This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json) Hash identifier: 0SmvisgoBnd44VpjD+VA0Fsw8LYJAm1C2A0WkAAy5vo= Subject key identifier: 72:4C:A8:7B:20:69:A0:83:56:02:D7:22:BE:55:5C:E6:A4:E2:20:04 Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Certificate serial: 019B593EBF410CCBA1CC9442730D0CBAA853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft Manifest number: 0473 Signing time: Fri 26 Dec 2025 06:00:42 +0000 Manifest this update: Fri 26 Dec 2025 06:00:42 +0000 Manifest next update: Sat 27 Dec 2025 06:00:42 +0000 Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: DJtSAHMW08BQb+ScLBbkrq/v5PhfnuKJWxi+YYSSuIM=) 2: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=) 3: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:bf:41:0c:cb:a1:cc:94:42:73:0d:0c:ba:a8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Validity Not Before: Dec 26 06:00:42 2025 GMT Not After : Dec 27 06:00:42 2025 GMT Subject: CN=724ca87b2069a0835602d722be555ce6a4e22004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:11:c2:a3:c4:10:6a:fc:7d:ad:e2:35:68: dd:6e:00:e6:53:d8:e6:47:29:58:52:c7:0a:d8:8e: d4:06:6f:95:ce:5d:d6:7f:73:fc:b8:11:1e:f4:23: c6:71:7e:be:2f:50:f4:1d:18:f9:96:ce:62:12:72: 4f:d7:85:55:1f:fb:4c:e6:dd:92:2f:17:c6:6c:8e: 8f:4b:1d:92:0f:62:67:7a:b9:d1:fa:5c:97:80:6a: e8:45:b0:9f:4e:ef:2e:fc:aa:51:09:1f:f3:43:90: a9:5a:e9:4b:42:f9:a7:ce:b5:22:46:e0:a5:17:cb: 09:8b:6d:d2:e0:08:13:e2:3b:38:36:d8:a9:b7:5f: 57:e3:7e:b8:5a:7e:f9:a5:a3:f6:b7:c0:09:1f:11: b5:76:c6:8f:c6:dc:2c:f1:0e:9d:b2:9f:b5:48:3d: 20:17:d2:af:23:c2:ed:06:6f:56:6e:93:65:12:f0: 7f:a8:cd:82:3c:62:ff:32:cd:fd:19:da:42:75:9e: 6d:cc:6b:fa:be:6d:4f:1d:5a:b3:31:4b:eb:5d:ee: f3:b1:28:49:dd:97:f6:e6:b3:3d:64:80:22:95:c3: 94:11:f5:bd:67:ea:39:92:87:a2:0d:c4:d6:e3:24: 14:0f:28:af:68:6b:09:f2:2c:be:92:a0:63:db:a1: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4C:A8:7B:20:69:A0:83:56:02:D7:22:BE:55:5C:E6:A4:E2:20:04 X509v3 Authority Key Identifier: keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f6:c2:97:de:e8:f8:35:b8:46:67:f8:9d:f2:47:29:ed:5a: 60:f2:67:d8:66:b2:b1:09:1d:a9:04:61:ff:92:50:4f:4e:ff: bc:34:b4:3d:50:4f:3c:38:e4:34:79:69:66:dd:ce:e4:b7:37: e4:31:97:2f:b5:97:f9:77:cd:a9:f6:5c:b3:75:8a:a7:53:8d: eb:a3:ae:1b:67:02:e0:2b:fd:af:67:ee:6e:d7:fb:2c:d7:63: 90:d3:49:5e:1a:5d:aa:81:9d:b6:c3:41:0f:58:3d:c6:3f:a5: d1:c4:7b:d5:9f:22:3e:4d:44:ef:34:96:52:ea:b4:c3:f9:1f: ce:76:54:1f:41:44:6c:fe:9e:f1:f0:ee:ec:5d:ad:39:f9:66: e6:02:47:55:ae:ff:92:d0:6c:41:e4:ba:e5:b7:4c:66:d7:9f: 52:82:31:5f:9b:a2:17:4d:ea:98:f9:69:aa:0b:e6:3c:e4:0e: d3:29:67:ea:d7:cf:e1:f8:5c:79:bc:df:9e:14:75:bd:7e:b7: ff:c3:67:a3:dd:36:be:b9:01:b6:41:2d:91:21:bb:14:74:84: 62:85:dc:b9:bb:7b:79:f2:a0:a4:34:65:48:0f:3c:25:c3:19: 39:86:8c:7d:9c:8c:d6:df:a6:8d:71:85:df:50:9f:3e:b1:62: 1e:5e:00:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPr9BDMuhzJRCcw0MuqhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3 NTRlYzQwHhcNMjUxMjI2MDYwMDQyWhcNMjUxMjI3MDYwMDQyWjAzMTEwLwYDVQQD Eyg3MjRjYTg3YjIwNjlhMDgzNTYwMmQ3MjJiZTU1NWNlNmE0ZTIyMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHERwqPEEGr8fa3iNWjdbgDmU9jm RylYUscK2I7UBm+Vzl3Wf3P8uBEe9CPGcX6+L1D0HRj5ls5iEnJP14VVH/tM5t2S LxfGbI6PSx2SD2JnernR+lyXgGroRbCfTu8u/KpRCR/zQ5CpWulLQvmnzrUiRuCl F8sJi23S4AgT4js4Ntipt19X4364Wn75paP2t8AJHxG1dsaPxtws8Q6dsp+1SD0g F9KvI8LtBm9WbpNlEvB/qM2CPGL/Ms39GdpCdZ5tzGv6vm1PHVqzMUvrXe7zsShJ 3Zf25rM9ZIAilcOUEfW9Z+o5koeiDcTW4yQUDyivaGsJ8iy+kqBj26HlSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJMqHsgaaCDVgLXIr5VXOak4iAEMB8GA1UdIwQY MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1 LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPbCl97o +DW4Rmf4nfJHKe1aYPJn2GaysQkdqQRh/5JQT07/vDS0PVBPPDjkNHlpZt3O5Lc3 5DGXL7WX+XfNqfZcs3WKp1ON66OuG2cC4Cv9r2fubtf7LNdjkNNJXhpdqoGdtsNB D1g9xj+l0cR71Z8iPk1E7zSWUuq0w/kfznZUH0FEbP6e8fDu7F2tOflm5gJHVa7/ ktBsQeS65bdMZtefUoIxX5uiF03qmPlpqgvmPOQO0yln6tfP4fhcebzfnhR1vX63 /8Nno902vrkBtkEtkSG7FHSEYoXcubt7efKgpDRlSA88JcMZOYaMfZyM1t+mjXGF 31CfPrFiHl4AFA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client