This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json) Hash identifier: 0oIYjglNJSHLb2Dx4gyLuQV/XOUIV2d7z3gx+i0OtKs= Subject key identifier: CE:4B:22:A4:81:0F:51:7F:72:FA:08:89:6A:57:F0:01:B4:78:45:EB Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15 Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15 Certificate serial: 019B3DFF0CD1EE886A3359B90606050F8861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 23:01:23 +0000 Manifest this update: Sat 20 Dec 2025 23:01:23 +0000 Manifest next update: Sun 21 Dec 2025 23:01:23 +0000 Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: rNUkpk65bK4DWTBGLhZIPBLZys5+wuRS7G+foxXvdLY=) 2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:ff:0c:d1:ee:88:6a:33:59:b9:06:06:05:0f:88:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15 Validity Not Before: Dec 20 23:01:23 2025 GMT Not After : Dec 21 23:01:23 2025 GMT Subject: CN=ce4b22a4810f517f72fa08896a57f001b47845eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1d:9e:4c:7c:cf:af:93:73:44:00:bd:e5:48: 14:af:ce:c1:80:81:14:e0:fc:0a:45:1b:94:75:cf: 43:2b:3e:25:91:da:9d:32:72:d9:44:a5:2d:38:bd: 1a:a2:e5:52:a5:db:2e:78:99:b0:c3:56:27:39:34: da:3d:e9:ca:a0:8b:66:f9:59:f3:f3:fc:b4:ea:a3: 4e:af:f9:ca:7a:f2:06:c9:54:27:71:c3:a8:0a:10: 34:22:16:bb:a3:4a:78:0d:57:20:59:fb:f7:1b:0f: 84:49:7b:81:bf:e8:c8:9b:ba:7f:54:5b:34:bb:6f: 8f:7e:89:59:5d:44:0c:8a:51:76:1e:8d:0d:65:98: 38:ae:f2:72:e4:c9:cd:87:56:2c:c3:68:63:20:64: eb:e5:ea:dd:49:6e:a2:f2:93:6d:1e:13:fd:ee:72: 05:b9:56:eb:5a:29:67:9a:0f:81:e0:5a:be:9e:91: 70:5d:29:ce:94:64:5f:15:c0:b2:e4:bb:94:9d:66: aa:9f:7f:18:6d:7a:00:e5:3e:2b:37:72:e5:1a:5c: 9e:d8:ac:59:63:fc:1c:38:56:6f:b4:f4:63:7b:cb: aa:5a:a0:6b:e7:0f:88:06:ad:9e:67:41:5d:1f:ef: c5:1d:b8:2d:a5:50:aa:0d:f3:2a:8d:e7:bf:25:59: d0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4B:22:A4:81:0F:51:7F:72:FA:08:89:6A:57:F0:01:B4:78:45:EB X509v3 Authority Key Identifier: keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f6:60:45:3f:4e:33:e6:e0:f2:6f:1e:08:be:4d:9f:fd:22: 2d:b7:ad:1e:80:ba:e7:39:45:52:b6:98:46:93:f8:7d:2f:ef: 06:74:2b:af:d1:e6:d4:45:25:bc:b7:f8:bb:3c:7b:7a:3d:e7: ab:64:4e:83:24:fb:89:79:1f:a2:bf:b7:21:36:25:ba:11:d1: 4c:5f:90:24:f2:82:24:7c:dd:d7:6a:6b:3a:d0:43:ab:ae:94: 59:2e:65:68:7c:71:92:cd:ca:9c:67:e2:7d:79:1a:4c:bd:1e: 4b:97:ab:d8:7e:98:33:0f:0b:32:36:f8:81:6f:ff:97:6b:54: 88:5c:d9:e5:d8:17:d8:c6:5d:44:0b:75:36:75:a5:3c:b5:93: 97:e5:ae:97:93:86:bb:59:81:67:0d:b8:68:c2:fb:8b:6e:fe: 7b:0b:38:f5:ad:e2:72:fd:8b:d2:14:63:82:f8:76:40:8d:34: 27:eb:31:15:18:3d:3d:5b:eb:2e:ad:01:3b:0a:e2:d0:f6:4f: ce:2a:96:5d:73:37:a3:82:86:36:af:d3:cf:f0:23:02:46:61: bb:24:9a:d3:c2:59:ea:3e:cd:8d:ff:5c:34:76:75:22:8b:09: 70:34:d5:5f:45:6b:04:32:da:00:1a:22:16:d5:15:70:67:60: 61:b7:25:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/wzR7ohqM1m5BgYFD4hhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy MTdlMTUwHhcNMjUxMjIwMjMwMTIzWhcNMjUxMjIxMjMwMTIzWjAzMTEwLwYDVQQD EyhjZTRiMjJhNDgxMGY1MTdmNzJmYTA4ODk2YTU3ZjAwMWI0Nzg0NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R2eTHzPr5NzRAC95UgUr87BgIEU 4PwKRRuUdc9DKz4lkdqdMnLZRKUtOL0aouVSpdsueJmww1YnOTTaPenKoItm+Vnz 8/y06qNOr/nKevIGyVQnccOoChA0Iha7o0p4DVcgWfv3Gw+ESXuBv+jIm7p/VFs0 u2+PfolZXUQMilF2Ho0NZZg4rvJy5MnNh1Ysw2hjIGTr5erdSW6i8pNtHhP97nIF uVbrWilnmg+B4Fq+npFwXSnOlGRfFcCy5LuUnWaqn38YbXoA5T4rN3LlGlye2KxZ Y/wcOFZvtPRje8uqWqBr5w+IBq2eZ0FdH+/FHbgtpVCqDfMqjee/JVnQFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5LIqSBD1F/cvoIiWpX8AG0eEXrMB8GA1UdIwQY MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPZgRT9O M+bg8m8eCL5Nn/0iLbetHoC65zlFUraYRpP4fS/vBnQrr9Hm1EUlvLf4uzx7ej3n q2ROgyT7iXkfor+3ITYluhHRTF+QJPKCJHzd12prOtBDq66UWS5laHxxks3KnGfi fXkaTL0eS5er2H6YMw8LMjb4gW//l2tUiFzZ5dgX2MZdRAt1NnWlPLWTl+Wul5OG u1mBZw24aML7i27+ews49a3icv2L0hRjgvh2QI00J+sxFRg9PVvrLq0BOwri0PZP ziqWXXM3o4KGNq/Tz/AjAkZhuySa08JZ6j7Njf9cNHZ1IosJcDTVX0VrBDLaABoi FtUVcGdgYbclEg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:41 2025 by rpki-client