This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json) Hash identifier: NZ2wmEUcC7JXCUZbw1XNQnhz3a3nfA4upqrOSRv4ViM= Subject key identifier: EF:A2:07:A1:24:E9:39:F1:C8:EE:11:4C:22:36:7A:9C:26:63:08:B7 Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Certificate serial: 019B27089D45891FC4005C028776B13C429B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft Manifest number: 0459 Signing time: Tue 16 Dec 2025 12:00:34 +0000 Manifest this update: Tue 16 Dec 2025 12:00:34 +0000 Manifest next update: Wed 17 Dec 2025 12:00:34 +0000 Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: 4Q5fAYf9oW1BWW7ZWPG745JcRoVagkSS6E4uTFyuwq8=) 2: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=) 3: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:08:9d:45:89:1f:c4:00:5c:02:87:76:b1:3c:42:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Validity Not Before: Dec 16 12:00:34 2025 GMT Not After : Dec 17 12:00:34 2025 GMT Subject: CN=efa207a124e939f1c8ee114c22367a9c266308b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:f4:44:2b:25:bf:57:22:ae:46:1d:9d:95: 80:78:b2:dd:90:7e:a6:20:5d:ec:68:81:72:b0:5a: 95:7c:78:2a:5e:0e:62:e5:d5:99:7a:18:2e:77:51: 19:be:50:f9:99:d2:69:b1:4c:5c:c8:31:eb:bc:16: 25:74:ab:5e:32:a3:6b:27:71:95:6e:8a:89:66:cb: 35:7e:17:da:15:32:37:f5:1b:2e:9d:0c:7c:f9:ed: 38:b4:0d:64:fe:ee:82:ec:95:6f:47:95:f0:a2:25: f1:94:3f:97:35:5a:23:c0:cf:75:93:b5:e2:8c:dc: 69:cb:85:88:d6:03:56:4f:ce:29:90:86:78:fc:13: 08:3b:e9:0e:f0:cf:85:8a:f7:e6:33:bf:13:75:a4: df:70:82:39:ec:20:55:76:3a:1f:73:27:8b:0f:f4: ef:ed:25:d4:73:74:50:f8:03:c6:b3:97:8f:94:35: 20:ef:55:a5:74:98:ba:1d:f7:80:ca:06:82:3c:7d: 88:f5:f3:eb:4b:b6:4f:dc:c2:51:7d:28:23:84:47: e5:fa:db:fd:6f:67:b9:df:3a:67:75:40:19:87:b5: 2f:c8:7a:1d:3d:e4:63:bb:8d:ad:e6:21:a3:bb:2d: 6e:08:09:f3:9c:34:44:b0:d5:14:ed:d9:2e:08:72: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A2:07:A1:24:E9:39:F1:C8:EE:11:4C:22:36:7A:9C:26:63:08:B7 X509v3 Authority Key Identifier: keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:95:0a:0d:73:e7:ac:5e:c1:ab:09:4d:a4:d5:82:ea:87:7d: 92:85:de:63:b6:23:ec:c9:df:63:91:32:8f:24:69:4b:3f:dd: 7f:64:44:1b:07:7f:47:b8:09:6d:99:04:73:69:45:a9:a1:3a: b9:15:aa:6c:a0:7a:21:39:59:cf:17:ca:1a:20:bd:d6:c8:b1: 29:8b:0d:26:38:87:f5:9f:4f:63:39:51:88:15:b0:df:21:e8: 81:2e:a6:d8:ca:ef:24:ee:c9:4e:4a:82:48:d2:71:87:4b:73: 10:64:cf:3b:30:97:c5:34:6d:d0:ac:7c:56:71:8b:70:26:39: 1a:70:6c:e8:ad:01:0c:61:46:ae:5d:83:b8:31:73:1f:89:c6: 12:11:8d:a5:d2:c8:75:a9:7b:bc:07:93:e0:b4:4f:cd:8d:69: 8a:17:26:a7:cc:d3:28:3e:a8:fc:a3:7e:13:36:bf:fa:3a:d2: 2e:7e:0c:4a:9e:1d:40:d5:1b:bb:9f:cd:a1:aa:67:19:54:6b: d4:9d:60:1e:ab:2a:e2:ce:8a:f8:7c:5c:09:11:4c:a3:05:21: d4:44:69:d6:63:40:90:84:83:dd:3b:0b:73:7f:ec:c6:f8:e1: d6:4f:69:00:d8:a2:63:84:d0:4d:b4:54:33:c5:fb:c7:bc:fa: 75:5f:70:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnCJ1FiR/EAFwCh3axPEKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3 NTRlYzQwHhcNMjUxMjE2MTIwMDM0WhcNMjUxMjE3MTIwMDM0WjAzMTEwLwYDVQQD EyhlZmEyMDdhMTI0ZTkzOWYxYzhlZTExNGMyMjM2N2E5YzI2NjMwOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkv0RCslv1cirkYdnZWAeLLdkH6m IF3saIFysFqVfHgqXg5i5dWZehgud1EZvlD5mdJpsUxcyDHrvBYldKteMqNrJ3GV boqJZss1fhfaFTI39RsunQx8+e04tA1k/u6C7JVvR5XwoiXxlD+XNVojwM91k7Xi jNxpy4WI1gNWT84pkIZ4/BMIO+kO8M+FivfmM78TdaTfcII57CBVdjofcyeLD/Tv 7SXUc3RQ+APGs5ePlDUg71WldJi6HfeAygaCPH2I9fPrS7ZP3MJRfSgjhEfl+tv9 b2e53zpndUAZh7UvyHodPeRju42t5iGjuy1uCAnznDREsNUU7dkuCHIHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+iB6Ek6TnxyO4RTCI2epwmYwi3MB8GA1UdIwQY MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1 LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5UKDXPn rF7BqwlNpNWC6od9koXeY7Yj7MnfY5EyjyRpSz/df2REGwd/R7gJbZkEc2lFqaE6 uRWqbKB6ITlZzxfKGiC91sixKYsNJjiH9Z9PYzlRiBWw3yHogS6m2MrvJO7JTkqC SNJxh0tzEGTPOzCXxTRt0Kx8VnGLcCY5GnBs6K0BDGFGrl2DuDFzH4nGEhGNpdLI dal7vAeT4LRPzY1pihcmp8zTKD6o/KN+Eza/+jrSLn4MSp4dQNUbu5/NoapnGVRr 1J1gHqsq4s6K+HxcCRFMowUh1ERp1mNAkISD3TsLc3/sxvjh1k9pANiiY4TQTbRU M8X7x7z6dV9wJQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:44:04 2025 by rpki-client