This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: CwVv8R2rk+ogOTubPhdHKfz3Zm3rurb0vBOCl3CcAE8= Subject key identifier: AC:C6:58:83:DA:83:B0:FB:1A:44:31:35:CF:BC:FE:9C:D1:06:A3:23 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B3720AA2A66B1F8806AD76E5FB5F54035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 17A3 Signing time: Fri 19 Dec 2025 15:00:46 +0000 Manifest this update: Fri 19 Dec 2025 15:00:46 +0000 Manifest next update: Sat 20 Dec 2025 15:00:46 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=) 6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: l0HIdtUxN9VJU+5vfMpzRo9yHgKw3hhH9C+IjeldnGc=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:aa:2a:66:b1:f8:80:6a:d7:6e:5f:b5:f5:40:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Dec 19 15:00:46 2025 GMT Not After : Dec 20 15:00:46 2025 GMT Subject: CN=acc65883da83b0fb1a443135cfbcfe9cd106a323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:80:b1:9e:8d:38:78:85:45:41:24:ac:1c: 72:d8:8e:e1:96:bf:3c:34:8e:de:2b:1e:41:73:b8: 09:68:57:56:f3:d8:2e:65:ef:9b:e0:1c:65:7f:6d: 5b:cb:34:9c:f1:84:bb:40:53:83:e6:4e:5f:96:a9: 2d:2f:37:37:30:51:66:d1:b7:f2:d2:0d:93:be:4a: c1:b5:70:7d:13:90:d9:66:23:cf:1e:57:71:27:45: 84:38:da:d8:0e:a2:19:09:9f:c0:61:f0:a9:e8:45: a8:01:f2:35:35:3b:cc:53:c0:5e:82:01:60:23:92: 21:c2:c5:01:49:1a:83:98:0d:4f:ae:ca:4a:90:b9: df:7e:49:39:d2:e8:2e:7e:17:3e:72:d3:de:13:4c: 7d:5b:73:b0:f5:9e:de:5c:09:de:7a:dc:0c:49:93: 0f:f7:66:2a:83:11:1c:bc:4b:07:e3:32:6e:d9:25: b3:f8:d1:1b:e8:6c:66:93:5f:68:57:98:cb:7c:54: b0:60:c4:7e:60:02:63:c3:7c:dd:37:bf:be:38:b4: 0d:99:b4:03:99:68:ef:d3:59:3e:a3:b8:a8:12:6d: 4c:35:27:69:f4:4c:88:49:62:6d:0c:0b:42:c8:83: 8b:40:7e:51:93:5e:61:8f:af:f2:f2:24:a2:db:4d: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C6:58:83:DA:83:B0:FB:1A:44:31:35:CF:BC:FE:9C:D1:06:A3:23 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:17:a7:3b:09:2a:d7:e1:cc:06:ee:ca:37:17:fa:e6:2f:d9: ba:bf:0f:b9:67:01:8f:ba:90:90:d8:e4:e7:b3:7c:11:86:ea: f9:0d:f0:04:87:6b:f5:b1:aa:a8:c4:60:39:a4:9f:1d:53:71: 62:b0:e2:42:e7:fd:ef:e2:03:41:0e:85:dd:f6:4d:16:91:4a: c6:33:70:2e:95:c5:9c:b2:7d:ec:80:b9:72:da:c1:7b:2d:e4: c7:dc:f3:89:57:51:40:5a:70:d1:6b:66:2a:a5:d6:74:ab:3d: 3b:01:97:bb:fc:cb:05:1b:64:a1:ef:75:ec:6a:92:cb:a4:1f: 86:eb:9e:2b:f4:12:9d:5f:7a:e8:6f:ff:7f:ce:62:01:a6:ce: 41:11:2b:f0:ca:07:37:06:53:6c:e0:0d:79:45:c3:0d:6b:ab: 93:cd:b0:05:3a:b9:8a:0a:66:84:1f:28:de:a0:1e:ef:1a:4e: 15:51:13:d8:c9:30:ac:73:0b:f1:f7:3d:3a:67:b9:a2:19:78: 23:39:b5:a3:94:74:a3:f1:2c:87:93:2c:2e:9f:20:c1:0f:6b: c1:6c:d3:11:56:11:f1:72:26:d9:05:87:eb:83:2a:3c:c6:79: d5:05:34:d2:3e:0d:c6:df:4f:3b:3a:c8:8e:c2:60:2e:c0:ce: 87:a9:4b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IKoqZrH4gGrXbl+19UA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUxMjE5MTUwMDQ2WhcNMjUxMjIwMTUwMDQ2WjAzMTEwLwYDVQQD EyhhY2M2NTg4M2RhODNiMGZiMWE0NDMxMzVjZmJjZmU5Y2QxMDZhMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMSAsZ6NOHiFRUEkrBxy2I7hlr88 NI7eKx5Bc7gJaFdW89guZe+b4Bxlf21byzSc8YS7QFOD5k5flqktLzc3MFFm0bfy 0g2TvkrBtXB9E5DZZiPPHldxJ0WEONrYDqIZCZ/AYfCp6EWoAfI1NTvMU8BeggFg I5IhwsUBSRqDmA1PrspKkLnffkk50ugufhc+ctPeE0x9W3Ow9Z7eXAneetwMSZMP 92YqgxEcvEsH4zJu2SWz+NEb6Gxmk19oV5jLfFSwYMR+YAJjw3zdN7++OLQNmbQD mWjv01k+o7ioEm1MNSdp9EyISWJtDAtCyIOLQH5Rk15hj6/y8iSi202VGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzGWIPag7D7GkQxNc+8/pzRBqMjMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxenOwkq 1+HMBu7KNxf65i/Zur8PuWcBj7qQkNjk57N8EYbq+Q3wBIdr9bGqqMRgOaSfHVNx YrDiQuf97+IDQQ6F3fZNFpFKxjNwLpXFnLJ97IC5ctrBey3kx9zziVdRQFpw0Wtm KqXWdKs9OwGXu/zLBRtkoe917GqSy6QfhuueK/QSnV966G//f85iAabOQREr8MoH NwZTbOANeUXDDWurk82wBTq5igpmhB8o3qAe7xpOFVET2MkwrHML8fc9Ome5ohl4 Izm1o5R0o/Esh5MsLp8gwQ9rwWzTEVYR8XIm2QWH64MqPMZ51QU00j4Nxt9POzrI jsJgLsDOh6lLHQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:32 2025 by rpki-client