This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json) Hash identifier: kxFiJPGyStyYNcHrHoAGCItltX3B3BZ7H7vcFtAq/Yk= Subject key identifier: 0C:1E:EE:CD:90:0B:6D:F5:C0:AC:42:C7:09:B1:BD:53:95:F9:21:5B Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Certificate serial: 019B717DED7DDFB7E237F89BAA98A41CC723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft Manifest number: 1105 Signing time: Tue 30 Dec 2025 23:00:36 +0000 Manifest this update: Tue 30 Dec 2025 23:00:36 +0000 Manifest next update: Wed 31 Dec 2025 23:00:36 +0000 Files and hashes: 1: RVbzzBG5muJC-aBoMdoJbzSr7H8.roa (hash: o1cjUAzQ2XsMXZ4DvKF1uyqTeyhp2W7U45+BcFLlyM0=) 2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: esEkSxBlFHaChBL0cWB17N+ntawku+szTMhTWbIxgX0=) 3: g8aVgQMBCBvrswyPJiarAr7VpUM.roa (hash: 5HrRjfLYW0OBZJTQk2MmBVB6mxhIUJtfwo5zMV6ZrEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:ed:7d:df:b7:e2:37:f8:9b:aa:98:a4:1c:c7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef Validity Not Before: Dec 30 23:00:36 2025 GMT Not After : Dec 31 23:00:36 2025 GMT Subject: CN=0c1eeecd900b6df5c0ac42c709b1bd5395f9215b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:03:c6:9f:39:3a:4a:04:3b:8a:5c:a7:24: 76:fc:21:d4:4b:29:26:16:a7:de:4e:1d:66:4a:55: 24:28:2a:9b:5c:1a:b7:9e:a5:c4:a0:d9:76:79:d9: bb:49:af:20:08:5d:27:3c:e9:14:d0:a0:fd:91:d5: 33:ab:ad:36:8e:33:ca:89:b0:1d:41:0d:b7:55:7d: eb:da:b0:28:b5:7d:c3:92:9e:e0:d2:dc:1a:ee:75: 1d:17:98:86:2a:eb:d5:34:d9:c5:a1:93:02:e7:de: 53:fd:40:9d:12:fc:f0:86:79:ef:c9:7a:5c:1c:f6: 41:3a:d8:0f:81:a0:9a:67:5c:c0:52:0c:9b:42:d1: 2f:96:8b:b9:29:4f:fb:36:5a:e5:c2:26:fe:54:aa: 8b:c3:33:e8:44:f9:fc:6b:d4:21:a0:4e:39:85:d8: 94:55:87:83:2d:b8:3b:2d:6d:5d:8c:14:25:8f:a7: bf:c6:81:3f:61:5f:b8:ab:94:62:30:e9:6d:ec:63: ad:82:48:3c:e9:94:13:11:88:ad:65:a6:7c:3a:a6: 72:1a:76:5c:5a:3b:59:33:0e:e5:54:79:27:0d:30: ed:23:83:b1:67:ce:7a:96:fa:e2:d9:bc:8c:19:2c: c2:7b:3d:67:11:ed:bf:69:57:5c:64:d4:83:cb:31: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1E:EE:CD:90:0B:6D:F5:C0:AC:42:C7:09:B1:BD:53:95:F9:21:5B X509v3 Authority Key Identifier: keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7f:92:bf:e0:a9:ed:e6:07:aa:60:c0:e6:51:d8:92:2a:48: 3e:60:96:48:5c:f4:08:bb:a4:a8:8a:55:22:9c:94:63:bf:07: 1e:49:7c:39:15:73:7c:91:f0:88:b8:e8:e4:a4:f6:27:dc:1a: 08:19:d5:88:a9:2c:62:ba:d5:18:88:da:cb:25:86:f0:e6:53: a3:43:42:8e:5b:b1:04:ee:b7:8f:4e:85:d0:48:e5:24:dd:fd: 25:11:ad:41:44:85:6f:eb:b7:9c:ee:d3:0a:e9:1a:63:68:4d: 32:8c:cd:51:c7:cb:16:75:04:12:96:08:5e:b7:81:43:58:73: 23:28:cb:62:69:5a:57:29:d5:d4:d9:77:ba:14:a0:00:a2:9b: bb:3f:80:43:47:54:a0:b3:3a:71:b7:11:47:d0:ed:14:bd:de: b5:f2:e2:03:14:f8:a4:4b:42:48:a2:c8:b8:bb:42:cd:df:d1: af:7c:44:9b:ad:a3:d0:6f:bb:80:d3:8f:8d:90:a7:ad:be:33: de:ec:5f:d6:96:48:b7:56:27:87:d3:ae:9b:1c:df:06:a6:1d: 9d:81:61:a2:37:3a:40:b2:45:3a:3d:52:64:7a:83:52:ee:0c: 2a:80:ed:1d:19:16:bc:f2:6b:8c:2b:13:bc:79:b3:3a:dc:49: c0:06:8b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfe1937fiN/ibqpikHMcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm ODI2ZWYwHhcNMjUxMjMwMjMwMDM2WhcNMjUxMjMxMjMwMDM2WjAzMTEwLwYDVQQD EygwYzFlZWVjZDkwMGI2ZGY1YzBhYzQyYzcwOWIxYmQ1Mzk1ZjkyMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl4Dxp85OkoEO4pcpyR2/CHUSykm FqfeTh1mSlUkKCqbXBq3nqXEoNl2edm7Sa8gCF0nPOkU0KD9kdUzq602jjPKibAd QQ23VX3r2rAotX3Dkp7g0twa7nUdF5iGKuvVNNnFoZMC595T/UCdEvzwhnnvyXpc HPZBOtgPgaCaZ1zAUgybQtEvlou5KU/7Nlrlwib+VKqLwzPoRPn8a9QhoE45hdiU VYeDLbg7LW1djBQlj6e/xoE/YV+4q5RiMOlt7GOtgkg86ZQTEYitZaZ8OqZyGnZc WjtZMw7lVHknDTDtI4OxZ856lvri2byMGSzCez1nEe2/aVdcZNSDyzHNDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwe7s2QC231wKxCxwmxvVOV+SFbMB8GA1UdIwQY MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt NmZjNWZjYTA5NjI5LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5 LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUH+Sv+Cp 7eYHqmDA5lHYkipIPmCWSFz0CLukqIpVIpyUY78HHkl8ORVzfJHwiLjo5KT2J9wa CBnViKksYrrVGIjayyWG8OZTo0NCjluxBO63j06F0EjlJN39JRGtQUSFb+u3nO7T CukaY2hNMozNUcfLFnUEEpYIXreBQ1hzIyjLYmlaVynV1Nl3uhSgAKKbuz+AQ0dU oLM6cbcRR9DtFL3etfLiAxT4pEtCSKLIuLtCzd/Rr3xEm62j0G+7gNOPjZCnrb4z 3uxf1pZIt1Ynh9OumxzfBqYdnYFhojc6QLJFOj1SZHqDUu4MKoDtHRkWvPJrjCsT vHmzOtxJwAaLLA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:17:01 2025 by rpki-client