This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json) Hash identifier: ALY/3rWfZmgsES1tfEicNN2qd7cJ4qLVA8EXWBm41JI= Subject key identifier: B3:63:AE:ED:DF:50:D7:61:85:AE:87:94:CB:69:0E:44:F9:62:8C:94 Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e Certificate serial: 019B12020906C01787979A3B986590B3FE29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft Manifest number: 0BB4 Signing time: Fri 12 Dec 2025 10:01:21 +0000 Manifest this update: Fri 12 Dec 2025 10:01:21 +0000 Manifest next update: Sat 13 Dec 2025 10:01:21 +0000 Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=) 2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: 10nlbXKCNVwzrDUTU0TYUowvDdSB3tffjSmTno8GCac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:09:06:c0:17:87:97:9a:3b:98:65:90:b3:fe:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84827de36da383801ec42a8043c787253776037e Validity Not Before: Dec 12 10:01:21 2025 GMT Not After : Dec 13 10:01:21 2025 GMT Subject: CN=b363aeeddf50d76185ae8794cb690e44f9628c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:d6:f8:1b:82:03:bf:fc:f1:56:d8:46:82: be:98:61:ef:1a:e7:56:5e:ed:52:9d:dc:8f:34:f4: cd:ff:0e:75:58:c2:5d:6f:03:7f:a7:74:58:5d:8d: fa:2c:14:5a:a0:0e:78:c0:83:4e:9e:77:b3:e4:a8: c8:1d:c2:0d:1f:0a:fb:67:c8:99:9e:79:c8:17:ad: 58:a1:f8:3a:ac:d2:9b:1c:fc:7d:c9:a6:ee:e6:38: c8:2a:93:c5:14:1d:86:51:dc:fc:47:95:fd:99:3d: 56:c0:42:ec:46:31:cf:37:35:c6:98:7d:b9:9f:07: 72:cc:48:4a:79:85:02:9c:24:66:25:ff:35:8b:9c: 4e:49:33:f1:6e:ae:bf:be:18:6a:09:ef:a0:5e:e6: 9c:65:4f:18:67:6c:18:b3:71:51:53:4d:89:65:e5: 08:b0:2f:45:09:c9:36:11:00:1e:27:01:b2:65:36: db:8f:2c:38:33:fc:82:67:ea:84:92:dc:ba:45:3b: 63:00:d5:36:2f:06:6a:41:66:5f:db:d0:96:22:fa: da:b4:7f:34:9b:d6:55:6f:1c:9e:dc:3d:c1:02:a1: 9f:5a:8b:fa:a8:ea:41:77:99:55:22:71:19:7b:e4: ca:74:59:81:5e:77:6d:54:58:fd:49:4a:e6:42:49: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:AE:ED:DF:50:D7:61:85:AE:87:94:CB:69:0E:44:F9:62:8C:94 X509v3 Authority Key Identifier: keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e6:82:7e:1c:1e:fc:1a:84:68:e7:49:68:a8:5f:83:c5:f4: 12:fe:ff:56:13:68:e2:d1:91:90:28:d7:89:0f:70:37:9c:15: e9:3c:13:f2:91:32:ce:b3:cd:9c:d2:39:fa:6c:00:1b:7b:76: 11:1a:37:22:43:5b:04:85:87:c4:75:10:92:57:87:70:f3:b7: 1e:0d:0a:4c:79:71:d5:b7:2c:70:f7:e6:38:45:e8:3a:87:52: 38:66:de:86:9a:aa:7e:c3:d3:cf:68:51:b3:c0:c1:6f:17:36: f0:d3:23:5e:99:28:c7:b8:f1:13:eb:6c:ae:07:fb:4f:5f:ed: 03:e6:15:a3:90:a6:16:22:53:d7:6d:83:09:01:66:9d:30:f8: 24:9d:63:c5:55:e2:6f:53:fa:c6:fc:66:14:fe:3a:2a:cd:99: b7:39:58:e1:79:eb:51:9e:e4:0e:f2:48:4f:bf:39:3e:44:09: a7:ce:a2:61:1d:76:f7:a6:bc:92:53:d4:04:58:81:92:e8:7d: 80:85:4e:4e:41:40:01:41:2d:7f:47:ed:6e:6f:f1:61:6e:10: 21:73:85:71:ec:67:99:96:22:a6:09:19:de:9a:a5:8e:2a:44: 95:07:8e:39:fb:5c:3c:01:ac:21:fd:be:31:96:dd:3e:d8:2c: a1:13:fc:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAgkGwBeHl5o7mGWQs/4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ODI3ZGUzNmRhMzgzODAxZWM0MmE4MDQzYzc4NzI1Mzc3 NjAzN2UwHhcNMjUxMjEyMTAwMTIxWhcNMjUxMjEzMTAwMTIxWjAzMTEwLwYDVQQD EyhiMzYzYWVlZGRmNTBkNzYxODVhZTg3OTRjYjY5MGU0NGY5NjI4Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD/W+BuCA7/88VbYRoK+mGHvGudW Xu1SndyPNPTN/w51WMJdbwN/p3RYXY36LBRaoA54wINOnnez5KjIHcINHwr7Z8iZ nnnIF61Yofg6rNKbHPx9yabu5jjIKpPFFB2GUdz8R5X9mT1WwELsRjHPNzXGmH25 nwdyzEhKeYUCnCRmJf81i5xOSTPxbq6/vhhqCe+gXuacZU8YZ2wYs3FRU02JZeUI sC9FCck2EQAeJwGyZTbbjyw4M/yCZ+qEkty6RTtjANU2LwZqQWZf29CWIvratH80 m9ZVbxye3D3BAqGfWov6qOpBd5lVInEZe+TKdFmBXndtVFj9SUrmQknu0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNjru3fUNdhha6HlMtpDkT5YoyUMB8GA1UdIwQY MBaAFISCfeNto4OAHsQqgEPHhyU3dgN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjkt MThlNjVlNjRkZjcxLzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjktMThlNjVlNjRkZjcx LzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOaCfhwe /BqEaOdJaKhfg8X0Ev7/VhNo4tGRkCjXiQ9wN5wV6TwT8pEyzrPNnNI5+mwAG3t2 ERo3IkNbBIWHxHUQkleHcPO3Hg0KTHlx1bcscPfmOEXoOodSOGbehpqqfsPTz2hR s8DBbxc28NMjXpkox7jxE+tsrgf7T1/tA+YVo5CmFiJT122DCQFmnTD4JJ1jxVXi b1P6xvxmFP46Ks2ZtzlY4XnrUZ7kDvJIT785PkQJp86iYR1296a8klPUBFiBkuh9 gIVOTkFAAUEtf0ftbm/xYW4QIXOFcexnmZYipgkZ3pqljipElQeOOftcPAGsIf2+ MZbdPtgsoRP8WA== -----END CERTIFICATE-----Generated at Fri Dec 12 19:09:47 2025 by rpki-client