This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json) Hash identifier: XTNVckah7dBuJC2IcWYjfQa199E5qKxdw7oABcEZMbQ= Subject key identifier: 2B:18:6B:9B:5A:E9:45:DF:9E:D8:0D:CD:EF:14:CC:46:78:D5:15:1F Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Certificate serial: 019B3BA22785414DDCD6AFA430D079D0AD04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft Manifest number: 175C Signing time: Sat 20 Dec 2025 12:00:41 +0000 Manifest this update: Sat 20 Dec 2025 12:00:41 +0000 Manifest next update: Sun 21 Dec 2025 12:00:41 +0000 Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=) 2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: KaduaLBwbSUAtlJn/IiJpaUF0kHlcEUEY/xlwj1F/hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:27:85:41:4d:dc:d6:af:a4:30:d0:79:d0:ad:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Validity Not Before: Dec 20 12:00:41 2025 GMT Not After : Dec 21 12:00:41 2025 GMT Subject: CN=2b186b9b5ae945df9ed80dcdef14cc4678d5151f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f0:80:73:b8:0c:21:bd:0d:ee:77:56:67:94: 2d:48:42:9e:98:bb:1d:02:49:90:d0:8f:7c:fc:3e: 64:63:af:fc:ed:2e:2c:fb:3e:e4:b7:3a:59:8e:ce: 17:a6:7c:ed:a2:b9:56:05:47:3f:a0:e9:cf:83:ac: e4:7f:1f:4c:43:f5:57:51:4a:93:90:07:f9:30:69: 23:f3:7f:c2:56:96:5c:82:e8:76:a2:6a:43:48:02: 31:36:35:49:ad:2f:61:19:f4:63:f0:0a:b8:ec:99: 9c:2f:84:d0:57:5d:30:ce:62:a1:95:40:93:d2:c5: 92:d8:68:a8:a0:f7:61:b0:1c:7b:45:46:fa:58:1e: 75:c6:73:53:47:6b:2c:0e:c9:e1:84:0d:f6:41:37: b6:b9:69:23:b3:75:be:bd:04:c3:08:42:b9:00:d8: 7c:a1:3a:16:95:8d:67:79:f6:d0:7b:ee:02:d3:9b: 0e:db:1f:3c:90:93:fd:53:d7:85:f4:3f:b3:c1:f7: a9:8e:91:aa:83:6b:bc:66:60:69:5f:4f:c8:31:d0: 9a:1f:80:a7:c0:ad:28:aa:ad:7d:c8:66:c7:8b:7c: bf:f8:7d:86:51:63:e8:68:67:70:7a:e7:59:e7:6c: ea:99:a3:36:07:6a:31:90:f0:1d:32:b5:c6:9c:69: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:6B:9B:5A:E9:45:DF:9E:D8:0D:CD:EF:14:CC:46:78:D5:15:1F X509v3 Authority Key Identifier: keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7f:55:53:d0:4d:b2:a4:4a:9b:c4:fa:ee:41:e7:6c:f5:62: 0c:54:d5:7f:ce:7b:f6:25:4c:b3:d6:04:29:2b:1f:01:43:87: 4a:0b:72:67:ee:fd:db:0c:04:eb:ea:fe:f7:3d:e9:36:ed:51: ff:70:79:ec:50:74:e9:11:88:db:f6:e0:15:66:0d:5b:38:25: 99:5a:22:a6:d1:9f:9c:42:38:6e:11:60:d8:a3:41:99:61:6f: a1:c1:4d:ba:c0:14:4c:e7:a7:76:fa:48:f7:a7:fb:85:f4:c5: ea:4c:74:78:0b:d9:29:2d:36:3d:16:2b:2e:72:4d:02:32:f0: 57:bc:73:0a:3d:63:2b:65:23:84:63:41:e8:4b:d2:21:a2:f7: 12:38:4a:8c:7e:3d:18:af:6e:bc:26:c5:25:65:bd:c5:41:41: ae:ef:56:72:8c:8d:d9:7c:f6:df:7b:34:7f:a2:7a:e4:a3:b0: b4:50:72:26:b1:a5:84:e3:89:98:0b:fd:92:20:07:a0:a6:49: cd:48:40:04:a8:80:bf:a9:46:62:8f:5c:d6:b8:99:81:8f:9c: 4c:78:d0:0a:94:a4:e4:95:9b:e1:93:49:46:18:8e:a5:4c:d6: a7:2e:d8:2d:b5:fe:1b:56:b8:ef:fe:60:90:68:31:16:de:6b: b5:5e:3d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oieFQU3c1q+kMNB50K0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWJlZWRmNDM4YTlhYTk2MWMzNDMyNjQzN2MyOWM0ZGQw Y2M0YmMwHhcNMjUxMjIwMTIwMDQxWhcNMjUxMjIxMTIwMDQxWjAzMTEwLwYDVQQD EygyYjE4NmI5YjVhZTk0NWRmOWVkODBkY2RlZjE0Y2M0Njc4ZDUxNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PCAc7gMIb0N7ndWZ5QtSEKemLsd AkmQ0I98/D5kY6/87S4s+z7ktzpZjs4XpnztorlWBUc/oOnPg6zkfx9MQ/VXUUqT kAf5MGkj83/CVpZcguh2ompDSAIxNjVJrS9hGfRj8Aq47JmcL4TQV10wzmKhlUCT 0sWS2GiooPdhsBx7RUb6WB51xnNTR2ssDsnhhA32QTe2uWkjs3W+vQTDCEK5ANh8 oToWlY1nefbQe+4C05sO2x88kJP9U9eF9D+zwfepjpGqg2u8ZmBpX0/IMdCaH4Cn wK0oqq19yGbHi3y/+H2GUWPoaGdweudZ52zqmaM2B2oxkPAdMrXGnGkDWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsYa5ta6UXfntgNze8UzEZ41RUfMB8GA1UdIwQY MBaAFIRb7t9DipqpYcNDJkN8KcTdDMS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWIt MThlNjQ0NDFkMDFlLzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWItMThlNjQ0NDFkMDFl LzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX9VU9BN sqRKm8T67kHnbPViDFTVf8579iVMs9YEKSsfAUOHSgtyZ+792wwE6+r+9z3pNu1R /3B57FB06RGI2/bgFWYNWzglmVoiptGfnEI4bhFg2KNBmWFvocFNusAUTOendvpI 96f7hfTF6kx0eAvZKS02PRYrLnJNAjLwV7xzCj1jK2UjhGNB6EvSIaL3EjhKjH49 GK9uvCbFJWW9xUFBru9WcoyN2Xz233s0f6J65KOwtFByJrGlhOOJmAv9kiAHoKZJ zUhABKiAv6lGYo9c1riZgY+cTHjQCpSk5JWb4ZNJRhiOpUzWpy7YLbX+G1a47/5g kGgxFt5rtV49yg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:56:40 2025 by rpki-client