This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json) Hash identifier: kdTMmwFLh1+hQga9xfF7GiUE9f5TV8rwJCbMcxarjvM= Subject key identifier: E3:26:73:6E:D4:5F:09:3F:2A:AB:22:4B:0A:53:5A:5E:FB:EA:03:E6 Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f Certificate serial: 019AF05177C9211EBCC8E006D906A80206AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft Manifest number: 07AF Signing time: Fri 05 Dec 2025 21:01:02 +0000 Manifest this update: Fri 05 Dec 2025 21:01:02 +0000 Manifest next update: Sat 06 Dec 2025 21:01:02 +0000 Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=) 2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: U+aoBBQ8Yv9Dgm5iB4T5sdC9Ftgi0ASE0mv2J4GhfDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:77:c9:21:1e:bc:c8:e0:06:d9:06:a8:02:06:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f Validity Not Before: Dec 5 21:01:02 2025 GMT Not After : Dec 6 21:01:02 2025 GMT Subject: CN=e326736ed45f093f2aab224b0a535a5efbea03e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:6c:67:db:56:01:ee:a1:6b:a0:ea:94:6a: 3c:5f:0f:08:19:f8:04:da:a5:b0:60:8e:28:c9:00: ab:81:d3:c8:b4:69:d8:6d:c2:a8:50:6b:5d:d6:82: aa:ab:d8:1d:84:58:b1:df:9b:fe:ac:ee:b2:11:93: 3f:56:ea:cc:d7:a7:ad:fb:d5:83:d9:5a:fb:06:5b: 7a:89:0a:fa:71:04:4d:66:f6:80:c4:72:f0:5a:4a: 04:46:53:d0:18:f2:ff:73:f9:3b:99:4e:47:21:90: fe:2e:23:1b:3a:c6:23:57:c3:b2:b2:e9:80:18:a2: 61:6a:fb:b5:fa:d5:df:c3:0e:93:62:63:0c:ed:b0: eb:bb:80:2c:03:ff:6a:ce:71:54:af:1f:51:89:7a: 2e:69:6f:46:95:f5:11:bf:5e:33:8a:a9:01:25:7b: 23:95:4a:1f:f9:94:c3:e6:37:f2:3c:69:86:cd:19: 1c:a8:00:66:d9:69:3c:93:5a:57:d0:94:8a:b8:98: bd:a8:e1:c2:ab:1c:76:17:a7:d5:cd:0c:41:08:9f: 78:74:f0:8b:5c:cf:a0:93:42:ea:ff:77:6d:d0:ae: 97:1f:bf:19:f6:35:ef:84:e2:18:94:a6:93:88:de: 21:6c:69:9d:24:62:a1:6e:60:fd:1e:4d:f7:39:4b: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:26:73:6E:D4:5F:09:3F:2A:AB:22:4B:0A:53:5A:5E:FB:EA:03:E6 X509v3 Authority Key Identifier: keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4e:23:04:88:17:06:0a:e3:f8:3c:5f:15:59:3f:39:04:c5: 79:7f:9e:42:39:41:52:4d:39:e1:55:f9:4a:a2:13:35:ac:4c: 65:50:21:de:06:6d:dd:87:48:5f:9b:dc:fe:9d:31:69:e1:d3: b0:34:ea:ad:3b:87:9a:ba:3d:c9:38:94:08:09:a4:6b:a9:81: c4:ab:59:16:41:f2:30:8f:ff:2b:40:cb:bc:3f:d5:95:7c:7a: fb:ca:3d:6b:3d:05:dd:1b:db:86:54:14:e9:54:10:a1:99:92: 2d:bf:05:f7:16:7a:5a:9f:65:89:e6:5e:70:f0:70:76:90:98: 00:59:1d:0f:8b:6a:94:2e:13:a1:91:3c:0d:7a:e3:ed:9a:9d: 43:0d:d9:7a:19:d6:f0:e7:1e:98:cb:0e:d9:10:38:70:43:7e: 56:0f:cc:93:e5:c5:0d:cd:1f:72:c1:6a:75:6a:2d:44:93:c2: d9:34:17:f0:0f:3d:98:19:73:fa:62:0d:2e:6b:4e:d1:c2:35: 35:0e:9a:eb:5a:8e:e0:b0:0d:38:81:8c:fd:ec:0e:82:13:c2: e6:84:b8:28:fa:eb:f8:83:9d:cd:fd:fa:bb:e6:bd:dc:b3:cf: 46:27:a1:17:51:7b:02:de:fa:8e:fb:ef:36:27:cb:93:11:2c: 63:16:eb:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUXfJIR68yOAG2QaoAgatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx MTA1NWYwHhcNMjUxMjA1MjEwMTAyWhcNMjUxMjA2MjEwMTAyWjAzMTEwLwYDVQQD EyhlMzI2NzM2ZWQ0NWYwOTNmMmFhYjIyNGIwYTUzNWE1ZWZiZWEwM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBxsZ9tWAe6ha6DqlGo8Xw8IGfgE 2qWwYI4oyQCrgdPItGnYbcKoUGtd1oKqq9gdhFix35v+rO6yEZM/VurM16et+9WD 2Vr7Blt6iQr6cQRNZvaAxHLwWkoERlPQGPL/c/k7mU5HIZD+LiMbOsYjV8OysumA GKJhavu1+tXfww6TYmMM7bDru4AsA/9qznFUrx9RiXouaW9GlfURv14ziqkBJXsj lUof+ZTD5jfyPGmGzRkcqABm2Wk8k1pX0JSKuJi9qOHCqxx2F6fVzQxBCJ94dPCL XM+gk0Lq/3dt0K6XH78Z9jXvhOIYlKaTiN4hbGmdJGKhbmD9Hk33OUtb1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMmc27UXwk/KqsiSwpTWl776gPmMB8GA1UdIwQY MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU4jBIgX Bgrj+DxfFVk/OQTFeX+eQjlBUk054VX5SqITNaxMZVAh3gZt3YdIX5vc/p0xaeHT sDTqrTuHmro9yTiUCAmka6mBxKtZFkHyMI//K0DLvD/VlXx6+8o9az0F3RvbhlQU 6VQQoZmSLb8F9xZ6Wp9lieZecPBwdpCYAFkdD4tqlC4ToZE8DXrj7ZqdQw3ZehnW 8OcemMsO2RA4cEN+Vg/Mk+XFDc0fcsFqdWotRJPC2TQX8A89mBlz+mINLmtO0cI1 NQ6a61qO4LANOIGM/ewOghPC5oS4KPrr+IOdzf36u+a93LPPRiehF1F7At76jvvv NifLkxEsYxbr3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 02:27:30 2025 by rpki-client