This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json) Hash identifier: yJmjyXAhuNjzBsX16arLK2rCI4b7amODzjwMHl5tGbE= Subject key identifier: D1:8D:00:5A:0F:C8:02:F1:2E:6D:3B:0E:6D:F9:DD:3F:49:F3:41:51 Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce Certificate serial: 019AF389F9D41891E2431B737E522EFA6560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft Manifest number: 0DFF Signing time: Sat 06 Dec 2025 12:01:37 +0000 Manifest this update: Sat 06 Dec 2025 12:01:37 +0000 Manifest next update: Sun 07 Dec 2025 12:01:37 +0000 Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=) 2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: dk3RciPleL+SJuLK5KrVvIyrIcpw1RVpqIUfB1OD04o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f9:d4:18:91:e2:43:1b:73:7e:52:2e:fa:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce Validity Not Before: Dec 6 12:01:37 2025 GMT Not After : Dec 7 12:01:37 2025 GMT Subject: CN=d18d005a0fc802f12e6d3b0e6df9dd3f49f34151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:54:3b:0c:f8:0f:c9:52:e2:18:d9:53:59: 7e:d0:39:f0:3b:bc:9b:cc:17:a7:7c:9d:90:42:bd: 35:7d:38:fc:82:ac:92:31:f8:14:1f:18:ff:1a:45: 71:ed:5f:11:35:49:67:ef:d4:0b:ca:f1:15:8d:fe: 2c:5b:7f:c1:63:e1:a3:40:e7:8a:47:cc:89:0b:a0: 97:29:02:9b:dd:6c:e7:d4:d8:9d:78:bb:71:dc:f2: 92:46:97:0c:97:3a:75:e0:f8:54:a6:95:34:3a:65: 55:0e:b6:91:bb:5e:be:c8:b9:64:22:61:a1:b2:a3: 56:28:58:3a:34:90:d1:c8:43:cf:d3:9a:e8:e3:84: 71:de:47:b9:c2:d3:98:af:13:2d:d8:93:a6:a8:a7: 01:00:36:aa:94:45:d4:0b:39:71:74:75:cd:37:81: 8c:5c:ef:08:bf:27:50:47:6a:f6:2f:68:c6:ee:97: da:23:ac:04:cd:c6:e6:9e:6f:e3:6e:47:71:26:31: ae:ff:fe:e1:79:ce:75:ec:5a:6b:4d:00:d8:c2:9b: 0a:1c:4f:93:07:f8:5f:e6:b5:10:2e:f5:12:e9:a3: 33:71:8b:1a:df:ea:1f:18:8b:10:f1:5a:e9:8c:95: 30:6b:2a:a7:2d:62:6b:4b:80:de:4f:b3:f7:dc:7c: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:00:5A:0F:C8:02:F1:2E:6D:3B:0E:6D:F9:DD:3F:49:F3:41:51 X509v3 Authority Key Identifier: keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:be:8f:c7:ea:55:2c:15:fe:17:f6:83:5b:49:fb:89:36:20: 8b:f3:28:07:62:ba:2a:52:8b:b3:36:a4:33:6a:23:b2:a6:36: d0:bc:2b:fc:81:5a:d5:8b:e1:2f:a2:48:ab:01:cf:46:c2:b3: bb:4b:69:11:bb:6d:c2:7a:79:fd:06:d6:65:c0:7d:1d:cc:c9: e2:e7:93:9a:5b:03:a2:df:2f:16:0e:eb:2d:b9:10:35:92:ea: 1d:30:99:9a:7f:d4:b4:01:06:f3:28:5a:cc:f4:f9:e0:5d:bc: 79:72:94:46:df:37:30:f4:48:11:9b:b2:74:8b:24:06:14:45: 0e:64:25:66:a4:71:db:c4:6f:4f:9d:86:dd:89:a8:e7:ff:42: e3:4d:cc:c9:25:b1:4c:10:7e:c7:78:38:02:3c:f5:e8:b6:6d: f1:d6:ce:c4:b9:94:76:37:e6:27:f9:78:c9:d0:2a:a0:80:56: 8b:d7:6b:f2:44:4b:5c:d9:6e:04:b5:ad:1e:b2:28:47:70:9e: d5:bb:1b:23:7f:c8:3d:af:c5:74:80:fd:e1:85:06:07:50:bb: 1a:74:d4:e2:4b:66:c0:38:e6:29:0c:a6:77:cd:54:8b:d5:34: e5:12:6b:31:59:48:de:6e:63:8e:56:8a:c3:f9:bf:aa:c3:c1: 77:d2:80:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifnUGJHiQxtzflIu+mVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2E0ZTVjNDMxZmY2Yzc5ZTRmNWJkMWI0NmIwNWY5ZjQ0 MTEwY2UwHhcNMjUxMjA2MTIwMTM3WhcNMjUxMjA3MTIwMTM3WjAzMTEwLwYDVQQD EyhkMThkMDA1YTBmYzgwMmYxMmU2ZDNiMGU2ZGY5ZGQzZjQ5ZjM0MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHVUOwz4D8lS4hjZU1l+0DnwO7yb zBenfJ2QQr01fTj8gqySMfgUHxj/GkVx7V8RNUln79QLyvEVjf4sW3/BY+GjQOeK R8yJC6CXKQKb3Wzn1NideLtx3PKSRpcMlzp14PhUppU0OmVVDraRu16+yLlkImGh sqNWKFg6NJDRyEPP05ro44Rx3ke5wtOYrxMt2JOmqKcBADaqlEXUCzlxdHXNN4GM XO8IvydQR2r2L2jG7pfaI6wEzcbmnm/jbkdxJjGu//7hec517FprTQDYwpsKHE+T B/hf5rUQLvUS6aMzcYsa3+ofGIsQ8VrpjJUwayqnLWJrS4DeT7P33Hxp2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGNAFoPyALxLm07Dm353T9J80FRMB8GA1UdIwQY MBaAFKx6TlxDH/bHnk9b0bRrBfn0QRDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMt ZjRlZmQxNzdlOWQwLzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMtZjRlZmQxNzdlOWQw LzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlr6Px+pV LBX+F/aDW0n7iTYgi/MoB2K6KlKLszakM2ojsqY20Lwr/IFa1YvhL6JIqwHPRsKz u0tpEbttwnp5/QbWZcB9HczJ4ueTmlsDot8vFg7rLbkQNZLqHTCZmn/UtAEG8yha zPT54F28eXKURt83MPRIEZuydIskBhRFDmQlZqRx28RvT52G3Ymo5/9C403MySWx TBB+x3g4Ajz16LZt8dbOxLmUdjfmJ/l4ydAqoIBWi9dr8kRLXNluBLWtHrIoR3Ce 1bsbI3/IPa/FdID94YUGB1C7GnTU4ktmwDjmKQymd81Ui9U05RJrMVlI3m5jjlaK w/m/qsPBd9KA7w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:56 2025 by rpki-client