This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: 8/OjoonPnxo1PpYgj6O7BoCcLSuLAb++CyGCj+rmOL8= Subject key identifier: 97:54:B1:52:52:47:A5:BF:A6:56:61:31:F0:FA:7F:7A:27:72:D5:47 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B3D59B5CD16862A78C29893019186A241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 179D Signing time: Sat 20 Dec 2025 20:00:47 +0000 Manifest this update: Sat 20 Dec 2025 20:00:47 +0000 Manifest next update: Sun 21 Dec 2025 20:00:47 +0000 Files and hashes: 1: 30KL19Ub13Dq1oLnMGb--SdTDFw.roa (hash: tpSHM0zHgXFiutSvVZTKKrK279w3hubdpJSBNW1R7RY=) 2: 4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa (hash: MHAWhrg0ApNqJ4NcLLSk8Lu+ujo8Efa4wgXL5CJxuhU=) 3: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=) 4: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=) 5: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=) 6: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=) 7: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=) 8: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=) 9: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: 22rEAaX+Ddsz+p/BW+4ExnIh3VbmNEOP5XqQmZoE96M=) 10: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b5:cd:16:86:2a:78:c2:98:93:01:91:86:a2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 20 20:00:47 2025 GMT Not After : Dec 21 20:00:47 2025 GMT Subject: CN=9754b1525247a5bfa6566131f0fa7f7a2772d547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:86:8d:6b:0e:94:39:4d:f2:57:b0:46:a9: 58:43:65:89:4a:29:72:8e:73:47:f2:ba:47:56:5f: 68:2d:fa:0c:a3:ec:11:eb:9f:df:05:6d:b9:a8:8e: ca:9f:03:43:71:5d:22:d9:e7:ed:2b:17:e5:4e:66: 21:c9:d5:a3:cc:73:8a:5e:0e:6f:de:82:31:be:dd: bc:fa:e5:33:6d:5f:f8:11:ba:25:02:05:d8:c1:6e: 78:84:ca:bb:61:72:a3:8d:e5:1b:bb:32:e4:d8:47: bc:39:20:10:58:0d:64:95:5a:cb:39:7c:cd:80:a6: e3:97:fc:b8:57:e1:6e:60:23:3b:6e:e7:3d:b9:76: bc:ec:0f:d9:ae:0d:62:23:2d:f7:1d:70:6b:5c:35: f6:da:d5:7e:83:23:27:58:19:1b:e0:b8:4c:7f:1e: 09:45:d4:d4:2f:dc:fa:6c:71:c7:9f:50:33:3e:18: 88:80:85:7d:87:39:30:d7:f5:16:e5:b0:ab:f5:35: 7b:a8:fb:8f:0b:c3:22:80:1e:59:01:78:87:15:1b: 1d:38:b9:1d:e8:d3:34:a6:15:05:9b:13:8c:45:60: a9:d7:8b:19:eb:e4:06:8c:92:9f:f7:42:4f:87:a1: 00:0f:b3:60:d1:d2:17:f4:66:67:46:0c:97:b7:0b: b3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:54:B1:52:52:47:A5:BF:A6:56:61:31:F0:FA:7F:7A:27:72:D5:47 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ee:cd:5b:eb:aa:b1:5d:93:fb:ef:e8:55:c5:e7:ed:d0:1a: 8e:71:f9:3f:1e:d6:2a:49:e1:3a:69:ea:bc:15:fb:bc:63:08: 1c:d2:0a:48:2f:56:85:7b:99:b8:b5:b1:7d:87:2f:4f:ec:35: 02:ab:ca:a3:98:95:71:4d:c8:88:0e:26:da:79:a8:d2:48:d3: 96:d7:b6:ba:12:93:4e:74:75:b6:9e:8f:87:27:1a:37:48:f2: 85:17:8e:52:aa:4f:70:b8:7f:a7:e5:8f:92:a8:a2:e4:2e:19: 3e:00:ba:51:40:d0:ba:fe:b6:2d:f8:0d:f3:4c:3b:34:ba:45: 5d:db:db:52:89:8c:0e:3e:6a:d4:c2:3c:f7:84:06:82:34:34: c9:11:c5:34:25:8d:34:73:c1:98:f5:e1:3d:02:8a:98:77:af: f7:35:71:6a:39:18:0f:88:dc:4f:e6:56:a4:b4:d9:bf:49:fa: 32:65:de:e7:f5:fa:66:7c:38:7d:1b:fb:49:a5:d9:7d:e6:ac: 9a:4b:8f:56:78:a2:07:37:80:9d:b2:d0:2c:99:49:ea:43:df: b2:b8:cc:db:d1:55:98:b3:50:51:5c:87:9a:00:15:8f:a1:f6: 36:da:84:69:59:54:4a:b6:b2:22:93:80:ab:9d:eb:46:81:d8: a6:2c:35:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbXNFoYqeMKYkwGRhqJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjIwMjAwMDQ3WhcNMjUxMjIxMjAwMDQ3WjAzMTEwLwYDVQQD Eyg5NzU0YjE1MjUyNDdhNWJmYTY1NjYxMzFmMGZhN2Y3YTI3NzJkNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY2GjWsOlDlN8lewRqlYQ2WJSily jnNH8rpHVl9oLfoMo+wR65/fBW25qI7KnwNDcV0i2eftKxflTmYhydWjzHOKXg5v 3oIxvt28+uUzbV/4EbolAgXYwW54hMq7YXKjjeUbuzLk2Ee8OSAQWA1klVrLOXzN gKbjl/y4V+FuYCM7buc9uXa87A/Zrg1iIy33HXBrXDX22tV+gyMnWBkb4LhMfx4J RdTUL9z6bHHHn1AzPhiIgIV9hzkw1/UW5bCr9TV7qPuPC8MigB5ZAXiHFRsdOLkd 6NM0phUFmxOMRWCp14sZ6+QGjJKf90JPh6EAD7Ng0dIX9GZnRgyXtwuzgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdUsVJSR6W/plZhMfD6f3onctVHMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe7NW+uq sV2T++/oVcXn7dAajnH5Px7WKknhOmnqvBX7vGMIHNIKSC9WhXuZuLWxfYcvT+w1 AqvKo5iVcU3IiA4m2nmo0kjTlte2uhKTTnR1tp6PhycaN0jyhReOUqpPcLh/p+WP kqii5C4ZPgC6UUDQuv62LfgN80w7NLpFXdvbUomMDj5q1MI894QGgjQ0yRHFNCWN NHPBmPXhPQKKmHev9zVxajkYD4jcT+ZWpLTZv0n6MmXe5/X6Znw4fRv7SaXZfeas mkuPVniiBzeAnbLQLJlJ6kPfsrjM29FVmLNQUVyHmgAVj6H2NtqEaVlUSrayIpOA q53rRoHYpiw1IQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:59 2025 by rpki-client