This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json) Hash identifier: LtZ3496BtrBciIlYyPxeRqFNLgk9P8LVTFu6qwLJixk= Subject key identifier: D1:F7:B0:9C:7E:19:17:1F:DD:41:25:61:FD:3C:D6:AC:E0:97:36:E7 Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Certificate serial: 019B4ADEF221F13075CCD37CAA5A9A522C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft Manifest number: 1445 Signing time: Tue 23 Dec 2025 11:01:23 +0000 Manifest this update: Tue 23 Dec 2025 11:01:23 +0000 Manifest next update: Wed 24 Dec 2025 11:01:23 +0000 Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=) 2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: gByMto9eX+c5Km84StA7CHg543kHnIl9fBBuZhyp5RY=) 3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:f2:21:f1:30:75:cc:d3:7c:aa:5a:9a:52:2c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Validity Not Before: Dec 23 11:01:23 2025 GMT Not After : Dec 24 11:01:23 2025 GMT Subject: CN=d1f7b09c7e19171fdd412561fd3cd6ace09736e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:54:bf:14:24:5b:80:03:9c:26:23:f5:62: 94:d0:10:1e:10:80:8a:48:3e:88:34:76:9c:43:6d: 88:48:57:59:65:be:e3:85:d4:85:c0:c1:f2:14:14: 73:58:f9:f8:4e:a7:1d:2a:db:25:76:a7:71:64:cc: 04:fe:1f:cb:e6:3f:22:d9:30:47:d4:51:de:1d:9c: ab:59:fc:49:a9:d8:81:d3:fb:a7:12:c6:38:c3:d5: f0:c5:75:c2:87:4b:b7:a4:04:6d:9e:c6:ef:0f:e6: 8d:e5:2f:c9:a1:04:7e:28:da:d5:3a:fa:19:9c:88: 4e:5d:76:62:ce:6d:09:a0:31:0c:f2:7a:0b:fd:79: e5:2d:5e:d1:ee:2f:26:7c:a3:a0:2f:b9:3b:ab:dd: e0:c4:21:ef:0e:e5:f2:f8:ee:e2:f3:2c:1a:f8:c8: 45:c7:9e:1c:f5:3d:cc:79:54:c1:7e:11:6e:d1:99: 06:7a:6c:7f:0f:68:7d:3b:84:44:00:73:ce:77:5a: 2f:d9:1b:54:6c:03:18:40:21:38:e5:0a:cd:73:3e: ae:ba:ec:19:21:66:04:9c:d6:aa:b9:e2:e4:69:48: a7:07:00:f4:56:60:d1:c0:de:a1:6e:5f:28:db:ab: ce:04:fe:af:4b:76:eb:3c:26:eb:56:95:39:65:24: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F7:B0:9C:7E:19:17:1F:DD:41:25:61:FD:3C:D6:AC:E0:97:36:E7 X509v3 Authority Key Identifier: keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:11:ca:f9:6b:c3:60:67:60:e2:86:2d:7c:51:58:cc:21:0f: 06:e9:48:70:a9:03:27:f2:c7:da:70:da:3e:62:cd:9b:10:96: 31:1e:ad:fc:5b:d0:f5:26:98:df:d8:f2:01:ca:5f:ab:23:38: f1:dc:86:9b:1e:b8:da:9e:d6:e7:d1:90:7f:91:b7:76:e0:ad: 51:48:71:1e:be:c6:d8:83:d6:14:f8:8d:8f:48:7e:b0:bf:ee: aa:b2:3a:a7:18:65:83:fe:7c:e8:b0:34:12:4e:73:50:3a:7f: e9:09:35:e4:55:f1:71:1f:ee:c4:d9:69:8f:29:71:14:e0:e4: 9a:19:ba:52:0f:5f:4a:d9:27:73:4c:7c:41:db:0d:a0:fd:22: 6a:af:02:23:70:09:b8:11:9f:d7:69:dd:29:14:6b:e3:0d:f9: 93:ce:0d:3c:b1:cb:d5:9d:21:70:da:8a:a1:61:8f:2d:d4:52: 9a:9a:53:11:e3:0c:2a:61:c5:1d:96:40:eb:a5:31:bb:3f:7e: 71:15:ad:05:93:8c:1b:df:b1:81:f3:cd:af:dd:e3:0d:c8:98: 60:d5:cb:63:53:15:50:4e:d3:29:61:98:45:6c:bf:92:5e:5b: 63:b1:d8:24:91:4a:ff:5d:da:46:5d:57:9e:4c:1a:e2:05:95: b5:cc:db:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3vIh8TB1zNN8qlqaUixFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5 NmZhMmQwHhcNMjUxMjIzMTEwMTIzWhcNMjUxMjI0MTEwMTIzWjAzMTEwLwYDVQQD EyhkMWY3YjA5YzdlMTkxNzFmZGQ0MTI1NjFmZDNjZDZhY2UwOTczNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZhUvxQkW4ADnCYj9WKU0BAeEICK SD6INHacQ22ISFdZZb7jhdSFwMHyFBRzWPn4TqcdKtsldqdxZMwE/h/L5j8i2TBH 1FHeHZyrWfxJqdiB0/unEsY4w9XwxXXCh0u3pARtnsbvD+aN5S/JoQR+KNrVOvoZ nIhOXXZizm0JoDEM8noL/XnlLV7R7i8mfKOgL7k7q93gxCHvDuXy+O7i8ywa+MhF x54c9T3MeVTBfhFu0ZkGemx/D2h9O4REAHPOd1ov2RtUbAMYQCE45QrNcz6uuuwZ IWYEnNaqueLkaUinBwD0VmDRwN6hbl8o26vOBP6vS3brPCbrVpU5ZSRSWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH3sJx+GRcf3UElYf081qzglzbnMB8GA1UdIwQY MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt ZDMyZTU2ZDc5YjJhLzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhHK+WvD YGdg4oYtfFFYzCEPBulIcKkDJ/LH2nDaPmLNmxCWMR6t/FvQ9SaY39jyAcpfqyM4 8dyGmx642p7W59GQf5G3duCtUUhxHr7G2IPWFPiNj0h+sL/uqrI6pxhlg/586LA0 Ek5zUDp/6Qk15FXxcR/uxNlpjylxFODkmhm6Ug9fStknc0x8QdsNoP0iaq8CI3AJ uBGf12ndKRRr4w35k84NPLHL1Z0hcNqKoWGPLdRSmppTEeMMKmHFHZZA66Uxuz9+ cRWtBZOMG9+xgfPNr93jDciYYNXLY1MVUE7TKWGYRWy/kl5bY7HYJJFK/13aRl1X nkwa4gWVtczbkw== -----END CERTIFICATE-----Generated at Tue Dec 23 13:54:39 2025 by rpki-client