This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json) Hash identifier: GL9ongWLWKMa9XoCSYV0AaalmPqqW5Hi5L/kfii5c14= Subject key identifier: 74:4B:36:D4:CC:1F:DD:A6:20:FD:2F:9F:BE:77:EE:2F:22:2F:99:7E Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10 Certificate serial: 019B3F111D636AD6EFFB1FE800FC0E2D3889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft Manifest number: 13AD Signing time: Sun 21 Dec 2025 04:00:44 +0000 Manifest this update: Sun 21 Dec 2025 04:00:44 +0000 Manifest next update: Mon 22 Dec 2025 04:00:44 +0000 Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=) 2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=) 3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=) 4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: VKC9fpV8uirU7QxqmUv4iKayEMrJqEgb0iVdBJdCoqg=) 5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:1d:63:6a:d6:ef:fb:1f:e8:00:fc:0e:2d:38:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10 Validity Not Before: Dec 21 04:00:44 2025 GMT Not After : Dec 22 04:00:44 2025 GMT Subject: CN=744b36d4cc1fdda620fd2f9fbe77ee2f222f997e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:56:02:45:b3:55:6d:f0:1d:fb:c7:cc:80: 7a:c6:68:64:9d:be:69:a5:ab:17:d1:e2:ec:a3:f9: 78:2a:51:4d:8d:37:99:c2:c9:2b:40:b8:53:2e:54: 70:d8:9b:c7:45:d3:1c:fd:5b:fb:a4:84:f2:a6:7c: f9:9b:bd:47:b2:67:60:75:56:3f:62:6c:6f:74:f9: bf:c7:9c:a2:c8:88:03:22:c9:5b:f7:88:59:c1:02: 83:b7:8e:db:9f:cf:f8:6a:be:6f:dc:2d:eb:c5:b2: 4c:ee:f1:a7:5d:b0:13:f2:23:a4:ec:48:88:42:6a: 5b:fd:da:1d:c1:3f:a8:ba:9f:9c:34:85:51:fd:e0: c6:12:b8:b8:ca:e3:26:73:84:40:f0:0c:3a:5b:e5: ed:1b:a4:27:47:a1:18:6f:12:03:b0:76:64:5e:26: 60:51:51:e1:2a:fe:e9:3d:d7:3d:e6:6f:1e:b4:67: 28:80:1c:41:58:6e:5c:b3:37:a3:da:6c:7a:f6:c2: 24:c3:1c:03:93:8c:8f:b3:ad:44:15:d3:2b:1d:d3: ea:6c:4d:8e:54:3d:04:5b:28:01:ca:fd:ee:15:5f: 80:00:d5:51:b3:d4:45:b2:39:44:7c:a7:64:d3:09: 07:9f:62:93:4f:2f:13:1c:a4:ea:8b:c0:fc:e0:7c: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4B:36:D4:CC:1F:DD:A6:20:FD:2F:9F:BE:77:EE:2F:22:2F:99:7E X509v3 Authority Key Identifier: keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6f:8b:bf:e5:5a:4b:03:60:97:6a:29:c3:32:2c:19:9e:33: 64:c2:b7:3f:c6:98:b6:93:8a:35:c2:9a:ef:4c:19:67:f2:0f: bf:39:2a:d9:13:7d:47:73:e5:36:7b:59:2b:34:13:68:5a:64: ba:80:1a:d0:cc:d4:ba:d5:17:2f:9e:84:a3:ae:33:df:d4:94: 06:91:ae:c6:e7:0d:e3:f7:d8:1b:1b:66:85:74:3b:f8:83:89: ac:de:07:0c:e4:9b:75:bf:b9:6f:84:b9:80:2a:dd:e1:da:25: 56:73:06:61:2b:31:7f:f8:66:0e:6e:78:24:fa:e6:a8:36:95: fa:62:59:25:82:49:17:4f:86:5f:f5:7f:f9:b4:96:89:e6:2b: cf:12:8a:1d:4d:39:1d:03:55:2d:4d:d4:e6:01:b1:b7:ac:9e: 68:1c:ff:1a:f1:16:f8:30:b7:7b:89:cb:b7:20:3a:da:5b:76: 27:bc:c3:53:00:7c:9f:54:ed:fc:b3:36:86:05:b5:bc:85:72: 93:ef:42:da:9b:18:5c:5c:8a:d9:39:36:3c:53:6f:f2:84:bf: 89:6f:4d:e3:8f:d4:73:8e:67:aa:17:c6:3a:05:b6:18:d3:76: 3d:80:73:8a:d3:67:0e:b2:be:c5:c7:e6:6b:16:c2:7e:98:21: 34:6f:27:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ER1jatbv+x/oAPwOLTiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3 YzBlMTAwHhcNMjUxMjIxMDQwMDQ0WhcNMjUxMjIyMDQwMDQ0WjAzMTEwLwYDVQQD Eyg3NDRiMzZkNGNjMWZkZGE2MjBmZDJmOWZiZTc3ZWUyZjIyMmY5OTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aNWAkWzVW3wHfvHzIB6xmhknb5p pasX0eLso/l4KlFNjTeZwskrQLhTLlRw2JvHRdMc/Vv7pITypnz5m71HsmdgdVY/ YmxvdPm/x5yiyIgDIslb94hZwQKDt47bn8/4ar5v3C3rxbJM7vGnXbAT8iOk7EiI Qmpb/dodwT+oup+cNIVR/eDGEri4yuMmc4RA8Aw6W+XtG6QnR6EYbxIDsHZkXiZg UVHhKv7pPdc95m8etGcogBxBWG5cszej2mx69sIkwxwDk4yPs61EFdMrHdPqbE2O VD0EWygByv3uFV+AANVRs9RFsjlEfKdk0wkHn2KTTy8THKTqi8D84HxcrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRLNtTMH92mIP0vn7537i8iL5l+MB8GA1UdIwQY MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt MDdlMzZlZmM1ZTQyLzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm+Lv+Va SwNgl2opwzIsGZ4zZMK3P8aYtpOKNcKa70wZZ/IPvzkq2RN9R3PlNntZKzQTaFpk uoAa0MzUutUXL56Eo64z39SUBpGuxucN4/fYGxtmhXQ7+IOJrN4HDOSbdb+5b4S5 gCrd4dolVnMGYSsxf/hmDm54JPrmqDaV+mJZJYJJF0+GX/V/+bSWieYrzxKKHU05 HQNVLU3U5gGxt6yeaBz/GvEW+DC3e4nLtyA62lt2J7zDUwB8n1Tt/LM2hgW1vIVy k+9C2psYXFyK2Tk2PFNv8oS/iW9N44/Uc45nqhfGOgW2GNN2PYBzitNnDrK+xcfm axbCfpghNG8nXA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:13:58 2025 by rpki-client