This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json) Hash identifier: PWwli5Fc9auNc9sproWOjodNS90/dntmNmfNKOpcxjM= Subject key identifier: 48:8D:19:1A:34:B6:C1:9F:70:7C:02:52:E8:BF:6A:56:73:61:1F:98 Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3 Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3 Certificate serial: 019B12027CCACF7C65F85A155695B359AD76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 10:01:51 +0000 Manifest this update: Fri 12 Dec 2025 10:01:51 +0000 Manifest next update: Sat 13 Dec 2025 10:01:51 +0000 Files and hashes: 1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=) 2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: 2KveJTNcQeZqQc8BBtJLPYa/HI5KXCFape5e4TclJ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:7c:ca:cf:7c:65:f8:5a:15:56:95:b3:59:ad:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3 Validity Not Before: Dec 12 10:01:51 2025 GMT Not After : Dec 13 10:01:51 2025 GMT Subject: CN=488d191a34b6c19f707c0252e8bf6a5673611f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:2e:9e:b7:36:fa:4d:6e:b3:8b:86:73:d2: 26:51:bd:d0:f8:bd:30:af:e9:b9:26:f1:8c:4b:83: 05:ac:29:03:ef:46:8f:98:c0:8f:d8:61:02:88:5a: 6f:c8:b0:ed:19:b5:c2:56:3e:83:ca:d1:d7:13:8f: 6d:d4:de:44:aa:03:df:cb:76:d6:3f:e3:db:6d:84: ff:c4:8a:9b:80:9f:9f:90:67:b0:58:8a:28:27:43: 36:94:33:e8:63:de:5b:69:f5:a8:b0:75:15:cd:2d: 21:f8:20:de:80:3f:b8:60:f5:c5:64:80:62:15:04: c7:b7:27:ba:c5:f0:73:38:d2:d7:a4:d1:04:20:cd: 51:ad:04:6a:27:98:c5:e0:75:16:41:f2:ad:09:41: 02:d1:97:01:28:b1:90:d0:6d:63:a7:ee:18:c9:62: 16:37:fd:62:b2:0c:da:f0:e7:8a:16:24:c0:b5:ef: 39:2e:d0:5e:0c:cf:cf:0d:27:95:2c:90:72:62:9c: aa:dd:8e:93:64:a3:f3:da:51:4b:23:0d:34:19:7a: 88:74:55:39:90:ab:8f:ad:ab:48:cd:83:fa:84:c9: e9:33:be:a1:73:0f:09:8e:df:f0:14:8a:4b:5a:61: 79:45:8c:79:85:04:e5:07:73:78:d1:ae:42:6e:9a: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:19:1A:34:B6:C1:9F:70:7C:02:52:E8:BF:6A:56:73:61:1F:98 X509v3 Authority Key Identifier: keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:44:ea:e7:24:f4:d7:b2:73:1c:a0:2c:87:0e:9e:e5:fd:44: e2:d6:a0:3e:a9:8f:8d:db:90:72:9f:e7:ef:b0:e1:b9:e5:00: 16:87:19:43:27:07:ff:c3:76:7c:4b:b4:9f:fe:8e:2c:5b:29: 07:fb:cc:56:80:20:46:4c:41:e2:d1:61:ad:4c:ab:16:42:99: 59:ed:3f:89:68:44:5e:20:17:0e:00:b0:4a:df:f3:a3:10:09: 6c:8a:b6:52:4d:1f:b6:64:c6:28:b1:63:a4:da:ec:09:92:c7: 79:c7:db:bf:4f:d8:04:02:49:19:fd:8c:e5:ec:6c:40:0e:0b: df:f2:cf:8f:27:63:a8:f4:43:15:21:cd:2c:fb:8e:28:05:f9: 6c:dd:14:78:51:1c:e1:9c:7f:8d:c9:fa:cb:1d:ac:be:cd:90: 60:87:ae:a1:fb:d5:14:e8:0c:b1:73:60:0d:e7:2c:1e:3d:44: f0:37:e5:89:ab:43:21:fa:cb:5e:59:dd:5f:8e:16:a0:67:8d: f0:f6:46:c7:11:a6:ed:53:88:68:cd:bc:e2:2c:03:7c:6f:07: 58:c3:e8:8f:32:36:e6:3e:4f:49:dc:ae:7b:1a:b8:c9:cd:99: 20:de:b0:75:ae:b1:8b:99:f0:2e:62:ae:1d:8a:60:95:9c:2a: b0:e7:9e:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAnzKz3xl+FoVVpWzWa12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWUzYWRmZjAzYWFiNjJkNWRiMjIzYWMzYjM1ZTJhOWJh YTRlYTMwHhcNMjUxMjEyMTAwMTUxWhcNMjUxMjEzMTAwMTUxWjAzMTEwLwYDVQQD Eyg0ODhkMTkxYTM0YjZjMTlmNzA3YzAyNTJlOGJmNmE1NjczNjExZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLounrc2+k1us4uGc9ImUb3Q+L0w r+m5JvGMS4MFrCkD70aPmMCP2GECiFpvyLDtGbXCVj6DytHXE49t1N5EqgPfy3bW P+PbbYT/xIqbgJ+fkGewWIooJ0M2lDPoY95bafWosHUVzS0h+CDegD+4YPXFZIBi FQTHtye6xfBzONLXpNEEIM1RrQRqJ5jF4HUWQfKtCUEC0ZcBKLGQ0G1jp+4YyWIW N/1isgza8OeKFiTAte85LtBeDM/PDSeVLJByYpyq3Y6TZKPz2lFLIw00GXqIdFU5 kKuPratIzYP6hMnpM76hcw8Jjt/wFIpLWmF5RYx5hQTlB3N40a5CbpqygwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiNGRo0tsGfcHwCUui/alZzYR+YMB8GA1UdIwQY MBaAFISeOt/wOqti1dsiOsOzXiqbqk6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUt ZWQxNjAwZjg3MmJiLzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUtZWQxNjAwZjg3MmJi LzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUTq5yT0 17JzHKAshw6e5f1E4tagPqmPjduQcp/n77DhueUAFocZQycH/8N2fEu0n/6OLFsp B/vMVoAgRkxB4tFhrUyrFkKZWe0/iWhEXiAXDgCwSt/zoxAJbIq2Uk0ftmTGKLFj pNrsCZLHecfbv0/YBAJJGf2M5exsQA4L3/LPjydjqPRDFSHNLPuOKAX5bN0UeFEc 4Zx/jcn6yx2svs2QYIeuofvVFOgMsXNgDecsHj1E8DfliatDIfrLXlndX44WoGeN 8PZGxxGm7VOIaM284iwDfG8HWMPojzI25j5PSdyuexq4yc2ZIN6wda6xi5nwLmKu HYpglZwqsOee7A== -----END CERTIFICATE-----Generated at Fri Dec 12 17:54:43 2025 by rpki-client