This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft File: hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json) Hash identifier: S2jmpl5xUd6w2tMZufUiNf9NFepTZ3LhlKfy4sUxsCk= Subject key identifier: A4:99:8A:01:39:7C:22:79:AA:C5:AC:E4:AC:D8:4E:0A:C9:69:80:26 Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Certificate serial: 019B3CB539AFF1E78FE8CA36385977A35242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft Manifest number: 13E8 Signing time: Sat 20 Dec 2025 17:01:08 +0000 Manifest this update: Sat 20 Dec 2025 17:01:08 +0000 Manifest next update: Sun 21 Dec 2025 17:01:08 +0000 Files and hashes: 1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=) 2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=) 3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=) 4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: HozN7KCKLyei9GYNbnK6A+lPfhXGTR43wsBNbGjXO+g=) 5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:39:af:f1:e7:8f:e8:ca:36:38:59:77:a3:52:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Validity Not Before: Dec 20 17:01:08 2025 GMT Not After : Dec 21 17:01:08 2025 GMT Subject: CN=a4998a01397c2279aac5ace4acd84e0ac9698026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:94:af:96:0e:06:40:4e:1b:64:d0:4d:1f:c6: 80:d3:16:66:90:b4:f4:33:83:02:04:42:41:f7:dd: ae:f2:09:29:35:af:9d:bb:3d:c8:7c:c3:53:8f:7f: 5f:1e:cf:0b:4c:31:3b:a0:2e:b2:d7:48:1a:cb:c4: 57:44:a5:99:a5:40:6a:02:59:e7:09:f1:6c:33:64: ad:4e:b8:c4:b9:8f:5f:d8:1b:e6:54:44:44:fe:09: e1:6e:4a:26:fd:0b:f2:90:c7:7b:a1:5e:31:5c:58: 37:39:7a:25:38:dd:7c:0c:00:71:bf:8e:10:76:6d: 78:34:5f:1a:61:1e:63:7b:2d:96:fb:a6:de:67:d0: 9a:56:dc:4f:45:fc:83:37:e7:5b:bf:a8:b9:0c:fc: b0:05:16:30:8f:8e:b6:72:d2:3f:a2:73:86:dd:1e: 5f:a0:7c:f0:3d:67:1d:ff:4a:15:ed:14:70:cc:13: 1c:71:aa:17:ba:53:33:51:58:5c:8a:66:b6:75:b1: 52:8d:42:0b:db:7d:41:fc:e9:d2:38:c5:16:db:ce: 6a:9c:f7:ed:9a:71:90:58:1c:12:64:49:10:c8:b8: 88:77:1c:84:04:ad:c8:b2:41:ce:df:4e:2c:fa:48: d6:4d:4e:cb:6f:eb:54:24:70:0b:76:12:0b:aa:dd: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:99:8A:01:39:7C:22:79:AA:C5:AC:E4:AC:D8:4E:0A:C9:69:80:26 X509v3 Authority Key Identifier: keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:75:dd:ac:24:23:c5:e5:1d:03:62:ac:98:c2:b2:34:b4:a9: a4:55:b1:74:d1:d8:78:99:06:72:9e:d7:41:70:5a:3b:78:8b: 3b:36:42:94:55:86:28:98:87:8d:46:38:f1:2e:be:75:16:fc: 5d:f5:75:73:49:8a:7d:e6:67:04:d8:52:a0:7a:b7:06:70:94: fd:57:0b:6d:37:e7:32:d4:ca:63:e3:fc:13:aa:3c:c1:9c:65: 60:97:ae:ca:bb:2f:41:b7:88:bc:23:34:27:12:1f:ee:84:4a: 15:dc:20:be:fd:06:2e:6d:4b:91:4b:ab:4d:5a:8e:a1:49:03: b3:84:bb:4b:50:17:00:c9:d3:92:54:35:da:53:35:04:0b:34: ab:bc:48:2e:ca:15:87:2e:36:40:0e:b3:a4:6d:13:2b:f1:fb: 1f:02:c2:fc:f3:95:fc:bd:4e:0e:0b:7b:d5:22:c9:f7:51:aa: 3c:92:ac:2c:8f:dc:d4:63:d3:64:a8:4f:6f:46:97:1c:08:8b: b4:3a:ac:49:9a:d2:12:7e:c4:14:80:cb:f9:29:e3:e3:97:43: 8a:5a:79:31:8a:8a:3b:69:2a:c5:0c:f6:27:38:b8:45:01:83: 0d:80:f3:c6:89:07:ac:7b:bb:52:bd:3c:35:dd:f2:e8:00:5d: d8:93:9e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTmv8eeP6Mo2OFl3o1JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4 ZDBiNjgwHhcNMjUxMjIwMTcwMTA4WhcNMjUxMjIxMTcwMTA4WjAzMTEwLwYDVQQD EyhhNDk5OGEwMTM5N2MyMjc5YWFjNWFjZTRhY2Q4NGUwYWM5Njk4MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JSvlg4GQE4bZNBNH8aA0xZmkLT0 M4MCBEJB992u8gkpNa+duz3IfMNTj39fHs8LTDE7oC6y10gay8RXRKWZpUBqAlnn CfFsM2StTrjEuY9f2BvmVERE/gnhbkom/QvykMd7oV4xXFg3OXolON18DABxv44Q dm14NF8aYR5jey2W+6beZ9CaVtxPRfyDN+dbv6i5DPywBRYwj462ctI/onOG3R5f oHzwPWcd/0oV7RRwzBMccaoXulMzUVhcima2dbFSjUIL231B/OnSOMUW285qnPft mnGQWBwSZEkQyLiIdxyEBK3IskHO304s+kjWTU7Lb+tUJHALdhILqt3VKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSZigE5fCJ5qsWs5KzYTgrJaYAmMB8GA1UdIwQY MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt ZDU4M2Y5YTY2ZTNiLzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3XdrCQj xeUdA2KsmMKyNLSppFWxdNHYeJkGcp7XQXBaO3iLOzZClFWGKJiHjUY48S6+dRb8 XfV1c0mKfeZnBNhSoHq3BnCU/VcLbTfnMtTKY+P8E6o8wZxlYJeuyrsvQbeIvCM0 JxIf7oRKFdwgvv0GLm1LkUurTVqOoUkDs4S7S1AXAMnTklQ12lM1BAs0q7xILsoV hy42QA6zpG0TK/H7HwLC/POV/L1ODgt71SLJ91GqPJKsLI/c1GPTZKhPb0aXHAiL tDqsSZrSEn7EFIDL+Snj45dDilp5MYqKO2kqxQz2Jzi4RQGDDYDzxokHrHu7Ur08 Nd3y6ABd2JOefQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:34 2025 by rpki-client