This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json) Hash identifier: 47AR4rrJudN8QjnhVT/wa87PdOM1OQ67TprrEMu0qCs= Subject key identifier: C9:91:81:7A:08:5F:45:B4:AE:F4:1D:7D:5E:06:B6:2C:30:F0:1C:5F Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019B3F488C59886DB9D51E03C95893656685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft Manifest number: 118D Signing time: Sun 21 Dec 2025 05:01:17 +0000 Manifest this update: Sun 21 Dec 2025 05:01:17 +0000 Manifest next update: Mon 22 Dec 2025 05:01:17 +0000 Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=) 2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=) 3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=) 4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: tHfHFlSidFa5xaffzq5FiMLxYguZE0uvjy8R7jOOJYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:8c:59:88:6d:b9:d5:1e:03:c9:58:93:65:66:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Dec 21 05:01:17 2025 GMT Not After : Dec 22 05:01:17 2025 GMT Subject: CN=c991817a085f45b4aef41d7d5e06b62c30f01c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:76:e8:55:2b:3b:78:d8:b4:08:75:f7:a2: b6:2a:c7:95:99:4c:7b:01:51:6c:3c:7d:19:f5:ae: 58:0e:95:9f:0f:17:28:24:88:4a:a8:cb:a7:7a:d4: 0d:63:ea:4a:d5:a8:0f:55:97:04:68:1e:1d:73:31: 12:ba:af:2a:30:11:95:ec:7d:28:58:38:ce:10:37: b0:05:30:86:20:e5:90:3a:95:ac:99:70:97:23:dc: 1d:b1:4b:91:fe:d8:3f:83:9b:68:7f:3d:f9:e2:9f: 90:96:27:9e:f0:b1:b6:c5:25:56:d4:6b:cc:78:69: d8:09:7e:37:a5:a9:4d:00:8d:62:d5:b8:3b:1c:25: 17:ed:01:bf:10:2f:25:9a:36:1d:e9:49:ea:96:68: aa:cc:b2:06:97:ea:6f:c6:0d:2c:47:83:94:82:52: e3:79:12:ed:b1:94:54:65:de:46:58:8c:d6:41:64: 36:46:2b:f9:94:af:09:58:95:5d:2c:49:97:92:ef: 4c:0f:a1:65:e8:a6:d4:2b:2d:1f:7a:50:29:2a:77: cb:5b:61:07:f5:2a:3b:58:64:61:87:b7:be:0d:50: a9:ee:89:bc:3f:0f:04:74:ed:38:f4:f0:31:81:48: 67:07:14:80:49:85:ca:fe:80:46:07:f9:94:c5:d3: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:81:7A:08:5F:45:B4:AE:F4:1D:7D:5E:06:B6:2C:30:F0:1C:5F X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5a:04:71:87:bf:bb:2f:be:e2:69:71:fd:95:cb:42:c8:99: ab:f7:c2:73:61:cc:b5:f2:bf:cb:a2:98:ca:0d:ef:c0:16:ab: cb:28:aa:00:cc:d7:81:12:94:77:55:1b:a3:be:d8:72:b9:da: 1f:92:6f:fb:5f:46:9b:63:22:b1:37:af:18:1e:4f:35:d4:50: 74:ec:3c:69:86:27:c3:41:75:ce:13:d0:30:41:02:05:b1:91: 88:3d:9f:3e:90:a5:13:13:53:31:40:15:ba:d8:d4:6e:c7:b1: d9:8f:38:89:f7:99:7e:92:c1:1a:25:09:30:58:4a:d1:60:91: f8:2c:4f:31:89:ef:41:c2:43:f4:5d:38:37:e6:db:41:9a:cc: 90:e8:31:78:95:bd:40:b0:e1:aa:1d:e4:b1:b2:93:82:fa:93: 96:12:b1:bc:b1:fb:fd:f1:80:42:f4:b3:a1:ac:70:39:df:96: 43:c0:ac:bd:6c:fd:15:ed:d2:54:79:ca:55:f2:9e:4e:9f:5a: 1b:69:f5:ca:e6:b1:82:d3:6e:cb:c0:dc:21:0f:0a:55:47:ea: fc:fa:c2:1f:89:05:2b:6b:b2:1f:38:4f:45:b2:62:18:cc:5a: 03:ae:52:8e:42:4a:36:fb:d7:52:37:40:92:b9:63:56:31:93: 8c:e4:a6:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SIxZiG251R4DyViTZWaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjUxMjIxMDUwMTE3WhcNMjUxMjIyMDUwMTE3WjAzMTEwLwYDVQQD EyhjOTkxODE3YTA4NWY0NWI0YWVmNDFkN2Q1ZTA2YjYyYzMwZjAxYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH126FUrO3jYtAh196K2KseVmUx7 AVFsPH0Z9a5YDpWfDxcoJIhKqMunetQNY+pK1agPVZcEaB4dczESuq8qMBGV7H0o WDjOEDewBTCGIOWQOpWsmXCXI9wdsUuR/tg/g5tofz354p+Qliee8LG2xSVW1GvM eGnYCX43palNAI1i1bg7HCUX7QG/EC8lmjYd6UnqlmiqzLIGl+pvxg0sR4OUglLj eRLtsZRUZd5GWIzWQWQ2Riv5lK8JWJVdLEmXku9MD6Fl6KbUKy0felApKnfLW2EH 9So7WGRhh7e+DVCp7om8Pw8EdO049PAxgUhnBxSASYXK/oBGB/mUxdN00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmRgXoIX0W0rvQdfV4Gtiww8BxfMB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaloEcYe/ uy++4mlx/ZXLQsiZq/fCc2HMtfK/y6KYyg3vwBaryyiqAMzXgRKUd1Ubo77Ycrna H5Jv+19Gm2MisTevGB5PNdRQdOw8aYYnw0F1zhPQMEECBbGRiD2fPpClExNTMUAV utjUbsex2Y84ifeZfpLBGiUJMFhK0WCR+CxPMYnvQcJD9F04N+bbQZrMkOgxeJW9 QLDhqh3ksbKTgvqTlhKxvLH7/fGAQvSzoaxwOd+WQ8CsvWz9Fe3SVHnKVfKeTp9a G2n1yuaxgtNuy8DcIQ8KVUfq/PrCH4kFK2uyHzhPRbJiGMxaA65SjkJKNvvXUjdA krljVjGTjOSm1g== -----END CERTIFICATE-----Generated at Sun Dec 21 12:00:54 2025 by rpki-client