This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json) Hash identifier: xYqzhaBV5EJDeI9LZEZg0+DkUxjzU+FUs1Pht9qbt2Q= Subject key identifier: 89:5F:98:E7:41:E9:C1:E9:DA:B1:47:6C:67:21:58:89:55:21:28:95 Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Certificate serial: 019B38D84747286E54738AB63C645BB5AE66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft Manifest number: 09C4 Signing time: Fri 19 Dec 2025 23:00:56 +0000 Manifest this update: Fri 19 Dec 2025 23:00:56 +0000 Manifest next update: Sat 20 Dec 2025 23:00:56 +0000 Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: +G7r7L27eB3NtalekgZMSlAJO+86e4xS00slXHtrzps=) 2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:47:47:28:6e:54:73:8a:b6:3c:64:5b:b5:ae:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Validity Not Before: Dec 19 23:00:56 2025 GMT Not After : Dec 20 23:00:56 2025 GMT Subject: CN=895f98e741e9c1e9dab1476c6721588955212895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:0c:34:9a:33:51:61:96:8d:d4:8d:b4:26: 89:fa:f7:89:67:2e:1b:8f:c7:5f:ed:18:52:18:92: 26:eb:55:c2:59:62:09:e2:65:af:1a:bd:ec:67:d3: 43:d0:ed:66:9f:32:64:89:37:46:25:e3:36:f0:cb: 6d:90:8a:19:85:8e:78:3b:9c:f0:c6:a0:28:65:0d: 60:8f:3f:99:e3:71:4a:79:2f:4e:ef:02:97:7c:a2: d5:f7:1c:f5:6b:98:3e:b1:03:ac:27:40:b0:36:bd: c7:dd:e6:8c:24:13:12:ed:e6:8a:c5:98:1b:65:84: 3f:67:5b:8f:15:dd:36:dd:23:dd:6c:bf:60:59:f3: 69:f0:c1:da:02:e0:d0:6f:34:4e:53:5b:4d:4d:74: c8:c4:f6:79:e6:3c:e6:b7:12:7e:bc:2d:a7:b3:a9: a4:55:90:82:af:4b:2b:9f:13:a2:c0:be:bf:9e:a2: 01:86:c2:d0:04:d7:2e:c4:ec:52:7b:68:da:3a:1c: a7:76:aa:9f:4a:07:5a:68:0f:f3:82:a7:db:ad:c1: 32:7b:90:e6:43:fc:e3:5e:e2:da:df:55:bd:43:3c: 78:83:59:1b:64:eb:0a:56:64:9e:94:21:91:1f:21: 6c:13:1e:6b:58:65:b7:53:f1:3d:cd:59:b5:9d:6f: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:98:E7:41:E9:C1:E9:DA:B1:47:6C:67:21:58:89:55:21:28:95 X509v3 Authority Key Identifier: keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:40:33:b7:45:44:7c:63:96:98:7f:c8:07:3a:e7:2f:5e: 7e:07:90:79:20:3e:b2:0b:55:a1:81:d8:01:8c:84:04:dd:f1: af:3e:15:a4:d8:86:58:da:17:5e:b4:fc:72:e5:72:a0:14:3e: 63:27:8c:93:25:e5:cf:6b:9e:72:7e:f8:1c:25:53:6a:c9:82: f3:9d:16:9d:a2:19:07:84:b1:2e:f7:f9:d7:98:fe:31:93:b7: 45:4e:85:8f:71:d9:df:1f:e9:f4:74:ed:6e:fd:72:82:c3:da: 52:58:ea:df:86:5c:94:2e:5a:97:5c:f6:11:39:17:f8:eb:98: c4:a3:91:9c:4a:ad:c3:92:d2:09:5e:26:2f:7a:fb:41:47:bc: 3b:2c:20:39:a4:80:41:33:2b:90:11:c7:c3:a6:a7:8b:bd:3b: 81:87:a4:a4:a1:1e:70:69:ab:75:4f:e4:11:4a:39:d5:3f:ef: ea:ef:ff:6c:83:22:a7:60:31:b3:59:11:10:7c:64:63:44:c1: ef:ce:5d:8a:87:58:b6:1d:5b:13:c7:ee:9e:79:fa:b4:86:31: 6a:07:84:e1:a3:26:8b:4d:d8:55:fc:20:27:7f:35:14:67:da: d2:04:94:ac:fd:a7:82:21:67:20:f4:8b:d5:0f:85:72:f4:ea: d6:55:0e:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42EdHKG5Uc4q2PGRbta5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk NWZmNWMwHhcNMjUxMjE5MjMwMDU2WhcNMjUxMjIwMjMwMDU2WjAzMTEwLwYDVQQD Eyg4OTVmOThlNzQxZTljMWU5ZGFiMTQ3NmM2NzIxNTg4OTU1MjEyODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpMMNJozUWGWjdSNtCaJ+veJZy4b j8df7RhSGJIm61XCWWIJ4mWvGr3sZ9ND0O1mnzJkiTdGJeM28MttkIoZhY54O5zw xqAoZQ1gjz+Z43FKeS9O7wKXfKLV9xz1a5g+sQOsJ0CwNr3H3eaMJBMS7eaKxZgb ZYQ/Z1uPFd023SPdbL9gWfNp8MHaAuDQbzROU1tNTXTIxPZ55jzmtxJ+vC2ns6mk VZCCr0srnxOiwL6/nqIBhsLQBNcuxOxSe2jaOhyndqqfSgdaaA/zgqfbrcEye5Dm Q/zjXuLa31W9Qzx4g1kbZOsKVmSelCGRHyFsEx5rWGW3U/E9zVm1nW/GTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlfmOdB6cHp2rFHbGchWIlVISiVMB8GA1UdIwQY MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3 LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCJAM7dF RHxjlph/yAc65y9efgeQeSA+sgtVoYHYAYyEBN3xrz4VpNiGWNoXXrT8cuVyoBQ+ YyeMkyXlz2uecn74HCVTasmC850WnaIZB4SxLvf515j+MZO3RU6Fj3HZ3x/p9HTt bv1ygsPaUljq34ZclC5al1z2ETkX+OuYxKORnEqtw5LSCV4mL3r7QUe8OywgOaSA QTMrkBHHw6ani707gYekpKEecGmrdU/kEUo51T/v6u//bIMip2Axs1kREHxkY0TB 785diodYth1bE8funnn6tIYxageE4aMmi03YVfwgJ381FGfa0gSUrP2ngiFnIPSL 1Q+FcvTq1lUOFA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:41:38 2025 by rpki-client