This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json) Hash identifier: Y+fs/I0myjTVl6UYabEJPBsFcix2kUVt7XmBNvQBLYI= Subject key identifier: A7:22:40:9C:A9:07:F0:59:EE:C3:E2:96:76:BB:31:5B:48:92:F7:19 Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Certificate serial: 019B710FD47A830A12CC26986CA4090DA08C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft Manifest number: 163A Signing time: Tue 30 Dec 2025 21:00:21 +0000 Manifest this update: Tue 30 Dec 2025 21:00:21 +0000 Manifest next update: Wed 31 Dec 2025 21:00:21 +0000 Files and hashes: 1: A3wyPhRamUsWB9_qHryX-EDk1e0.roa (hash: QXg6wSruYhyDuN8fgBSyc5BU3QNmFqD0/uvIAs24UoQ=) 2: UuAIaR0v0SUcpnHbi81lgTGwt68.roa (hash: S7roZyfDvSD0rs1D/ICIUXI/40e6tijQPmSOTtOsoBs=) 3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 2DTVhFfQW4dCwg9DEStxCgJuYXVIMNKkKwAbsrvsQGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:d4:7a:83:0a:12:cc:26:98:6c:a4:09:0d:a0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Validity Not Before: Dec 30 21:00:21 2025 GMT Not After : Dec 31 21:00:21 2025 GMT Subject: CN=a722409ca907f059eec3e29676bb315b4892f719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:8a:71:17:90:0d:ca:b9:ce:61:4b:65:01: 58:c6:11:13:e3:1e:a4:46:59:d8:6c:1c:cb:17:c7: fd:86:99:6a:67:1b:cd:65:08:9f:78:b4:63:f0:19: 39:1e:eb:7a:e5:bc:ff:2f:24:4b:42:4a:ca:3a:37: 13:f1:99:82:c6:13:bb:e5:0a:f2:d0:53:98:a7:8e: 67:c0:8e:61:dc:c7:99:0b:28:37:77:27:09:ed:ea: b1:33:be:06:bd:4f:6d:8f:97:e8:1b:33:52:09:b0: de:47:97:d3:c4:28:f2:2c:22:d5:ce:59:57:65:53: 53:55:5d:1c:ff:d6:2c:c0:54:0d:4b:01:6d:fe:98: 39:b0:c3:09:d0:1b:38:07:4e:78:e3:29:38:c0:aa: 00:9b:72:e4:91:4e:2a:ef:0f:c2:33:32:93:2c:e0: 24:eb:5e:ed:99:24:78:19:a8:28:ea:e2:04:aa:eb: 43:03:92:8c:49:24:1a:f5:59:b1:f1:23:58:f6:a8: 40:75:3a:ae:8b:c8:aa:0c:05:e2:38:e6:b7:d0:c3: 84:5c:bf:56:bc:ab:b1:9f:00:c6:10:73:81:29:0e: a2:ff:f7:d0:f7:c9:1f:23:bb:97:c7:79:f5:87:cd: 78:d3:56:b2:37:0a:2d:2f:ec:ac:70:a1:ea:90:7e: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:22:40:9C:A9:07:F0:59:EE:C3:E2:96:76:BB:31:5B:48:92:F7:19 X509v3 Authority Key Identifier: keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:82:c2:12:c4:4b:4a:35:1b:7e:73:f5:d5:78:e3:fd:1a:14: 47:f3:6d:37:7c:4e:c6:5d:2d:8a:28:da:61:73:37:f0:e7:bc: 82:3b:77:45:15:1f:86:03:1d:ba:d2:fe:f0:c4:cf:d6:a7:76: fe:39:07:b9:67:a0:35:1d:17:2a:42:d6:14:d4:43:4d:dd:46: 74:29:a2:63:83:2c:7b:81:8a:d2:f2:30:82:f6:f1:31:51:81: d5:b5:0b:ca:4d:27:8a:13:20:25:c2:ac:f9:83:3b:d9:be:ca: 54:7c:84:1c:19:45:bf:83:90:77:e8:5d:b4:69:76:af:61:98: 20:7e:e4:76:21:d9:58:df:50:8a:5d:a2:78:b0:f5:6c:27:ea: 22:53:68:d6:dd:fb:bc:76:46:b8:b8:37:a3:bf:45:06:a9:46: 1c:7d:4c:f7:24:04:c5:26:8a:96:3d:1d:d5:46:69:f4:e5:e8: b1:b5:71:a0:ce:3f:f6:04:ba:11:3d:00:53:a9:df:97:fb:b8: 01:f4:5a:fb:0b:50:ef:c9:0e:5f:bf:df:2a:29:e3:aa:ba:19: 43:7d:b3:f7:30:e3:bb:28:99:55:f6:9d:6b:fb:87:58:84:44: 32:3c:b3:ce:cf:02:f1:23:a4:5e:52:b0:4c:3a:05:9f:1d:67: 6c:24:ef:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD9R6gwoSzCaYbKQJDaCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz NDVhODEwHhcNMjUxMjMwMjEwMDIxWhcNMjUxMjMxMjEwMDIxWjAzMTEwLwYDVQQD EyhhNzIyNDA5Y2E5MDdmMDU5ZWVjM2UyOTY3NmJiMzE1YjQ4OTJmNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4CKcReQDcq5zmFLZQFYxhET4x6k RlnYbBzLF8f9hplqZxvNZQifeLRj8Bk5Hut65bz/LyRLQkrKOjcT8ZmCxhO75Qry 0FOYp45nwI5h3MeZCyg3dycJ7eqxM74GvU9tj5foGzNSCbDeR5fTxCjyLCLVzllX ZVNTVV0c/9YswFQNSwFt/pg5sMMJ0Bs4B0544yk4wKoAm3LkkU4q7w/CMzKTLOAk 617tmSR4Gago6uIEqutDA5KMSSQa9Vmx8SNY9qhAdTqui8iqDAXiOOa30MOEXL9W vKuxnwDGEHOBKQ6i//fQ98kfI7uXx3n1h81401ayNwotL+yscKHqkH5kBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKciQJypB/BZ7sPilna7MVtIkvcZMB8GA1UdIwQY MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt YWU2MGJlYTA2YTljLzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoLCEsRL SjUbfnP11Xjj/RoUR/NtN3xOxl0tiijaYXM38Oe8gjt3RRUfhgMdutL+8MTP1qd2 /jkHuWegNR0XKkLWFNRDTd1GdCmiY4Mse4GK0vIwgvbxMVGB1bULyk0nihMgJcKs +YM72b7KVHyEHBlFv4OQd+hdtGl2r2GYIH7kdiHZWN9Qil2ieLD1bCfqIlNo1t37 vHZGuLg3o79FBqlGHH1M9yQExSaKlj0d1UZp9OXosbVxoM4/9gS6ET0AU6nfl/u4 AfRa+wtQ78kOX7/fKinjqroZQ32z9zDjuyiZVfada/uHWIREMjyzzs8C8SOkXlKw TDoFnx1nbCTvBA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:03:57 2025 by rpki-client