This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json) Hash identifier: Z4WSD1vb9bw9iAOYhaS0EzxF75UpdFkIQYWCvzBrI/Y= Subject key identifier: 23:E6:2A:0B:24:3C:5C:BC:80:56:0C:20:48:15:B7:31:11:0E:93:B2 Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f Certificate serial: 019B3BA2A75168DBB56770A2454E5CBD1914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft Manifest number: 07D6 Signing time: Sat 20 Dec 2025 12:01:13 +0000 Manifest this update: Sat 20 Dec 2025 12:01:13 +0000 Manifest next update: Sun 21 Dec 2025 12:01:13 +0000 Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=) 2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: 7hY+y3ug4WHRYeoU2/mP4aSdyF/TYvLTSW2nzAs+H8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a7:51:68:db:b5:67:70:a2:45:4e:5c:bd:19:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f Validity Not Before: Dec 20 12:01:13 2025 GMT Not After : Dec 21 12:01:13 2025 GMT Subject: CN=23e62a0b243c5cbc80560c204815b731110e93b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:31:90:33:9d:18:86:71:1e:3a:5c:63:fc: 1c:15:e3:c2:aa:55:4a:22:ef:ec:fb:e1:62:01:34: ed:60:b3:e3:fe:31:bf:dd:27:fc:f5:c6:ce:78:97: 5e:6e:89:23:fe:8a:cf:a4:49:1f:d7:b3:50:e2:59: d5:55:5d:32:4a:a6:6e:eb:e3:d4:18:2a:f0:ea:b2: 2f:18:7d:ec:6f:6a:17:d5:11:86:59:ad:70:94:7d: 59:c8:4a:c8:04:a4:7f:f0:f1:ea:10:40:15:97:41: 3d:29:0e:fd:b9:7f:ba:79:51:71:e7:78:a2:46:21: e0:02:f0:3b:1a:97:66:72:1b:5f:8b:dd:96:1a:23: b6:0e:2d:90:9a:8f:49:da:42:bd:04:db:da:54:91: 89:92:21:46:5b:d7:bb:12:ff:cd:37:be:9d:78:e4: 4c:93:1b:51:92:a6:fa:47:5b:40:86:91:10:96:f5: 70:bd:7c:71:22:2f:a4:7a:25:61:d3:4d:79:fc:6e: 95:15:d2:71:0f:34:1d:a8:35:58:c7:81:73:f0:87: 46:88:f3:bc:e2:8d:49:dd:57:af:13:96:2c:46:d4: 76:a8:4c:9c:4b:4d:cf:35:34:36:86:34:9f:cc:7f: 33:46:c9:32:fc:89:f6:12:13:c2:69:26:0e:59:90: 47:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:2A:0B:24:3C:5C:BC:80:56:0C:20:48:15:B7:31:11:0E:93:B2 X509v3 Authority Key Identifier: keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:09:42:29:6f:24:4d:ad:3a:cc:53:fd:c5:7b:68:39:d0:5b: c0:74:93:5d:a2:ae:94:ba:0a:d5:ba:cb:2a:6e:38:28:10:d1: 6b:70:1f:1b:ba:55:1f:cb:16:62:3c:18:dc:3d:51:46:d1:f7: 8a:38:5f:3b:74:16:b2:76:37:1b:7d:19:bd:b3:18:9e:a2:0b: 5a:e1:47:7f:3a:97:b0:50:a8:2d:da:90:cd:06:48:8f:fb:f4: 2c:44:b1:b3:fb:48:2a:31:68:05:84:11:94:64:4e:7c:91:55: 14:3a:a8:40:71:5a:86:6a:ee:8b:b7:fd:c4:ce:02:9d:25:16: 61:e1:c6:6d:94:68:1c:7a:08:23:04:67:b7:b9:aa:d7:7c:c3: da:b3:21:77:8b:38:5e:ae:c4:be:42:f9:ce:3b:7b:7b:72:37: 21:6a:92:d5:ec:0a:c2:e8:10:20:76:78:4f:40:fa:55:b2:8b: c1:11:1f:5e:56:72:5d:78:1a:6c:14:b2:d8:63:60:e5:bc:f8: ff:06:0a:92:bb:39:5b:54:9d:42:7b:70:25:5c:db:a4:74:91: d5:e1:ee:9f:90:7e:78:47:56:29:00:5b:2b:c0:4a:9d:4a:93: b0:ce:bd:18:67:4c:a9:4e:93:cc:c9:a7:a3:5f:ae:e4:0c:9d: 89:4a:19:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqdRaNu1Z3CiRU5cvRkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx MTA1NWYwHhcNMjUxMjIwMTIwMTEzWhcNMjUxMjIxMTIwMTEzWjAzMTEwLwYDVQQD EygyM2U2MmEwYjI0M2M1Y2JjODA1NjBjMjA0ODE1YjczMTExMGU5M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1gxkDOdGIZxHjpcY/wcFePCqlVK Iu/s++FiATTtYLPj/jG/3Sf89cbOeJdebokj/orPpEkf17NQ4lnVVV0ySqZu6+PU GCrw6rIvGH3sb2oX1RGGWa1wlH1ZyErIBKR/8PHqEEAVl0E9KQ79uX+6eVFx53ii RiHgAvA7Gpdmchtfi92WGiO2Di2Qmo9J2kK9BNvaVJGJkiFGW9e7Ev/NN76deORM kxtRkqb6R1tAhpEQlvVwvXxxIi+keiVh0015/G6VFdJxDzQdqDVYx4Fz8IdGiPO8 4o1J3VevE5YsRtR2qEycS03PNTQ2hjSfzH8zRsky/In2EhPCaSYOWZBHKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPmKgskPFy8gFYMIEgVtzERDpOyMB8GA1UdIwQY MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQlCKW8k Ta06zFP9xXtoOdBbwHSTXaKulLoK1brLKm44KBDRa3AfG7pVH8sWYjwY3D1RRtH3 ijhfO3QWsnY3G30ZvbMYnqILWuFHfzqXsFCoLdqQzQZIj/v0LESxs/tIKjFoBYQR lGROfJFVFDqoQHFahmrui7f9xM4CnSUWYeHGbZRoHHoIIwRnt7mq13zD2rMhd4s4 Xq7EvkL5zjt7e3I3IWqS1ewKwugQIHZ4T0D6VbKLwREfXlZyXXgabBSy2GNg5bz4 /wYKkrs5W1SdQntwJVzbpHSR1eHun5B+eEdWKQBbK8BKnUqTsM69GGdMqU6TzMmn o1+u5AydiUoZvA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:04:20 2025 by rpki-client