This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json) Hash identifier: cmD4f51BNpuZPdgBQJRW/mHy+MVmjJ1sdgVItjM/9SE= Subject key identifier: 1B:F1:57:53:E9:E0:E9:DD:9D:63:8D:DF:B0:C2:45:EC:74:62:00:29 Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Certificate serial: 019B4324D9C95DA0148C5669821ACA1F9158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft Manifest number: 12B7 Signing time: Sun 21 Dec 2025 23:00:47 +0000 Manifest this update: Sun 21 Dec 2025 23:00:47 +0000 Manifest next update: Mon 22 Dec 2025 23:00:47 +0000 Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=) 2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: Ig7v6adlUASjCD4e9ijHZpyzCrKp0MSsMucbHhqCV9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:d9:c9:5d:a0:14:8c:56:69:82:1a:ca:1f:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Validity Not Before: Dec 21 23:00:47 2025 GMT Not After : Dec 22 23:00:47 2025 GMT Subject: CN=1bf15753e9e0e9dd9d638ddfb0c245ec74620029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:6c:04:8f:55:31:05:4b:40:b7:6d:6a:46: 03:d1:c1:15:b2:71:af:0b:81:19:89:ac:75:de:f6: b4:dd:ad:2b:d4:cd:b3:0b:7b:44:d2:91:1a:85:3f: c6:df:68:c9:9c:c1:36:ae:01:fc:b6:83:2b:6a:00: ce:92:12:7e:c9:c1:1b:c6:83:1f:4e:5a:eb:99:a7: 8c:4e:56:77:96:9c:3e:f6:f3:b8:9e:75:90:73:ac: f9:96:01:0b:92:6e:c9:31:4d:d5:7f:c5:cf:64:7e: ee:f0:42:0c:52:50:07:b2:0a:7a:06:9d:df:90:2b: 80:3d:27:b5:28:fa:c5:f6:b6:0d:bc:78:aa:97:56: 25:c3:86:6e:94:e3:46:05:61:05:6e:78:18:e9:08: 9a:3a:be:2a:3a:3c:de:8c:2b:f9:69:f1:77:99:b5: e3:dd:2b:d1:12:dc:02:be:d9:26:62:0a:f8:2b:13: 1d:ac:55:bb:30:2a:40:db:d3:eb:b0:68:35:36:fe: c8:7b:9a:74:72:57:9a:1e:d3:c4:44:f5:6e:2f:96: e7:21:71:b6:ec:dd:0f:0a:c8:57:fe:d1:96:4d:44: 79:d5:e5:e9:14:f7:68:58:cc:a8:95:c5:25:62:d0: e7:f9:70:7c:ee:53:08:75:76:83:d1:2f:12:9a:0a: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:57:53:E9:E0:E9:DD:9D:63:8D:DF:B0:C2:45:EC:74:62:00:29 X509v3 Authority Key Identifier: keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a4:c5:fc:a0:e6:7d:2b:f7:a7:aa:24:11:ab:25:bb:67:32: 05:4c:4c:80:89:90:dd:79:63:5b:3d:56:46:52:60:15:14:da: 31:8e:17:e2:14:de:9c:b5:15:0c:89:a2:1a:6c:a5:75:7d:da: 72:78:60:d7:7f:21:f8:90:47:f8:cf:41:73:1e:13:cc:c1:33: 13:4b:c6:fc:b7:d4:18:8e:09:d6:cb:41:d5:bf:7b:59:a6:98: d5:56:aa:61:09:a7:48:ba:ef:b5:b9:70:45:95:59:59:91:c3: c8:88:d4:56:2c:ab:f6:d1:4a:06:f0:4a:4f:28:86:2f:50:79: 18:3a:ad:91:29:9e:25:8f:12:82:a9:71:c0:50:93:b9:5a:ce: 41:ee:e6:8e:b4:2b:4b:16:12:b6:d5:34:b7:a3:2a:11:89:de: f4:26:78:6f:2e:b2:2b:d2:59:bd:54:e8:19:13:51:97:ea:fa: 58:3b:44:2f:64:35:7a:bc:01:96:76:42:37:38:20:d6:c1:90: 0d:76:00:c2:2e:e9:58:2e:c9:40:73:88:58:d8:fb:69:95:50: a4:28:f5:a2:93:ee:90:b3:30:d0:e3:12:e1:05:0b:f7:f8:00: d0:c2:af:49:a9:fa:5e:e6:b6:1b:1f:d7:dd:02:01:c8:b6:28: 59:d7:94:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNnJXaAUjFZpghrKH5FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx YjljMTUwHhcNMjUxMjIxMjMwMDQ3WhcNMjUxMjIyMjMwMDQ3WjAzMTEwLwYDVQQD EygxYmYxNTc1M2U5ZTBlOWRkOWQ2MzhkZGZiMGMyNDVlYzc0NjIwMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTZsBI9VMQVLQLdtakYD0cEVsnGv C4EZiax13va03a0r1M2zC3tE0pEahT/G32jJnME2rgH8toMragDOkhJ+ycEbxoMf TlrrmaeMTlZ3lpw+9vO4nnWQc6z5lgELkm7JMU3Vf8XPZH7u8EIMUlAHsgp6Bp3f kCuAPSe1KPrF9rYNvHiql1Ylw4ZulONGBWEFbngY6QiaOr4qOjzejCv5afF3mbXj 3SvREtwCvtkmYgr4KxMdrFW7MCpA29PrsGg1Nv7Ie5p0cleaHtPERPVuL5bnIXG2 7N0PCshX/tGWTUR51eXpFPdoWMyolcUlYtDn+XB87lMIdXaD0S8Smgrw4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvxV1Pp4OndnWON37DCRex0YgApMB8GA1UdIwQY MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaTF/KDm fSv3p6okEaslu2cyBUxMgImQ3XljWz1WRlJgFRTaMY4X4hTenLUVDImiGmyldX3a cnhg138h+JBH+M9Bcx4TzMEzE0vG/LfUGI4J1stB1b97WaaY1VaqYQmnSLrvtblw RZVZWZHDyIjUViyr9tFKBvBKTyiGL1B5GDqtkSmeJY8SgqlxwFCTuVrOQe7mjrQr SxYSttU0t6MqEYne9CZ4by6yK9JZvVToGRNRl+r6WDtEL2Q1erwBlnZCNzgg1sGQ DXYAwi7pWC7JQHOIWNj7aZVQpCj1opPukLMw0OMS4QUL9/gA0MKvSan6Xua2Gx/X 3QIByLYoWdeU/w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:52:54 2025 by rpki-client