This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json) Hash identifier: CZXKUeuSNRV/gOF0s+kV24+LaWqsT45jfxTefwkIUa8= Subject key identifier: F8:62:ED:A7:88:C0:18:36:61:5E:83:45:D3:BD:9A:4B:F0:99:66:EE Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb Certificate serial: 019B3B34F4782557D1985EA98DB185465AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 10:01:24 +0000 Manifest this update: Sat 20 Dec 2025 10:01:24 +0000 Manifest next update: Sun 21 Dec 2025 10:01:24 +0000 Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: 7nmDjMgIQyEkpaME0b7ITaJ5xe+uz8VzwPqOBRhslN4=) 2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:f4:78:25:57:d1:98:5e:a9:8d:b1:85:46:5a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb Validity Not Before: Dec 20 10:01:24 2025 GMT Not After : Dec 21 10:01:24 2025 GMT Subject: CN=f862eda788c01836615e8345d3bd9a4bf09966ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:a3:c4:98:da:73:8e:5b:63:4a:79:44:c3: 7e:c9:ca:e3:ae:45:6d:0a:e2:cb:30:3a:06:f9:ad: 98:39:af:e7:8c:7f:7f:81:19:1a:d7:5f:14:a5:d5: ab:41:e6:52:54:f1:94:95:bc:20:20:e5:6e:a1:20: eb:d3:0e:aa:ca:ad:a0:2c:cf:4c:22:96:28:b1:a8: 4a:de:8a:a3:f7:08:9c:99:0a:1e:8d:48:f8:22:02: 83:74:d2:95:8d:ce:c3:87:fd:f7:ee:1d:34:57:fe: e0:6c:c8:7f:b4:f4:36:fc:72:9b:97:87:c4:b7:d1: f2:7c:94:8c:d0:4a:00:71:f6:5e:f3:e9:9d:c2:ab: 7d:0a:43:25:ff:ec:6f:a5:73:d2:7d:da:be:e2:ee: 4a:82:69:bf:a0:8b:db:16:4e:83:63:ed:c2:61:b7: 0e:c4:ab:c3:b6:e9:ba:bc:f8:81:cf:33:24:ae:d5: aa:ec:f8:0f:4b:24:57:55:95:e8:7a:fc:24:1a:69: 86:29:68:e5:6e:1f:60:c1:17:72:88:17:2b:66:f3: 1f:e5:13:44:31:30:db:8d:14:f7:49:b7:a5:bd:38: 2d:cc:9d:92:7e:a7:ad:ec:57:5b:66:45:b2:c3:cd: bc:71:3d:32:34:14:10:51:fd:83:42:ac:88:1d:19: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:62:ED:A7:88:C0:18:36:61:5E:83:45:D3:BD:9A:4B:F0:99:66:EE X509v3 Authority Key Identifier: keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d9:62:7b:7e:cb:60:38:98:f2:67:b7:c0:4f:09:db:31:c7: 12:31:41:a5:d7:e0:18:6d:56:20:1a:d2:db:12:58:29:6e:27: 49:e9:22:fb:71:d5:18:63:a6:ea:62:e1:60:67:84:b7:e0:e7: b2:eb:a8:c8:71:18:31:56:53:3a:11:89:cf:22:b5:d3:8f:05: 44:fb:a8:a5:39:66:11:95:e4:bd:66:3e:f7:97:09:1e:42:29: a9:56:32:e4:a1:41:57:40:4b:35:74:aa:e1:9e:37:fd:f5:63: e0:e5:ca:fb:38:d9:c4:86:01:97:b7:7f:e1:7c:e3:32:c0:c0: 90:5a:29:48:f9:24:ac:cc:40:45:e5:6b:07:94:34:f8:48:ab: f2:b3:3e:b8:9b:6b:42:f8:c0:0e:8d:c9:d8:77:14:7e:d7:5d: 22:c4:4e:dc:d7:61:48:20:20:97:44:86:4d:85:e6:f3:27:d7: ac:a9:cb:20:61:68:5e:c8:4e:f5:7a:2c:44:e6:a2:22:a9:72: fa:50:b7:5b:73:35:d0:ad:98:a7:10:66:4c:2a:43:0e:2c:0b: d2:2e:f9:6e:cf:8c:73:b0:fc:28:0c:df:cc:d0:96:a8:40:9a: e7:f6:da:6a:1b:a2:48:4e:20:23:86:64:76:97:15:7b:b7:a9: c3:8d:ea:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NPR4JVfRmF6pjbGFRlrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZGY1NGJkYzEwNDEwNmNkYjI5OWUwMWVmMDhhNjA5ODVl YzM1ZmIwHhcNMjUxMjIwMTAwMTI0WhcNMjUxMjIxMTAwMTI0WjAzMTEwLwYDVQQD EyhmODYyZWRhNzg4YzAxODM2NjE1ZTgzNDVkM2JkOWE0YmYwOTk2NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwejxJjac45bY0p5RMN+ycrjrkVt CuLLMDoG+a2YOa/njH9/gRka118UpdWrQeZSVPGUlbwgIOVuoSDr0w6qyq2gLM9M IpYosahK3oqj9wicmQoejUj4IgKDdNKVjc7Dh/337h00V/7gbMh/tPQ2/HKbl4fE t9HyfJSM0EoAcfZe8+mdwqt9CkMl/+xvpXPSfdq+4u5Kgmm/oIvbFk6DY+3CYbcO xKvDtum6vPiBzzMkrtWq7PgPSyRXVZXoevwkGmmGKWjlbh9gwRdyiBcrZvMf5RNE MTDbjRT3SbelvTgtzJ2Sfqet7FdbZkWyw828cT0yNBQQUf2DQqyIHRltowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhi7aeIwBg2YV6DRdO9mkvwmWbuMB8GA1UdIwQY MBaAFITfVL3BBBBs2ymeAe8IpgmF7DX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMt ODA2YTMxNWRkMWZkLzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMtODA2YTMxNWRkMWZk LzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9lie37L YDiY8me3wE8J2zHHEjFBpdfgGG1WIBrS2xJYKW4nSeki+3HVGGOm6mLhYGeEt+Dn suuoyHEYMVZTOhGJzyK1048FRPuopTlmEZXkvWY+95cJHkIpqVYy5KFBV0BLNXSq 4Z43/fVj4OXK+zjZxIYBl7d/4XzjMsDAkFopSPkkrMxAReVrB5Q0+Eir8rM+uJtr QvjADo3J2HcUftddIsRO3NdhSCAgl0SGTYXm8yfXrKnLIGFoXshO9XosROaiIqly +lC3W3M10K2YpxBmTCpDDiwL0i75bs+Mc7D8KAzfzNCWqECa5/baahuiSE4gI4Zk dpcVe7epw43qVw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:52 2025 by rpki-client