This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: IVTBqX5yC6h/lgifDHCBnJpHvuvXZ1qivQFadtyPJBE= Subject key identifier: A2:73:32:63:67:A9:BC:F0:85:81:E9:62:C6:00:25:87:41:04:9F:01 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B3DFEA334C7106612E47358AEC40BD8C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 13A9 Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=) 2: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=) 3: MceCU4XPd0t7fhZxTxvxReumv1Q.roa (hash: 5TdX80iYVUkF2JY7Z9ZEOYjAnRhS8f4vWckTIPnEXdo=) 4: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=) 5: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=) 6: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=) 7: aaic0TQ08KDxqNotu0QjynGFp8k.roa (hash: y+rn4gyMmixGkyVVHgb8Zj+xOMFFm7BJm3FAMYf/M4M=) 8: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=) 9: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=) 10: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=) 11: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: ws9lD2FAQWHJJuhirKHSZTMQOQTP2nTAV/cCNitEfvI=) 12: o1oWSbF99ChHezdi7-NEtS6WqIQ.roa (hash: ssh+w8HWpTpbSb7HfHBqwKGeOCK5JvaJKAWgtYiNFsU=) 13: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=) 14: zYeF4EOXDH9wga2Hl1a9xt43c_E.roa (hash: qprf7Kh7V9oLipnyoiqapOwT3fD2c8ij+cCs23g5KeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a3:34:c7:10:66:12:e4:73:58:ae:c4:0b:d8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=a273326367a9bcf08581e962c600258741049f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:b5:54:ae:5e:a4:cb:d2:1e:10:1e:6d:27: 2d:5a:da:49:98:07:b2:ab:08:f8:c7:cf:b4:9c:43: 2a:52:d7:9d:03:00:82:ab:9a:15:7b:d4:29:7d:af: b0:51:c4:04:7d:86:1b:44:5a:3a:1b:a2:6c:28:fd: 9a:b7:cc:29:9d:d0:52:38:a2:f1:88:fc:fc:40:32: c0:43:96:76:32:87:7e:fb:87:5f:af:b3:d8:d2:8a: 95:02:42:ad:5c:1f:2d:c2:12:45:48:5f:16:aa:bf: b7:90:29:46:a1:d4:f4:f6:65:cb:44:66:3a:a3:21: c5:e8:d3:21:60:5d:df:4f:64:02:41:c8:c9:62:7b: 63:15:73:55:71:1b:9a:28:c1:6e:ae:c1:6a:88:4a: f7:e4:d8:d0:93:0e:9c:84:d9:4c:06:88:95:55:2f: df:8c:51:46:dc:ff:70:a4:ef:62:77:2b:3e:20:a7: da:85:97:a1:84:26:28:c3:26:e3:3b:cd:20:f1:90: ba:07:ac:4f:69:2b:5a:9d:f5:7c:f9:6b:f3:22:49: 0b:a5:5b:20:81:3d:c1:04:a6:84:e5:92:9d:de:af: 34:16:65:b4:b2:92:de:59:79:df:26:50:80:a2:54: bf:68:81:df:85:ec:70:cb:94:ab:d2:81:bf:9b:48: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:73:32:63:67:A9:BC:F0:85:81:E9:62:C6:00:25:87:41:04:9F:01 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:18:c2:d7:b4:fd:6f:a4:d5:b1:8a:ea:b3:cd:10:18:04:2e: 72:ad:53:7e:3c:73:b4:2e:25:f8:ab:0b:5c:39:06:1c:a6:cb: 5d:47:68:ca:72:10:62:d6:c4:aa:e6:9a:6c:ae:6b:8c:4c:a6: 4c:56:e3:91:67:11:d5:92:66:37:8e:2b:87:c5:cf:b3:5a:9b: 10:8c:bb:eb:8b:12:02:82:a8:ca:07:a2:9e:44:61:d4:7e:c5: 51:f8:e5:0d:2f:e6:da:cd:80:71:26:06:28:ed:83:5f:d3:f3: ec:68:c6:e1:25:58:01:be:cf:2f:a3:7e:ae:a6:ce:a7:38:03: 9d:52:46:dc:e5:8c:6e:6b:e6:1d:5d:ff:7e:05:dc:02:9a:f9: 1b:48:ec:04:60:78:7a:19:58:1f:35:40:d8:cc:4a:4f:ac:fa: 30:41:92:e5:20:60:8f:b3:db:b4:d0:98:40:8a:3c:6b:32:8f: b6:43:29:6c:64:ce:a8:e9:59:a1:94:5e:0d:ed:bd:90:12:38: bd:51:d2:f8:52:10:e7:f9:96:8a:56:a8:16:c8:35:c9:26:42: cb:52:5c:89:4e:56:2e:07:ff:3d:6f:e9:9a:2c:65:55:d1:31: b9:a5:38:a0:ee:67:f4:6b:95:f6:a8:06:ab:bd:1e:f6:f1:6e: 6d:0f:a9:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qM0xxBmEuRzWK7EC9jCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD EyhhMjczMzI2MzY3YTliY2YwODU4MWU5NjJjNjAwMjU4NzQxMDQ5ZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzO1VK5epMvSHhAebSctWtpJmAey qwj4x8+0nEMqUtedAwCCq5oVe9Qpfa+wUcQEfYYbRFo6G6JsKP2at8wpndBSOKLx iPz8QDLAQ5Z2Mod++4dfr7PY0oqVAkKtXB8twhJFSF8Wqr+3kClGodT09mXLRGY6 oyHF6NMhYF3fT2QCQcjJYntjFXNVcRuaKMFursFqiEr35NjQkw6chNlMBoiVVS/f jFFG3P9wpO9idys+IKfahZehhCYowybjO80g8ZC6B6xPaStanfV8+WvzIkkLpVsg gT3BBKaE5ZKd3q80FmW0spLeWXnfJlCAolS/aIHfhexwy5Sr0oG/m0htIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJzMmNnqbzwhYHpYsYAJYdBBJ8BMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBjC17T9 b6TVsYrqs80QGAQucq1TfjxztC4l+KsLXDkGHKbLXUdoynIQYtbEquaabK5rjEym TFbjkWcR1ZJmN44rh8XPs1qbEIy764sSAoKoygeinkRh1H7FUfjlDS/m2s2AcSYG KO2DX9Pz7GjG4SVYAb7PL6N+rqbOpzgDnVJG3OWMbmvmHV3/fgXcApr5G0jsBGB4 ehlYHzVA2MxKT6z6MEGS5SBgj7PbtNCYQIo8azKPtkMpbGTOqOlZoZReDe29kBI4 vVHS+FIQ5/mWilaoFsg1ySZCy1JciU5WLgf/PW/pmixlVdExuaU4oO5n9GuV9qgG q70e9vFubQ+pCA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:08:19 2025 by rpki-client