This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json) Hash identifier: yhaO86PMLYNRHKEUoaTFF/VLn8fLNj/Gz9cwu+qOk0g= Subject key identifier: 51:25:70:24:1D:79:A5:2F:EF:0F:70:59:2C:5F:0D:08:E4:88:BA:A9 Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Certificate serial: 019B3CEC98FD56CBFBDD9DE4D0253FB8176B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft Manifest number: 07EC Signing time: Sat 20 Dec 2025 18:01:37 +0000 Manifest this update: Sat 20 Dec 2025 18:01:37 +0000 Manifest next update: Sun 21 Dec 2025 18:01:37 +0000 Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=) 2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: zl7IEFHI0oaybOc5K74/48j1hJjsXzrCsq34lQ/2fE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:98:fd:56:cb:fb:dd:9d:e4:d0:25:3f:b8:17:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Validity Not Before: Dec 20 18:01:37 2025 GMT Not After : Dec 21 18:01:37 2025 GMT Subject: CN=512570241d79a52fef0f70592c5f0d08e488baa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:db:31:20:78:1f:7a:79:8c:55:5e:27:73: fe:cf:d7:12:d2:ff:68:6c:cd:83:ed:3f:12:d4:e5: 9c:32:c9:ec:40:e7:8c:5a:a6:32:97:25:01:ef:46: fc:70:84:88:25:43:6d:40:9d:e6:e4:9a:de:86:1b: 64:86:ff:84:05:bc:56:a8:2b:5d:fc:c8:27:3d:93: 35:14:5a:a8:e3:cc:c8:d2:03:ee:86:31:14:b6:57: 0d:2a:b4:12:6b:4a:6c:83:24:6b:d8:48:e7:01:2e: 06:23:c5:2a:7b:52:36:0e:b0:f2:95:e6:18:be:86: 91:7e:f0:02:00:24:c9:cf:6c:c9:af:8d:a8:ec:98: 21:9b:66:45:d2:dc:57:ad:c1:1d:c1:fe:3b:c7:ed: 62:1b:f3:3a:c7:e0:8b:a9:9a:c5:00:a2:bb:2e:52: 04:09:d6:6d:22:6d:b3:dc:5a:03:d9:2d:5c:6a:85: ba:36:73:b8:61:70:cd:b0:da:41:49:44:99:2f:92: f7:b1:0e:9c:d5:97:26:d0:5f:cc:e3:21:13:14:3f: bc:a8:00:6a:2d:6e:e6:b0:c4:d5:06:49:33:22:22: 77:3e:a6:b3:ac:78:96:d1:3a:cb:d1:8e:55:d6:82: 7d:be:f0:18:db:b4:1b:35:85:71:ba:71:75:50:7e: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:25:70:24:1D:79:A5:2F:EF:0F:70:59:2C:5F:0D:08:E4:88:BA:A9 X509v3 Authority Key Identifier: keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:69:43:81:53:19:a4:81:6e:a3:26:fc:cf:b8:09:a3:c3:6c: ce:4b:1d:af:0a:98:64:c3:b2:16:e3:3d:2d:4c:ed:f9:cb:ab: 37:70:a4:50:b9:e2:4f:e5:19:93:ee:85:ca:0c:af:7e:eb:63: 89:fa:7f:68:9c:4e:48:a7:6e:9b:14:48:06:ca:c3:e5:2a:9d: 1d:08:3f:1c:81:49:82:6e:c8:dd:de:95:11:e1:f1:a5:60:19: 1a:ba:db:c2:59:e9:ed:6f:a2:cb:ff:51:b4:d0:ee:eb:0a:1b: b7:22:16:85:72:14:49:5f:74:7d:42:42:5b:c8:02:01:32:49: a2:18:0a:6c:b8:b8:c0:5d:65:0b:ea:0c:4a:1b:fd:85:30:39: 90:7c:c3:39:31:dc:44:b5:3e:0a:46:ed:79:c1:c0:31:aa:29: 62:86:3b:0a:53:4d:1e:76:37:23:dc:21:b4:ea:47:ac:06:94: 5e:a9:33:ea:86:ea:ad:c1:07:6d:d6:d8:1c:92:f7:5c:9a:43: 67:2e:69:a8:74:b0:90:f0:83:35:70:52:65:71:51:25:d1:b0: cd:92:c6:41:f5:9a:9d:74:91:2c:a0:6e:62:c6:5e:6e:b7:d2: 7e:da:6c:61:cd:1a:37:0b:15:5c:e9:5e:7f:e3:50:04:97:71: b3:fc:4a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Jj9Vsv73Z3k0CU/uBdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy Yzg5NjkwHhcNMjUxMjIwMTgwMTM3WhcNMjUxMjIxMTgwMTM3WjAzMTEwLwYDVQQD Eyg1MTI1NzAyNDFkNzlhNTJmZWYwZjcwNTkyYzVmMGQwOGU0ODhiYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmajbMSB4H3p5jFVeJ3P+z9cS0v9o bM2D7T8S1OWcMsnsQOeMWqYylyUB70b8cISIJUNtQJ3m5Jrehhtkhv+EBbxWqCtd /MgnPZM1FFqo48zI0gPuhjEUtlcNKrQSa0psgyRr2EjnAS4GI8Uqe1I2DrDyleYY voaRfvACACTJz2zJr42o7Jghm2ZF0txXrcEdwf47x+1iG/M6x+CLqZrFAKK7LlIE CdZtIm2z3FoD2S1caoW6NnO4YXDNsNpBSUSZL5L3sQ6c1Zcm0F/M4yETFD+8qABq LW7msMTVBkkzIiJ3PqazrHiW0TrL0Y5V1oJ9vvAY27QbNYVxunF1UH4ZrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFElcCQdeaUv7w9wWSxfDQjkiLqpMB8GA1UdIwQY MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3 LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGlDgVMZ pIFuoyb8z7gJo8NszksdrwqYZMOyFuM9LUzt+curN3CkULniT+UZk+6Fygyvfutj ifp/aJxOSKdumxRIBsrD5SqdHQg/HIFJgm7I3d6VEeHxpWAZGrrbwlnp7W+iy/9R tNDu6wobtyIWhXIUSV90fUJCW8gCATJJohgKbLi4wF1lC+oMShv9hTA5kHzDOTHc RLU+CkbtecHAMaopYoY7ClNNHnY3I9whtOpHrAaUXqkz6obqrcEHbdbYHJL3XJpD Zy5pqHSwkPCDNXBSZXFRJdGwzZLGQfWanXSRLKBuYsZebrfSftpsYc0aNwsVXOle f+NQBJdxs/xKtg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:19:45 2025 by rpki-client