This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json) Hash identifier: M4134tG2eeI440OeUislDEFJj1c7UBGrlgrZcgi48rc= Subject key identifier: 31:04:B5:56:2A:B8:9A:CE:75:AB:C3:A1:9D:18:8B:F4:94:E5:A2:13 Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c Certificate serial: 019B4EF21095EB925BC6186BEAE46B38F7CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft Manifest number: 0AF0 Signing time: Wed 24 Dec 2025 06:00:45 +0000 Manifest this update: Wed 24 Dec 2025 06:00:45 +0000 Manifest next update: Thu 25 Dec 2025 06:00:45 +0000 Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: 5Xmwv3zkPe1qI7xKDmShRW3PlQeESYw5f6oteKfZVPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:10:95:eb:92:5b:c6:18:6b:ea:e4:6b:38:f7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c Validity Not Before: Dec 24 06:00:45 2025 GMT Not After : Dec 25 06:00:45 2025 GMT Subject: CN=3104b5562ab89ace75abc3a19d188bf494e5a213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:15:5d:a1:08:92:c4:92:51:76:2b:77:b0: f2:d7:fb:22:b5:01:38:97:43:8e:da:7a:66:c8:b2: f6:2b:22:74:c6:19:b7:4c:5a:2a:e1:30:ca:79:b0: a2:a7:cb:ce:fc:c5:d0:4f:48:2e:0d:ff:bf:d6:c2: af:bc:23:49:ae:6b:1f:dc:00:1c:04:ac:2d:8b:1e: c1:b8:e6:95:16:2e:97:3a:f0:ed:e5:cb:71:d8:0a: bc:f4:b4:27:8b:75:2b:eb:b2:dc:80:c9:25:78:77: f8:08:9b:a5:0e:56:46:66:67:de:b2:e6:a6:40:3f: aa:92:c6:73:8a:c0:0e:9f:7c:dd:a0:3b:1c:df:51: c0:ec:7d:f9:2a:33:18:b7:9f:0a:a3:43:18:ea:37: b7:18:cf:c6:71:3c:d3:bc:b2:93:31:99:49:d6:17: 51:25:05:97:1b:d5:ff:ce:d9:a7:c0:04:c4:22:ae: 1a:c8:c8:fb:64:48:cb:d6:e8:02:33:5c:55:dc:51: 95:e4:58:f7:22:d8:a5:05:6a:81:4d:65:c4:9c:48: a5:bf:e8:5a:c9:60:72:a5:04:34:61:d5:4d:fe:4e: 07:a3:8a:99:fe:bb:96:2b:d5:60:38:55:b8:d5:0d: 2f:8f:b0:60:c0:00:24:6a:58:79:79:72:c6:61:06: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:B5:56:2A:B8:9A:CE:75:AB:C3:A1:9D:18:8B:F4:94:E5:A2:13 X509v3 Authority Key Identifier: keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:06:84:62:83:c3:75:80:85:56:99:74:7b:73:96:e0:d8:2f: 6f:5c:5e:3f:fa:f6:d7:e9:4a:3f:ec:7f:28:a3:3f:da:a5:3e: fc:fe:10:60:35:39:d3:5c:33:ad:c9:29:d8:80:fb:c7:80:7e: d0:23:19:b5:fa:ad:d2:62:e3:9b:48:d8:6a:2b:61:59:0e:8d: 88:1e:6b:ee:d4:a6:14:85:c3:a0:a3:82:c1:5e:56:19:46:99: ab:01:2f:23:76:fc:5f:f3:c9:df:1b:f6:12:98:9b:a8:e1:de: 44:e7:b8:ef:ea:22:76:c1:72:c6:ba:53:ec:0d:5f:d3:7e:41: 65:34:a6:5e:f0:db:db:06:a0:6d:ca:37:5c:2f:4d:8a:84:af: 48:5e:ef:5f:4e:5e:cc:aa:32:ce:0b:d3:9f:2a:ee:bf:f6:fc: 44:ca:ab:73:7d:1f:eb:4e:f0:94:9d:b0:f6:ce:5f:5b:b8:ea: 36:f0:df:c8:5f:e4:fd:97:5a:9a:e6:81:af:85:53:8f:7b:69: 4a:7e:02:ef:0f:b7:97:e0:14:57:cd:7c:2e:b3:1c:63:5b:9c: 68:0d:9e:24:9d:9e:78:2d:04:12:77:1d:ad:28:f3:29:43:c8: 1a:4a:2c:7a:e1:06:76:2f:66:d3:9d:cc:db:b9:ee:05:97:23: dc:ee:21:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8hCV65Jbxhhr6uRrOPfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTI2YzQ3YTM2MDdmNTFhMzllMWM5MWU3ODk3Zjg1ZjQ3 ZTM0N2MwHhcNMjUxMjI0MDYwMDQ1WhcNMjUxMjI1MDYwMDQ1WjAzMTEwLwYDVQQD EygzMTA0YjU1NjJhYjg5YWNlNzVhYmMzYTE5ZDE4OGJmNDk0ZTVhMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQoVXaEIksSSUXYrd7Dy1/sitQE4 l0OO2npmyLL2KyJ0xhm3TFoq4TDKebCip8vO/MXQT0guDf+/1sKvvCNJrmsf3AAc BKwtix7BuOaVFi6XOvDt5ctx2Aq89LQni3Ur67LcgMkleHf4CJulDlZGZmfesuam QD+qksZzisAOn3zdoDsc31HA7H35KjMYt58Ko0MY6je3GM/GcTzTvLKTMZlJ1hdR JQWXG9X/ztmnwATEIq4ayMj7ZEjL1ugCM1xV3FGV5Fj3ItilBWqBTWXEnEilv+ha yWBypQQ0YdVN/k4Ho4qZ/ruWK9VgOFW41Q0vj7BgwAAkalh5eXLGYQbx6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEEtVYquJrOdavDoZ0Yi/SU5aITMB8GA1UdIwQY MBaAFISSbEejYH9Ro54ckeeJf4X0fjR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpKc1I2TmdmMUdqbmh5UjU0bF9oZlItTkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84NjVlZWItZDYwYi00ZTAwLTgxMWYt NTFkMTY0NjAyM2YwLzEvaEpKc1I2TmdmMUdqbmh5UjU0bF9oZlItTkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84NjVlZWItZDYwYi00ZTAwLTgxMWYtNTFkMTY0NjAyM2Yw LzEvaEpKc1I2TmdmMUdqbmh5UjU0bF9oZlItTkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAaEYoPD dYCFVpl0e3OW4Ngvb1xeP/r21+lKP+x/KKM/2qU+/P4QYDU501wzrckp2ID7x4B+ 0CMZtfqt0mLjm0jYaithWQ6NiB5r7tSmFIXDoKOCwV5WGUaZqwEvI3b8X/PJ3xv2 EpibqOHeROe47+oidsFyxrpT7A1f035BZTSmXvDb2wagbco3XC9NioSvSF7vX05e zKoyzgvTnyruv/b8RMqrc30f607wlJ2w9s5fW7jqNvDfyF/k/ZdamuaBr4VTj3tp Sn4C7w+3l+AUV818LrMcY1ucaA2eJJ2eeC0EEncdrSjzKUPIGkoseuEGdi9m053M 27nuBZcj3O4hlQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:05:04 2025 by rpki-client