This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json) Hash identifier: btpelHKiwIUq/z7S+IEiBpW/6DAs09zznMO6DhPgXDs= Subject key identifier: 22:1C:93:5C:55:35:A7:E2:27:C5:6C:CF:3B:CC:AA:D5:15:47:73:80 Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Certificate serial: 019B42B76197CD7A06B1EC56E5CD9FA7AFA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 21:01:12 +0000 Manifest this update: Sun 21 Dec 2025 21:01:12 +0000 Manifest next update: Mon 22 Dec 2025 21:01:12 +0000 Files and hashes: 1: ejHPALN-gjmcIUS4qvI8FUQoGLs.roa (hash: t6ZQ6lviMlaQN/1zPBkaInJA/2XG79lcf/SyBOeFSW8=) 2: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: CvOkpb/FRR/8t7jdOq6t+319UvMfovcvdlbqcjjdl94=) 3: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:61:97:cd:7a:06:b1:ec:56:e5:cd:9f:a7:af:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Validity Not Before: Dec 21 21:01:12 2025 GMT Not After : Dec 22 21:01:12 2025 GMT Subject: CN=221c935c5535a7e227c56ccf3bccaad515477380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:13:ef:c3:8d:a0:a9:2b:88:a0:68:cb:1f: 8f:1f:d5:05:68:a6:2b:49:c9:8e:ed:27:53:06:76: 13:dc:d1:7d:43:4e:ba:f0:1a:9f:d6:3a:27:d7:fd: d2:b8:fe:34:58:4e:ad:f8:6f:e9:3e:07:62:75:fa: a9:5a:14:2a:1c:15:61:74:54:1b:f8:2d:fa:a7:5a: 1f:d8:26:3b:e0:25:a8:86:50:b6:5a:0e:b6:80:78: da:63:be:2d:6e:a7:19:25:19:66:83:4a:8d:f0:ed: ff:dd:64:f3:90:2a:ed:e3:7c:9c:7a:04:3c:4a:b8: 7b:3c:89:22:d8:5f:ae:75:2f:b4:12:d1:70:7c:4b: 2f:0a:c8:b5:74:c6:77:34:af:c9:37:23:8a:a4:5c: 64:76:40:a0:7a:05:4d:cb:c3:3f:1e:3a:9d:f4:6c: be:43:37:00:25:a4:fd:4b:7b:cd:7d:d3:32:75:3a: d1:ae:31:d1:4e:e8:2e:d9:dd:7e:ef:b0:51:2e:42: f0:2a:e9:48:ad:b0:20:f8:4a:29:c8:2c:c5:bd:5c: 47:99:47:29:a2:34:4c:1e:7e:04:9f:de:98:0e:3b: 1e:25:07:4b:78:28:9a:23:22:0e:93:02:6b:83:03: 82:51:a9:c0:28:1b:c4:fd:15:9d:6a:df:1a:f1:34: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:93:5C:55:35:A7:E2:27:C5:6C:CF:3B:CC:AA:D5:15:47:73:80 X509v3 Authority Key Identifier: keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:61:f8:6e:34:2c:12:76:b3:1d:fe:27:82:d5:20:c9:4a:55: 80:bf:dc:b3:0d:7c:4a:ec:b7:77:3c:dc:f8:07:5f:57:9b:78: 13:b1:5f:5d:16:9e:5e:33:e4:ab:5e:4d:23:08:6e:56:e2:7a: df:4e:da:20:75:d3:9d:ee:87:d6:86:d8:da:4d:0e:67:5c:1e: f7:8f:d0:b4:9b:69:70:70:40:14:89:db:e2:d3:02:e8:2a:7c: b8:97:2c:dc:09:c3:41:2d:de:ad:61:28:58:ef:3b:f6:a0:5f: dd:45:59:af:87:4a:2f:38:32:c6:75:cc:e2:e2:04:c6:80:05: 95:20:14:ca:f1:f4:85:0d:f2:37:c9:fa:04:68:1e:4d:ff:b4: c5:7f:7f:fb:47:93:fd:c7:2d:57:50:06:36:50:a5:2a:89:53: f9:ee:14:86:ab:47:94:e4:9f:7a:e2:32:87:94:16:9b:d1:8c: c3:6b:6a:b7:ac:3d:28:31:8f:c7:58:09:7e:c8:4a:e6:cf:64: 8e:e0:32:1a:cb:9f:f5:91:9f:e1:3e:f1:14:d6:90:39:4e:da: 55:6e:d7:bf:07:17:d9:2b:08:8c:4d:51:1c:2a:29:28:68:d3: b3:cf:8a:a7:c3:c8:bc:fb:e5:58:42:52:14:67:d4:6a:9c:3d: 61:3a:05:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt2GXzXoGsexW5c2fp6+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy ZThjNDcwHhcNMjUxMjIxMjEwMTEyWhcNMjUxMjIyMjEwMTEyWjAzMTEwLwYDVQQD EygyMjFjOTM1YzU1MzVhN2UyMjdjNTZjY2YzYmNjYWFkNTE1NDc3MzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijYT78ONoKkriKBoyx+PH9UFaKYr ScmO7SdTBnYT3NF9Q0668Bqf1jon1/3SuP40WE6t+G/pPgdidfqpWhQqHBVhdFQb +C36p1of2CY74CWohlC2Wg62gHjaY74tbqcZJRlmg0qN8O3/3WTzkCrt43ycegQ8 Srh7PIki2F+udS+0EtFwfEsvCsi1dMZ3NK/JNyOKpFxkdkCgegVNy8M/Hjqd9Gy+ QzcAJaT9S3vNfdMydTrRrjHRTugu2d1+77BRLkLwKulIrbAg+EopyCzFvVxHmUcp ojRMHn4En96YDjseJQdLeCiaIyIOkwJrgwOCUanAKBvE/RWdat8a8TTRpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIck1xVNafiJ8VszzvMqtUVR3OAMB8GA1UdIwQY MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct MWJlNjljYTM5M2JhLzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmH4bjQs EnazHf4ngtUgyUpVgL/csw18Suy3dzzc+AdfV5t4E7FfXRaeXjPkq15NIwhuVuJ6 307aIHXTne6H1obY2k0OZ1we94/QtJtpcHBAFInb4tMC6Cp8uJcs3AnDQS3erWEo WO879qBf3UVZr4dKLzgyxnXM4uIExoAFlSAUyvH0hQ3yN8n6BGgeTf+0xX9/+0eT /cctV1AGNlClKolT+e4UhqtHlOSfeuIyh5QWm9GMw2tqt6w9KDGPx1gJfshK5s9k juAyGsuf9ZGf4T7xFNaQOU7aVW7XvwcX2SsIjE1RHCopKGjTs8+Kp8PIvPvlWEJS FGfUapw9YToF9A== -----END CERTIFICATE-----Generated at Mon Dec 22 05:30:36 2025 by rpki-client