This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft File: hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json) Hash identifier: 4yRNffO8HeYimw5w8wn3I9jr51+du2fGEPXWI34hgrk= Subject key identifier: F3:2F:56:2E:16:F3:FA:C4:72:B9:D8:B3:54:D3:E6:59:46:32:16:68 Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04 Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604 Certificate serial: 019AF23FF47E28258D57888E38A215088202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft Manifest number: 0D60 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=) 2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: xXQLVmJg/445YSHXybuuteWhbcMJqW17GQsaiOx3vDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f4:7e:28:25:8d:57:88:8e:38:a2:15:08:82:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=f32f562e16f3fac472b9d8b354d3e65946321668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:8a:4b:37:b1:e4:7e:ac:22:55:a8:bb:18: e7:4b:50:a9:c3:44:49:2b:15:68:e9:f6:3f:97:4a: b4:12:0a:de:bf:af:3e:be:44:67:3f:36:18:c5:0c: d8:70:bb:6a:99:3b:74:b2:cb:a3:66:bb:bd:4e:6d: e2:8a:01:16:4a:38:b9:f2:38:6b:79:76:84:3b:0f: 56:63:c8:d7:f1:65:32:75:c4:9b:e7:6f:27:3d:ac: 6d:19:4e:8c:fd:24:23:dc:d9:9d:76:a6:ee:95:f7: 8b:29:02:af:3f:9e:f6:7c:50:e2:0c:f5:1b:b3:3d: 57:0a:cb:84:c2:d2:9d:21:cc:15:87:b4:84:37:dd: 9e:82:b5:41:97:4f:ec:63:48:d9:cd:bf:20:25:e1: 04:4d:bb:56:7a:43:36:0a:84:49:8c:18:b9:0e:1e: 17:7b:92:6d:b5:e5:6a:52:37:bc:82:25:6f:41:63: cd:1d:97:b0:b2:05:04:8d:af:76:7b:82:0d:54:1c: bf:c8:9b:99:d6:94:de:df:bb:54:e5:57:de:47:21: ce:e1:31:b9:4e:a7:49:bf:d2:b0:36:c3:b2:83:36: ac:71:7f:ce:2a:da:5d:69:9f:a3:0d:7e:5f:d8:d4: 42:bf:34:d9:ec:9a:6e:c1:3b:ba:cc:64:20:88:bb: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2F:56:2E:16:F3:FA:C4:72:B9:D8:B3:54:D3:E6:59:46:32:16:68 X509v3 Authority Key Identifier: keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:eb:1d:1d:70:d1:41:25:b9:00:8f:1c:4b:3d:ce:27:cf:bd: bc:50:d5:c3:9a:fe:06:42:ed:8d:1b:ec:8b:a8:74:d3:56:f1: 72:58:1d:89:ed:79:60:5b:6f:6c:ef:74:da:fd:b1:ce:a2:a0: c5:c5:1a:9b:c0:fb:dc:12:fc:bf:ce:87:6d:31:76:19:53:72: 21:35:66:3b:f7:7b:d6:1e:38:a1:11:8f:9b:35:ae:82:a1:bf: 25:39:d9:1a:e0:06:ac:d6:61:2d:be:22:a1:c4:9f:67:ed:84: 97:c9:7f:c7:5d:43:ef:94:c0:01:6a:99:ae:c8:ed:26:c7:15: 48:47:e4:96:c1:6e:11:c2:e5:38:d9:7d:0b:a6:5c:90:7c:b2: 29:d3:17:e1:f8:a6:16:af:12:b0:ab:d0:fa:f4:36:e6:82:14: 9b:4e:42:bd:58:ca:0d:6d:54:03:fb:ed:51:bf:4b:16:43:f0: 18:b9:93:96:da:f1:c3:56:de:e3:ce:a7:26:da:1f:78:b3:c4: 91:7e:15:d0:f1:4e:76:e9:fa:7c:59:1c:28:96:06:fd:8a:60: c7:0d:d3:6e:30:30:6c:2c:a5:f0:4b:c9:cc:3f:1e:68:2d:67: 0e:5b:08:7f:1f:c8:b0:94:68:e8:44:81:74:50:5e:02:43:e4: 22:95:53:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/R+KCWNV4iOOKIVCIICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTFiYmVhY2Y1YjBjNTg5ZTk5YjkzZjg0ZTFjNWU0N2Q5 YWY2MDQwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EyhmMzJmNTYyZTE2ZjNmYWM0NzJiOWQ4YjM1NGQzZTY1OTQ2MzIxNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD+KSzex5H6sIlWouxjnS1Cpw0RJ KxVo6fY/l0q0Egrev68+vkRnPzYYxQzYcLtqmTt0ssujZru9Tm3iigEWSji58jhr eXaEOw9WY8jX8WUydcSb528nPaxtGU6M/SQj3NmddqbulfeLKQKvP572fFDiDPUb sz1XCsuEwtKdIcwVh7SEN92egrVBl0/sY0jZzb8gJeEETbtWekM2CoRJjBi5Dh4X e5JtteVqUje8giVvQWPNHZewsgUEja92e4INVBy/yJuZ1pTe37tU5VfeRyHO4TG5 TqdJv9KwNsOygzascX/OKtpdaZ+jDX5f2NRCvzTZ7JpuwTu6zGQgiLsIrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMvVi4W8/rEcrnYs1TT5llGMhZoMB8GA1UdIwQY MBaAFISRu+rPWwxYnpm5P4ThxeR9mvYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hZGY5ODQtNzk1OS00YmJkLThhOGUt MmNiZWNkZGQwZDY0LzEvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hZGY5ODQtNzk1OS00YmJkLThhOGUtMmNiZWNkZGQwZDY0 LzEvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACesdHXDR QSW5AI8cSz3OJ8+9vFDVw5r+BkLtjRvsi6h001bxclgdie15YFtvbO902v2xzqKg xcUam8D73BL8v86HbTF2GVNyITVmO/d71h44oRGPmzWugqG/JTnZGuAGrNZhLb4i ocSfZ+2El8l/x11D75TAAWqZrsjtJscVSEfklsFuEcLlONl9C6ZckHyyKdMX4fim Fq8SsKvQ+vQ25oIUm05CvVjKDW1UA/vtUb9LFkPwGLmTltrxw1be486nJtofeLPE kX4V0PFOdun6fFkcKJYG/Ypgxw3TbjAwbCyl8EvJzD8eaC1nDlsIfx/IsJRo6ESB dFBeAkPkIpVThA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:45 2025 by rpki-client