This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json) Hash identifier: qAc/KAiCxkk1x+JjXhq6aQWmV7/VjBrLNHSKDFhyP6M= Subject key identifier: 92:1B:94:40:46:3A:E1:DB:AF:F4:6A:3C:43:F7:DC:88:3F:F4:51:7A Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d Certificate serial: 019B32D6074351C2CB90CE26BE5F9F6F82BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft Manifest number: 16B2 Signing time: Thu 18 Dec 2025 19:00:45 +0000 Manifest this update: Thu 18 Dec 2025 19:00:45 +0000 Manifest next update: Fri 19 Dec 2025 19:00:45 +0000 Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=) 2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: 3HDrF8nhi54aO+Xs7JiPsKqWRzug07nZkpqmdy8AaBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:07:43:51:c2:cb:90:ce:26:be:5f:9f:6f:82:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d Validity Not Before: Dec 18 19:00:45 2025 GMT Not After : Dec 19 19:00:45 2025 GMT Subject: CN=921b9440463ae1dbaff46a3c43f7dc883ff4517a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4d:b5:f8:4d:7f:ae:1e:94:f5:ff:06:45:0a: 24:ff:f4:dd:c4:3d:d2:3b:cb:a9:7e:08:9e:47:0f: 46:29:e2:1a:08:a7:4d:03:f7:45:19:28:bc:d5:fc: 43:68:64:7f:32:94:03:61:e6:08:5a:86:cb:1c:d4: 5b:d8:3f:f6:99:a7:b6:0c:2f:23:2b:b1:a5:74:99: d9:5d:bb:db:00:a0:33:7a:da:52:f0:29:8d:8a:76: 06:2c:67:a4:cd:30:99:aa:9f:c8:32:f3:bb:0b:67: f6:bc:bb:8c:d7:8d:20:1f:1e:b2:60:15:f1:01:50: 60:5b:4d:5a:75:a8:16:84:aa:1e:80:12:0f:94:32: c0:e6:fe:e2:8b:5b:82:dd:b7:76:04:17:e7:d5:9c: b8:01:d8:45:ca:ea:d0:fd:67:a6:74:d5:21:02:c9: b1:04:1e:fe:bb:f5:14:c0:19:11:d6:54:94:22:f2: b2:9a:7b:4e:e6:db:10:6b:9d:3f:16:b6:4d:95:4c: 0e:a6:61:d1:99:79:36:b8:c0:3d:14:8a:ad:37:2f: 84:c9:4f:08:2f:02:16:1e:56:ac:a4:95:69:6a:04: bf:e4:97:7e:50:2a:56:b5:ad:55:ed:c7:f5:81:ec: d0:ad:a2:69:2b:4a:54:a9:59:75:c9:ce:84:44:a3: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:94:40:46:3A:E1:DB:AF:F4:6A:3C:43:F7:DC:88:3F:F4:51:7A X509v3 Authority Key Identifier: keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:02:d4:30:a9:e0:01:97:7c:d3:6e:ef:12:98:0f:8b:5f: 45:49:86:d2:fd:76:83:f5:c1:43:d8:94:86:df:72:4a:89:20: f7:c9:6c:61:b5:1e:30:3c:06:9f:89:e9:4a:b9:ca:5d:50:b6: 78:24:a2:94:4f:9c:09:8e:7f:fa:16:32:d4:c1:b3:24:94:04: 16:f3:ed:ca:cb:f8:f2:ea:38:c2:08:3e:fa:74:6c:bf:aa:2d: 9e:28:03:82:7b:17:4a:24:6c:21:69:13:e8:20:ec:7e:5f:1f: 44:65:2a:39:c7:dc:46:4a:ff:02:19:e6:38:61:a1:4e:50:1f: f5:ac:21:e0:05:e5:0b:b7:5f:22:97:4c:ef:14:dc:75:b0:38: 11:ba:02:ad:3a:53:82:c6:ee:a3:3a:ad:f6:00:50:73:2a:e5: 10:8a:89:0e:66:fc:3b:a2:24:60:48:13:c8:82:82:4c:96:17: e1:9e:dd:80:d3:c3:16:fa:df:82:e1:cc:a9:83:6a:84:4e:c5: 4f:43:b5:90:4a:26:2e:73:c3:c2:59:73:2c:1c:9a:e9:9f:d3: d5:49:8e:c3:a7:06:42:db:c9:17:89:53:50:6f:7c:47:57:bd: a9:36:0f:d6:d4:eb:86:6f:63:ae:2e:20:ad:a1:08:82:aa:fb: d8:37:1a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1gdDUcLLkM4mvl+fb4K8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NzJkNWFjYzI1MTY3Njk5YzdmY2YzYTFiODA0ZWEzMjVh YzRlNWQwHhcNMjUxMjE4MTkwMDQ1WhcNMjUxMjE5MTkwMDQ1WjAzMTEwLwYDVQQD Eyg5MjFiOTQ0MDQ2M2FlMWRiYWZmNDZhM2M0M2Y3ZGM4ODNmZjQ1MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk21+E1/rh6U9f8GRQok//TdxD3S O8upfgieRw9GKeIaCKdNA/dFGSi81fxDaGR/MpQDYeYIWobLHNRb2D/2mae2DC8j K7GldJnZXbvbAKAzetpS8CmNinYGLGekzTCZqp/IMvO7C2f2vLuM140gHx6yYBXx AVBgW01adagWhKoegBIPlDLA5v7ii1uC3bd2BBfn1Zy4AdhFyurQ/WemdNUhAsmx BB7+u/UUwBkR1lSUIvKymntO5tsQa50/FrZNlUwOpmHRmXk2uMA9FIqtNy+EyU8I LwIWHlaspJVpagS/5Jd+UCpWta1V7cf1gezQraJpK0pUqVl1yc6ERKMrawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIblEBGOuHbr/RqPEP33Ig/9FF6MB8GA1UdIwQY MBaAFIVy1azCUWdpnH/POhuATqMlrE5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzkt NDBkYzQ0NWM2NjlhLzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wMTEyMzQtY2ZiNy00Mjc1LTlmNzktNDBkYzQ0NWM2Njlh LzEvaFhMVnJNSlJaMm1jZjg4Nkc0Qk9veVdzVGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+MC1DCp 4AGXfNNu7xKYD4tfRUmG0v12g/XBQ9iUht9ySokg98lsYbUeMDwGn4npSrnKXVC2 eCSilE+cCY5/+hYy1MGzJJQEFvPtysv48uo4wgg++nRsv6otnigDgnsXSiRsIWkT 6CDsfl8fRGUqOcfcRkr/AhnmOGGhTlAf9awh4AXlC7dfIpdM7xTcdbA4EboCrTpT gsbuozqt9gBQcyrlEIqJDmb8O6IkYEgTyIKCTJYX4Z7dgNPDFvrfguHMqYNqhE7F T0O1kEomLnPDwllzLBya6Z/T1UmOw6cGQtvJF4lTUG98R1e9qTYP1tTrhm9jri4g raEIgqr72DcaHw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:23 2025 by rpki-client