This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft File: hDvoY59AOZk8H254efRynkfcN64.mft (raw, json) Hash identifier: svfduaJ95DNBQc7F4zl4x1j/iJ6MTsYyOBUUEFppNEg= Subject key identifier: 68:64:DB:EF:0D:20:46:53:4E:82:4E:5D:E2:63:35:A9:9F:B1:5C:C9 Authority key identifier: 84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE Certificate issuer: /CN=843be8639f4039993c1f6e7879f4729e47dc37ae Certificate serial: 019B41000609AA6146B45F740E8606246AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft Manifest number: 099F Signing time: Sun 21 Dec 2025 13:01:19 +0000 Manifest this update: Sun 21 Dec 2025 13:01:19 +0000 Manifest next update: Mon 22 Dec 2025 13:01:19 +0000 Files and hashes: 1: J7Gy2XDgfHPCSDMpGX8qtAkzxgw.roa (hash: 6l+CaQcFJnHqVrHhZ9HMXXYDvAoiNAEfMopwPsMkNsc=) 2: hDvoY59AOZk8H254efRynkfcN64.crl (hash: Xpwlbb1WnX4wNJ3SghBuN/N1+s379O9DrmhdTujYoNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:06:09:aa:61:46:b4:5f:74:0e:86:06:24:6a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843be8639f4039993c1f6e7879f4729e47dc37ae Validity Not Before: Dec 21 13:01:19 2025 GMT Not After : Dec 22 13:01:19 2025 GMT Subject: CN=6864dbef0d2046534e824e5de26335a99fb15cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:ad:01:e4:6d:93:5d:36:14:1a:e8:3c:a2: 97:e9:d7:f5:9b:eb:ca:ef:9a:1c:7b:f0:03:65:98: d1:9a:e3:fc:29:4d:36:c7:d5:ef:17:bc:66:16:2a: 67:a8:3c:eb:2e:34:3d:bd:4f:f0:1a:7e:4d:22:c4: 67:85:1e:d8:75:94:4b:2d:9c:d0:f1:92:9f:43:16: 94:e2:49:6d:78:a8:84:2c:f6:e4:51:ad:b1:d5:57: 6f:76:e4:b8:b8:1b:ab:64:42:86:3f:01:61:15:4d: 30:1d:65:ef:1f:db:86:7c:bc:09:63:0c:6d:69:da: 0b:d5:c1:31:43:0c:d2:d7:f3:82:78:78:a0:69:b3: ff:64:11:b4:1e:d7:e8:23:28:63:31:14:3d:19:c2: 96:85:b5:e4:92:99:f7:39:bf:c0:d5:b0:96:38:31: 81:d7:7e:61:9e:6d:59:92:5d:34:f4:f8:dd:73:6f: 79:ca:68:6a:9c:94:f5:2a:72:b9:ed:c4:82:96:07: 05:c5:92:53:89:a4:17:43:a6:6d:5d:9d:68:89:8f: 20:07:94:79:f8:fe:5a:be:7d:59:44:fe:b5:a3:34: ba:97:11:0d:3a:74:62:06:02:10:58:83:81:3a:50: aa:db:ae:f2:6e:10:3d:62:f5:d8:79:3f:6d:c2:f2: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:DB:EF:0D:20:46:53:4E:82:4E:5D:E2:63:35:A9:9F:B1:5C:C9 X509v3 Authority Key Identifier: keyid:84:3B:E8:63:9F:40:39:99:3C:1F:6E:78:79:F4:72:9E:47:DC:37:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDvoY59AOZk8H254efRynkfcN64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9e1a77-7c17-4481-877c-7788748f67cb/1/hDvoY59AOZk8H254efRynkfcN64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f6:68:07:39:96:5a:bd:c2:30:ef:29:e8:0c:37:01:9f:9e: 03:8b:6d:79:0c:b6:76:26:00:53:70:ce:83:e4:fc:81:8e:ba: ca:bc:8a:0f:17:41:50:54:b8:54:c1:ef:49:bd:87:17:3b:20: b3:74:f0:57:b5:ee:d7:b6:bc:b4:60:08:63:18:f2:42:65:e1: f8:a6:86:57:f5:23:88:cc:88:5d:c3:f8:a8:34:f2:68:05:20: 7b:f6:1a:20:c7:33:77:55:60:33:73:10:81:9f:9a:71:70:2a: c7:3e:55:ef:6a:6b:03:ec:90:06:90:ae:1d:cf:05:b3:b6:e8: c6:c4:ff:91:64:91:f6:80:56:f5:7a:cf:19:f4:ef:df:b4:28: 06:0a:42:18:2d:be:b4:49:59:89:96:20:e7:d2:3d:bd:cd:40: 83:87:a4:b3:d7:3c:05:4b:f6:82:9d:9c:ba:3e:09:07:7f:cc: a2:b2:43:16:0a:a7:04:98:57:c3:71:24:8e:78:f5:aa:bf:ae: ec:5a:19:03:ac:fe:f3:1b:aa:53:a3:2d:4b:50:ec:45:fb:8a: 13:58:61:1a:dd:32:f4:b8:2f:bf:05:7c:33:61:5c:4b:2d:c9: c3:79:2f:7a:54:ec:bb:0b:40:20:f7:f0:39:4c:08:c0:d1:cd: 0c:72:81:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAYJqmFGtF90DoYGJGqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2JlODYzOWY0MDM5OTkzYzFmNmU3ODc5ZjQ3MjllNDdk YzM3YWUwHhcNMjUxMjIxMTMwMTE5WhcNMjUxMjIyMTMwMTE5WjAzMTEwLwYDVQQD Eyg2ODY0ZGJlZjBkMjA0NjUzNGU4MjRlNWRlMjYzMzVhOTlmYjE1Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2etAeRtk102FBroPKKX6df1m+vK 75oce/ADZZjRmuP8KU02x9XvF7xmFipnqDzrLjQ9vU/wGn5NIsRnhR7YdZRLLZzQ 8ZKfQxaU4klteKiELPbkUa2x1VdvduS4uBurZEKGPwFhFU0wHWXvH9uGfLwJYwxt adoL1cExQwzS1/OCeHigabP/ZBG0HtfoIyhjMRQ9GcKWhbXkkpn3Ob/A1bCWODGB 135hnm1Zkl009Pjdc295ymhqnJT1KnK57cSClgcFxZJTiaQXQ6ZtXZ1oiY8gB5R5 +P5avn1ZRP61ozS6lxENOnRiBgIQWIOBOlCq267ybhA9YvXYeT9twvLq8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhk2+8NIEZTToJOXeJjNamfsVzJMB8GA1UdIwQY MBaAFIQ76GOfQDmZPB9ueHn0cp5H3DeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaER2b1k1OUFPWms4SDI1NGVmUnlua2ZjTjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85ZTFhNzctN2MxNy00NDgxLTg3N2Mt Nzc4ODc0OGY2N2NiLzEvaER2b1k1OUFPWms4SDI1NGVmUnlua2ZjTjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi85ZTFhNzctN2MxNy00NDgxLTg3N2MtNzc4ODc0OGY2N2Ni LzEvaER2b1k1OUFPWms4SDI1NGVmUnlua2ZjTjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvZoBzmW Wr3CMO8p6Aw3AZ+eA4tteQy2diYAU3DOg+T8gY66yryKDxdBUFS4VMHvSb2HFzsg s3TwV7Xu17a8tGAIYxjyQmXh+KaGV/UjiMyIXcP4qDTyaAUge/YaIMczd1VgM3MQ gZ+acXAqxz5V72prA+yQBpCuHc8Fs7boxsT/kWSR9oBW9XrPGfTv37QoBgpCGC2+ tElZiZYg59I9vc1Ag4eks9c8BUv2gp2cuj4JB3/MorJDFgqnBJhXw3Ekjnj1qr+u 7FoZA6z+8xuqU6MtS1DsRfuKE1hhGt0y9LgvvwV8M2FcSy3Jw3kvelTsuwtAIPfw OUwIwNHNDHKBWw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:17 2025 by rpki-client