This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json) Hash identifier: iH+JUDfvAa5+KW86oIBoKdQwee40ngBiYwAvSxv8OP4= Subject key identifier: AB:D6:26:FD:C9:B7:92:5B:ED:47:CB:35:70:68:7B:EF:D3:F4:C7:2A Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019B390F975FA6F88BFD3FC963A52916E3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 00:01:21 +0000 Manifest this update: Sat 20 Dec 2025 00:01:21 +0000 Manifest next update: Sun 21 Dec 2025 00:01:21 +0000 Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=) 2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=) 3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=) 4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=) 5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: 6e/Ce97xdiHEt1xCThuC0wpZ1ozy2V00uQyyhLgPS8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:97:5f:a6:f8:8b:fd:3f:c9:63:a5:29:16:e3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Dec 20 00:01:21 2025 GMT Not After : Dec 21 00:01:21 2025 GMT Subject: CN=abd626fdc9b7925bed47cb3570687befd3f4c72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:70:59:f2:c1:22:21:85:4d:04:8e:3a:da: 87:b8:30:64:69:ec:c1:9a:a0:8f:18:3c:7a:02:08: b2:f7:57:b4:6e:84:b4:5d:49:1c:aa:1f:a6:6e:4d: 36:68:84:1c:35:f0:21:31:02:76:1a:6c:e6:81:a9: ea:82:6b:40:db:b2:9e:9d:8f:a5:72:99:d2:72:ec: 37:c4:2f:1e:0d:2a:be:18:5e:06:7f:dc:78:bf:36: 7a:83:cc:e1:95:33:c1:f3:11:6e:98:38:9b:29:f3: 8d:60:1d:62:f9:ef:41:c7:92:21:4f:32:69:a5:bd: 64:e8:ae:71:e0:6d:e9:29:d9:b3:cb:94:f5:74:cc: a8:26:86:0d:8d:cb:c9:0a:f2:7d:14:df:06:1d:6c: c4:cf:75:96:3b:74:a1:4d:35:e2:de:dd:dd:8f:ea: 2f:c0:84:1d:96:84:c3:da:0e:20:92:86:98:d4:00: 96:6a:ac:54:41:c4:b2:67:68:a0:fd:90:77:68:1d: 65:e5:8a:36:41:aa:48:24:e3:cc:97:e0:b7:60:46: 37:13:bb:7d:e2:b2:3e:43:f1:7c:40:1f:08:62:bb: 78:d9:1a:21:8f:90:ab:de:61:fb:1e:c2:bf:24:90: 96:1f:70:90:63:17:af:20:8b:0b:67:f5:c3:4c:44: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D6:26:FD:C9:B7:92:5B:ED:47:CB:35:70:68:7B:EF:D3:F4:C7:2A X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a0:8c:e0:4b:91:92:4d:1d:75:ca:dc:70:e3:a0:c4:85:12: b7:9e:2b:3c:e1:24:86:7b:48:9c:c2:98:a8:17:43:f7:26:dc: 28:4c:13:53:a1:31:e3:6f:d2:13:d2:cf:cc:96:5f:e9:ce:bc: 17:71:1f:c6:c5:cf:3f:57:f4:17:26:fa:3c:a5:b7:4f:03:2c: f1:5d:29:d5:38:27:cf:d5:aa:b1:69:36:85:aa:18:19:02:f1: 2a:7a:ea:77:d8:9c:fe:62:af:c6:dd:4f:ec:57:02:ae:59:11: 29:6a:db:5e:f4:15:d0:b7:29:12:9c:eb:60:01:33:05:90:36: 70:b5:a2:25:79:7c:14:4c:99:f3:75:5b:00:54:65:3d:ee:81: ad:a1:da:a4:d9:26:34:ea:21:f9:19:6b:c2:28:6e:a2:ae:84: 91:61:db:d0:2f:27:10:04:cd:4d:fa:75:92:a7:69:ea:e0:54: ef:1a:35:b9:c3:62:ac:c5:f0:c8:b4:5d:50:b0:c4:0b:3b:50: ac:9b:6d:f8:c0:86:e7:57:f1:6c:9b:7f:24:b4:05:40:27:db: e7:37:a2:00:e6:51:0f:a0:10:02:bf:e7:5d:b8:98:52:0a:30: 2d:e7:6c:3d:92:32:b8:2d:55:bd:e5:87:6f:e2:7a:53:1f:bd: f0:21:32:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D5dfpviL/T/JY6UpFuP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjUxMjIwMDAwMTIxWhcNMjUxMjIxMDAwMTIxWjAzMTEwLwYDVQQD EyhhYmQ2MjZmZGM5Yjc5MjViZWQ0N2NiMzU3MDY4N2JlZmQzZjRjNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJhwWfLBIiGFTQSOOtqHuDBkaezB mqCPGDx6Agiy91e0boS0XUkcqh+mbk02aIQcNfAhMQJ2GmzmganqgmtA27KenY+l cpnScuw3xC8eDSq+GF4Gf9x4vzZ6g8zhlTPB8xFumDibKfONYB1i+e9Bx5IhTzJp pb1k6K5x4G3pKdmzy5T1dMyoJoYNjcvJCvJ9FN8GHWzEz3WWO3ShTTXi3t3dj+ov wIQdloTD2g4gkoaY1ACWaqxUQcSyZ2ig/ZB3aB1l5Yo2QapIJOPMl+C3YEY3E7t9 4rI+Q/F8QB8IYrt42Rohj5Cr3mH7HsK/JJCWH3CQYxevIIsLZ/XDTER+QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvWJv3Jt5Jb7UfLNXBoe+/T9McqMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6CM4EuR kk0ddcrccOOgxIUSt54rPOEkhntInMKYqBdD9ybcKEwTU6Ex42/SE9LPzJZf6c68 F3EfxsXPP1f0Fyb6PKW3TwMs8V0p1Tgnz9WqsWk2haoYGQLxKnrqd9ic/mKvxt1P 7FcCrlkRKWrbXvQV0LcpEpzrYAEzBZA2cLWiJXl8FEyZ83VbAFRlPe6BraHapNkm NOoh+Rlrwihuoq6EkWHb0C8nEATNTfp1kqdp6uBU7xo1ucNirMXwyLRdULDECztQ rJtt+MCG51fxbJt/JLQFQCfb5zeiAOZRD6AQAr/nXbiYUgowLedsPZIyuC1VveWH b+J6Ux+98CEyHA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:41 2025 by rpki-client