This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json) Hash identifier: j/Lf5d2eW92hThXbSjoq3KMdzFKMzJUz2q1rQv1d+NE= Subject key identifier: 00:17:73:93:E8:7C:88:41:F1:C4:6F:4D:2F:6E:5A:3E:F6:83:83:97 Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Certificate serial: 019B3C7FCD7A621E3151DD4BC19E0F7F46E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft Manifest number: 0AA0 Signing time: Sat 20 Dec 2025 16:02:46 +0000 Manifest this update: Sat 20 Dec 2025 16:02:46 +0000 Manifest next update: Sun 21 Dec 2025 16:02:46 +0000 Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=) 2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: +Tz4KJPHBoVwrTnFxuXtnksVpNPLinp9pj6cuhWGi/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:cd:7a:62:1e:31:51:dd:4b:c1:9e:0f:7f:46:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Validity Not Before: Dec 20 16:02:46 2025 GMT Not After : Dec 21 16:02:46 2025 GMT Subject: CN=00177393e87c8841f1c46f4d2f6e5a3ef6838397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:32:de:22:b9:bb:7c:26:1f:d3:6e:4c:e8: 4c:aa:5b:42:5a:db:72:74:a2:ae:f5:7a:07:1d:3a: 1f:63:3e:92:89:5b:4d:44:08:29:20:63:e0:a0:95: 2c:4a:f8:81:03:51:f7:b8:3d:2d:77:cc:a3:5b:79: 2d:4f:72:de:19:f3:12:0e:ed:13:d3:f3:6b:ac:ff: 32:1b:20:90:1a:62:ff:e3:d3:fe:a5:94:c7:57:26: fe:70:2f:af:3b:10:92:19:78:46:05:0a:29:e1:13: a2:c2:29:e5:83:0e:04:c9:ea:d5:95:50:55:74:24: f7:f8:46:63:a1:01:81:39:7b:bb:3d:05:c0:cc:b1: 03:d1:17:6b:48:bc:a3:86:30:73:ed:ff:aa:3f:07: 95:77:ca:7b:e5:91:2a:34:77:37:5f:b9:78:94:18: 3f:d6:72:6a:58:da:2e:ec:8b:86:dc:e9:51:c8:d6: eb:b2:69:36:38:cb:92:96:58:05:76:7c:0b:8f:0e: 03:ab:03:69:ae:4f:fe:6b:60:d0:08:0b:d0:37:2e: 4b:93:a4:f1:be:0b:16:b0:85:4f:f2:a7:71:ac:32: 97:cd:e3:64:e6:3d:9f:91:ea:29:ae:a6:34:76:37: 2e:a2:24:d8:03:47:b4:eb:f8:c9:68:fa:20:65:97: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:73:93:E8:7C:88:41:F1:C4:6F:4D:2F:6E:5A:3E:F6:83:83:97 X509v3 Authority Key Identifier: keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:34:aa:1a:a8:5d:05:b9:15:8d:33:c8:58:48:58:a6:8f:4b: 3f:a9:07:90:69:f4:a0:e3:7a:15:b5:18:3e:f2:44:7c:db:b9: 5b:46:f7:f7:1d:41:24:d2:55:4d:75:d1:46:1a:34:3c:56:ec: 56:6b:5f:85:59:33:ea:ba:e2:76:49:a5:cd:fa:a6:9c:65:66: 54:3b:35:c0:a8:4f:3d:44:7e:f9:98:7f:06:23:22:9f:4b:35: f6:37:f1:bc:af:87:08:0a:56:46:58:79:13:8e:37:0e:e9:9e: ed:f3:35:8e:e9:f0:5d:fc:64:c6:b7:1d:0f:49:e8:4d:48:28: 3c:a3:15:0d:f1:89:e9:62:2d:55:cb:b9:b2:bf:e1:f6:b6:39: 28:8a:71:53:33:9d:93:83:2d:39:06:5d:0e:cb:e3:f5:e3:9a: 7d:e0:70:08:f8:26:3c:72:b7:61:8f:9a:82:48:64:19:62:0a: 06:80:a1:d7:b3:fd:d9:ed:7c:4c:0c:da:69:36:2e:1c:88:f0: d4:b2:e4:f4:7c:87:89:be:4e:63:8b:ae:4f:a4:ca:08:a3:2e: a0:55:e8:db:b9:68:4a:4c:10:a9:57:74:ed:28:48:20:49:14: 7e:3f:15:49:59:8f:59:45:0c:81:c9:ce:8b:29:2d:30:7b:56: 31:69:0c:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f816Yh4xUd1LwZ4Pf0blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl ZTMzMmUwHhcNMjUxMjIwMTYwMjQ2WhcNMjUxMjIxMTYwMjQ2WjAzMTEwLwYDVQQD EygwMDE3NzM5M2U4N2M4ODQxZjFjNDZmNGQyZjZlNWEzZWY2ODM4Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcy3iK5u3wmH9NuTOhMqltCWtty dKKu9XoHHTofYz6SiVtNRAgpIGPgoJUsSviBA1H3uD0td8yjW3ktT3LeGfMSDu0T 0/NrrP8yGyCQGmL/49P+pZTHVyb+cC+vOxCSGXhGBQop4ROiwinlgw4EyerVlVBV dCT3+EZjoQGBOXu7PQXAzLED0RdrSLyjhjBz7f+qPweVd8p75ZEqNHc3X7l4lBg/ 1nJqWNou7IuG3OlRyNbrsmk2OMuSllgFdnwLjw4DqwNprk/+a2DQCAvQNy5Lk6Tx vgsWsIVP8qdxrDKXzeNk5j2fkeoprqY0djcuoiTYA0e06/jJaPogZZdusQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAXc5PofIhB8cRvTS9uWj72g4OXMB8GA1UdIwQY MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3 LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDSqGqhd BbkVjTPIWEhYpo9LP6kHkGn0oON6FbUYPvJEfNu5W0b39x1BJNJVTXXRRho0PFbs VmtfhVkz6rridkmlzfqmnGVmVDs1wKhPPUR++Zh/BiMin0s19jfxvK+HCApWRlh5 E443Dume7fM1junwXfxkxrcdD0noTUgoPKMVDfGJ6WItVcu5sr/h9rY5KIpxUzOd k4MtOQZdDsvj9eOafeBwCPgmPHK3YY+agkhkGWIKBoCh17P92e18TAzaaTYuHIjw 1LLk9HyHib5OY4uuT6TKCKMuoFXo27loSkwQqVd07ShIIEkUfj8VSVmPWUUMgcnO iyktMHtWMWkMfw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:48:21 2025 by rpki-client