This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json) Hash identifier: U5/oTB9b8skFplupq/AZmc8gi/1NVBCZgMKYvgPkVhU= Subject key identifier: A8:27:78:5C:EA:83:0D:79:F3:D8:A9:43:4F:CC:40:49:A9:D8:F5:F2 Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03 Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003 Certificate serial: 019B4249059DD27134E1F19AD5D8BE3E3F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 19:00:40 +0000 Manifest this update: Sun 21 Dec 2025 19:00:40 +0000 Manifest next update: Mon 22 Dec 2025 19:00:40 +0000 Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: DkBCc/0XPzT5LfZSBJ+qd7i3s0KDp3x+a9FnA4+eMSs=) 2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:05:9d:d2:71:34:e1:f1:9a:d5:d8:be:3e:3f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003 Validity Not Before: Dec 21 19:00:40 2025 GMT Not After : Dec 22 19:00:40 2025 GMT Subject: CN=a827785cea830d79f3d8a9434fcc4049a9d8f5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:44:3e:f0:7e:48:13:1b:1a:57:b7:29:96: 07:83:a0:a9:94:85:bf:6f:17:a1:fb:e9:74:09:3a: d8:60:98:e2:60:3d:03:ae:28:24:5e:8e:2e:20:6c: 62:3f:d4:8c:d7:c4:1e:d7:61:7b:58:3e:0e:5d:62: a0:28:dd:42:8e:88:51:5b:8b:3c:3c:66:dc:90:db: 37:d5:82:e2:01:62:4c:cc:c7:99:22:64:ad:f3:98: 05:51:5a:ad:c1:49:7f:ce:fe:6b:27:14:9a:a7:f8: 75:64:c4:ef:5f:38:47:f5:b7:cc:ad:11:e9:b8:dd: 4d:5f:a1:ef:22:d7:af:69:16:b7:06:97:3a:fa:07: 0d:fa:cb:8b:20:cd:d7:de:7d:32:7b:7a:f4:21:15: a4:ae:a3:ed:39:6b:d7:68:5d:21:42:7c:ea:e3:32: 52:cf:80:4f:41:fb:5b:ed:b3:a0:02:01:da:c2:3b: 55:11:76:9b:ef:0b:f0:b4:3c:37:15:bf:19:9a:57: 86:2a:1d:cc:2e:0d:1a:73:17:0f:e9:d0:43:44:47: e1:99:aa:f1:56:06:d3:06:ea:07:9a:5c:de:6c:98: ce:b2:89:b5:9b:0a:f5:34:06:ec:33:cc:ae:07:9a: 91:39:ce:84:38:38:5d:d8:82:ad:2a:cb:c3:b7:55: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:78:5C:EA:83:0D:79:F3:D8:A9:43:4F:CC:40:49:A9:D8:F5:F2 X509v3 Authority Key Identifier: keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bc:2c:e6:f6:03:33:3c:34:6b:f9:2a:05:7c:12:30:05:2c: 39:29:76:e0:f5:2a:01:3b:f4:99:4b:b9:56:a6:4e:6d:dc:9b: 82:63:a8:55:f3:28:50:c5:6a:22:5d:e9:a5:cb:01:a4:54:73: 22:21:3e:57:f6:03:7a:7f:91:17:05:87:c0:0c:a9:49:21:7d: 3c:0b:c2:e7:c7:07:3f:c8:21:64:4d:b5:9b:1c:dd:19:d7:b6: 46:a8:d3:d6:c3:e9:3c:4f:ed:43:05:65:9d:9f:1a:74:9e:35: b5:94:e3:60:58:80:b4:8c:81:f2:22:21:1d:47:cd:1d:ad:b6: 20:9a:1f:26:a1:a4:80:06:5d:00:f9:4e:e7:c2:a9:1f:e8:c1: f0:b6:f6:8c:4a:2a:38:54:27:df:ab:35:dc:ba:6c:0f:d4:30: 34:42:0b:e6:78:ff:4a:18:28:ca:09:d2:17:52:58:d5:e7:d9: 50:d9:86:dc:02:a8:22:29:68:b5:cf:ee:1b:5e:b4:fa:4f:82: ca:24:ef:a4:72:31:bf:1b:79:85:3f:f6:58:f5:95:dc:09:09: 0b:f7:eb:1c:00:17:78:e6:d6:96:ca:fb:82:89:bb:bf:3a:72: d6:1b:b9:b7:df:01:c8:c0:80:1e:fa:05:97:06:78:68:be:fd: 00:ed:0f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSQWd0nE04fGa1di+Pj9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGFhZjRlNjhkMzIyMjQ4MjMwNTQ0Y2Q4ZGIyOTU2OGU2 Y2YwMDMwHhcNMjUxMjIxMTkwMDQwWhcNMjUxMjIyMTkwMDQwWjAzMTEwLwYDVQQD EyhhODI3Nzg1Y2VhODMwZDc5ZjNkOGE5NDM0ZmNjNDA0OWE5ZDhmNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjdEPvB+SBMbGle3KZYHg6CplIW/ bxeh++l0CTrYYJjiYD0DrigkXo4uIGxiP9SM18Qe12F7WD4OXWKgKN1CjohRW4s8 PGbckNs31YLiAWJMzMeZImSt85gFUVqtwUl/zv5rJxSap/h1ZMTvXzhH9bfMrRHp uN1NX6HvItevaRa3Bpc6+gcN+suLIM3X3n0ye3r0IRWkrqPtOWvXaF0hQnzq4zJS z4BPQftb7bOgAgHawjtVEXab7wvwtDw3Fb8ZmleGKh3MLg0acxcP6dBDREfhmarx VgbTBuoHmlzebJjOsom1mwr1NAbsM8yuB5qROc6EODhd2IKtKsvDt1XOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgneFzqgw1589ipQ0/MQEmp2PXyMB8GA1UdIwQY MBaAFIbar05o0yIkgjBUTNjbKVaObPADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMt NWJjOTA1MDVkOGNhLzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS81N2QxZGItZDhlYi00OWUwLTgxMzMtNWJjOTA1MDVkOGNh LzEvaHRxdlRtalRJaVNDTUZSTTJOc3BWbzVzOEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbws5vYD Mzw0a/kqBXwSMAUsOSl24PUqATv0mUu5VqZObdybgmOoVfMoUMVqIl3ppcsBpFRz IiE+V/YDen+RFwWHwAypSSF9PAvC58cHP8ghZE21mxzdGde2RqjT1sPpPE/tQwVl nZ8adJ41tZTjYFiAtIyB8iIhHUfNHa22IJofJqGkgAZdAPlO58KpH+jB8Lb2jEoq OFQn36s13LpsD9QwNEIL5nj/ShgoygnSF1JY1efZUNmG3AKoIilotc/uG160+k+C yiTvpHIxvxt5hT/2WPWV3AkJC/frHAAXeObWlsr7gom7vzpy1hu5t98ByMCAHvoF lwZ4aL79AO0PZg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:23 2025 by rpki-client