This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json) Hash identifier: TPeAFaLIe5MK33ReX+AsP+Jq3sIMntg3LJlfDoyqXe8= Subject key identifier: 64:36:6E:CF:3C:4B:F1:1A:9D:CD:AB:35:53:26:6D:F7:D0:45:95:86 Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2 Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2 Certificate serial: 019B5117B5074C04739B2274B753F066C7B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft Manifest number: 1799 Signing time: Wed 24 Dec 2025 16:01:06 +0000 Manifest this update: Wed 24 Dec 2025 16:01:06 +0000 Manifest next update: Thu 25 Dec 2025 16:01:06 +0000 Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=) 2: A1sHhifnNT-Aumc_ps2nMEQ_8zU.roa (hash: RWo0jZxaIA2cGMFm2ziPtN2NQqQk5lPvGyA4RgrQKHQ=) 3: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=) 4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: ew6PfVHIDTFLcq88M2eNKQXryJyrJqY4v6H9j7yliw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:b5:07:4c:04:73:9b:22:74:b7:53:f0:66:c7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2 Validity Not Before: Dec 24 16:01:06 2025 GMT Not After : Dec 25 16:01:06 2025 GMT Subject: CN=64366ecf3c4bf11a9dcdab3553266df7d0459586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:95:e0:6e:66:d0:64:4a:24:85:25:0e:c5: da:ca:50:f9:c1:db:a8:67:3c:64:06:44:a4:cc:90: 4c:aa:a4:73:f4:68:4e:f8:4b:6e:65:eb:6a:af:92: 8d:11:ec:ac:d1:fb:cd:b2:d3:1f:11:f8:cb:81:5c: 20:a2:bb:73:17:c5:df:e9:b5:41:25:4f:38:66:dd: 70:61:26:63:8a:b5:ec:27:26:c6:3e:c4:9b:09:0b: 53:8e:6f:20:8d:d5:4e:6b:eb:d7:90:3a:98:8c:b3: 46:fb:8b:30:cf:34:d3:e6:90:25:a6:df:1e:f6:b3: 6d:df:00:16:14:25:52:c6:e5:20:49:fa:54:4f:d1: 65:55:8d:a8:8f:20:98:db:f3:96:78:14:07:78:c0: 5f:85:4d:6b:d4:fa:c6:28:62:53:0a:63:3c:29:1c: 0a:72:db:d2:53:dd:37:d5:65:96:e7:fc:31:6a:2a: c5:26:d5:4f:87:e5:a7:c3:8b:90:35:49:c8:c9:80: 1c:7e:0e:98:88:4d:5c:45:b1:b1:7b:b9:1f:b1:d3: 8c:8c:12:ec:3e:34:da:52:4e:0c:1b:75:b9:89:cb: 1b:54:d7:bb:44:f5:93:ca:0b:83:1e:15:45:5c:53: 34:9b:e7:aa:0f:e8:c0:e4:35:d3:ba:00:9c:c6:1e: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:36:6E:CF:3C:4B:F1:1A:9D:CD:AB:35:53:26:6D:F7:D0:45:95:86 X509v3 Authority Key Identifier: keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c5:8d:3c:38:b5:e1:4a:3d:cd:1b:db:6c:49:36:93:71:a6: 27:30:fd:3f:79:ee:6d:62:32:c1:82:af:a1:4f:30:33:30:7c: c2:1a:f2:71:52:ac:42:57:da:50:53:a7:47:94:50:e8:88:4a: 37:66:99:da:a3:c9:38:9b:c3:78:66:6b:c0:24:9d:56:c6:45: 3f:34:ef:30:42:d7:a1:f0:62:0a:db:01:09:14:92:ea:c8:d0: f0:b9:2d:1c:9e:6d:97:cc:cb:02:1e:9a:7e:a5:e5:99:6d:32: a0:d1:4a:d6:f0:cf:18:8e:d1:c9:f6:8b:72:85:77:c1:87:04: 56:b0:fc:c8:79:ae:df:a9:03:a1:a1:73:41:3b:7b:4e:a2:d6: 90:d2:74:18:a4:33:ed:59:c7:3c:a4:91:88:90:c3:24:b7:3c: 9b:b4:c0:93:c3:0b:0d:4f:3c:7c:25:ea:5e:86:c5:3b:67:13: 90:6a:ff:8f:7e:f8:3c:3d:91:eb:a8:9c:31:56:dd:d3:54:5a: e7:95:8e:7f:a0:28:0a:c6:02:dc:c1:d1:23:f0:b5:99:fd:6d: 59:b7:d4:fa:09:ae:c3:de:07:98:5e:8f:aa:02:41:a6:42:d5: 7d:d1:a0:0e:2b:c2:01:6a:93:f5:38:43:f3:48:58:bf:ea:4b: 67:af:95:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF7UHTARzmyJ0t1PwZsexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MGQ5ZjAxYTk4YjUxNGViZDNjMjcyM2Q3ZjdlYjQ0ODMy NmY1ZTIwHhcNMjUxMjI0MTYwMTA2WhcNMjUxMjI1MTYwMTA2WjAzMTEwLwYDVQQD Eyg2NDM2NmVjZjNjNGJmMTFhOWRjZGFiMzU1MzI2NmRmN2QwNDU5NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl+V4G5m0GRKJIUlDsXaylD5wduo ZzxkBkSkzJBMqqRz9GhO+EtuZetqr5KNEeys0fvNstMfEfjLgVwgortzF8Xf6bVB JU84Zt1wYSZjirXsJybGPsSbCQtTjm8gjdVOa+vXkDqYjLNG+4swzzTT5pAlpt8e 9rNt3wAWFCVSxuUgSfpUT9FlVY2ojyCY2/OWeBQHeMBfhU1r1PrGKGJTCmM8KRwK ctvSU9031WWW5/wxairFJtVPh+Wnw4uQNUnIyYAcfg6YiE1cRbGxe7kfsdOMjBLs PjTaUk4MG3W5icsbVNe7RPWTyguDHhVFXFM0m+eqD+jA5DXTugCcxh6b/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ2bs88S/Eanc2rNVMmbffQRZWGMB8GA1UdIwQY MBaAFIYNnwGpi1FOvTwnI9f360SDJvXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQt NjFjYjQzYzJkYjg1LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQtNjFjYjQzYzJkYjg1 LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcWNPDi1 4Uo9zRvbbEk2k3GmJzD9P3nubWIywYKvoU8wMzB8whrycVKsQlfaUFOnR5RQ6IhK N2aZ2qPJOJvDeGZrwCSdVsZFPzTvMELXofBiCtsBCRSS6sjQ8LktHJ5tl8zLAh6a fqXlmW0yoNFK1vDPGI7RyfaLcoV3wYcEVrD8yHmu36kDoaFzQTt7TqLWkNJ0GKQz 7VnHPKSRiJDDJLc8m7TAk8MLDU88fCXqXobFO2cTkGr/j374PD2R66icMVbd01Ra 55WOf6AoCsYC3MHRI/C1mf1tWbfU+gmuw94HmF6PqgJBpkLVfdGgDivCAWqT9ThD 80hYv+pLZ6+V/w== -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:25 2025 by rpki-client