This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json) Hash identifier: ECQXJ6Vg3bsLs6pkwtPnn4iShgz2ngDQQT5K6gD7/Xk= Subject key identifier: B6:B3:67:FC:53:4F:90:AD:C2:5A:E8:4C:BE:37:17:6B:B2:5A:CD:F7 Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Certificate serial: 019B3A90D05ACCFA7418D9D3DDC1C5D71A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft Manifest number: 12D8 Signing time: Sat 20 Dec 2025 07:02:07 +0000 Manifest this update: Sat 20 Dec 2025 07:02:07 +0000 Manifest next update: Sun 21 Dec 2025 07:02:07 +0000 Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=) 2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: bnrjkCv5tt+PDMFFgAdF8YSW1Bf26BlZbOuZdeFVVUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:d0:5a:cc:fa:74:18:d9:d3:dd:c1:c5:d7:1a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Validity Not Before: Dec 20 07:02:07 2025 GMT Not After : Dec 21 07:02:07 2025 GMT Subject: CN=b6b367fc534f90adc25ae84cbe37176bb25acdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:cd:d0:d6:5d:85:6a:e5:74:b0:c6:15:16: 46:fb:7d:11:7f:69:09:35:06:47:e4:90:55:a3:c8: 64:4e:34:dc:66:9b:47:0d:3e:83:5e:ee:74:dc:2c: 5e:17:ca:c8:81:0e:28:d0:64:4e:e4:24:dd:1f:e4: d2:0d:f4:84:38:2e:2d:9b:91:17:d1:54:2a:93:9f: ab:a1:e4:c9:48:18:89:f6:83:48:41:85:05:e0:06: 75:d1:4e:9d:46:64:a5:28:be:da:b9:38:08:2c:20: f8:4b:85:17:b8:ac:34:b2:91:7a:c5:76:f0:f7:c9: 48:e2:3a:fa:eb:9f:a0:af:df:b9:14:3e:33:d7:c8: 17:ce:87:16:3d:62:47:35:dc:c2:30:13:b8:8e:f7: 2f:8f:33:7f:24:ee:3d:21:4c:4a:18:91:e5:b2:fe: 54:c2:81:05:8e:23:ca:15:91:c4:4f:68:a8:55:81: 5e:aa:2d:2a:85:a6:fb:59:63:d2:f8:13:c5:47:09: 45:32:8c:2b:98:f6:1b:88:5e:1c:25:cf:58:af:39: b3:e0:41:fc:5b:6b:a1:28:01:9d:4d:46:b0:8f:05: 26:5d:72:e3:e9:9a:1e:48:e6:7a:72:5f:02:bf:22: 7f:94:36:e8:e5:63:61:78:7b:3b:af:d5:7f:e5:5b: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B3:67:FC:53:4F:90:AD:C2:5A:E8:4C:BE:37:17:6B:B2:5A:CD:F7 X509v3 Authority Key Identifier: keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c8:51:31:97:27:62:8d:8e:c1:c1:ca:5e:3f:74:34:39:0d: 0e:cf:92:d9:d0:8e:08:23:2a:a5:51:b1:d1:4f:66:87:02:05: 76:11:17:c4:00:25:ce:9e:89:3e:08:02:c0:e3:c8:da:9d:33: f7:ec:1b:92:fa:3a:e2:e9:3c:27:15:75:3a:fc:f7:b4:36:23: 99:2b:03:3d:e7:cb:7f:53:7c:82:c2:a9:a9:5d:2e:44:8c:dd: 9e:60:87:2f:4e:e6:d7:a7:c9:c2:d2:3c:15:58:b0:44:53:5b: c8:e4:82:82:2f:21:dc:05:2c:f7:37:aa:98:b2:79:9c:ef:f4: ce:fa:25:43:d1:38:8d:49:43:8e:d4:0d:18:8f:e5:d3:f2:8f: db:ab:4c:c4:83:00:10:94:27:14:7b:48:db:bb:a8:64:d4:74: d5:6c:c6:74:5d:67:70:5b:8c:72:09:3b:08:5a:50:69:74:ce: 9f:80:f2:a2:41:13:c7:7d:73:15:56:c7:33:6c:a8:55:de:3b: 4a:41:85:02:ed:dd:94:3c:46:73:5f:4f:9f:28:15:61:5a:17: 75:8a:f4:32:d3:75:17:db:4f:58:0c:11:56:22:b9:9a:ee:68: b9:bc:29:73:8d:1b:18:fc:ae:e6:7b:0b:b8:16:79:0d:93:cc: 0d:5d:e8:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kNBazPp0GNnT3cHF1xpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz ODM5YjEwHhcNMjUxMjIwMDcwMjA3WhcNMjUxMjIxMDcwMjA3WjAzMTEwLwYDVQQD EyhiNmIzNjdmYzUzNGY5MGFkYzI1YWU4NGNiZTM3MTc2YmIyNWFjZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUfN0NZdhWrldLDGFRZG+30Rf2kJ NQZH5JBVo8hkTjTcZptHDT6DXu503CxeF8rIgQ4o0GRO5CTdH+TSDfSEOC4tm5EX 0VQqk5+roeTJSBiJ9oNIQYUF4AZ10U6dRmSlKL7auTgILCD4S4UXuKw0spF6xXbw 98lI4jr665+gr9+5FD4z18gXzocWPWJHNdzCMBO4jvcvjzN/JO49IUxKGJHlsv5U woEFjiPKFZHET2ioVYFeqi0qhab7WWPS+BPFRwlFMowrmPYbiF4cJc9Yrzmz4EH8 W2uhKAGdTUawjwUmXXLj6ZoeSOZ6cl8CvyJ/lDbo5WNheHs7r9V/5VtCHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLazZ/xTT5CtwlroTL43F2uyWs33MB8GA1UdIwQY MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMhRMZcn Yo2OwcHKXj90NDkNDs+S2dCOCCMqpVGx0U9mhwIFdhEXxAAlzp6JPggCwOPI2p0z 9+wbkvo64uk8JxV1Ovz3tDYjmSsDPefLf1N8gsKpqV0uRIzdnmCHL07m16fJwtI8 FViwRFNbyOSCgi8h3AUs9zeqmLJ5nO/0zvolQ9E4jUlDjtQNGI/l0/KP26tMxIMA EJQnFHtI27uoZNR01WzGdF1ncFuMcgk7CFpQaXTOn4DyokETx31zFVbHM2yoVd47 SkGFAu3dlDxGc19PnygVYVoXdYr0MtN1F9tPWAwRViK5mu5oubwpc40bGPyu5nsL uBZ5DZPMDV3ogA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:31:18 2025 by rpki-client