This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json) Hash identifier: YKJwxFN0c+leuanrP9kOvgAk6VnM3Yl8GAqIt9JZUA8= Subject key identifier: 0F:EA:DA:C5:22:B1:56:CF:AF:4C:A3:85:96:42:41:FD:B2:56:76:3C Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d Certificate serial: 019AF12CB9FAA1937E632C7C2F8E7DE4B8A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft Manifest number: 1690 Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=) 2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: rxYBAx9csza7kNnVqIIpsI3kvtelTMkPe4YaVnyd6ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b9:fa:a1:93:7e:63:2c:7c:2f:8e:7d:e4:b8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=0feadac522b156cfaf4ca385964241fdb256763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:83:bc:f8:f8:dc:c9:86:4b:0a:14:29:a5:21: 5e:9f:8a:51:f5:20:24:35:19:53:01:da:06:0c:72: 14:15:3e:4a:bd:eb:70:9f:c3:65:1a:1c:d8:9a:ee: da:a2:03:13:68:4d:99:c7:89:8f:fd:55:a3:d5:0a: b1:96:df:29:87:2b:42:a1:2c:c5:e1:ef:6b:22:5e: ab:6c:6c:11:ba:20:48:87:87:69:77:e0:c1:4e:58: b7:fb:5d:dc:20:bf:f2:27:c9:ec:41:48:b9:01:6f: f3:73:7d:c9:fd:16:73:ec:48:89:72:84:ec:0c:56: 3b:67:14:16:54:dc:45:48:6b:4b:4a:26:28:eb:1b: 3a:80:8b:66:bd:33:a9:77:59:4b:5e:a2:71:33:f2: af:20:43:ce:5f:2a:25:28:6e:a4:78:22:fe:c0:1f: 35:c9:22:93:d3:83:3d:31:c4:87:d6:ec:fc:19:f1: 38:e0:32:44:f2:74:b0:e7:c3:be:d8:5b:87:4d:70: ed:90:49:42:83:11:cd:11:3c:7c:5f:27:47:c0:df: 39:71:6f:bd:a0:57:4d:c6:a8:17:87:c1:69:34:d5: ad:a2:54:07:35:e0:84:58:20:c6:47:58:fa:40:1c: 94:2d:30:00:f7:01:dc:65:b5:4d:25:e1:d6:ee:21: b8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EA:DA:C5:22:B1:56:CF:AF:4C:A3:85:96:42:41:FD:B2:56:76:3C X509v3 Authority Key Identifier: keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:c9:3b:c0:a5:84:1b:81:32:14:db:85:68:a7:13:e0:77: 8b:83:d8:3d:1a:19:d4:b0:1e:a0:87:b1:83:aa:f7:8f:dd:30: 71:19:61:1a:42:a6:50:0c:31:0a:fb:95:4e:e0:6a:0f:c8:58: f3:9f:57:e8:8c:82:f6:ab:6a:6e:81:7b:1e:61:64:8a:1e:1c: a6:3d:99:7d:e1:ff:aa:4b:0d:f0:76:3d:b4:f8:79:69:ee:b8: 43:45:21:e7:ab:9f:2d:7d:9b:88:08:9d:d2:94:3d:65:c9:6f: 1a:c5:9d:cb:3b:35:2c:09:76:c2:8f:14:64:b3:9e:36:92:ee: 41:3b:3b:c5:2d:d4:30:af:c8:0b:dd:de:a1:6b:f9:6b:97:69: c9:02:87:65:c6:d4:5b:3a:63:e8:3e:2d:21:78:7b:6d:6c:89: 92:b0:dd:fd:1b:14:78:4f:55:06:e1:09:b4:ed:c8:28:74:cd: dd:4a:c9:23:e4:af:06:1e:8f:45:00:04:fd:72:07:6c:88:d6: ce:ec:06:18:e5:13:dc:77:95:e7:95:79:51:68:9f:69:c7:60: 31:51:be:ce:2a:71:88:af:7f:73:01:19:c3:1b:4d:59:11:28: c5:34:49:51:d6:7c:86:1a:7f:f1:3c:8d:4a:4f:07:8d:bf:df: 5b:f0:aa:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLn6oZN+Yyx8L4595LihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NzJkNWFjYzI1MTY3Njk5YzdmY2YzYTFiODA0ZWEzMjVh YzRlNWQwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EygwZmVhZGFjNTIyYjE1NmNmYWY0Y2EzODU5NjQyNDFmZGIyNTY3NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IO8+PjcyYZLChQppSFen4pR9SAk NRlTAdoGDHIUFT5Kvetwn8NlGhzYmu7aogMTaE2Zx4mP/VWj1Qqxlt8phytCoSzF 4e9rIl6rbGwRuiBIh4dpd+DBTli3+13cIL/yJ8nsQUi5AW/zc33J/RZz7EiJcoTs DFY7ZxQWVNxFSGtLSiYo6xs6gItmvTOpd1lLXqJxM/KvIEPOXyolKG6keCL+wB81 ySKT04M9McSH1uz8GfE44DJE8nSw58O+2FuHTXDtkElCgxHNETx8XydHwN85cW+9 oFdNxqgXh8FpNNWtolQHNeCEWCDGR1j6QByULTAA9wHcZbVNJeHW7iG4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/q2sUisVbPr0yjhZZCQf2yVnY8MB8GA1UdIwQY MBaAFIVy1azCUWdpnH/POhuATqMlrE5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzkt NDBkYzQ0NWM2NjlhLzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzktNDBkYzQ0NWM2Njlh LzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVLJO8Cl hBuBMhTbhWinE+B3i4PYPRoZ1LAeoIexg6r3j90wcRlhGkKmUAwxCvuVTuBqD8hY 859X6IyC9qtqboF7HmFkih4cpj2ZfeH/qksN8HY9tPh5ae64Q0Uh56ufLX2biAid 0pQ9ZclvGsWdyzs1LAl2wo8UZLOeNpLuQTs7xS3UMK/IC93eoWv5a5dpyQKHZcbU Wzpj6D4tIXh7bWyJkrDd/RsUeE9VBuEJtO3IKHTN3UrJI+SvBh6PRQAE/XIHbIjW zuwGGOUT3HeV55V5UWifacdgMVG+zipxiK9/cwEZwxtNWREoxTRJUdZ8hhp/8TyN Sk8Hjb/fW/Cqkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:02 2025 by rpki-client