This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json) Hash identifier: DsDfvnsKgiqqoNLadtmop2BvJeVwMpcd++JPfcO6VP8= Subject key identifier: A7:AC:6A:F5:FF:BC:8E:94:A5:79:EF:06:41:03:0A:95:F0:08:9A:4B Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3 Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3 Certificate serial: 019B5298561F7FC5993042FF5FF12AAC3BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft Manifest number: 0921 Signing time: Wed 24 Dec 2025 23:01:13 +0000 Manifest this update: Wed 24 Dec 2025 23:01:13 +0000 Manifest next update: Thu 25 Dec 2025 23:01:13 +0000 Files and hashes: 1: 9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa (hash: e3MsAliQl7R+w6WCs9Je3nF/3YOrMW2JU+QDq2FQ+FM=) 2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: 9LMQdAKKgsTeUtfll+6nEa5q6G2QhgG1sfMFn5agXWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:56:1f:7f:c5:99:30:42:ff:5f:f1:2a:ac:3b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3 Validity Not Before: Dec 24 23:01:13 2025 GMT Not After : Dec 25 23:01:13 2025 GMT Subject: CN=a7ac6af5ffbc8e94a579ef0641030a95f0089a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:f9:a7:49:3a:ff:50:62:f0:6e:64:23:22: 58:d0:3d:9c:bb:06:4e:2b:f5:ac:16:b5:b9:f4:b9: 3f:9f:29:b0:a2:d1:07:55:22:42:9d:90:07:d7:a2: 19:36:0a:bb:dc:25:b5:88:4d:18:ed:43:08:a4:06: 50:0a:3d:8f:ac:3f:f2:51:7b:5f:7a:c2:61:3d:0d: e2:20:e0:af:e0:34:3e:48:0d:2d:19:df:15:9a:b2: 9b:b0:66:5d:1f:b2:1a:b5:66:31:1e:2a:9a:70:3f: f4:1e:12:69:92:31:8b:16:fb:44:cc:75:a8:17:05: 4e:b3:21:95:d1:b6:48:b6:f1:96:2e:e0:59:e4:1a: 43:c8:96:c3:3d:7d:8d:c5:7b:00:67:af:ab:89:42: 9f:2c:d7:9c:a5:63:c8:64:71:09:c8:93:1c:f7:fe: ba:31:5d:f1:48:6b:68:ad:ef:c7:23:83:37:fc:b5: b8:f5:1b:c9:ac:65:b1:d9:35:57:96:0b:e6:02:a0: 0b:85:25:d7:84:9c:a8:d0:c2:19:09:23:e1:a9:65: 0f:18:06:d9:97:c9:98:1e:75:11:e1:e5:72:fb:4f: 5f:17:9a:1a:49:27:0d:12:fc:e8:db:f6:85:67:6a: e7:b9:27:f4:9b:ca:89:d3:7a:1d:ca:9e:ae:23:43: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:6A:F5:FF:BC:8E:94:A5:79:EF:06:41:03:0A:95:F0:08:9A:4B X509v3 Authority Key Identifier: keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7d:1b:e2:58:47:2e:35:72:f4:5f:5c:19:ca:2c:44:09:48: 40:92:97:03:06:ba:c6:22:4e:e3:e5:03:cb:e7:f2:21:fa:bf: e5:6c:f5:3a:1a:c5:72:49:bd:ca:a0:dd:b6:f3:99:a4:dd:f7: fc:56:b5:ec:91:96:9d:6d:0d:19:d4:d9:55:45:8b:66:c6:d4: 56:9a:9a:95:ce:ca:d1:b3:87:cf:5b:9d:4b:e0:b6:f1:9e:5a: 1d:d2:aa:f8:d3:2c:4c:11:a0:24:f4:90:51:1d:9b:1e:db:31: 71:c4:be:08:eb:a5:1d:19:7f:6c:e3:85:55:40:24:d7:c1:86: e6:43:69:91:29:81:d4:e2:bd:58:74:d8:30:19:d6:62:1a:13: 74:be:0a:cb:3b:ab:28:4b:ea:42:3b:22:29:75:c0:8b:6c:0c: 7f:8d:03:74:cb:fc:b2:de:9a:f2:9e:1b:de:e1:40:4c:ba:d1: 08:e6:ea:82:9f:89:96:44:d9:3d:0b:e3:05:94:34:c2:33:30: 0c:9d:6e:01:88:1b:cd:ee:c3:65:db:51:fb:95:bd:97:1e:5b: 9e:49:a8:de:50:99:d8:1c:db:11:f1:4e:85:8d:4c:11:13:c1: fc:48:1d:63:1f:6a:d2:da:21:63:3f:14:cd:e0:aa:7f:c2:44: 0c:f9:0d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmFYff8WZMEL/X/EqrDvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1 OTk2ZjMwHhcNMjUxMjI0MjMwMTEzWhcNMjUxMjI1MjMwMTEzWjAzMTEwLwYDVQQD EyhhN2FjNmFmNWZmYmM4ZTk0YTU3OWVmMDY0MTAzMGE5NWYwMDg5YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsL5p0k6/1Bi8G5kIyJY0D2cuwZO K/WsFrW59Lk/nymwotEHVSJCnZAH16IZNgq73CW1iE0Y7UMIpAZQCj2PrD/yUXtf esJhPQ3iIOCv4DQ+SA0tGd8VmrKbsGZdH7IatWYxHiqacD/0HhJpkjGLFvtEzHWo FwVOsyGV0bZItvGWLuBZ5BpDyJbDPX2NxXsAZ6+riUKfLNecpWPIZHEJyJMc9/66 MV3xSGtore/HI4M3/LW49RvJrGWx2TVXlgvmAqALhSXXhJyo0MIZCSPhqWUPGAbZ l8mYHnUR4eVy+09fF5oaSScNEvzo2/aFZ2rnuSf0m8qJ03odyp6uI0P6qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKesavX/vI6UpXnvBkEDCpXwCJpLMB8GA1UdIwQY MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt ZTc2ZTNlMjkzZTAyLzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa30b4lhH LjVy9F9cGcosRAlIQJKXAwa6xiJO4+UDy+fyIfq/5Wz1OhrFckm9yqDdtvOZpN33 /Fa17JGWnW0NGdTZVUWLZsbUVpqalc7K0bOHz1udS+C28Z5aHdKq+NMsTBGgJPSQ UR2bHtsxccS+COulHRl/bOOFVUAk18GG5kNpkSmB1OK9WHTYMBnWYhoTdL4Kyzur KEvqQjsiKXXAi2wMf40DdMv8st6a8p4b3uFATLrRCObqgp+JlkTZPQvjBZQ0wjMw DJ1uAYgbze7DZdtR+5W9lx5bnkmo3lCZ2BzbEfFOhY1MERPB/EgdYx9q0tohYz8U zeCqf8JEDPkNyQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:00 2025 by rpki-client