This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json) Hash identifier: v4cUV3rFqC5jRbiTiyxygeRCw7rnrCjiVtnlBsHwFII= Subject key identifier: D3:EB:76:08:70:EE:AB:D6:B9:B8:B3:4E:6E:BF:91:3F:07:CF:3D:37 Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7 Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7 Certificate serial: 019B08FEDB947A8B008414E0F94B538597C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 16:01:18 +0000 Manifest this update: Wed 10 Dec 2025 16:01:18 +0000 Manifest next update: Thu 11 Dec 2025 16:01:18 +0000 Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=) 2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: BXZPUQMRkQF7pmuF1z8Hjr0ThehWt0CgvCvKFOp2EY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:db:94:7a:8b:00:84:14:e0:f9:4b:53:85:97:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7 Validity Not Before: Dec 10 16:01:18 2025 GMT Not After : Dec 11 16:01:18 2025 GMT Subject: CN=d3eb760870eeabd6b9b8b34e6ebf913f07cf3d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:41:1f:66:52:59:ac:f9:0c:22:de:15:8e: 73:8b:a5:62:27:31:3e:3e:2e:c3:be:c7:48:f9:4f: 37:36:86:1f:39:9a:3a:95:9a:14:fa:b3:fa:0c:a9: 3b:5a:a2:7b:89:7d:23:92:13:d8:3e:52:23:26:db: 30:83:61:7f:ca:f7:3b:b0:d5:66:fc:dc:6b:61:d4: 71:46:15:e6:07:c6:80:41:b5:1e:15:f1:23:16:66: e4:ef:d9:d0:03:14:4d:4c:fb:0e:14:ec:62:22:56: 45:a7:52:64:18:ab:76:73:14:34:e4:7d:c6:5e:81: fe:79:ce:60:fa:38:0a:c2:15:e4:53:93:11:e9:5b: e0:6d:b0:4f:a5:b9:77:7d:32:18:ab:e0:6b:51:4c: 2c:8c:22:d2:18:e7:f1:fc:97:17:a1:f2:ae:54:42: bd:2a:c6:80:af:80:d6:4b:ca:dc:95:27:cf:d7:c4: 04:fd:81:b6:38:23:1d:e4:79:35:a1:99:0c:73:70: dc:e7:23:5e:33:12:ed:41:c6:79:ab:60:d4:bc:08: 08:c0:5a:f5:5c:17:64:e5:e9:df:56:8a:a0:90:56: 99:51:14:bf:0c:ce:d3:9a:2d:c6:e3:b9:f0:e7:0e: a9:99:cd:09:30:d2:c3:9b:13:97:68:f3:23:c4:38: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EB:76:08:70:EE:AB:D6:B9:B8:B3:4E:6E:BF:91:3F:07:CF:3D:37 X509v3 Authority Key Identifier: keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e2:c1:62:02:a1:c4:a3:62:a0:a5:ce:44:09:2e:46:64:39: ae:c9:fa:a6:f1:dd:7c:ae:ed:26:98:11:5e:3b:42:d8:a2:1c: 10:65:89:46:0f:73:1a:4c:85:01:98:83:9f:30:1b:14:a5:c1: b4:c2:92:ba:ea:91:f5:5c:ef:84:2e:66:b3:58:38:8a:d3:95: 5c:8e:a7:10:ff:28:03:e2:64:ec:33:f9:19:78:f4:c3:cb:5e: 8b:3c:35:15:29:62:20:8d:56:23:76:07:1b:f9:45:5a:f4:2d: b1:16:47:a8:65:3d:59:87:f9:c2:e3:de:ef:f3:69:a8:c1:f4: 8b:48:b4:3a:bf:ad:d8:c7:86:0a:e1:69:21:40:68:46:40:59: 4e:5d:d4:4b:11:74:0f:df:e7:f9:ed:32:c3:cf:77:a1:68:2b: df:37:22:af:bb:f4:46:9c:d4:29:b3:5f:92:ff:3d:59:ae:4f: 13:be:32:cb:aa:90:ff:c3:80:82:f2:2e:4a:d7:f3:7a:b2:4e: d0:12:95:d1:8e:3d:d3:ae:9c:b3:db:94:a9:1b:f1:5a:04:cd: f5:f5:d3:b5:3f:27:58:14:03:22:55:f2:a5:6f:a1:73:8e:a0: 51:3a:a1:62:22:fd:db:03:c7:63:98:ba:22:5c:7a:14:1e:ef: 26:e4:6a:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/tuUeosAhBTg+UtThZfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MzU4OWZlZWNiZTRjNGFiNDQ0ZDkzODY0NDU0ZGJjZDdj ZDBkZTcwHhcNMjUxMjEwMTYwMTE4WhcNMjUxMjExMTYwMTE4WjAzMTEwLwYDVQQD EyhkM2ViNzYwODcwZWVhYmQ2YjliOGIzNGU2ZWJmOTEzZjA3Y2YzZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymdBH2ZSWaz5DCLeFY5zi6ViJzE+ Pi7DvsdI+U83NoYfOZo6lZoU+rP6DKk7WqJ7iX0jkhPYPlIjJtswg2F/yvc7sNVm /NxrYdRxRhXmB8aAQbUeFfEjFmbk79nQAxRNTPsOFOxiIlZFp1JkGKt2cxQ05H3G XoH+ec5g+jgKwhXkU5MR6VvgbbBPpbl3fTIYq+BrUUwsjCLSGOfx/JcXofKuVEK9 KsaAr4DWS8rclSfP18QE/YG2OCMd5Hk1oZkMc3Dc5yNeMxLtQcZ5q2DUvAgIwFr1 XBdk5enfVoqgkFaZURS/DM7Tmi3G47nw5w6pmc0JMNLDmxOXaPMjxDjUWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPrdghw7qvWubizTm6/kT8Hzz03MB8GA1UdIwQY MBaAFIY1if7svkxKtETZOGRFTbzXzQ3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3Yzgt NTllODE4YzZiNzFiLzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3YzgtNTllODE4YzZiNzFi LzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuLBYgKh xKNioKXORAkuRmQ5rsn6pvHdfK7tJpgRXjtC2KIcEGWJRg9zGkyFAZiDnzAbFKXB tMKSuuqR9VzvhC5ms1g4itOVXI6nEP8oA+Jk7DP5GXj0w8teizw1FSliII1WI3YH G/lFWvQtsRZHqGU9WYf5wuPe7/NpqMH0i0i0Or+t2MeGCuFpIUBoRkBZTl3USxF0 D9/n+e0yw893oWgr3zcir7v0RpzUKbNfkv89Wa5PE74yy6qQ/8OAgvIuStfzerJO 0BKV0Y49066cs9uUqRvxWgTN9fXTtT8nWBQDIlXypW+hc46gUTqhYiL92wPHY5i6 Ilx6FB7vJuRqOA== -----END CERTIFICATE-----Generated at Wed Dec 10 20:09:22 2025 by rpki-client