This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json) Hash identifier: SeXTzqzAjGRzXeCRqqxrlwkEVW+ubVCqOPX6ky03v+4= Subject key identifier: 98:3E:AA:6F:69:B8:41:5F:F1:90:8C:EA:49:3B:B1:E1:6A:D0:E5:B8 Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe Certificate serial: 019B3CB54CDC0F195899C5B79A07CFF6A361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft Manifest number: 1431 Signing time: Sat 20 Dec 2025 17:01:13 +0000 Manifest this update: Sat 20 Dec 2025 17:01:13 +0000 Manifest next update: Sun 21 Dec 2025 17:01:13 +0000 Files and hashes: 1: D3bRMlTDClBFr3S51rSxiY9VG9A.roa (hash: aR3n5btl/hz9D4qsdHX0kbRtCNTOPvoaLGVTTlP76Qo=) 2: ZxguzW17xFrUP53FIAJUfjkeqvQ.roa (hash: Sn/df7xibUqHylpF6Ngt+9h48Sxd84uF3fpZ9SuTgf8=) 3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: dzvLRjw3PL5XWdPol+7ZLU9/L7/zfWkMnPh7WRPXrA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:4c:dc:0f:19:58:99:c5:b7:9a:07:cf:f6:a3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe Validity Not Before: Dec 20 17:01:13 2025 GMT Not After : Dec 21 17:01:13 2025 GMT Subject: CN=983eaa6f69b8415ff1908cea493bb1e16ad0e5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:0d:db:bd:5b:b1:5c:83:fe:66:6e:bd:7d: 75:31:ec:72:62:5b:e6:c6:12:ed:29:21:85:ca:c4: 2a:e1:f3:74:cd:5b:a7:66:2d:17:46:9d:9c:a6:6f: 13:f2:d9:fe:b8:f8:08:81:bb:9c:5d:07:06:5c:5b: 4c:f4:b9:13:76:b2:ae:9d:92:18:a7:be:d1:6a:63: 08:19:64:23:4c:8a:47:88:36:df:57:b5:63:10:9a: 65:02:23:c4:67:25:0b:48:34:7f:09:b6:42:be:26: 8b:4c:89:d8:f0:8d:eb:e1:47:9c:53:6c:8d:dc:4b: 74:7e:b9:ad:fc:ac:74:ef:ee:ec:4f:61:ef:d9:cb: 45:5c:a0:76:4b:9e:29:14:fb:5b:92:54:03:f8:81: fc:ce:37:b3:76:99:73:41:95:8a:10:3f:8f:2b:f6: ea:63:5c:27:15:06:0a:e8:39:cb:a7:bd:0a:bd:aa: a0:80:81:b7:9f:29:f6:9a:7b:5a:e0:31:6c:bb:6f: 56:14:71:44:3e:e5:27:93:32:e9:72:c2:92:47:66: 64:d8:08:76:ff:0f:36:25:a6:c6:6c:28:e1:da:94: 2a:3c:b0:d8:52:c5:8b:27:e8:37:30:eb:0b:60:91: d8:6d:75:86:b3:a8:39:9e:d3:5d:30:cd:0b:83:ae: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3E:AA:6F:69:B8:41:5F:F1:90:8C:EA:49:3B:B1:E1:6A:D0:E5:B8 X509v3 Authority Key Identifier: keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ce:9a:31:42:ae:e5:a8:00:04:94:58:bb:02:17:d5:98:f2: f5:72:88:e7:f1:a2:0f:02:b2:00:0d:53:c4:31:d9:46:35:c6: 0d:08:69:12:65:53:e5:e4:c1:1c:14:f1:46:42:cf:c4:22:44: 02:24:86:6f:a2:f6:9e:cc:fd:cd:5b:71:59:d5:d2:2b:a9:b5: 30:56:cf:b8:97:71:e0:a5:b8:fb:de:28:b7:2d:9f:1a:85:1c: f4:7c:02:29:1d:2c:31:0f:9e:e2:fd:ed:bd:c8:ee:89:25:7c: 51:38:3f:99:df:70:5d:06:83:9e:10:4d:08:73:33:1d:ea:6f: 3c:b9:c1:53:e9:3e:46:4d:8b:7f:86:dd:5c:4c:80:f3:b4:4d: bd:73:f3:f8:5a:83:01:df:02:e5:9c:1d:f8:a5:31:90:78:37: d8:d9:43:71:d7:ea:4f:6c:38:cf:d4:aa:93:1c:87:51:71:2d: c5:de:4d:2e:f8:35:25:80:e6:89:fc:28:82:87:b0:3c:d9:33: 1f:ec:c2:b2:1d:f6:5e:00:96:be:1c:67:25:43:50:06:3d:ef: 37:3a:57:be:c4:6b:bc:77:d4:f8:e9:fe:59:80:ed:aa:d3:bb: 01:94:27:99:8a:3b:a1:02:09:29:4a:2f:59:77:55:79:f8:a1: 10:6d:dd:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUzcDxlYmcW3mgfP9qNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw MDRjZmUwHhcNMjUxMjIwMTcwMTEzWhcNMjUxMjIxMTcwMTEzWjAzMTEwLwYDVQQD Eyg5ODNlYWE2ZjY5Yjg0MTVmZjE5MDhjZWE0OTNiYjFlMTZhZDBlNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUN271bsVyD/mZuvX11MexyYlvm xhLtKSGFysQq4fN0zVunZi0XRp2cpm8T8tn+uPgIgbucXQcGXFtM9LkTdrKunZIY p77RamMIGWQjTIpHiDbfV7VjEJplAiPEZyULSDR/CbZCviaLTInY8I3r4UecU2yN 3Et0frmt/Kx07+7sT2Hv2ctFXKB2S54pFPtbklQD+IH8zjezdplzQZWKED+PK/bq Y1wnFQYK6DnLp70KvaqggIG3nyn2mnta4DFsu29WFHFEPuUnkzLpcsKSR2Zk2Ah2 /w82JabGbCjh2pQqPLDYUsWLJ+g3MOsLYJHYbXWGs6g5ntNdMM0Lg65i0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg+qm9puEFf8ZCM6kk7seFq0OW4MB8GA1UdIwQY MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk86aMUKu 5agABJRYuwIX1Zjy9XKI5/GiDwKyAA1TxDHZRjXGDQhpEmVT5eTBHBTxRkLPxCJE AiSGb6L2nsz9zVtxWdXSK6m1MFbPuJdx4KW4+94oty2fGoUc9HwCKR0sMQ+e4v3t vcjuiSV8UTg/md9wXQaDnhBNCHMzHepvPLnBU+k+Rk2Lf4bdXEyA87RNvXPz+FqD Ad8C5Zwd+KUxkHg32NlDcdfqT2w4z9SqkxyHUXEtxd5NLvg1JYDmifwogoewPNkz H+zCsh32XgCWvhxnJUNQBj3vNzpXvsRrvHfU+On+WYDtqtO7AZQnmYo7oQIJKUov WXdVefihEG3dWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:52 2025 by rpki-client