This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: EGwaRTgWiUcGfuLgIAgFHPjiMIJFmi3L16y6sWPKijc= Subject key identifier: 8C:C8:D5:92:20:58:9D:B0:C6:98:7A:AE:DA:B9:AB:39:47:64:DE:C1 Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019B3BD9BEB797D604CB5CAFE834368B67AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 1839 Signing time: Sat 20 Dec 2025 13:01:24 +0000 Manifest this update: Sat 20 Dec 2025 13:01:24 +0000 Manifest next update: Sun 21 Dec 2025 13:01:24 +0000 Files and hashes: 1: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 2: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 3: RS_eHXQUq41tQvgc6GbNLviSAns.roa (hash: TQU9cNt++mpDY6Fc1sIB45y0XyCZcVPTbN6xJWetVtM=) 4: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 5: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 6: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: CuP1AQosrfFwJtiNQKrRDXNl4H3ZaAHhO2I2RU62Lgw=) 7: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 8: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 9: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:be:b7:97:d6:04:cb:5c:af:e8:34:36:8b:67:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Dec 20 13:01:24 2025 GMT Not After : Dec 21 13:01:24 2025 GMT Subject: CN=8cc8d59220589db0c6987aaedab9ab394764dec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:89:9a:f8:d4:e9:92:df:c8:2e:32:17:8f:36: ba:eb:be:b1:29:c0:17:5e:c1:ea:59:f0:7f:41:cc: 1e:17:7d:17:e8:17:74:82:72:c3:e8:08:05:48:a9: 5b:88:17:3c:01:bd:98:1f:14:a0:85:ed:0f:9b:ba: 6c:fa:6f:8e:82:43:18:ee:bb:85:52:04:47:7f:40: 72:89:15:d1:9f:d0:58:6a:61:38:33:c1:8b:ca:43: 46:aa:89:9a:7e:d4:78:5b:d7:55:31:ae:b6:bf:63: 80:a9:27:0e:a3:01:cd:6c:cb:55:73:f5:56:50:ba: 61:4e:99:34:4f:d4:cc:ea:53:64:88:de:a8:7a:a8: 86:9c:12:04:d1:06:4a:8e:3f:96:69:a9:e3:5b:54: e1:81:80:4d:c5:5b:33:72:17:9b:98:46:44:ba:8b: 32:db:a4:6e:b1:d7:5d:d6:60:13:a3:68:d2:87:5d: ac:48:5a:94:16:ac:6c:55:77:64:d9:70:dc:06:80: 47:e2:0b:c4:3e:33:f2:4c:e5:78:6d:dc:89:19:d7: 2c:48:16:af:e8:a2:d1:d9:77:b5:63:35:5d:03:9f: fe:c2:bd:be:68:b2:56:a6:84:d4:8c:9b:8c:f5:5f: 71:48:e6:5d:10:3b:11:28:0f:3a:a0:fd:51:c5:03: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C8:D5:92:20:58:9D:B0:C6:98:7A:AE:DA:B9:AB:39:47:64:DE:C1 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:89:6d:60:bf:23:f3:a3:e6:d0:a7:1f:35:0c:4c:86:ea:9f: df:28:2c:84:01:d4:6a:ff:c5:31:fc:82:67:01:12:7d:4c:2b: 99:72:59:54:52:10:9f:58:5d:f6:aa:36:51:38:80:e6:d0:c9: a5:3c:90:c2:0d:a1:5c:07:aa:7c:6e:6b:5c:ba:7e:ac:08:1b: e3:fb:01:7b:39:be:f4:3d:4e:cb:e1:ec:0c:a7:66:37:6e:d8: 6d:4f:8e:cc:21:d0:6d:52:49:ba:a4:c6:c2:62:a6:13:60:ea: 88:2e:98:5f:f5:9f:59:1a:5d:df:38:bb:83:41:bf:47:d1:39: b2:a7:98:c4:9d:e4:8a:b4:65:d3:0f:3f:18:b5:d5:64:f3:f0: b8:71:b5:11:be:20:a6:ac:0e:f7:78:68:22:27:66:c7:7d:0a: 7b:89:30:78:5b:50:bc:66:4d:77:95:ad:0c:8d:4b:2b:a1:f1: 2e:b8:f9:01:8a:5e:06:1a:c7:47:2a:52:fd:49:48:f1:d6:4e: 64:4e:ea:a2:af:aa:44:e1:27:98:d5:b3:d6:75:58:79:df:5f: 36:f2:83:93:44:67:74:a9:ca:e0:e2:44:de:ee:19:92:8f:07: 67:07:ec:a9:22:82:9b:4c:25:53:27:db:ba:4a:27:75:74:f7: a9:f2:ed:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72b63l9YEy1yv6DQ2i2evMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUxMjIwMTMwMTI0WhcNMjUxMjIxMTMwMTI0WjAzMTEwLwYDVQQD Eyg4Y2M4ZDU5MjIwNTg5ZGIwYzY5ODdhYWVkYWI5YWIzOTQ3NjRkZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYma+NTpkt/ILjIXjza6676xKcAX XsHqWfB/QcweF30X6Bd0gnLD6AgFSKlbiBc8Ab2YHxSghe0Pm7ps+m+OgkMY7ruF UgRHf0ByiRXRn9BYamE4M8GLykNGqomaftR4W9dVMa62v2OAqScOowHNbMtVc/VW ULphTpk0T9TM6lNkiN6oeqiGnBIE0QZKjj+WaanjW1ThgYBNxVszchebmEZEuosy 26Rusddd1mATo2jSh12sSFqUFqxsVXdk2XDcBoBH4gvEPjPyTOV4bdyJGdcsSBav 6KLR2Xe1YzVdA5/+wr2+aLJWpoTUjJuM9V9xSOZdEDsRKA86oP1RxQO9UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzI1ZIgWJ2wxph6rtq5qzlHZN7BMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIltYL8j 86Pm0KcfNQxMhuqf3ygshAHUav/FMfyCZwESfUwrmXJZVFIQn1hd9qo2UTiA5tDJ pTyQwg2hXAeqfG5rXLp+rAgb4/sBezm+9D1Oy+HsDKdmN27YbU+OzCHQbVJJuqTG wmKmE2DqiC6YX/WfWRpd3zi7g0G/R9E5sqeYxJ3kirRl0w8/GLXVZPPwuHG1Eb4g pqwO93hoIidmx30Ke4kweFtQvGZNd5WtDI1LK6HxLrj5AYpeBhrHRypS/UlI8dZO ZE7qoq+qROEnmNWz1nVYed9fNvKDk0RndKnK4OJE3u4Zko8HZwfsqSKCm0wlUyfb ukondXT3qfLteg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:23:59 2025 by rpki-client