This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: w5SC7XntDUZfjXCOIB7EF/sdI7lpws0Xbr/bULpRfb0= Subject key identifier: C2:60:69:12:B8:3B:1F:90:1A:43:F0:A2:CC:5B:46:87:12:44:B6:08 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B4CCCC858340CB2C5BC105FF87B5F8534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 17A5 Signing time: Tue 23 Dec 2025 20:00:47 +0000 Manifest this update: Tue 23 Dec 2025 20:00:47 +0000 Manifest next update: Wed 24 Dec 2025 20:00:47 +0000 Files and hashes: 1: 30KL19Ub13Dq1oLnMGb--SdTDFw.roa (hash: tpSHM0zHgXFiutSvVZTKKrK279w3hubdpJSBNW1R7RY=) 2: 4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa (hash: MHAWhrg0ApNqJ4NcLLSk8Lu+ujo8Efa4wgXL5CJxuhU=) 3: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=) 4: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=) 5: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=) 6: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=) 7: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=) 8: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=) 9: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: 2+hU/vsKBtbvcvYUW1jX0WqaafHlcVsMRwEo6jbpeaQ=) 10: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:c8:58:34:0c:b2:c5:bc:10:5f:f8:7b:5f:85:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 23 20:00:47 2025 GMT Not After : Dec 24 20:00:47 2025 GMT Subject: CN=c2606912b83b1f901a43f0a2cc5b46871244b608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:bd:48:16:81:03:40:73:1f:6b:7b:ff:a8: 6e:9f:6e:b4:97:f3:b4:97:68:67:aa:3e:0b:d4:8e: 2f:99:82:4a:ae:98:e7:ac:12:de:07:39:12:07:3e: 20:2c:37:87:53:7e:6a:9f:18:36:22:a5:2a:04:19: 42:a2:19:76:e4:f9:ba:1a:c5:fa:35:37:f1:99:4b: 7a:a0:b6:07:17:5a:24:0f:80:46:e3:21:a4:ca:1e: da:a5:3f:0d:b2:2f:2c:8d:7a:bf:27:75:41:aa:49: 8a:8a:e2:c7:b8:df:b8:3a:14:db:09:36:5a:77:d4: 22:22:28:05:5c:ab:ae:17:65:b7:e7:ed:15:b0:47: c0:16:18:e3:41:82:be:c4:f6:c7:f2:e0:64:7c:df: 04:8c:06:db:72:94:4d:26:1d:9e:ac:db:32:54:ae: 96:f7:39:6d:a0:15:ae:7b:1f:04:a9:80:ca:a7:a3: f9:a3:84:d1:74:57:3b:f8:c0:06:61:4b:83:87:14: eb:6c:fe:a9:00:5b:6b:c5:43:13:db:b0:c0:73:c7: 01:0b:ac:c3:43:1c:ec:d0:14:f9:68:52:16:3d:69: e3:bd:7b:11:26:27:c4:d2:72:f7:b6:1a:dc:4c:4f: 3e:be:68:32:a4:63:36:08:5e:a6:ec:ed:b2:0a:8f: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:60:69:12:B8:3B:1F:90:1A:43:F0:A2:CC:5B:46:87:12:44:B6:08 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1d:16:fa:e0:33:96:9a:02:1b:d3:22:1c:5e:18:5b:bd:d4: 41:f4:60:d8:e1:81:f0:a8:b8:1a:09:f4:eb:e9:0a:d7:40:55: 4c:11:48:68:12:78:2a:47:28:ea:15:3b:53:16:09:9c:e4:70: da:c0:aa:3f:92:4e:c9:71:45:ee:ff:3c:82:0a:07:fe:40:59: c5:67:40:35:38:d2:cd:23:f9:c3:18:b6:1c:4a:b2:35:ad:4e: 7c:e2:01:25:92:f4:f0:6a:9b:76:a3:34:24:cf:19:63:e7:be: b2:7b:89:85:46:8d:90:de:1a:11:b9:24:c0:83:ff:a7:d1:ed: cb:90:8e:8e:5a:7b:c2:92:b2:6e:08:c5:45:04:8f:e1:dc:8a: de:25:c3:1a:a1:75:6d:02:46:c6:49:90:8a:0b:be:5c:16:f4: ef:64:4f:f0:db:5b:d2:0e:1d:91:84:1e:7c:d6:a9:f7:d2:ff: 76:26:6b:c1:9e:d7:76:ca:a3:f2:3a:f4:76:65:f3:d5:ed:3f: 9f:27:68:42:91:2f:31:1c:05:42:ca:4b:e4:59:1f:3e:80:4a: fe:a1:49:1f:ef:e1:21:5f:bb:e9:bb:18:22:8c:aa:4c:54:e2: de:91:e7:8b:4a:62:41:39:17:9c:10:d7:2f:59:3e:da:49:33: 83:ff:0c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzMhYNAyyxbwQX/h7X4U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjIzMjAwMDQ3WhcNMjUxMjI0MjAwMDQ3WjAzMTEwLwYDVQQD EyhjMjYwNjkxMmI4M2IxZjkwMWE0M2YwYTJjYzViNDY4NzEyNDRiNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwei9SBaBA0BzH2t7/6hun260l/O0 l2hnqj4L1I4vmYJKrpjnrBLeBzkSBz4gLDeHU35qnxg2IqUqBBlCohl25Pm6GsX6 NTfxmUt6oLYHF1okD4BG4yGkyh7apT8Nsi8sjXq/J3VBqkmKiuLHuN+4OhTbCTZa d9QiIigFXKuuF2W35+0VsEfAFhjjQYK+xPbH8uBkfN8EjAbbcpRNJh2erNsyVK6W 9zltoBWuex8EqYDKp6P5o4TRdFc7+MAGYUuDhxTrbP6pAFtrxUMT27DAc8cBC6zD Qxzs0BT5aFIWPWnjvXsRJifE0nL3thrcTE8+vmgypGM2CF6m7O2yCo8zBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJgaRK4Ox+QGkPwosxbRocSRLYIMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfR0W+uAz lpoCG9MiHF4YW73UQfRg2OGB8Ki4Ggn06+kK10BVTBFIaBJ4Kkco6hU7UxYJnORw 2sCqP5JOyXFF7v88ggoH/kBZxWdANTjSzSP5wxi2HEqyNa1OfOIBJZL08GqbdqM0 JM8ZY+e+snuJhUaNkN4aEbkkwIP/p9Hty5COjlp7wpKybgjFRQSP4dyK3iXDGqF1 bQJGxkmQigu+XBb072RP8Ntb0g4dkYQefNap99L/diZrwZ7Xdsqj8jr0dmXz1e0/ nydoQpEvMRwFQspL5FkfPoBK/qFJH+/hIV+76bsYIoyqTFTi3pHni0piQTkXnBDX L1k+2kkzg/8MSQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:05 2025 by rpki-client