This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json) Hash identifier: axMCTiXawMrajoXTFr8NHElMYzSIvPGLRn+4YL22+2U= Subject key identifier: C5:63:D6:11:30:7C:70:27:77:AB:DE:75:DF:77:10:69:67:ED:F3:68 Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71 Certificate serial: 019B3A8FB6048EBDFB3B50DAB77AE8119AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft Manifest number: 048E Signing time: Sat 20 Dec 2025 07:00:55 +0000 Manifest this update: Sat 20 Dec 2025 07:00:55 +0000 Manifest next update: Sun 21 Dec 2025 07:00:55 +0000 Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=) 2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=) 3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: BERMjqFUNYPzIvk/4Rgz7lMs/JjKK7/Ze2nrEjliuGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:b6:04:8e:bd:fb:3b:50:da:b7:7a:e8:11:9a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71 Validity Not Before: Dec 20 07:00:55 2025 GMT Not After : Dec 21 07:00:55 2025 GMT Subject: CN=c563d611307c702777abde75df77106967edf368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:2b:57:64:25:81:36:61:f7:5e:d1:68:a8: 40:98:49:26:3c:04:59:d3:f2:c3:29:39:be:cd:d7: 67:9c:24:e7:fa:21:af:bc:62:a2:4c:7e:c3:9b:e9: 11:96:02:97:69:fd:3e:91:cf:33:5d:a3:14:aa:bd: d6:e2:bc:fa:e3:ca:32:1e:0a:d6:f6:76:92:e4:fc: cc:35:22:e0:0b:54:cc:ba:68:6d:ca:17:dd:37:e0: b6:71:3f:67:08:31:13:7a:b3:db:06:a9:22:cc:c0: 2f:12:70:13:0b:54:06:5b:16:cb:1f:75:6b:ad:75: d0:7e:aa:97:a8:cc:cf:6a:45:5d:3d:c7:22:7a:73: c1:d1:56:2c:f5:4c:13:29:ef:07:d8:a3:07:6b:8b: 93:6e:1a:e5:87:91:62:54:8b:54:30:ea:42:04:56: 70:8e:7d:d9:42:03:05:fa:c6:c8:b1:6b:8d:90:8b: 31:a1:9a:85:ed:9e:8b:1b:7a:32:ff:4f:52:53:dd: 36:91:46:ab:9d:c3:f4:61:4d:4b:98:6f:c6:6f:c1: b9:b5:f3:77:cd:aa:44:10:a9:f2:86:1d:22:a7:ea: 9f:29:6b:54:e3:47:e8:12:5c:77:c8:cf:4c:32:ba: d2:e3:b8:80:a2:9d:5d:e1:c8:63:1d:88:00:0b:41: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:63:D6:11:30:7C:70:27:77:AB:DE:75:DF:77:10:69:67:ED:F3:68 X509v3 Authority Key Identifier: keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e6:75:23:90:f3:dd:c9:38:77:c7:0d:c0:06:b2:d3:81:f6: a4:e2:8e:9b:31:ad:c6:94:97:65:e2:8b:8f:04:f9:65:71:af: f6:37:6c:fc:ce:18:9b:f4:f0:e6:20:57:46:2f:49:33:72:78: 22:39:58:93:be:fd:2b:83:fa:c0:aa:d1:ea:f8:7e:9c:98:ac: b6:4d:df:8d:2f:5d:d7:a8:b1:35:57:e5:2f:29:d5:e0:6f:28: 47:8d:60:04:07:6b:8b:48:53:3d:09:96:73:f3:09:33:35:8f: b6:c5:68:4c:fb:29:88:12:9f:d9:df:a4:4a:78:6c:d0:f7:79: 0a:41:79:d2:85:84:21:2e:3c:51:e0:c3:da:30:75:32:1a:18: 05:b4:df:b6:3e:86:7b:cd:f0:b8:8e:ef:70:31:14:64:66:5d: 18:a5:6e:3b:f1:b2:de:99:66:7e:be:e1:d6:e1:15:fa:25:51: 06:bd:aa:73:99:88:90:a1:46:3f:6e:dd:8e:f9:a6:d9:ee:c6: 23:f0:25:7a:7c:99:b0:30:cf:96:09:b3:54:b0:f5:9e:ed:c5: 85:2d:98:da:38:ec:b2:c1:64:49:0e:f5:ee:b3:8d:91:4c:17: 63:96:19:2c:52:ad:6f:97:5e:8c:33:14:65:1b:47:59:31:6b: e6:43:b9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j7YEjr37O1Dat3roEZqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3 NmVmNzEwHhcNMjUxMjIwMDcwMDU1WhcNMjUxMjIxMDcwMDU1WjAzMTEwLwYDVQQD EyhjNTYzZDYxMTMwN2M3MDI3NzdhYmRlNzVkZjc3MTA2OTY3ZWRmMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuIrV2QlgTZh917RaKhAmEkmPARZ 0/LDKTm+zddnnCTn+iGvvGKiTH7Dm+kRlgKXaf0+kc8zXaMUqr3W4rz648oyHgrW 9naS5PzMNSLgC1TMumhtyhfdN+C2cT9nCDETerPbBqkizMAvEnATC1QGWxbLH3Vr rXXQfqqXqMzPakVdPccienPB0VYs9UwTKe8H2KMHa4uTbhrlh5FiVItUMOpCBFZw jn3ZQgMF+sbIsWuNkIsxoZqF7Z6LG3oy/09SU902kUarncP0YU1LmG/Gb8G5tfN3 zapEEKnyhh0ip+qfKWtU40foElx3yM9MMrrS47iAop1d4chjHYgAC0GnrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVj1hEwfHAnd6vedd93EGln7fNoMB8GA1UdIwQY MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeZ1I5Dz 3ck4d8cNwAay04H2pOKOmzGtxpSXZeKLjwT5ZXGv9jds/M4Ym/Tw5iBXRi9JM3J4 IjlYk779K4P6wKrR6vh+nJistk3fjS9d16ixNVflLynV4G8oR41gBAdri0hTPQmW c/MJMzWPtsVoTPspiBKf2d+kSnhs0Pd5CkF50oWEIS48UeDD2jB1MhoYBbTftj6G e83wuI7vcDEUZGZdGKVuO/Gy3plmfr7h1uEV+iVRBr2qc5mIkKFGP27djvmm2e7G I/AlenyZsDDPlgmzVLD1nu3FhS2Y2jjsssFkSQ717rONkUwXY5YZLFKtb5dejDMU ZRtHWTFr5kO5wg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:55:25 2025 by rpki-client