This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json) Hash identifier: FwQeM2FmKsJxIfNtlY00hGPm2IGbVhBVd/H94hD4c5Y= Subject key identifier: AA:F0:FB:72:A3:4B:97:0E:96:39:33:21:E3:5D:4A:65:74:8A:B1:D2 Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65 Certificate issuer: /CN=842e1583c6d2b94878c5a9839ef67f56144b8565 Certificate serial: 019B3DFE677E3D8D1C862FEF439D4668FABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft Manifest number: B8 Signing time: Sat 20 Dec 2025 23:00:41 +0000 Manifest this update: Sat 20 Dec 2025 23:00:41 +0000 Manifest next update: Sun 21 Dec 2025 23:00:41 +0000 Files and hashes: 1: KO1fsPW5WsiblhObCxnGWsbz8RY.roa (hash: YNVGCapIIz5fFc5b4tML70CA2D7xNVMhrzbQveusosk=) 2: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: 4nz2EvH3sz8gzj3cH4sGMazVGxL1Plr4eje8aXBUFng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:67:7e:3d:8d:1c:86:2f:ef:43:9d:46:68:fa:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565 Validity Not Before: Dec 20 23:00:41 2025 GMT Not After : Dec 21 23:00:41 2025 GMT Subject: CN=aaf0fb72a34b970e96393321e35d4a65748ab1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:d3:9a:83:60:9f:5b:40:e6:c0:54:f2:e1: 44:53:39:96:e8:f2:eb:89:42:e7:93:87:84:35:0c: 74:c7:e4:4b:eb:ac:4e:05:86:78:32:fc:f1:df:75: b0:dd:e8:21:54:3b:50:ff:85:5a:0b:27:c3:35:d1: 4d:b3:d6:30:a5:0c:26:65:61:20:b7:ca:bd:ac:0c: 1d:61:3b:e4:8e:31:69:3b:43:02:de:22:b7:3c:7b: 11:6c:51:55:48:16:e9:97:20:31:de:79:a9:13:dd: 61:16:2b:ca:d0:13:40:22:bc:17:6d:95:6e:eb:38: ae:75:6f:33:45:a0:87:ef:dd:45:ec:15:1d:83:7d: e7:65:96:3c:4f:51:9e:09:de:99:17:14:db:bc:e7: 44:56:bb:6d:9e:08:25:d4:58:d8:c5:06:cd:28:b1: ec:36:5c:f7:23:1a:49:da:0b:fe:ab:41:55:52:29: 08:96:60:f4:e0:8b:81:a3:f9:8c:14:31:34:b0:30: bd:c4:c2:e2:4d:8f:d0:a5:e1:08:c5:b8:28:fe:1f: 0e:b3:ea:89:fb:13:b5:29:57:bb:99:3e:7f:5a:35: 53:4c:84:5d:46:f4:85:f3:08:ac:7c:25:4a:3b:b6: 9a:4e:f7:bd:98:16:d5:67:2d:3f:77:a1:3b:c4:3d: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:FB:72:A3:4B:97:0E:96:39:33:21:E3:5D:4A:65:74:8A:B1:D2 X509v3 Authority Key Identifier: keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8a:66:d8:42:c7:75:b1:b9:9b:57:76:ca:b2:c8:2d:8e:8e: 08:92:52:d4:15:95:68:8f:97:37:83:a7:75:96:dc:b5:9f:a3: 95:a8:fe:12:ef:58:d1:d4:4c:f2:35:63:85:5c:02:72:7d:f0: dc:a6:59:f4:02:35:d9:8b:3a:cc:8c:f6:56:a1:27:84:95:9a: fc:82:ce:48:5e:f0:c1:c6:da:68:84:ce:e8:34:aa:8a:95:56: 24:b6:72:1c:7c:df:02:e6:f9:f3:f0:88:a3:b4:b5:2c:cf:6f: 09:f6:e4:b1:0a:83:0d:d2:d2:24:5f:a9:29:af:e4:24:53:01: 81:17:75:26:b2:29:6d:ab:73:4d:be:02:62:eb:6a:5c:ba:3f: 26:b9:95:fa:d8:b6:5a:11:3b:72:80:e4:d4:c1:b9:b2:80:62: 3d:38:5c:2f:c5:f5:ff:2a:a1:e8:8b:dc:f5:c6:e8:ff:a7:4d: 71:87:57:77:9a:d1:83:3a:7c:77:c9:a1:dc:e6:40:a9:15:96: 99:17:74:94:2e:4c:e1:8c:f6:50:71:28:cf:f2:9e:05:f0:33: a0:b4:ac:ef:4c:1c:c2:81:bc:54:b7:b1:7b:7d:c8:ab:8a:ed: 69:3b:f3:76:6c:c4:e4:fc:04:bf:1a:fe:bf:85:0a:4a:67:f1: 77:74:ee:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/md+PY0chi/vQ51GaPq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MmUxNTgzYzZkMmI5NDg3OGM1YTk4MzllZjY3ZjU2MTQ0 Yjg1NjUwHhcNMjUxMjIwMjMwMDQxWhcNMjUxMjIxMjMwMDQxWjAzMTEwLwYDVQQD EyhhYWYwZmI3MmEzNGI5NzBlOTYzOTMzMjFlMzVkNGE2NTc0OGFiMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdvTmoNgn1tA5sBU8uFEUzmW6PLr iULnk4eENQx0x+RL66xOBYZ4Mvzx33Ww3eghVDtQ/4VaCyfDNdFNs9YwpQwmZWEg t8q9rAwdYTvkjjFpO0MC3iK3PHsRbFFVSBbplyAx3nmpE91hFivK0BNAIrwXbZVu 6ziudW8zRaCH791F7BUdg33nZZY8T1GeCd6ZFxTbvOdEVrttnggl1FjYxQbNKLHs Nlz3IxpJ2gv+q0FVUikIlmD04IuBo/mMFDE0sDC9xMLiTY/QpeEIxbgo/h8Os+qJ +xO1KVe7mT5/WjVTTIRdRvSF8wisfCVKO7aaTve9mBbVZy0/d6E7xD2OwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrw+3KjS5cOljkzIeNdSmV0irHSMB8GA1UdIwQY MBaAFIQuFYPG0rlIeMWpg572f1YUS4VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDRlZTktYTI5Yy00ODU5LTgxOWEt OGNjZWVlZDYyY2Q1LzEvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDRlZTktYTI5Yy00ODU5LTgxOWEtOGNjZWVlZDYyY2Q1 LzEvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIpm2ELH dbG5m1d2yrLILY6OCJJS1BWVaI+XN4OndZbctZ+jlaj+Eu9Y0dRM8jVjhVwCcn3w 3KZZ9AI12Ys6zIz2VqEnhJWa/ILOSF7wwcbaaITO6DSqipVWJLZyHHzfAub58/CI o7S1LM9vCfbksQqDDdLSJF+pKa/kJFMBgRd1JrIpbatzTb4CYutqXLo/JrmV+ti2 WhE7coDk1MG5soBiPThcL8X1/yqh6Ivc9cbo/6dNcYdXd5rRgzp8d8mh3OZAqRWW mRd0lC5M4Yz2UHEoz/KeBfAzoLSs70wcwoG8VLexe33Iq4rtaTvzdmzE5PwEvxr+ v4UKSmfxd3Tu5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:21 2025 by rpki-client