This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json) Hash identifier: K2HlRvLk8jQosr2IfmmZVzVs5uXVHosC/1XmrOXZZUA= Subject key identifier: 2E:DF:13:6C:C8:39:0D:76:1B:57:FC:05:3D:B6:8C:B4:E7:BA:91:D7 Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a Certificate serial: 019B194D2CE37D57E661942DBE9A90DE8B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 20:00:46 +0000 Manifest this update: Sat 13 Dec 2025 20:00:46 +0000 Manifest next update: Sun 14 Dec 2025 20:00:46 +0000 Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: jvg/24tpFocDHCQFypaIyYHa2USub0Rh/0meFggQG5c=) 2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:2c:e3:7d:57:e6:61:94:2d:be:9a:90:de:8b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a Validity Not Before: Dec 13 20:00:46 2025 GMT Not After : Dec 14 20:00:46 2025 GMT Subject: CN=2edf136cc8390d761b57fc053db68cb4e7ba91d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:2f:ae:80:8c:a2:2c:8a:6f:e0:b3:e5:be: 24:39:e1:8f:46:e2:6e:46:66:04:78:b5:8d:4e:a1: 30:c4:1d:0f:e2:c1:89:5b:58:b9:94:9b:c3:cf:f3: c6:89:0d:e3:ce:22:b2:35:c9:0f:7e:e2:0f:28:db: bc:88:19:09:4a:e7:4f:0c:cc:f5:d8:0b:4b:8f:89: f2:32:1d:0d:a7:70:d9:ec:1f:99:07:db:08:d4:f7: 65:99:a9:dc:94:3a:1c:18:8e:f7:14:4f:ac:e2:ba: 3b:5d:b7:a3:e3:02:b1:c6:31:57:37:79:54:72:d2: 03:92:de:60:3a:88:12:54:08:89:f3:27:6a:2f:b2: 90:d8:40:a0:57:e7:d5:60:a2:52:81:e8:f2:dc:03: ab:a0:58:14:87:3c:17:d2:3a:f3:34:49:5b:1c:a8: f3:ef:f4:c4:fa:8e:b8:d7:54:02:82:e7:2e:60:29: bb:34:39:01:37:73:23:64:8b:00:93:0d:79:9a:58: fd:92:76:87:7e:d8:25:70:59:cd:5f:2f:47:91:d7: 49:8d:45:c1:db:c7:20:83:8d:58:e8:6e:91:0f:e6: 08:2d:b5:ee:6e:c8:0e:34:89:a1:f9:77:f1:db:d4: d5:2f:ec:c9:7a:8a:91:40:f4:37:ab:be:eb:f8:80: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DF:13:6C:C8:39:0D:76:1B:57:FC:05:3D:B6:8C:B4:E7:BA:91:D7 X509v3 Authority Key Identifier: keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:19:b0:d0:17:62:11:91:c4:0a:c1:ad:6d:70:db:9e:70: 3f:ff:95:fe:14:f9:0a:67:8e:f1:b7:da:3f:e9:ad:f1:5f:e3: 09:b6:45:88:0f:80:6e:0d:be:70:9d:1c:1c:72:23:d5:14:09: 24:15:84:59:9e:9a:05:f0:4f:86:5d:7d:84:0f:3a:48:61:8f: a6:fa:3b:f0:d3:11:e0:57:31:47:3a:58:c1:76:32:a4:21:74: 2e:96:e3:7f:6b:64:4c:6c:6b:ec:6e:7e:bf:d6:bf:79:16:bb: 63:bc:eb:51:c1:1c:ce:fe:2b:02:00:0e:32:18:54:ec:aa:0f: 92:d7:47:e2:0a:88:d3:ac:c0:21:18:79:49:f8:e4:b2:3e:7f: e0:e9:5b:60:87:33:51:3b:d1:03:50:d1:02:2c:80:5e:62:69: ad:4e:dc:ce:4b:97:36:1c:3d:96:6e:65:bc:e2:e3:2a:23:9a: 05:70:0f:9a:c0:6d:32:e7:8e:3e:a2:f4:b6:20:20:d8:45:11: b5:38:53:99:51:9b:8c:17:2a:26:31:50:0c:9f:25:2d:5d:08: 39:9a:f5:17:e4:f4:c6:33:92:eb:66:ef:7e:b4:f4:25:30:8b: e8:7f:a2:4d:6e:00:43:5c:fc:9f:91:c6:6a:3f:94:1c:01:6e: ae:83:27:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTSzjfVfmYZQtvpqQ3otRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw ODJlOGEwHhcNMjUxMjEzMjAwMDQ2WhcNMjUxMjE0MjAwMDQ2WjAzMTEwLwYDVQQD EygyZWRmMTM2Y2M4MzkwZDc2MWI1N2ZjMDUzZGI2OGNiNGU3YmE5MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf8vroCMoiyKb+Cz5b4kOeGPRuJu RmYEeLWNTqEwxB0P4sGJW1i5lJvDz/PGiQ3jziKyNckPfuIPKNu8iBkJSudPDMz1 2AtLj4nyMh0Np3DZ7B+ZB9sI1PdlmanclDocGI73FE+s4ro7Xbej4wKxxjFXN3lU ctIDkt5gOogSVAiJ8ydqL7KQ2ECgV+fVYKJSgejy3AOroFgUhzwX0jrzNElbHKjz 7/TE+o6411QCgucuYCm7NDkBN3MjZIsAkw15mlj9knaHftglcFnNXy9HkddJjUXB 28cgg41Y6G6RD+YILbXubsgONImh+Xfx29TVL+zJeoqRQPQ3q77r+ICPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7fE2zIOQ12G1f8BT22jLTnupHXMB8GA1UdIwQY MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3 LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2EZsNAX YhGRxArBrW1w255wP/+V/hT5CmeO8bfaP+mt8V/jCbZFiA+Abg2+cJ0cHHIj1RQJ JBWEWZ6aBfBPhl19hA86SGGPpvo78NMR4FcxRzpYwXYypCF0Lpbjf2tkTGxr7G5+ v9a/eRa7Y7zrUcEczv4rAgAOMhhU7KoPktdH4gqI06zAIRh5Sfjksj5/4OlbYIcz UTvRA1DRAiyAXmJprU7czkuXNhw9lm5lvOLjKiOaBXAPmsBtMueOPqL0tiAg2EUR tThTmVGbjBcqJjFQDJ8lLV0IOZr1F+T0xjOS62bvfrT0JTCL6H+iTW4AQ1z8n5HG aj+UHAFuroMnCQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:03 2025 by rpki-client