHhcNMjUxMjA3MDIwMDMxWhcNMjUxMjA4MDIwMDMxWjAzMTEwLwYDVQQD EyhkY2I3YzNkZDU1Nzk1YTBjNWYyYTE1NjdkOWI2YTMyYjlmZmVmMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WV5t6FqAdvCMatowRC5pDhm7rc YPfoEqVMOyVFscXfxs/THb9hcFPozcNv1XOXSpxF7uMqMukXuRsit/ALKipWud9/ biaJdUhGvPboRQSjjC0vedrTNLxw0AlaQZpZrimEy7xq5WTpJPLjA9GXKhO38cAg y1GZvU4Pm/fFxWwMzJ3oh2Qf1u7+4AhHBNn4siwkQv4o6vxDimcII0JQRTRkVkX3 6SCm1bpwMoVTLA07BmCigQ1cSEGa2uvk0F1FL42O6twUuXN16z4T1tKR6GfhV2gO L0cmzvlGVK08n8eLxCvaAwDn8ikKnJQn5YwScAfIwYTGmdEBSQa/RiQYPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy3w91VeVoMXyoVZ9m2oyuf/vFiMB8GA1UdIwQY MBaAFIQuFYPG0rlIeMWpg572f1YUS4VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDRlZTktYTI5Yy00ODU5LTgxOWEt OGNjZWVlZDYyY2Q1LzEvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDRlZTktYTI5Yy00ODU5LTgxOWEtOGNjZWVlZDYyY2Q1 LzEvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVogE/eoS acDc/0v4XDNggTaqDn7NdAPvT7E7SNGuQUBuiViDYspJ/IXvpTS1+1QP8u1PQ5/D 0Nb96ANcsb5iVEJdkghnm6otoFXf2K9bwgrNvw8H1bBIzhXbTk7pNQ68AfH50+bH EvKNAwnU+3SIhoyBXJQPkk4BmOWNq3LXvWzUFkGJJ/cKXofGIecMbU4RGMAmd/mp pB3hnN9fOIz8k1QOiykoj7UsV4D3+kVxaSkuA9ldqCXW8F7mBsk9KA+9RVjCSOsP EHkFMLKlj6KSvFyitJFIC+RHEqPBRth/MCSsMIKRbpVKWxJq7IPucFmJetYL55VW +WcdOFkXAGhK3Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:43 2025 by rpki-client