This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json) Hash identifier: 1uNwch0sS42dMAIhHE/C+REzAkL/D/SsT9EVRYwhjc0= Subject key identifier: 87:96:38:0A:42:BE:CD:08:BD:B7:17:44:67:E8:4E:9D:91:45:AC:B6 Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Certificate serial: 019B3F482D2F7AE32F391F037238CB8BCB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft Manifest number: 12B5 Signing time: Sun 21 Dec 2025 05:00:53 +0000 Manifest this update: Sun 21 Dec 2025 05:00:53 +0000 Manifest next update: Mon 22 Dec 2025 05:00:53 +0000 Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=) 2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: gpfQzXpvnT4/211a5rS4f2xC/DdIMazkZGX9F0pHg9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:2d:2f:7a:e3:2f:39:1f:03:72:38:cb:8b:cb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Validity Not Before: Dec 21 05:00:53 2025 GMT Not After : Dec 22 05:00:53 2025 GMT Subject: CN=8796380a42becd08bdb7174467e84e9d9145acb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:84:5e:c4:e4:99:38:48:c7:ab:ce:b1:79: 2a:92:dd:01:c6:d6:24:87:73:a5:5d:f7:85:8d:e8: 6d:58:5d:0e:7b:cd:42:ee:36:10:f3:a2:20:d7:f1: d9:ba:f6:dd:75:81:98:38:c4:12:51:16:97:bc:c6: f9:54:a2:d3:f3:8d:03:5e:a8:b9:42:60:0b:34:b0: 82:87:28:fd:6d:b1:6d:16:b2:81:06:91:40:48:06: 8c:24:12:39:d0:fd:47:17:d3:bf:1f:ee:23:2e:58: ac:f3:bf:7e:f5:ae:98:17:53:54:d6:88:ae:9a:fc: 56:ee:bf:c2:29:43:b6:c8:75:ed:d9:e8:70:13:ee: 55:34:1d:a0:cc:a8:2b:75:8e:3e:f5:5e:cc:7d:35: 13:aa:28:73:be:d6:45:df:75:6f:c2:e7:d5:2b:a5: 34:71:61:1d:ef:90:70:59:ad:19:6c:b8:37:ba:5e: 51:cb:64:2b:b1:77:93:21:19:d6:fd:7c:69:2f:51: e1:cd:33:b1:25:01:54:8f:b1:89:29:10:c7:2c:ba: 82:3a:b2:bb:22:9c:a2:8d:6e:c9:53:af:2e:f7:2f: 3d:ca:13:15:2c:3a:3e:e3:d0:64:a9:fb:15:cf:76: 78:89:f6:5a:6e:8d:19:9c:fc:a5:42:21:d9:05:4d: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:96:38:0A:42:BE:CD:08:BD:B7:17:44:67:E8:4E:9D:91:45:AC:B6 X509v3 Authority Key Identifier: keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:01:60:82:34:fd:b5:fd:cb:7a:98:30:8a:fb:8e:f8:49:f4: ed:50:2c:30:ef:f0:19:7e:68:d1:a4:5e:8e:da:e2:83:c0:cf: e4:5f:ba:76:24:f4:68:6c:3c:ba:dc:af:da:78:e2:9e:43:d6: c5:4f:a5:cc:bd:a4:a9:11:2a:a7:0e:5c:bd:c2:5c:64:ea:d1: 80:ef:3e:3f:31:7f:09:32:68:e4:f6:ec:14:93:80:af:82:03: f5:47:2f:2e:77:de:2a:46:1c:2e:4a:46:8a:6d:73:8a:4e:31: d6:ec:9d:cc:ea:c9:07:c6:ff:24:09:1f:cb:f5:cc:c3:c3:3c: f7:a1:74:35:ea:9f:17:89:93:f5:96:a0:89:c9:e0:69:a2:8a: 71:c3:26:20:bd:83:69:e4:0b:39:26:92:db:77:7c:ac:43:c2: 98:46:1e:6b:75:00:41:a9:ff:c1:d6:38:c4:bb:38:03:da:09: 55:64:98:6b:32:95:40:eb:b2:73:91:2e:77:90:c5:09:5e:3b: e4:89:69:bb:1f:47:3e:ab:07:ca:33:0c:fc:fe:4e:82:da:8c: 38:b6:54:30:2b:22:7e:e7:3a:c3:cc:50:9f:00:3d:dc:bd:17: c0:be:04:d7:de:1d:50:f4:6c:f1:c3:f6:c5:29:b5:2d:a7:df: d7:f6:c0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SC0veuMvOR8DcjjLi8sIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx YjljMTUwHhcNMjUxMjIxMDUwMDUzWhcNMjUxMjIyMDUwMDUzWjAzMTEwLwYDVQQD Eyg4Nzk2MzgwYTQyYmVjZDA4YmRiNzE3NDQ2N2U4NGU5ZDkxNDVhY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuyEXsTkmThIx6vOsXkqkt0BxtYk h3OlXfeFjehtWF0Oe81C7jYQ86Ig1/HZuvbddYGYOMQSURaXvMb5VKLT840DXqi5 QmALNLCChyj9bbFtFrKBBpFASAaMJBI50P1HF9O/H+4jLlis879+9a6YF1NU1oiu mvxW7r/CKUO2yHXt2ehwE+5VNB2gzKgrdY4+9V7MfTUTqihzvtZF33VvwufVK6U0 cWEd75BwWa0ZbLg3ul5Ry2QrsXeTIRnW/XxpL1HhzTOxJQFUj7GJKRDHLLqCOrK7 IpyijW7JU68u9y89yhMVLDo+49BkqfsVz3Z4ifZabo0ZnPylQiHZBU3o4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeWOApCvs0IvbcXRGfoTp2RRay2MB8GA1UdIwQY MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAFggjT9 tf3LepgwivuO+En07VAsMO/wGX5o0aRejtrig8DP5F+6diT0aGw8utyv2njinkPW xU+lzL2kqREqpw5cvcJcZOrRgO8+PzF/CTJo5PbsFJOAr4ID9UcvLnfeKkYcLkpG im1zik4x1uydzOrJB8b/JAkfy/XMw8M896F0NeqfF4mT9ZagicngaaKKccMmIL2D aeQLOSaS23d8rEPCmEYea3UAQan/wdY4xLs4A9oJVWSYazKVQOuyc5Eud5DFCV47 5Ilpux9HPqsHyjMM/P5OgtqMOLZUMCsifuc6w8xQnwA93L0XwL4E194dUPRs8cP2 xSm1Laff1/bAHA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:04 2025 by rpki-client