This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json) Hash identifier: ONk+GrnKvBrmu6ZfGpmgTZ+hGRH+KKHpuk1eloAUKl0= Subject key identifier: 3D:74:87:57:3B:78:9F:BC:61:F4:30:C1:8C:73:91:DA:EC:BF:8B:95 Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Certificate serial: 019B51BD1679A6013EAEB569B5EA17E77CB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft Manifest number: 12E4 Signing time: Wed 24 Dec 2025 19:01:45 +0000 Manifest this update: Wed 24 Dec 2025 19:01:45 +0000 Manifest next update: Thu 25 Dec 2025 19:01:45 +0000 Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=) 2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: pJ41lEVcAyoS/NDxyWtOicMp9xwOzJdGlqto44XJGI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:16:79:a6:01:3e:ae:b5:69:b5:ea:17:e7:7c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Validity Not Before: Dec 24 19:01:45 2025 GMT Not After : Dec 25 19:01:45 2025 GMT Subject: CN=3d7487573b789fbc61f430c18c7391daecbf8b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:87:7f:64:dc:18:6d:e9:4a:b8:18:3f:76: 3a:7b:77:da:69:e8:50:d4:26:90:a0:68:d6:6e:7d: 6e:f9:45:e7:b6:47:23:be:6c:53:93:cc:60:17:23: 80:01:9e:4a:a7:0b:e5:21:2d:a8:0f:e6:24:24:e7: 13:88:11:02:62:5d:9f:58:ec:81:44:fb:b7:65:d6: ba:51:8e:08:24:de:ad:95:b6:27:ff:f5:2c:31:da: 28:78:90:a9:d7:cf:a4:b1:bf:e2:81:e2:fd:37:4c: c2:4a:6a:14:2d:d6:7c:41:5d:da:4a:f5:40:e4:fe: 06:87:71:25:39:08:7e:40:8a:d6:29:09:4d:29:30: af:d0:c7:ff:ac:a8:8d:36:62:1f:da:96:43:bc:2f: 0d:03:30:4f:53:c2:8a:52:ca:93:bd:a9:dc:e8:a2: 83:74:c3:cc:a8:f7:28:d0:8e:82:db:e1:aa:3f:0b: 3f:91:bd:0c:0c:31:23:77:a3:17:4c:a6:56:df:ad: a3:98:ec:77:31:7b:7c:fa:01:9d:b2:8e:d8:3a:b1: c1:7e:e6:72:ef:ac:94:8b:8f:ba:9c:1b:ce:09:8d: 81:aa:7f:8d:4a:30:2d:cd:eb:42:d0:97:80:01:01: 97:6f:cb:52:74:6b:0c:6b:ed:dc:51:b1:66:bd:4f: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:87:57:3B:78:9F:BC:61:F4:30:C1:8C:73:91:DA:EC:BF:8B:95 X509v3 Authority Key Identifier: keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4e:c5:e3:a6:92:12:ff:9a:1f:84:63:17:78:48:e8:50:03: ec:47:f2:05:d1:e8:a2:7b:55:23:6c:b7:87:9e:55:17:ec:1d: be:5e:49:de:fe:cd:66:11:cc:8d:f3:3e:f0:b5:d3:a8:33:6b: 40:8c:cf:3a:a4:26:19:a4:fa:44:01:08:fb:14:24:ef:7f:e5: 97:91:ab:1e:d6:42:fe:e8:38:49:5c:d8:24:1b:42:de:e4:3c: 05:5d:0a:3c:51:53:ce:50:6b:42:66:03:29:d0:5f:15:16:62: 1d:7a:04:68:87:58:15:c6:c6:31:9c:b9:ed:14:dd:d6:42:ad: ac:0e:f2:dc:26:89:93:58:76:10:c0:6d:7c:37:f1:23:f1:ae: ff:c2:78:5b:2e:1d:16:00:99:cc:b1:61:40:44:b9:f2:ad:5a: 05:e7:c6:8c:a7:5c:28:41:e5:86:82:26:9a:86:1f:18:d2:c0: 80:7b:f0:fd:4f:26:6d:bf:6a:b6:c5:1d:be:85:11:7c:14:ae: 43:81:04:f2:49:a1:90:da:c8:ec:25:9d:60:79:74:66:c6:db: 5f:46:4e:5d:47:94:4a:7d:a0:b3:53:c3:81:9c:18:15:63:ac: 69:78:81:71:66:d6:4a:a2:60:3f:fc:a8:1e:74:7f:ea:00:14: 29:00:87:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvRZ5pgE+rrVpteoX53y0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz ODM5YjEwHhcNMjUxMjI0MTkwMTQ1WhcNMjUxMjI1MTkwMTQ1WjAzMTEwLwYDVQQD EygzZDc0ODc1NzNiNzg5ZmJjNjFmNDMwYzE4YzczOTFkYWVjYmY4Yjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF+Hf2TcGG3pSrgYP3Y6e3faaehQ 1CaQoGjWbn1u+UXntkcjvmxTk8xgFyOAAZ5KpwvlIS2oD+YkJOcTiBECYl2fWOyB RPu3Zda6UY4IJN6tlbYn//UsMdooeJCp18+ksb/igeL9N0zCSmoULdZ8QV3aSvVA 5P4Gh3ElOQh+QIrWKQlNKTCv0Mf/rKiNNmIf2pZDvC8NAzBPU8KKUsqTvanc6KKD dMPMqPco0I6C2+GqPws/kb0MDDEjd6MXTKZW362jmOx3MXt8+gGdso7YOrHBfuZy 76yUi4+6nBvOCY2Bqn+NSjAtzetC0JeAAQGXb8tSdGsMa+3cUbFmvU8dbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD10h1c7eJ+8YfQwwYxzkdrsv4uVMB8GA1UdIwQY MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE7F46aS Ev+aH4RjF3hI6FAD7EfyBdHoontVI2y3h55VF+wdvl5J3v7NZhHMjfM+8LXTqDNr QIzPOqQmGaT6RAEI+xQk73/ll5GrHtZC/ug4SVzYJBtC3uQ8BV0KPFFTzlBrQmYD KdBfFRZiHXoEaIdYFcbGMZy57RTd1kKtrA7y3CaJk1h2EMBtfDfxI/Gu/8J4Wy4d FgCZzLFhQES58q1aBefGjKdcKEHlhoImmoYfGNLAgHvw/U8mbb9qtsUdvoURfBSu Q4EE8kmhkNrI7CWdYHl0ZsbbX0ZOXUeUSn2gs1PDgZwYFWOsaXiBcWbWSqJgP/yo HnR/6gAUKQCH+w== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:56 2025 by rpki-client