This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json) Hash identifier: mEus/EHVJ4yP669gO5rtL9CntU6u8BXRa11anVsAfZY= Subject key identifier: 74:A9:C9:4F:DC:F1:4A:60:C2:B8:B0:3D:02:7E:AF:8D:D4:B6:50:D2 Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0 Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0 Certificate serial: 019B2F9EA79C8B348C73CF68A03733E100E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 04:01:25 +0000 Manifest this update: Thu 18 Dec 2025 04:01:25 +0000 Manifest next update: Fri 19 Dec 2025 04:01:25 +0000 Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: 3YeUi5nluz1P3oaqPBQ/t90uTvnNiJq4cypjk02nQ/A=) 2: zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa (hash: SDcPgjrr8y9zPr3/XTNgtJ+0oZH17N4IYV4VzMId4hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:a7:9c:8b:34:8c:73:cf:68:a0:37:33:e1:00:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0 Validity Not Before: Dec 18 04:01:25 2025 GMT Not After : Dec 19 04:01:25 2025 GMT Subject: CN=74a9c94fdcf14a60c2b8b03d027eaf8dd4b650d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:77:ce:51:31:62:60:80:1b:e7:a5:74:06: 87:67:11:4e:a2:7d:c9:02:7b:7e:00:e2:f3:94:d5: a5:32:f5:2a:e5:ff:3e:8c:b7:c3:30:bc:34:a6:b8: 75:a9:2a:cd:49:94:8d:66:fc:37:bd:49:b9:ed:b4: 59:91:5f:7d:74:c5:bd:c5:1c:7b:1f:57:4f:17:9f: 86:a8:75:15:b7:da:f3:ef:bb:1f:bb:0a:85:10:c4: 59:51:18:6d:c5:f7:f4:e4:70:f5:42:7b:37:f0:22: 61:57:70:a7:43:cf:e3:f7:f6:cb:3d:a9:a0:5b:67: 4b:8e:c1:b8:7e:a3:2c:8f:a2:cf:f3:bf:c4:8d:fd: f6:f1:9e:1a:f6:f8:d7:ce:9a:8b:ca:9b:85:e2:be: b6:36:1a:1b:a2:95:ac:7e:db:e5:43:a1:c7:f2:fe: ae:a9:53:11:b6:50:37:55:17:95:24:6f:20:da:13: 44:4e:50:be:cc:e1:9e:63:82:4f:35:93:e8:74:a9: 7c:08:0b:02:80:41:34:72:0e:63:98:a0:f4:95:3f: 89:16:0a:5b:fd:7f:4a:88:28:b3:1b:72:85:80:eb: d0:64:a2:5a:1a:42:eb:f2:ae:0b:28:04:5e:b5:cc: 7f:aa:1f:0d:a8:fe:a1:cb:8a:d1:11:77:0b:8d:7a: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:C9:4F:DC:F1:4A:60:C2:B8:B0:3D:02:7E:AF:8D:D4:B6:50:D2 X509v3 Authority Key Identifier: keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:13:85:62:7b:ab:a4:df:51:f2:64:c2:19:5e:78:f2:6d:34: e8:cc:a7:96:c9:bd:27:2c:10:8b:42:b4:e9:e4:ee:45:82:77: 32:46:9b:00:a5:98:af:db:31:f8:de:26:84:7a:39:73:6f:0f: d8:6e:11:70:f0:29:c7:a5:98:4d:6e:af:eb:81:b2:2d:77:7d: a6:10:06:67:3e:4a:50:24:b0:01:b1:e8:55:04:e1:ef:bc:4f: f8:c1:2c:33:9f:25:ee:64:b7:e8:4e:a8:1d:88:36:e3:eb:d4: 42:8f:2e:d9:35:90:55:62:62:38:2b:40:e6:36:33:5b:f9:ca: 4c:ad:83:03:41:73:ae:fc:38:a6:f3:75:af:5b:b8:18:6c:ed: bc:02:52:3b:f3:4e:4e:66:43:ea:ec:35:f7:eb:3e:e2:c8:18: 95:97:04:f8:92:c3:96:96:7a:ae:24:92:88:95:ef:f2:04:16: e3:44:c6:74:56:da:da:a4:a1:1b:38:ea:b9:ae:cf:cd:b4:14: 3b:a9:2e:98:a3:e6:69:19:86:4a:1b:8a:fb:39:a2:d0:c8:49: 7f:a5:f0:c7:59:07:5e:bf:b7:dd:d2:20:e0:79:3d:ec:9c:fd: 37:7e:b5:34:08:67:81:dd:ad:92:cc:8a:b3:5d:7d:6d:ea:6e: 7f:84:d5:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqecizSMc89ooDcz4QDjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTIwMjEzY2IyMzBiZmU1MTEyMWNlNWZiNGRlY2UyODAx OGJlZDAwHhcNMjUxMjE4MDQwMTI1WhcNMjUxMjE5MDQwMTI1WjAzMTEwLwYDVQQD Eyg3NGE5Yzk0ZmRjZjE0YTYwYzJiOGIwM2QwMjdlYWY4ZGQ0YjY1MGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttR3zlExYmCAG+eldAaHZxFOon3J Ant+AOLzlNWlMvUq5f8+jLfDMLw0prh1qSrNSZSNZvw3vUm57bRZkV99dMW9xRx7 H1dPF5+GqHUVt9rz77sfuwqFEMRZURhtxff05HD1Qns38CJhV3CnQ8/j9/bLPamg W2dLjsG4fqMsj6LP87/Ejf328Z4a9vjXzpqLypuF4r62NhobopWsftvlQ6HH8v6u qVMRtlA3VReVJG8g2hNETlC+zOGeY4JPNZPodKl8CAsCgEE0cg5jmKD0lT+JFgpb /X9KiCizG3KFgOvQZKJaGkLr8q4LKARetcx/qh8NqP6hy4rREXcLjXqDJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSpyU/c8UpgwriwPQJ+r43UtlDSMB8GA1UdIwQY MBaAFISSAhPLIwv+URIc5ftN7OKAGL7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYt YjA0YjRkMDQzZjlmLzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYtYjA0YjRkMDQzZjlm LzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhOFYnur pN9R8mTCGV548m006Mynlsm9JywQi0K06eTuRYJ3MkabAKWYr9sx+N4mhHo5c28P 2G4RcPApx6WYTW6v64GyLXd9phAGZz5KUCSwAbHoVQTh77xP+MEsM58l7mS36E6o HYg24+vUQo8u2TWQVWJiOCtA5jYzW/nKTK2DA0Fzrvw4pvN1r1u4GGztvAJSO/NO TmZD6uw19+s+4sgYlZcE+JLDlpZ6riSSiJXv8gQW40TGdFba2qShGzjqua7PzbQU O6kumKPmaRmGShuK+zmi0MhJf6Xwx1kHXr+33dIg4Hk97Jz9N361NAhngd2tksyK s119bepuf4TVJg== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:42 2025 by rpki-client