This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json) Hash identifier: 0IX1KQnGfzEO+wCYiGLq1OqJV2OG6SOI5m7C6ELvoeI= Subject key identifier: 9D:47:00:10:F8:36:24:A9:CE:2A:FB:37:CF:24:1F:70:C1:E6:B8:7D Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10 Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10 Certificate serial: 019B495DA6D3B0E0E6110D09404EDDD3F871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft Manifest number: 109C Signing time: Tue 23 Dec 2025 04:00:32 +0000 Manifest this update: Tue 23 Dec 2025 04:00:32 +0000 Manifest next update: Wed 24 Dec 2025 04:00:32 +0000 Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=) 2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: dyEeiXFCT0rA0gsJQOeWrxjgyuZz/P66P8FYel0sLGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:a6:d3:b0:e0:e6:11:0d:09:40:4e:dd:d3:f8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10 Validity Not Before: Dec 23 04:00:32 2025 GMT Not After : Dec 24 04:00:32 2025 GMT Subject: CN=9d470010f83624a9ce2afb37cf241f70c1e6b87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:fe:46:8e:ec:b8:e3:ba:21:6f:a7:06:45: 0f:8a:7b:05:ef:27:23:0e:39:75:49:77:6b:49:6d: 36:17:f4:c7:4e:f1:da:3e:7c:d6:ad:58:73:d6:56: c5:9d:48:0d:f9:38:72:9e:99:f3:d3:cf:1a:67:d0: 73:ce:63:7a:d9:cf:cf:fb:ec:a5:16:5a:5f:f4:8d: e0:c5:00:44:80:4d:25:9f:1f:67:e4:9e:da:f5:ea: d7:b7:a3:a1:a3:e4:c7:98:9c:01:ef:15:0c:3a:52: 52:f1:0c:f0:47:de:ce:fa:ce:f2:f3:8c:aa:d5:1e: fb:ca:b2:e4:81:e8:d2:af:88:1d:37:80:83:6c:5b: b4:0a:2e:4b:c7:c3:8c:22:cd:88:93:64:c9:42:54: e8:ec:6f:83:c2:d3:69:4f:d6:29:73:ac:c0:03:26: 54:81:fe:2f:ba:0e:c3:d3:5a:2a:40:d2:35:d0:ff: 09:76:fc:6b:ab:0d:eb:07:ee:04:c8:67:06:82:54: 75:4c:0d:a6:26:ba:8a:66:13:d9:65:f3:98:db:87: 5e:d6:18:0b:2b:21:2c:f3:9c:9e:75:11:fe:53:1e: 9a:2e:a7:43:0d:80:8e:77:e4:1d:d9:5c:e4:90:58: ba:23:8d:03:1e:4f:43:c3:ef:fa:f4:56:51:69:46: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:47:00:10:F8:36:24:A9:CE:2A:FB:37:CF:24:1F:70:C1:E6:B8:7D X509v3 Authority Key Identifier: keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:16:b6:34:13:ab:57:47:1d:d9:59:82:d0:db:d0:c5:a1: fa:6b:66:dd:62:68:b5:de:e0:88:9f:3a:61:03:64:be:60:1d: 09:a4:c2:9e:5b:42:cb:69:33:b6:0b:c9:05:d9:95:16:30:65: 50:e8:f5:ca:13:18:53:6d:1f:25:21:dd:a8:df:2e:8a:45:16: 79:6c:d5:53:e6:d5:d3:28:a6:67:51:63:c5:1b:6b:3b:6b:37: 36:c8:78:78:58:0d:fd:dd:1b:26:a4:fb:16:e4:78:81:f7:3c: f8:17:83:03:19:06:d1:e1:16:25:e3:dc:78:dd:0f:c4:4f:d5: 1d:2e:fe:6a:b6:55:18:2e:49:0f:c4:cc:f4:47:da:8c:23:cc: 28:63:67:4b:62:62:9a:46:3e:7f:6b:0c:79:ce:8e:0c:04:00: 86:ef:82:13:d2:2a:aa:3c:37:c2:c7:30:6f:79:30:b2:d3:7e: f3:09:cc:d7:1e:25:fe:25:f4:bd:52:a2:39:ad:23:ba:ef:a6: 7e:07:c3:29:a9:9a:0d:21:45:3b:56:cd:5a:b2:ed:b4:85:8a: 92:dc:26:0c:d7:fd:b4:84:dd:93:75:1c:36:fc:48:87:f3:db: bd:12:2c:30:9f:ed:89:26:6c:c6:2d:8b:2e:82:de:c1:1d:41: a4:2e:7f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXabTsODmEQ0JQE7d0/hxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4 ZTVjMTAwHhcNMjUxMjIzMDQwMDMyWhcNMjUxMjI0MDQwMDMyWjAzMTEwLwYDVQQD Eyg5ZDQ3MDAxMGY4MzYyNGE5Y2UyYWZiMzdjZjI0MWY3MGMxZTZiODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3/+Ro7suOO6IW+nBkUPinsF7ycj Djl1SXdrSW02F/THTvHaPnzWrVhz1lbFnUgN+Thynpnz088aZ9BzzmN62c/P++yl Flpf9I3gxQBEgE0lnx9n5J7a9erXt6Oho+THmJwB7xUMOlJS8QzwR97O+s7y84yq 1R77yrLkgejSr4gdN4CDbFu0Ci5Lx8OMIs2Ik2TJQlTo7G+DwtNpT9Ypc6zAAyZU gf4vug7D01oqQNI10P8Jdvxrqw3rB+4EyGcGglR1TA2mJrqKZhPZZfOY24de1hgL KyEs85yedRH+Ux6aLqdDDYCOd+Qd2VzkkFi6I40DHk9Dw+/69FZRaUZKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1HABD4NiSpzir7N88kH3DB5rh9MB8GA1UdIwQY MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt OTlkNzI1MmY1YmUwLzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnQWtjQT q1dHHdlZgtDb0MWh+mtm3WJotd7giJ86YQNkvmAdCaTCnltCy2kztgvJBdmVFjBl UOj1yhMYU20fJSHdqN8uikUWeWzVU+bV0yimZ1FjxRtrO2s3Nsh4eFgN/d0bJqT7 FuR4gfc8+BeDAxkG0eEWJePceN0PxE/VHS7+arZVGC5JD8TM9EfajCPMKGNnS2Ji mkY+f2sMec6ODAQAhu+CE9Iqqjw3wscwb3kwstN+8wnM1x4l/iX0vVKiOa0juu+m fgfDKamaDSFFO1bNWrLttIWKktwmDNf9tITdk3UcNvxIh/PbvRIsMJ/tiSZsxi2L LoLewR1BpC5/PA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:37:24 2025 by rpki-client