This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json) Hash identifier: EBzA9B+HW7fiWOBb+8P7kSW6Nm4zeGs/cseXTCZISB4= Subject key identifier: 3B:1E:7F:9C:2D:56:0B:27:7D:20:4C:DF:08:F4:D9:6E:B7:14:78:C6 Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Certificate serial: 019B0B5B14F3C930724872538F303874084E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft Manifest number: 1402 Signing time: Thu 11 Dec 2025 03:01:17 +0000 Manifest this update: Thu 11 Dec 2025 03:01:17 +0000 Manifest next update: Fri 12 Dec 2025 03:01:17 +0000 Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=) 2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=) 3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: Ywo32IRVMtHDvV+2GNze5nhua3BZuydVZyD2b1NMvvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:5b:14:f3:c9:30:72:48:72:53:8f:30:38:74:08:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Validity Not Before: Dec 11 03:01:17 2025 GMT Not After : Dec 12 03:01:17 2025 GMT Subject: CN=3b1e7f9c2d560b277d204cdf08f4d96eb71478c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:c2:15:fc:70:3b:d3:26:9c:53:8d:78:51: 59:bc:5d:25:4b:b0:25:8b:a2:f7:f6:16:4e:25:29: a3:8f:8e:5f:e3:17:91:7d:6c:78:4e:21:b3:67:4b: 51:ab:0d:90:73:0d:07:fb:a5:18:1c:2b:0b:16:ee: ae:74:89:02:5b:c2:3d:ee:2d:07:57:2b:b2:2e:ba: 49:72:20:6b:9d:bb:9b:06:54:58:c7:9d:7a:09:c9: 4d:93:39:0d:b7:0b:b9:56:ff:a6:da:71:c9:60:63: b4:bb:80:0c:0f:00:2e:60:d9:90:e2:92:d2:b3:93: c3:ec:c9:70:c7:c4:71:ae:ea:40:22:6c:a8:2c:61: b1:10:36:ca:ca:cd:40:65:fc:28:87:01:02:bf:26: 58:0c:27:79:85:8b:13:6f:1a:4d:4c:e9:43:3e:e3: 3e:ab:bc:d1:59:8b:32:51:a5:f4:0e:02:2f:e5:45: f0:e2:98:5d:56:41:dd:36:56:e3:fe:2c:59:5d:e0: b1:3e:7d:69:0b:91:59:c3:95:65:64:1b:3f:1d:e9: 9f:78:2e:e9:c3:4c:00:67:cb:b1:26:72:40:e4:4b: 02:07:ba:90:47:bd:34:1d:9f:c8:9d:4a:3e:d9:e8: 82:0f:62:3e:a2:4b:ea:bf:77:1d:ba:39:93:4f:6d: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1E:7F:9C:2D:56:0B:27:7D:20:4C:DF:08:F4:D9:6E:B7:14:78:C6 X509v3 Authority Key Identifier: keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:10:2e:35:93:5a:76:ef:f3:b1:5f:0e:ac:f2:c8:e5:b6:f0: 96:07:b5:4f:4f:d4:db:28:2f:9f:15:2f:ad:3f:8c:ea:86:3d: bd:78:9b:d0:c9:85:b6:d9:01:2d:64:b6:42:ae:b7:60:3f:7d: 7e:a5:9c:df:9a:4c:d5:2f:61:cf:82:2f:f4:a3:77:a6:7b:74: 72:a6:7d:95:2b:ca:49:2d:3d:ae:8d:7b:20:27:fd:fe:78:5d: 5b:a3:0a:84:d4:c3:2a:6a:31:a7:95:d0:18:5c:cf:bd:42:d9: a2:be:14:8c:82:fe:71:e3:5c:01:3d:08:2f:1a:f9:66:80:fb: 6f:5b:76:7c:35:54:86:fd:bc:eb:d6:fe:9a:99:54:bb:ad:97: 33:d2:fc:f0:71:0f:6d:63:3a:f9:30:10:81:c3:1b:2b:b8:db: 0b:d2:c3:ef:b6:47:70:50:14:d9:b3:c3:d9:48:01:77:2b:20: ee:42:95:fb:d9:c5:ad:73:0d:83:5b:85:51:e0:48:16:24:b8: 30:a3:4d:1e:83:06:0c:b9:99:5c:5a:26:e4:d4:39:4a:ca:26: 35:45:dc:df:9c:6f:81:24:af:0b:d2:d2:f0:90:dd:cd:5f:b2: 7c:93:5a:f6:89:a4:48:8f:54:d2:9a:4b:68:19:b1:e9:a3:51: e3:32:67:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLWxTzyTBySHJTjzA4dAhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0 ZjRkNGIwHhcNMjUxMjExMDMwMTE3WhcNMjUxMjEyMDMwMTE3WjAzMTEwLwYDVQQD EygzYjFlN2Y5YzJkNTYwYjI3N2QyMDRjZGYwOGY0ZDk2ZWI3MTQ3OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYDCFfxwO9MmnFONeFFZvF0lS7Al i6L39hZOJSmjj45f4xeRfWx4TiGzZ0tRqw2Qcw0H+6UYHCsLFu6udIkCW8I97i0H VyuyLrpJciBrnbubBlRYx516CclNkzkNtwu5Vv+m2nHJYGO0u4AMDwAuYNmQ4pLS s5PD7Mlwx8RxrupAImyoLGGxEDbKys1AZfwohwECvyZYDCd5hYsTbxpNTOlDPuM+ q7zRWYsyUaX0DgIv5UXw4phdVkHdNlbj/ixZXeCxPn1pC5FZw5VlZBs/HemfeC7p w0wAZ8uxJnJA5EsCB7qQR700HZ/InUo+2eiCD2I+okvqv3cdujmTT21J0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsef5wtVgsnfSBM3wj02W63FHjGMB8GA1UdIwQY MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4xAuNZNa du/zsV8OrPLI5bbwlge1T0/U2ygvnxUvrT+M6oY9vXib0MmFttkBLWS2Qq63YD99 fqWc35pM1S9hz4Iv9KN3pnt0cqZ9lSvKSS09ro17ICf9/nhdW6MKhNTDKmoxp5XQ GFzPvULZor4UjIL+ceNcAT0ILxr5ZoD7b1t2fDVUhv2869b+mplUu62XM9L88HEP bWM6+TAQgcMbK7jbC9LD77ZHcFAU2bPD2UgBdysg7kKV+9nFrXMNg1uFUeBIFiS4 MKNNHoMGDLmZXFom5NQ5SsomNUXc35xvgSSvC9LS8JDdzV+yfJNa9omkSI9U0ppL aBmx6aNR4zJnUw== -----END CERTIFICATE-----Generated at Thu Dec 11 07:04:00 2025 by rpki-client