This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft File: HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json) Hash identifier: Foxj/N/uCvLxntClWttCwazU3AAY5hfkU4BILt/dDYU= Subject key identifier: CA:C1:E5:2F:30:ED:92:DB:76:F9:8F:B7:99:BC:CB:C4:24:5D:CF:00 Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Certificate serial: 019B3C7EC5A3AB5B315EB1BA5071F7FC7261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 16:01:39 +0000 Manifest this update: Sat 20 Dec 2025 16:01:39 +0000 Manifest next update: Sun 21 Dec 2025 16:01:39 +0000 Files and hashes: 1: 3E7aBqsHg6THlsFLCGCu1ykhumg.roa (hash: vdRC30YdnIGNPLtMGa2MkjovoqgS/LCgWDKRJk5Yhko=) 2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: e0jbE36ikCgrngt9fQ8RzylQ7/n+QNMi54T0e5PMDjo=) 3: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (hash: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=) 4: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (hash: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c5:a3:ab:5b:31:5e:b1:ba:50:71:f7:fc:72:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Validity Not Before: Dec 20 16:01:39 2025 GMT Not After : Dec 21 16:01:39 2025 GMT Subject: CN=cac1e52f30ed92db76f98fb799bccbc4245dcf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:89:c0:f6:f8:d9:39:41:68:58:97:8f:05: 6d:ce:17:55:60:aa:5b:10:47:23:04:aa:47:a1:6b: 35:da:b1:d8:38:8f:9b:c5:1d:eb:dd:70:e1:8f:a6: 3c:9d:01:ee:f7:78:b2:02:67:b6:16:b6:07:9e:cb: 94:12:37:c4:39:72:c6:d1:63:77:ee:30:8f:56:5c: fb:18:d6:cb:e2:4d:fe:6f:82:b8:c9:ff:05:35:08: 24:76:4d:a5:0c:ab:9d:40:ec:c0:77:3c:f3:4d:8b: 4b:eb:7c:d2:2c:7e:d0:38:1e:78:12:c1:31:3c:38: 65:c8:de:fd:6f:7c:0b:71:5f:e9:2d:ed:e7:47:6b: 63:b0:5d:55:a4:b1:1c:97:4c:ab:8e:83:44:9d:2a: b5:06:03:3c:96:64:0e:33:fa:67:8d:23:c5:52:24: e2:8e:4b:64:0a:32:7e:77:88:94:cd:14:24:43:8c: cb:6d:1e:7e:53:43:12:5a:fd:85:97:6e:88:7c:02: 83:0c:c1:c4:2c:e5:c0:1e:dd:2d:89:ad:52:f9:b3: a6:30:fd:d0:87:20:87:3b:6c:06:80:7a:05:ce:50: 6f:b9:6d:50:be:cc:26:8b:87:38:46:8d:d8:36:09: c4:6a:79:92:77:c7:8a:dc:3c:6d:68:65:44:63:7c: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:E5:2F:30:ED:92:DB:76:F9:8F:B7:99:BC:CB:C4:24:5D:CF:00 X509v3 Authority Key Identifier: keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:dd:ca:08:96:1d:56:71:82:ce:a0:96:94:54:35:c2:82:2e: 4f:30:22:9a:9d:94:ef:55:40:09:ea:53:fa:4c:68:a0:59:f4: 60:27:e3:cd:86:95:16:8c:0b:41:78:24:1f:2f:4e:bc:48:75: 8c:af:fd:ca:94:0a:4a:9f:d5:3f:96:aa:e0:e3:e5:3b:a2:4a: 3a:66:b4:23:33:f5:90:85:25:5a:67:a1:96:fc:6c:0a:06:fb: aa:98:70:d0:44:1a:6e:10:82:5d:24:a1:af:16:ab:be:b4:1d: 4d:5b:63:0e:13:44:1d:14:7f:f5:1d:f8:84:06:45:73:4d:bf: 9d:eb:3e:9d:36:4b:7d:be:f9:40:ec:56:ac:7a:64:ac:a9:bd: ea:b5:03:f7:76:91:7d:e2:ce:fc:3e:d6:ba:e9:99:e7:a3:76: 32:dc:10:9e:b9:c7:5c:a9:f6:39:a8:83:97:82:10:4c:f6:78: 06:c5:74:75:84:8b:f3:e9:f2:95:c6:94:e8:32:22:00:0e:52: dd:68:be:a5:77:72:50:18:b0:1d:49:ed:b6:80:c1:7a:4c:e5: 71:ba:2a:ac:85:85:49:93:92:7b:3e:19:0a:f7:ca:1a:94:b1: 10:8f:2a:7c:da:e7:e0:13:9f:10:6b:c3:89:30:09:c2:c1:8b: a1:6a:10:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsWjq1sxXrG6UHH3/HJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmNkY2I5Yzc2ZjVlMGNlMGMzODVkN2UwZWYxNTU3MmQx NWE1NGMwHhcNMjUxMjIwMTYwMTM5WhcNMjUxMjIxMTYwMTM5WjAzMTEwLwYDVQQD EyhjYWMxZTUyZjMwZWQ5MmRiNzZmOThmYjc5OWJjY2JjNDI0NWRjZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAituJwPb42TlBaFiXjwVtzhdVYKpb EEcjBKpHoWs12rHYOI+bxR3r3XDhj6Y8nQHu93iyAme2FrYHnsuUEjfEOXLG0WN3 7jCPVlz7GNbL4k3+b4K4yf8FNQgkdk2lDKudQOzAdzzzTYtL63zSLH7QOB54EsEx PDhlyN79b3wLcV/pLe3nR2tjsF1VpLEcl0yrjoNEnSq1BgM8lmQOM/pnjSPFUiTi jktkCjJ+d4iUzRQkQ4zLbR5+U0MSWv2Fl26IfAKDDMHELOXAHt0tia1S+bOmMP3Q hyCHO2wGgHoFzlBvuW1Qvswmi4c4Ro3YNgnEanmSd8eK3DxtaGVEY3yzHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrB5S8w7ZLbdvmPt5m8y8QkXc8AMB8GA1UdIwQY MBaAFB0s3LnHb14M4MOF1+DvFVctFaVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUt NzYwZTRlZTRjNmIyLzEvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUtNzYwZTRlZTRjNmIy LzEvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN3KCJYd VnGCzqCWlFQ1woIuTzAimp2U71VACepT+kxooFn0YCfjzYaVFowLQXgkHy9OvEh1 jK/9ypQKSp/VP5aq4OPlO6JKOma0IzP1kIUlWmehlvxsCgb7qphw0EQabhCCXSSh rxarvrQdTVtjDhNEHRR/9R34hAZFc02/nes+nTZLfb75QOxWrHpkrKm96rUD93aR feLO/D7WuumZ56N2MtwQnrnHXKn2OaiDl4IQTPZ4BsV0dYSL8+nylcaU6DIiAA5S 3Wi+pXdyUBiwHUnttoDBekzlcboqrIWFSZOSez4ZCvfKGpSxEI8qfNrn4BOfEGvD iTAJwsGLoWoQow== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:36 2025 by rpki-client