This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json) Hash identifier: xhk/oeQe7a0E8+XcXP5V4k+Pjw+Uhll5CDTHnXUpHg4= Subject key identifier: A4:F2:EA:F2:8B:75:4A:42:93:90:FF:22:52:DE:E4:A1:B9:08:0E:F1 Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Certificate serial: 019B3C46DD22A781A170A1FFD986A7D67F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft Manifest number: 0464 Signing time: Sat 20 Dec 2025 15:00:35 +0000 Manifest this update: Sat 20 Dec 2025 15:00:35 +0000 Manifest next update: Sun 21 Dec 2025 15:00:35 +0000 Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: HBfCPqBGiQ3yKpGQcPssZDDHRJjxTIeQtUhH0x0vtP0=) 2: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=) 3: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:dd:22:a7:81:a1:70:a1:ff:d9:86:a7:d6:7f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4 Validity Not Before: Dec 20 15:00:35 2025 GMT Not After : Dec 21 15:00:35 2025 GMT Subject: CN=a4f2eaf28b754a429390ff2252dee4a1b9080ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:70:29:e1:c2:b0:31:31:61:3f:fb:56:f9: 41:a1:cb:fa:40:ec:98:2b:ba:83:09:75:63:1e:f8: ce:06:85:b4:e4:e3:99:53:89:7a:bc:d9:83:d3:7a: 43:dd:7c:81:06:2d:67:4d:05:22:fd:d7:13:e2:c5: 09:89:c4:f8:ec:d9:05:9b:a3:b0:94:1e:70:f9:b6: dd:60:9f:85:d7:e9:dd:77:c8:85:e2:81:c7:19:70: a4:d7:95:33:83:b2:bb:4c:f3:fd:7e:52:84:5b:b9: 68:a1:de:a0:a4:f5:a0:f9:39:23:f8:c4:c7:29:f4: 3e:7f:90:56:7e:9f:6c:58:57:0b:07:ee:f6:7c:4f: 5d:05:b3:fe:43:0d:d9:fb:ec:ce:57:be:38:71:2f: 71:43:ce:d8:fc:cd:f6:67:80:f6:a5:f9:84:bb:e9: d8:79:a9:6a:b5:08:36:99:c9:40:8c:05:4f:93:03: 8c:11:73:38:f4:b4:4a:c7:7f:b9:33:de:74:ad:21: dd:51:3f:bd:2f:9e:95:4f:10:aa:e0:56:a5:a3:e0: 47:48:b2:30:d0:18:da:fe:60:1b:14:38:5c:c2:91: 1c:fd:c3:f3:f4:56:d7:9d:ad:0a:fb:47:4f:c0:2e: 85:c3:f6:70:53:8d:04:9e:41:28:68:19:e1:b9:1c: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F2:EA:F2:8B:75:4A:42:93:90:FF:22:52:DE:E4:A1:B9:08:0E:F1 X509v3 Authority Key Identifier: keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c0:e7:16:82:f7:2c:62:14:ca:e6:e8:80:63:34:16:06:88: 15:63:6f:6a:a6:32:7c:fd:c0:32:0b:f0:60:8b:22:8b:c5:9a: 6e:62:10:e3:7b:c4:2c:eb:b4:a4:ec:6f:58:ac:41:1d:e6:0b: d1:f7:8e:43:71:45:6b:1b:c7:cf:6a:7a:ad:3a:4f:6f:7a:43: 8d:01:41:f2:a3:03:9c:51:1e:bc:d1:7e:93:22:ad:07:bb:b4: 81:87:c2:5b:04:31:a9:65:a2:c4:e3:bd:3b:64:41:eb:53:fa: 02:0f:b3:17:b1:3b:29:21:3e:ba:81:ca:fe:56:af:77:89:a3: 25:e1:b1:a2:68:8d:c8:f6:8a:15:5e:ce:a1:c5:48:53:7a:dc: ff:83:5c:18:4e:77:1e:01:7a:c3:57:ed:fb:27:42:67:84:bd: 5f:aa:c0:82:da:ac:3f:11:33:90:15:a5:2f:4a:37:dc:80:c5: 4b:d4:81:72:61:ff:20:e7:dc:3f:65:0c:4a:20:11:b9:6f:de: 95:96:b7:80:a6:47:f0:45:94:b9:e7:88:f9:80:39:c9:d7:a6: 75:df:b5:1d:36:c2:27:46:28:29:67:8d:b3:41:27:7d:f3:13: ae:cf:70:d3:52:31:de:82:b8:e1:cf:7e:41:ad:fd:9e:32:d5: cd:1b:39:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rt0ip4GhcKH/2Yan1n8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3 NTRlYzQwHhcNMjUxMjIwMTUwMDM1WhcNMjUxMjIxMTUwMDM1WjAzMTEwLwYDVQQD EyhhNGYyZWFmMjhiNzU0YTQyOTM5MGZmMjI1MmRlZTRhMWI5MDgwZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IhwKeHCsDExYT/7VvlBocv6QOyY K7qDCXVjHvjOBoW05OOZU4l6vNmD03pD3XyBBi1nTQUi/dcT4sUJicT47NkFm6Ow lB5w+bbdYJ+F1+ndd8iF4oHHGXCk15Uzg7K7TPP9flKEW7lood6gpPWg+Tkj+MTH KfQ+f5BWfp9sWFcLB+72fE9dBbP+Qw3Z++zOV744cS9xQ87Y/M32Z4D2pfmEu+nY ealqtQg2mclAjAVPkwOMEXM49LRKx3+5M950rSHdUT+9L56VTxCq4Falo+BHSLIw 0Bja/mAbFDhcwpEc/cPz9FbXna0K+0dPwC6Fw/ZwU40EnkEoaBnhuRwr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTy6vKLdUpCk5D/IlLe5KG5CA7xMB8GA1UdIwQY MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1 LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMDnFoL3 LGIUyubogGM0FgaIFWNvaqYyfP3AMgvwYIsii8WabmIQ43vELOu0pOxvWKxBHeYL 0feOQ3FFaxvHz2p6rTpPb3pDjQFB8qMDnFEevNF+kyKtB7u0gYfCWwQxqWWixOO9 O2RB61P6Ag+zF7E7KSE+uoHK/lavd4mjJeGxomiNyPaKFV7OocVIU3rc/4NcGE53 HgF6w1ft+ydCZ4S9X6rAgtqsPxEzkBWlL0o33IDFS9SBcmH/IOfcP2UMSiARuW/e lZa3gKZH8EWUueeI+YA5ydemdd+1HTbCJ0YoKWeNs0EnffMTrs9w01Ix3oK44c9+ Qa39njLVzRs5+g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:35:34 2025 by rpki-client