This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json) Hash identifier: 87CXcUQxf4tLGUwYs6dSyUmZIpmB0flbnUfB+Hq8too= Subject key identifier: 34:87:DD:8A:CE:4D:40:A2:F8:41:CF:E9:27:F7:83:B0:02:FE:92:F9 Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Certificate serial: 019B4EBBB0FCAEF79750A5BB8BDA8CC5EA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft Manifest number: 14D2 Signing time: Wed 24 Dec 2025 05:01:21 +0000 Manifest this update: Wed 24 Dec 2025 05:01:21 +0000 Manifest next update: Thu 25 Dec 2025 05:01:21 +0000 Files and hashes: 1: 1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa (hash: otqMBUJ0t81q8O5ZwH5j1LnN11Nn61m+zKuZ8xsbQeQ=) 2: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=) 3: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=) 4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: dqCjjseOtYWS8SVaKRg2Qje+UVTk7HX1OZAcvxzicsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:b0:fc:ae:f7:97:50:a5:bb:8b:da:8c:c5:ea:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Validity Not Before: Dec 24 05:01:21 2025 GMT Not After : Dec 25 05:01:21 2025 GMT Subject: CN=3487dd8ace4d40a2f841cfe927f783b002fe92f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ab:f6:4d:50:01:76:4a:cf:f8:17:01:62:ed: 52:68:8e:2b:1a:d2:49:f1:5a:30:61:52:2a:e9:cd: d8:15:4a:0b:ef:ce:4a:fe:70:7d:db:ef:73:4b:d8: 19:5a:3f:b3:ff:9c:7c:e5:c3:93:93:5e:27:fb:0a: ea:75:d9:cc:77:3b:22:09:ca:42:28:d1:e0:df:22: 8e:2e:97:26:98:d1:da:65:8d:fb:31:0d:76:3a:fc: e1:82:16:07:f5:f3:7d:16:e3:54:0d:c0:69:8e:6d: 7e:75:d9:7c:e1:e9:5e:03:c7:46:dc:5a:fc:c1:72: 55:e0:70:17:c5:ca:57:5b:d4:8e:e5:da:51:c1:e8: 9d:1e:3e:96:3f:50:cb:42:b6:e2:d3:a5:87:c1:25: 34:7b:73:ad:d5:c3:8e:77:5c:2a:26:c2:b3:2e:74: 8a:91:4a:54:49:10:bf:19:6a:18:fe:90:94:0b:03: a6:d1:94:b1:25:e8:19:02:65:44:44:fb:cc:97:a2: ae:bf:ea:8e:14:db:c0:e8:19:5d:21:a2:8b:fc:f0: cb:0f:d7:c1:5a:c0:31:4b:06:e1:e8:fc:56:cc:ac: 9d:72:ea:96:5b:e6:2e:4d:bf:f3:03:4c:95:d7:06: e0:a2:6f:ea:b4:c7:0b:3b:7e:ce:da:26:13:e8:2c: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:87:DD:8A:CE:4D:40:A2:F8:41:CF:E9:27:F7:83:B0:02:FE:92:F9 X509v3 Authority Key Identifier: keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:72:e2:b6:8e:26:de:27:da:ac:08:85:fa:1e:ef:0f:9b:cc: 16:bd:b0:52:05:cd:c0:2d:9e:bd:07:5e:ac:df:a5:b2:1b:58: 9e:07:ff:32:6b:3f:97:fc:b6:25:b0:1e:b4:9b:44:28:4a:f1: 9a:e3:1a:2e:b4:2f:e4:52:84:25:c9:41:da:36:8f:af:bd:da: bb:18:3c:07:54:64:25:da:e9:c2:5e:e4:bb:7c:7c:06:a6:8e: 25:72:01:42:fc:a3:78:e8:fa:9e:d5:38:1b:78:61:21:b3:af: db:8b:38:d3:22:41:88:f9:73:85:5d:31:6f:c6:17:a4:ed:44: ba:d4:4e:e7:a4:b8:6f:b4:91:31:9f:ff:0a:bd:22:25:78:f6: 61:d9:e7:53:1d:8d:28:e8:03:15:06:8c:0a:5a:dd:e4:ce:8a: 63:73:11:9e:44:eb:5e:3f:a6:07:d6:dd:7e:db:f3:7a:67:ba: 5e:da:f4:e5:01:85:ac:22:da:51:cd:d3:be:ce:44:6a:40:cb: 72:aa:b5:63:87:66:01:08:27:11:64:9b:8a:c9:85:db:32:a7: 41:49:a8:a1:a1:e8:75:59:30:11:4a:1f:ba:c8:6c:b2:21:a1: 11:44:71:87:ea:6b:98:22:55:0f:12:11:31:c1:b3:ad:cd:e1: 31:ca:34:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu7D8rveXUKW7i9qMxeosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZGI3NDdiMjg5NzE3YTA2ODRjZDZhYzgyMzA3YWE2N2Ji MmQ3YmIwHhcNMjUxMjI0MDUwMTIxWhcNMjUxMjI1MDUwMTIxWjAzMTEwLwYDVQQD EygzNDg3ZGQ4YWNlNGQ0MGEyZjg0MWNmZTkyN2Y3ODNiMDAyZmU5MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKv2TVABdkrP+BcBYu1SaI4rGtJJ 8VowYVIq6c3YFUoL785K/nB92+9zS9gZWj+z/5x85cOTk14n+wrqddnMdzsiCcpC KNHg3yKOLpcmmNHaZY37MQ12OvzhghYH9fN9FuNUDcBpjm1+ddl84eleA8dG3Fr8 wXJV4HAXxcpXW9SO5dpRweidHj6WP1DLQrbi06WHwSU0e3Ot1cOOd1wqJsKzLnSK kUpUSRC/GWoY/pCUCwOm0ZSxJegZAmVERPvMl6Kuv+qOFNvA6BldIaKL/PDLD9fB WsAxSwbh6PxWzKydcuqWW+YuTb/zA0yV1wbgom/qtMcLO37O2iYT6Cy8kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSH3YrOTUCi+EHP6Sf3g7AC/pL5MB8GA1UdIwQY MBaAFITbdHsolxegaEzWrIIweqZ7ste7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQt OWZlN2VlOWMwMzY4LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQtOWZlN2VlOWMwMzY4 LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknLito4m 3ifarAiF+h7vD5vMFr2wUgXNwC2evQderN+lshtYngf/Mms/l/y2JbAetJtEKErx muMaLrQv5FKEJclB2jaPr73auxg8B1RkJdrpwl7ku3x8BqaOJXIBQvyjeOj6ntU4 G3hhIbOv24s40yJBiPlzhV0xb8YXpO1EutRO56S4b7SRMZ//Cr0iJXj2YdnnUx2N KOgDFQaMClrd5M6KY3MRnkTrXj+mB9bdftvzeme6Xtr05QGFrCLaUc3Tvs5EakDL cqq1Y4dmAQgnEWSbismF2zKnQUmooaHodVkwEUofushssiGhEURxh+prmCJVDxIR McGzrc3hMco0EQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:12:00 2025 by rpki-client