This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json) Hash identifier: btiAufSymJPbaFcFWUDVvu1qfba8VmBk0xk8mN9v7Uo= Subject key identifier: FD:19:4E:20:26:C3:F4:C7:8F:58:5E:3F:06:26:44:30:85:2D:A1:7D Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a Certificate serial: 019B41DB2A3A05C6EB96AADCB52E2A6FF08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 17:00:40 +0000 Manifest this update: Sun 21 Dec 2025 17:00:40 +0000 Manifest next update: Mon 22 Dec 2025 17:00:40 +0000 Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: 7yEDeh/71ol/t8hH9mwr9ggksvfY/d4fR3I5tBvVscw=) 2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:2a:3a:05:c6:eb:96:aa:dc:b5:2e:2a:6f:f0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a Validity Not Before: Dec 21 17:00:40 2025 GMT Not After : Dec 22 17:00:40 2025 GMT Subject: CN=fd194e2026c3f4c78f585e3f06264430852da17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:7f:6e:f6:0e:f3:29:8b:74:f9:fc:5c:f8: 22:fe:3b:32:55:d9:1e:e8:44:bc:32:5e:48:e8:47: 36:fb:a1:9b:3e:13:89:e6:5c:23:90:f0:b7:ea:3f: 39:53:a5:0f:d9:f4:b2:ff:99:e1:44:3a:fe:84:83: 8e:60:93:4f:92:c7:54:b0:6c:92:41:82:83:ac:69: bf:7f:99:d4:5d:d3:8a:84:db:0e:c2:b1:7d:d0:c9: 98:c8:59:df:79:f1:c9:28:28:45:a9:28:80:e1:4b: 93:ac:79:61:bb:2e:87:a1:6e:25:33:5d:d7:1b:74: 62:bb:b2:1d:dc:f2:99:c6:d2:2c:6c:df:52:db:64: df:ed:68:11:58:69:63:1a:6b:ed:67:0a:55:b4:15: 7a:1c:2a:ab:b1:51:4f:fa:64:f5:9d:80:16:30:78: 65:09:de:90:0e:31:41:03:89:7b:0f:1f:59:51:ea: 86:1e:00:81:5f:e3:7e:fe:cf:5c:07:3a:21:ba:a3: 3a:15:7f:2b:5f:c5:f4:e1:d7:80:be:2a:c6:20:84: 4b:49:a8:16:2f:16:4e:3e:6d:8f:ea:14:0a:23:ce: df:1c:39:10:3f:a0:72:a4:51:5e:b1:52:be:99:ba: 70:02:22:4b:f1:7b:74:73:0c:e1:38:f0:24:36:26: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:19:4E:20:26:C3:F4:C7:8F:58:5E:3F:06:26:44:30:85:2D:A1:7D X509v3 Authority Key Identifier: keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f0:e3:05:6a:c4:65:54:17:00:19:d8:dd:8a:33:dd:8b:c8: f4:9b:69:67:b9:6e:e8:43:6c:df:67:bd:f8:a7:27:fc:a5:6a: 7b:f0:c3:54:5f:72:f1:a3:9e:9b:fc:4a:cf:41:d0:ec:24:b6: 1a:51:2d:03:ac:02:42:cc:4c:33:c4:a2:30:aa:12:20:1e:69: 03:e5:56:ec:60:ab:58:91:09:60:8a:66:66:a0:51:9a:5e:cc: 00:2b:c5:c2:48:d6:74:0d:0a:73:0e:1f:2c:3a:75:d8:b0:54: 71:b1:d2:d8:55:0c:b7:3c:d0:cf:e7:d4:d5:cd:57:d0:98:11: 93:ec:ae:cc:db:56:05:20:9f:c8:01:dc:df:b5:ee:76:f3:8c: 9f:e8:8a:d9:be:6b:d5:ef:21:25:95:f7:4c:24:9d:fa:05:e7: 72:6e:96:a8:d9:4e:11:bc:96:b4:19:d4:cb:f8:29:e9:a8:92: 64:f1:88:8c:bd:1c:06:2c:b9:86:51:ed:42:50:99:8c:56:11: fd:91:7b:bb:84:84:c4:bf:6b:95:1c:0b:9e:b8:9b:48:a2:61: 4b:70:07:2b:78:0d:e6:8e:0a:9f:6f:97:ea:dc:12:90:a7:33: 59:49:6d:d9:3a:0a:92:61:4b:0f:55:b5:4e:b1:64:4b:44:90: 35:37:27:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2yo6BcbrlqrctS4qb/CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw ODJlOGEwHhcNMjUxMjIxMTcwMDQwWhcNMjUxMjIyMTcwMDQwWjAzMTEwLwYDVQQD EyhmZDE5NGUyMDI2YzNmNGM3OGY1ODVlM2YwNjI2NDQzMDg1MmRhMTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo9/bvYO8ymLdPn8XPgi/jsyVdke 6ES8Ml5I6Ec2+6GbPhOJ5lwjkPC36j85U6UP2fSy/5nhRDr+hIOOYJNPksdUsGyS QYKDrGm/f5nUXdOKhNsOwrF90MmYyFnfefHJKChFqSiA4UuTrHlhuy6HoW4lM13X G3Riu7Id3PKZxtIsbN9S22Tf7WgRWGljGmvtZwpVtBV6HCqrsVFP+mT1nYAWMHhl Cd6QDjFBA4l7Dx9ZUeqGHgCBX+N+/s9cBzohuqM6FX8rX8X04deAvirGIIRLSagW LxZOPm2P6hQKI87fHDkQP6BypFFesVK+mbpwAiJL8Xt0cwzhOPAkNiZPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0ZTiAmw/THj1hePwYmRDCFLaF9MB8GA1UdIwQY MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3 LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPDjBWrE ZVQXABnY3Yoz3YvI9JtpZ7lu6ENs32e9+Kcn/KVqe/DDVF9y8aOem/xKz0HQ7CS2 GlEtA6wCQsxMM8SiMKoSIB5pA+VW7GCrWJEJYIpmZqBRml7MACvFwkjWdA0Kcw4f LDp12LBUcbHS2FUMtzzQz+fU1c1X0JgRk+yuzNtWBSCfyAHc37XudvOMn+iK2b5r 1e8hJZX3TCSd+gXncm6WqNlOEbyWtBnUy/gp6aiSZPGIjL0cBiy5hlHtQlCZjFYR /ZF7u4SExL9rlRwLnribSKJhS3AHK3gN5o4Kn2+X6twSkKczWUlt2ToKkmFLD1W1 TrFkS0SQNTcn+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:15 2025 by rpki-client