This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json) Hash identifier: E1gfkLNMwsk56GhyIEFWg+Vp+x4b8arIHTIqrno3LvI= Subject key identifier: 54:5C:88:3F:27:44:AB:6D:0A:DF:C4:D8:3F:33:DC:42:66:F1:2C:1F Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Certificate serial: 019B61302A127F9F9AD5DC4C739A569B7463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft Manifest number: 12EC Signing time: Sat 27 Dec 2025 19:01:44 +0000 Manifest this update: Sat 27 Dec 2025 19:01:44 +0000 Manifest next update: Sun 28 Dec 2025 19:01:44 +0000 Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=) 2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: Lr97Z59gyngK96Nxkg8SPHqsAHf5+lBmcHnpi+ivI9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:30:2a:12:7f:9f:9a:d5:dc:4c:73:9a:56:9b:74:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Validity Not Before: Dec 27 19:01:44 2025 GMT Not After : Dec 28 19:01:44 2025 GMT Subject: CN=545c883f2744ab6d0adfc4d83f33dc4266f12c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2e:7e:be:c4:6b:26:eb:bf:60:45:06:ed:62: fe:42:c4:d2:17:dd:2e:15:51:d5:be:0e:a7:69:eb: 97:83:85:4b:e1:bf:59:a0:e2:0e:8e:48:19:b3:4c: 83:5d:59:5f:25:5a:88:c5:ab:5a:bd:08:6e:e5:84: e8:b6:15:9f:57:1e:e7:80:81:25:ee:05:c0:50:44: 19:2a:69:72:4c:9d:dd:88:df:fe:8c:e6:11:9a:66: 0a:d2:8b:31:59:63:d2:f3:16:45:de:fa:16:35:b1: 45:dd:62:8e:1a:11:6e:7a:80:d3:81:38:85:a9:65: 30:66:16:f0:37:8b:ee:b0:c8:cc:82:a0:78:b3:bc: 9b:00:12:77:61:cd:8c:ae:cf:bf:5b:56:f0:1f:2c: 27:8f:1c:6e:d8:90:54:a3:1d:6a:ed:e3:ef:b1:c8: c5:92:db:5e:17:8f:ea:4e:a7:4b:2d:ba:7f:6c:02: 13:0d:c7:70:6d:a5:52:2e:72:7c:b0:50:63:cb:5c: 5f:cd:e3:09:ab:e1:91:e0:ef:f9:15:4f:38:4d:61: 6c:73:bf:c3:d3:70:b3:79:08:5f:41:46:c4:4b:91: 95:e5:1a:1b:66:8d:4a:0c:50:07:47:66:65:63:12: 4c:06:c5:06:a0:2c:ad:2c:ed:a2:c5:6d:ce:bd:97: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5C:88:3F:27:44:AB:6D:0A:DF:C4:D8:3F:33:DC:42:66:F1:2C:1F X509v3 Authority Key Identifier: keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5c:3c:0f:cd:e2:e3:46:14:16:e9:08:42:8e:55:7a:0d:73: 5a:fd:1b:64:5f:03:6a:d3:15:87:73:a8:5e:eb:12:be:95:05: 21:2c:3c:63:27:68:7b:c3:00:b5:2d:fb:c7:ab:bf:d0:14:07: c6:76:9f:d7:28:fa:b8:e9:54:e1:9c:9f:30:6c:c9:04:d0:36: b9:95:f8:0b:64:37:7d:d5:af:02:a6:83:1c:b7:de:f2:23:31: b1:83:cc:f5:84:0e:f8:0f:5e:cf:d1:61:76:26:4a:f7:85:db: a1:91:26:fe:8c:fd:f2:f3:92:43:7e:c1:53:b1:1a:ce:28:b0: 5a:d3:23:d9:f4:12:a5:db:77:5d:65:a5:87:88:27:26:b0:d2: db:66:63:eb:cd:7b:e6:d8:9a:33:ac:58:3a:6a:67:14:b9:72: 8f:f3:13:39:24:80:04:c8:fe:6e:19:cc:bf:2d:39:5a:6c:17: c8:f5:e3:42:d3:a7:63:09:c5:48:f2:68:c5:54:4b:e3:27:14: 62:1b:05:c8:5b:5c:f0:11:7b:26:2a:19:09:80:5d:69:b3:ae: 57:c1:ac:3f:a6:ec:b0:bc:c6:96:91:e6:49:86:6d:c9:12:92: dc:b4:96:66:2e:93:0d:b4:26:53:bb:ce:a7:ed:b2:2b:a7:72: 54:16:99:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthMCoSf5+a1dxMc5pWm3RjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz ODM5YjEwHhcNMjUxMjI3MTkwMTQ0WhcNMjUxMjI4MTkwMTQ0WjAzMTEwLwYDVQQD Eyg1NDVjODgzZjI3NDRhYjZkMGFkZmM0ZDgzZjMzZGM0MjY2ZjEyYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS5+vsRrJuu/YEUG7WL+QsTSF90u FVHVvg6naeuXg4VL4b9ZoOIOjkgZs0yDXVlfJVqIxatavQhu5YTothWfVx7ngIEl 7gXAUEQZKmlyTJ3diN/+jOYRmmYK0osxWWPS8xZF3voWNbFF3WKOGhFueoDTgTiF qWUwZhbwN4vusMjMgqB4s7ybABJ3Yc2Mrs+/W1bwHywnjxxu2JBUox1q7ePvscjF ktteF4/qTqdLLbp/bAITDcdwbaVSLnJ8sFBjy1xfzeMJq+GR4O/5FU84TWFsc7/D 03CzeQhfQUbES5GV5RobZo1KDFAHR2ZlYxJMBsUGoCytLO2ixW3OvZdHxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRciD8nRKttCt/E2D8z3EJm8SwfMB8GA1UdIwQY MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelw8D83i 40YUFukIQo5Veg1zWv0bZF8DatMVh3OoXusSvpUFISw8Yydoe8MAtS37x6u/0BQH xnaf1yj6uOlU4ZyfMGzJBNA2uZX4C2Q3fdWvAqaDHLfe8iMxsYPM9YQO+A9ez9Fh diZK94XboZEm/oz98vOSQ37BU7EaziiwWtMj2fQSpdt3XWWlh4gnJrDS22Zj6817 5tiaM6xYOmpnFLlyj/MTOSSABMj+bhnMvy05WmwXyPXjQtOnYwnFSPJoxVRL4ycU YhsFyFtc8BF7JioZCYBdabOuV8GsP6bssLzGlpHmSYZtyRKS3LSWZi6TDbQmU7vO p+2yK6dyVBaZxA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:17:15 2025 by rpki-client