This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json) Hash identifier: ljoOJjLLgNNg4qC0kxdJHlX4MQinTNvuXkPm39VH0LI= Subject key identifier: E2:39:7E:FF:84:82:13:E5:BF:A2:12:90:F3:2E:76:42:55:0A:49:DD Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61 Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161 Certificate serial: 019B3EDAE091A19C5AC42608D725031A17E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft Manifest number: 122A Signing time: Sun 21 Dec 2025 03:01:30 +0000 Manifest this update: Sun 21 Dec 2025 03:01:30 +0000 Manifest next update: Mon 22 Dec 2025 03:01:30 +0000 Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=) 2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: lQ+d0X4/gJxH5VoGafXBRXJ3k4YNOoF8+a4S6Qg44wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:e0:91:a1:9c:5a:c4:26:08:d7:25:03:1a:17:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161 Validity Not Before: Dec 21 03:01:30 2025 GMT Not After : Dec 22 03:01:30 2025 GMT Subject: CN=e2397eff848213e5bfa21290f32e7642550a49dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:6c:8e:b7:70:49:aa:dc:1d:63:57:83:6b: 65:35:e6:26:14:11:e4:6a:63:42:14:62:ae:0b:6a: ed:27:00:07:0e:33:53:53:38:43:0c:08:99:1e:22: 3d:f0:9e:d4:8e:cb:eb:83:57:fd:d6:4b:fa:c5:f0: 21:c1:d0:b6:7a:46:c7:53:bb:fc:01:fe:99:1f:c9: 47:7a:05:83:86:f1:9a:03:fa:0d:a8:40:90:ae:84: 15:b9:7e:0d:3c:b6:52:7c:88:6f:d9:e4:b3:3b:aa: 71:11:4f:2a:84:7a:20:f3:f3:f2:13:45:cf:45:73: 3c:75:26:20:a8:d8:3f:41:4c:e9:ff:5c:b0:47:b9: 15:12:11:6f:0d:07:5a:b7:23:d6:d1:9c:a6:a9:47: 71:0d:05:43:ed:71:06:7d:3a:8b:33:aa:d9:87:fe: bc:09:af:d6:f2:0c:07:25:82:54:d4:6b:1b:cd:26: 0b:52:81:42:65:fc:b7:77:8d:a3:f9:b1:b6:ce:d6: 70:37:22:53:e0:8a:ca:c7:44:7c:92:fe:39:dc:e0: f8:c3:a0:50:2e:60:c3:15:4f:1a:be:cb:4c:58:76: 77:06:a6:29:b4:f3:69:79:3d:23:c1:e4:4b:d3:51: 5b:8e:24:05:03:bc:83:0f:79:17:d8:55:d5:22:21: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:7E:FF:84:82:13:E5:BF:A2:12:90:F3:2E:76:42:55:0A:49:DD X509v3 Authority Key Identifier: keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a8:6c:a1:a0:67:bc:50:3f:da:9d:0d:c8:21:4f:c9:e8:87: 31:de:05:bd:a7:4c:f8:f1:5b:f8:66:aa:e3:98:d3:ee:3d:1a: 8d:10:23:b3:fc:e6:82:12:d7:52:5b:6d:3a:d9:85:ac:e2:2e: c3:0f:76:88:1d:ce:32:d9:b7:c0:af:95:2e:e0:21:5f:8a:28: 77:ee:1c:61:73:76:bc:88:01:04:7c:6c:e6:bb:93:8e:5d:2c: 0d:10:74:65:ca:be:4d:02:a3:0b:7f:d9:ed:56:b2:d0:7c:71: 1e:28:73:e6:16:4c:72:c2:5e:2a:8a:0c:60:0a:be:21:7a:48: e8:1a:02:e4:a6:6b:b5:b3:26:f9:10:d5:23:9f:6c:40:e8:07: 54:74:83:46:4c:8e:ba:73:17:d3:68:36:f9:25:98:ec:c5:ef: 0c:7e:f4:76:2c:87:d7:69:33:ea:be:51:a3:ba:75:31:1a:63: 88:15:b1:fc:6b:a3:69:34:ae:ec:3e:8f:b5:8d:50:cd:47:0b: 00:9a:bd:ca:3a:af:f0:8b:1c:85:78:5f:67:fb:32:d2:9b:8d: 71:3a:8e:6b:db:32:46:fb:5b:2e:7b:e1:79:b1:10:1c:52:a7: 34:35:4a:4e:d3:6e:31:3a:09:0b:9b:21:e5:f6:c6:85:a3:37: 0e:db:38:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2uCRoZxaxCYI1yUDGhfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4 NTgxNjEwHhcNMjUxMjIxMDMwMTMwWhcNMjUxMjIyMDMwMTMwWjAzMTEwLwYDVQQD EyhlMjM5N2VmZjg0ODIxM2U1YmZhMjEyOTBmMzJlNzY0MjU1MGE0OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDRsjrdwSarcHWNXg2tlNeYmFBHk amNCFGKuC2rtJwAHDjNTUzhDDAiZHiI98J7Ujsvrg1f91kv6xfAhwdC2ekbHU7v8 Af6ZH8lHegWDhvGaA/oNqECQroQVuX4NPLZSfIhv2eSzO6pxEU8qhHog8/PyE0XP RXM8dSYgqNg/QUzp/1ywR7kVEhFvDQdatyPW0ZymqUdxDQVD7XEGfTqLM6rZh/68 Ca/W8gwHJYJU1GsbzSYLUoFCZfy3d42j+bG2ztZwNyJT4IrKx0R8kv453OD4w6BQ LmDDFU8avstMWHZ3BqYptPNpeT0jweRL01FbjiQFA7yDD3kX2FXVIiFTcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI5fv+EghPlv6ISkPMudkJVCkndMB8GA1UdIwQY MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2 LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKhsoaBn vFA/2p0NyCFPyeiHMd4FvadM+PFb+Gaq45jT7j0ajRAjs/zmghLXUlttOtmFrOIu ww92iB3OMtm3wK+VLuAhX4ood+4cYXN2vIgBBHxs5ruTjl0sDRB0Zcq+TQKjC3/Z 7Vay0HxxHihz5hZMcsJeKooMYAq+IXpI6BoC5KZrtbMm+RDVI59sQOgHVHSDRkyO unMX02g2+SWY7MXvDH70diyH12kz6r5Ro7p1MRpjiBWx/GujaTSu7D6PtY1QzUcL AJq9yjqv8IschXhfZ/sy0puNcTqOa9syRvtbLnvhebEQHFKnNDVKTtNuMToJC5sh 5fbGhaM3Dts4XA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:32 2025 by rpki-client