This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json) Hash identifier: Fkgo7zP6Q8lN4g25uJ9eR+GZlan2Fq4Oy63mz1YpcTY= Subject key identifier: F0:EF:81:FE:D3:FB:74:FF:3D:50:57:C7:70:BD:4E:7A:4E:99:36:97 Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5 Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5 Certificate serial: 019B416D4A19E7540C5364AF7119A961B705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 15:00:39 +0000 Manifest this update: Sun 21 Dec 2025 15:00:39 +0000 Manifest next update: Mon 22 Dec 2025 15:00:39 +0000 Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=) 2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=) 3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: p1h3Y11Lf9OJyCWX6OOrPlCP20JgFoKaqSbTn896hgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:4a:19:e7:54:0c:53:64:af:71:19:a9:61:b7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5 Validity Not Before: Dec 21 15:00:39 2025 GMT Not After : Dec 22 15:00:39 2025 GMT Subject: CN=f0ef81fed3fb74ff3d5057c770bd4e7a4e993697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:4e:2b:68:37:7d:73:30:0e:92:d1:c7:e8: f6:06:47:b8:06:68:b8:93:3e:68:69:95:be:32:80: 0d:28:6a:56:23:1d:df:1f:9c:63:58:bc:a8:55:80: 08:dc:e2:47:80:e7:38:f6:f8:94:f5:f0:89:8e:61: 26:5e:7f:29:de:f8:d3:f6:e9:01:a2:1b:35:f0:95: 7f:b0:0a:e3:94:e9:ca:ff:ba:48:3b:ff:74:97:a6: 39:a7:f1:2b:60:24:fc:9d:1d:77:2e:04:c9:d7:a8: a6:b8:af:62:a2:84:1c:92:00:c4:e8:0e:18:67:df: e2:97:a3:5a:47:14:7e:9e:49:35:dd:f8:a7:2b:90: 55:1c:cd:21:a1:e7:9f:eb:33:fc:03:1c:4f:71:06: 46:16:3e:3c:90:e7:bc:16:1c:b3:55:94:cb:34:27: 12:42:15:41:ef:d1:1d:7f:10:e7:df:94:2f:89:5a: aa:2d:31:e6:59:95:a5:62:9b:fc:d2:4e:e4:4a:4f: 64:1d:47:1b:15:fb:97:fb:9c:35:f3:e0:8a:7e:3a: 7c:91:8a:44:24:41:d3:02:01:0f:8c:ca:be:64:9b: 70:b1:0b:0b:bb:d1:a9:24:26:da:59:96:a7:4b:90: e3:5c:5a:c2:8e:56:bb:54:32:d7:c6:de:68:9c:9a: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EF:81:FE:D3:FB:74:FF:3D:50:57:C7:70:BD:4E:7A:4E:99:36:97 X509v3 Authority Key Identifier: keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:d4:75:29:6d:58:b6:48:da:ef:4d:54:fe:27:64:53:d1: b5:9c:89:a2:db:d5:84:2a:de:fa:86:52:31:ef:02:1b:37:89: ed:dc:85:54:c0:2c:eb:ed:d5:92:eb:71:27:b2:31:43:d7:46: d3:6d:16:cc:2b:a1:6d:9f:05:de:f8:1a:62:85:59:74:76:c7: a9:ba:1e:f8:e5:f6:b3:42:ce:4b:5f:f8:d0:07:bb:bf:45:bd: d0:ae:41:cc:87:8c:aa:1d:ec:0c:b1:07:3e:ad:eb:13:c4:1a: 6d:66:28:d8:c0:21:4c:04:cf:c5:ae:87:bf:aa:bb:f2:1c:8d: 74:1e:48:e9:8c:f9:29:86:a2:9f:03:a1:b7:54:96:30:75:1e: f6:2e:33:26:93:7b:7c:5f:03:cf:2b:6e:e9:af:e5:0e:0d:82: b0:40:ab:e5:8e:89:f1:ec:8e:9f:f3:cd:fb:be:79:00:5b:2e: 7c:56:61:e6:3b:d7:7e:be:f1:a7:07:5e:f0:c8:b1:24:81:56: 1b:bd:e4:12:31:75:bb:df:f8:5c:28:3a:23:60:3c:10:9a:b6: eb:64:57:f9:75:5e:dd:14:d0:55:18:7a:f2:14:4e:1d:38:eb: 98:4c:44:75:e1:5e:22:44:5e:26:39:02:be:82:c0:7e:d8:1b: 14:bb:c1:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbUoZ51QMU2SvcRmpYbcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4 ZDI1YTUwHhcNMjUxMjIxMTUwMDM5WhcNMjUxMjIyMTUwMDM5WjAzMTEwLwYDVQQD EyhmMGVmODFmZWQzZmI3NGZmM2Q1MDU3Yzc3MGJkNGU3YTRlOTkzNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cVOK2g3fXMwDpLRx+j2Bke4Bmi4 kz5oaZW+MoANKGpWIx3fH5xjWLyoVYAI3OJHgOc49viU9fCJjmEmXn8p3vjT9ukB ohs18JV/sArjlOnK/7pIO/90l6Y5p/ErYCT8nR13LgTJ16imuK9iooQckgDE6A4Y Z9/il6NaRxR+nkk13finK5BVHM0hoeef6zP8AxxPcQZGFj48kOe8FhyzVZTLNCcS QhVB79EdfxDn35QviVqqLTHmWZWlYpv80k7kSk9kHUcbFfuX+5w18+CKfjp8kYpE JEHTAgEPjMq+ZJtwsQsLu9GpJCbaWZanS5DjXFrCjla7VDLXxt5onJo/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDvgf7T+3T/PVBXx3C9TnpOmTaXMB8GA1UdIwQY MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg67UdSlt WLZI2u9NVP4nZFPRtZyJotvVhCre+oZSMe8CGzeJ7dyFVMAs6+3VkutxJ7IxQ9dG 020WzCuhbZ8F3vgaYoVZdHbHqboe+OX2s0LOS1/40Ae7v0W90K5BzIeMqh3sDLEH Pq3rE8QabWYo2MAhTATPxa6Hv6q78hyNdB5I6Yz5KYainwOht1SWMHUe9i4zJpN7 fF8Dzytu6a/lDg2CsECr5Y6J8eyOn/PN+755AFsufFZh5jvXfr7xpwde8MixJIFW G73kEjF1u9/4XCg6I2A8EJq262RX+XVe3RTQVRh68hROHTjrmExEdeFeIkReJjkC voLAftgbFLvBxg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:14 2025 by rpki-client