This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft File: hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json) Hash identifier: t+gsN0iL6PQGAZY6ctlHba+qu+4AMcWTqtVPFpR6iP0= Subject key identifier: 51:DE:B9:0A:A0:BC:E4:71:51:5B:CA:F0:48:81:27:DC:5B:F5:26:E3 Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04 Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604 Certificate serial: 019B3BA2148A46F1C142B8BB88C302D478E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft Manifest number: 0D86 Signing time: Sat 20 Dec 2025 12:00:36 +0000 Manifest this update: Sat 20 Dec 2025 12:00:36 +0000 Manifest next update: Sun 21 Dec 2025 12:00:36 +0000 Files and hashes: 1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=) 2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: OulfuItSQMN0DHnvegD5LlJsM9xLk7RFyHSKMsPC9/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:14:8a:46:f1:c1:42:b8:bb:88:c3:02:d4:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604 Validity Not Before: Dec 20 12:00:36 2025 GMT Not After : Dec 21 12:00:36 2025 GMT Subject: CN=51deb90aa0bce471515bcaf0488127dc5bf526e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:9b:1f:e0:a5:ec:f1:fd:4f:6b:df:da:4b: 6a:8e:ea:15:d1:29:02:da:f5:92:d2:45:2a:71:85: 2a:b6:95:e5:2f:b6:59:c9:6a:cd:1f:25:f2:89:8d: b2:d0:a7:36:3f:28:4f:1b:fb:de:4e:9d:71:16:ba: 9d:ed:21:61:28:3a:d9:ba:44:3c:3e:d6:e1:2e:12: c4:51:f0:26:cf:95:56:8f:6e:b5:81:4a:fc:a5:b0: ce:57:f9:8c:63:de:62:25:ba:94:94:6c:f3:cc:a6: a3:3a:90:b1:cc:30:f4:3a:2d:28:71:41:b3:e3:81: 2f:72:21:03:d6:ea:c4:83:93:7c:02:6f:ba:c0:8e: 1e:23:21:3c:64:c2:df:ac:fb:06:37:41:96:01:cf: 79:e9:72:49:e8:2b:e1:1c:dd:37:f9:fc:55:af:63: 8e:91:28:1c:aa:08:0b:ac:ee:65:80:6c:05:5c:2b: af:31:5d:37:8d:0c:54:1a:fe:52:46:27:d0:b0:09: 44:63:47:39:94:91:09:17:a6:8e:96:05:72:6f:9b: a7:02:53:b3:db:a4:44:89:1a:d4:06:74:6f:0a:ce: ad:c5:ec:71:f1:0e:2a:3d:54:6a:24:ca:e4:98:0a: 61:e8:64:95:a0:dc:d4:28:d4:b2:49:c3:3c:c6:0f: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DE:B9:0A:A0:BC:E4:71:51:5B:CA:F0:48:81:27:DC:5B:F5:26:E3 X509v3 Authority Key Identifier: keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:27:25:ea:54:bb:ae:95:b1:48:f9:e2:c7:e7:54:e1:6b:11: 96:8d:fb:5e:87:32:be:4e:4d:bf:3b:22:89:5a:42:21:d1:d1: 0c:ad:3d:6e:b1:c6:dd:05:ed:25:63:a1:54:91:b4:6d:07:a0: f6:db:83:d8:42:3b:75:7d:38:00:d4:61:c3:8a:7e:d2:4d:9b: 17:97:3a:74:77:1a:e4:58:5c:aa:46:e7:5d:81:3e:2c:63:4f: 47:95:93:4a:15:52:ec:d0:8f:b6:57:56:b1:78:c9:a0:18:01: 27:ba:8b:7e:1c:ad:c0:5a:42:21:1e:43:6e:14:af:75:d5:e0: 07:99:d3:17:4b:89:ba:64:08:08:1b:39:eb:c0:68:b5:58:aa: d7:ab:6d:cd:10:4b:2a:b9:a6:22:1f:6e:e1:bb:34:a6:4a:29: d4:c1:95:65:d1:62:90:4f:7a:7d:59:1e:a9:8d:e9:ee:78:5d: 56:7f:e2:12:16:51:29:92:7c:ae:1a:4e:8e:f8:b4:6b:d7:b1: ff:e3:dd:82:ea:fe:f3:7d:ab:65:83:ed:06:1c:58:31:a9:d1: a6:26:34:49:9e:bb:c4:6f:7c:c7:d1:11:dc:b4:df:b1:b9:04: 19:16:e0:c9:7e:95:4d:67:2c:ed:6a:c8:ed:07:0a:05:ae:86: 97:a8:0c:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohSKRvHBQri7iMMC1HjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OTFiYmVhY2Y1YjBjNTg5ZTk5YjkzZjg0ZTFjNWU0N2Q5 YWY2MDQwHhcNMjUxMjIwMTIwMDM2WhcNMjUxMjIxMTIwMDM2WjAzMTEwLwYDVQQD Eyg1MWRlYjkwYWEwYmNlNDcxNTE1YmNhZjA0ODgxMjdkYzViZjUyNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR+bH+Cl7PH9T2vf2ktqjuoV0SkC 2vWS0kUqcYUqtpXlL7ZZyWrNHyXyiY2y0Kc2PyhPG/veTp1xFrqd7SFhKDrZukQ8 PtbhLhLEUfAmz5VWj261gUr8pbDOV/mMY95iJbqUlGzzzKajOpCxzDD0Oi0ocUGz 44EvciED1urEg5N8Am+6wI4eIyE8ZMLfrPsGN0GWAc956XJJ6CvhHN03+fxVr2OO kSgcqggLrO5lgGwFXCuvMV03jQxUGv5SRifQsAlEY0c5lJEJF6aOlgVyb5unAlOz 26REiRrUBnRvCs6txexx8Q4qPVRqJMrkmAph6GSVoNzUKNSyScM8xg816wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHeuQqgvORxUVvK8EiBJ9xb9SbjMB8GA1UdIwQY MBaAFISRu+rPWwxYnpm5P4ThxeR9mvYEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hZGY5ODQtNzk1OS00YmJkLThhOGUt MmNiZWNkZGQwZDY0LzEvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hZGY5ODQtNzk1OS00YmJkLThhOGUtMmNiZWNkZGQwZDY0 LzEvaEpHNzZzOWJERmllbWJrX2hPSEY1SDJhOWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKycl6lS7 rpWxSPnix+dU4WsRlo37Xocyvk5NvzsiiVpCIdHRDK09brHG3QXtJWOhVJG0bQeg 9tuD2EI7dX04ANRhw4p+0k2bF5c6dHca5FhcqkbnXYE+LGNPR5WTShVS7NCPtldW sXjJoBgBJ7qLfhytwFpCIR5DbhSvddXgB5nTF0uJumQICBs568BotViq16ttzRBL KrmmIh9u4bs0pkop1MGVZdFikE96fVkeqY3p7nhdVn/iEhZRKZJ8rhpOjvi0a9ex /+Pdgur+832rZYPtBhxYManRpiY0SZ67xG98x9ER3LTfsbkEGRbgyX6VTWcs7WrI 7QcKBa6Gl6gM0A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:44:15 2025 by rpki-client