This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json) Hash identifier: Yva54r14WoRR+BkaWbCkdg4m8E4s9TpRZIp5dS+Yn9c= Subject key identifier: 21:84:FB:0F:3F:75:15:86:96:BA:EA:F6:25:DC:8B:90:E2:46:60:A2 Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Certificate serial: 019B3EDA1BECA65F771FCC011B92E60790DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft Manifest number: 1620 Signing time: Sun 21 Dec 2025 03:00:39 +0000 Manifest this update: Sun 21 Dec 2025 03:00:39 +0000 Manifest next update: Mon 22 Dec 2025 03:00:39 +0000 Files and hashes: 1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=) 2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=) 3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 7okZTa0wNx9gB5M/VypNB1xtOSH6fiyHhe30vjjXo4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:1b:ec:a6:5f:77:1f:cc:01:1b:92:e6:07:90:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Validity Not Before: Dec 21 03:00:39 2025 GMT Not After : Dec 22 03:00:39 2025 GMT Subject: CN=2184fb0f3f75158696baeaf625dc8b90e24660a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:58:49:c8:01:cc:f3:75:76:e5:50:4c:12: ec:d6:3e:63:b4:86:75:4c:ee:8e:a6:f3:bc:ea:2a: 92:54:bd:20:96:40:16:48:63:d9:84:57:da:db:23: 82:c6:09:8d:81:c5:db:a6:db:e5:76:f3:65:dd:f7: 4a:74:60:e8:b7:78:22:c1:a0:c8:06:70:a1:ed:64: da:7a:83:12:ce:81:d2:55:6d:4e:96:18:a8:b9:07: 78:c0:5f:04:87:34:90:41:62:8a:51:36:80:d2:b6: 6e:b8:7d:43:71:01:f7:ed:b6:a1:68:56:6a:f6:01: 7e:f2:7e:02:4a:4e:47:96:59:74:04:fc:d7:30:9a: e4:03:4d:2a:d8:d9:01:3d:a9:1e:06:78:1c:2d:a2: 19:9c:2c:d5:65:e3:6b:d3:c1:06:f7:8a:e2:c8:bf: a5:00:8e:0b:a0:da:74:cc:58:53:67:b7:df:fd:e7: 6e:77:43:d1:c1:b9:00:db:08:18:23:1c:5a:78:15: 92:b4:33:20:e9:0c:ba:c5:ea:59:1b:43:7e:68:86: ca:de:ad:61:fc:f2:35:89:da:16:97:4e:d0:29:a4: 9f:5f:97:c4:40:52:6c:67:9b:48:5f:de:68:84:8f: 2d:60:23:60:bf:54:b6:b2:4b:de:45:53:e2:25:5c: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:FB:0F:3F:75:15:86:96:BA:EA:F6:25:DC:8B:90:E2:46:60:A2 X509v3 Authority Key Identifier: keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2d:7f:72:12:44:57:59:c7:f3:75:8e:fd:6f:24:49:25:74: b9:36:79:22:4f:6e:f4:b2:51:57:24:b1:5c:af:48:18:d0:3c: ad:62:da:38:bd:b3:f6:f2:24:82:68:41:14:da:82:e2:eb:9f: e8:dc:6c:b7:26:13:d5:fb:14:05:84:72:36:2f:2a:41:e1:73: 99:30:ce:99:7f:bc:1f:7d:59:ca:77:1d:37:ab:41:75:a5:af: 75:ac:d4:9e:01:dd:a0:89:8c:d5:2a:fc:04:fd:3f:d6:c6:6d: 82:c1:b3:04:69:da:4b:58:93:6d:37:fe:90:64:ba:7a:32:25: e8:68:08:46:22:d6:84:f0:60:93:a8:90:8b:a3:05:9c:03:11: 22:a1:be:5f:92:3a:26:59:5b:de:54:57:67:4b:01:76:ce:d3: 01:b0:8f:db:b7:ac:d7:74:26:23:26:b8:db:d7:dc:8e:c9:ca: 2f:4e:d0:e8:9e:ff:22:dc:ab:9c:d0:94:b7:8c:8f:3f:e9:3e: 26:3f:e0:d1:63:c0:ca:ed:3f:18:3d:16:8f:41:ab:34:4d:ad: 1e:15:76:40:3f:6e:76:24:3a:4d:16:99:1b:16:5c:85:5d:19: 63:0e:09:af:21:38:80:ab:93:89:89:21:56:0c:32:ca:67:22: 84:0e:41:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2hvspl93H8wBG5LmB5DbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz NDVhODEwHhcNMjUxMjIxMDMwMDM5WhcNMjUxMjIyMDMwMDM5WjAzMTEwLwYDVQQD EygyMTg0ZmIwZjNmNzUxNTg2OTZiYWVhZjYyNWRjOGI5MGUyNDY2MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsBYScgBzPN1duVQTBLs1j5jtIZ1 TO6OpvO86iqSVL0glkAWSGPZhFfa2yOCxgmNgcXbptvldvNl3fdKdGDot3giwaDI BnCh7WTaeoMSzoHSVW1OlhiouQd4wF8EhzSQQWKKUTaA0rZuuH1DcQH37bahaFZq 9gF+8n4CSk5Hlll0BPzXMJrkA00q2NkBPakeBngcLaIZnCzVZeNr08EG94riyL+l AI4LoNp0zFhTZ7ff/edud0PRwbkA2wgYIxxaeBWStDMg6Qy6xepZG0N+aIbK3q1h /PI1idoWl07QKaSfX5fEQFJsZ5tIX95ohI8tYCNgv1S2skveRVPiJVxtrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGE+w8/dRWGlrrq9iXci5DiRmCiMB8GA1UdIwQY MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt YWU2MGJlYTA2YTljLzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy1/chJE V1nH83WO/W8kSSV0uTZ5Ik9u9LJRVySxXK9IGNA8rWLaOL2z9vIkgmhBFNqC4uuf 6NxstyYT1fsUBYRyNi8qQeFzmTDOmX+8H31ZyncdN6tBdaWvdazUngHdoImM1Sr8 BP0/1sZtgsGzBGnaS1iTbTf+kGS6ejIl6GgIRiLWhPBgk6iQi6MFnAMRIqG+X5I6 Jllb3lRXZ0sBds7TAbCP27es13QmIya429fcjsnKL07Q6J7/ItyrnNCUt4yPP+k+ Jj/g0WPAyu0/GD0Wj0GrNE2tHhV2QD9udiQ6TRaZGxZchV0ZYw4JryE4gKuTiYkh VgwyymcihA5Biw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:43:02 2025 by rpki-client