This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json) Hash identifier: DZfNiqJFbhRm/0ndOCU9nrol1cMAnbQZKhHDLinel3U= Subject key identifier: A0:6C:B5:28:1F:F1:5A:6E:7E:D9:66:F8:5F:2A:E7:D1:78:2F:BA:F0 Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Certificate serial: 019B4BF1480FDBDE3D4C5358AA8353E907D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 16:01:02 +0000 Manifest this update: Tue 23 Dec 2025 16:01:02 +0000 Manifest next update: Wed 24 Dec 2025 16:01:02 +0000 Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=) 2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: 5LEvCf4jAS2VU4yM3KHzGe+eK8h6xeNqSQ5cNHI26lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:48:0f:db:de:3d:4c:53:58:aa:83:53:e9:07:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Validity Not Before: Dec 23 16:01:02 2025 GMT Not After : Dec 24 16:01:02 2025 GMT Subject: CN=a06cb5281ff15a6e7ed966f85f2ae7d1782fbaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:e2:46:8f:4b:86:69:a9:06:a7:c4:67:03: f0:67:5d:de:14:df:4c:00:f9:9d:7c:6c:70:79:74: 65:28:09:00:0e:20:c3:6f:61:39:dd:03:da:5f:f1: d9:b8:33:d2:d3:a5:0b:8b:04:40:0c:58:33:25:4c: 9f:bb:9e:52:f7:81:31:ae:22:7f:b3:f0:85:b5:ec: 88:42:3f:65:89:d9:7c:ab:3c:f1:42:32:5e:aa:5f: 4e:86:88:46:26:9e:a9:cc:c3:57:b7:96:f5:7a:1b: 81:5e:98:fd:85:74:a9:00:58:b2:be:03:64:1d:5a: 6a:20:c3:7e:b0:95:b4:e2:22:3f:f6:20:01:49:92: c9:61:3d:f5:2d:cc:2a:85:8c:35:be:d9:ee:6a:4a: 01:d2:4e:c3:76:f8:59:ee:4d:9d:cd:7c:cb:f5:60: d6:b0:43:22:78:3f:bf:c1:d3:c1:2d:3b:da:f9:29: 3f:6e:1f:1a:7e:8a:a5:17:93:63:df:4d:d1:83:14: 6b:18:a4:ac:27:b5:5b:92:c1:ce:72:f3:2e:fe:17: 13:1c:1d:0e:f8:cb:96:57:88:8b:9f:01:8c:f4:02: 76:e5:ea:f5:51:62:d4:85:70:ab:75:cd:5a:3d:48: 4a:55:d6:55:31:66:f9:2e:03:aa:c9:20:c4:3e:bf: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6C:B5:28:1F:F1:5A:6E:7E:D9:66:F8:5F:2A:E7:D1:78:2F:BA:F0 X509v3 Authority Key Identifier: keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:be:ad:eb:b1:5f:04:ab:f8:25:ae:aa:4b:86:14:13:e6:17: 25:9c:34:a2:be:30:e9:1f:02:fb:46:8b:de:aa:d5:52:4f:99: 64:03:54:c2:67:79:c3:3b:c7:1f:e1:b0:18:7a:d3:ce:71:c8: 06:10:97:1c:7c:d5:83:48:92:ed:9a:42:d9:0a:c2:99:8c:d9: 4f:fd:00:57:d2:b9:e0:30:9b:57:73:5d:f5:76:a5:06:dd:68: b1:fa:b4:b7:5b:97:42:b4:78:0e:54:dc:82:0f:70:00:5c:2e: 80:05:19:ca:4e:3a:db:9f:dd:cf:41:eb:89:a7:58:c9:5c:4e: f4:b8:33:58:66:20:55:52:43:71:6d:e0:9a:d7:98:2e:58:5a: 35:37:f7:aa:00:e3:d9:51:07:9c:ce:b7:8d:c7:6b:e5:9c:6b: 23:48:2b:e4:ec:c6:be:f7:a7:19:0f:34:dd:4f:12:38:00:3b: 05:e6:6a:05:e2:94:e8:b2:5a:52:e4:0e:c4:96:ba:2b:2a:31: 59:60:cb:a9:55:e2:9e:b8:c7:0a:e1:91:b7:3f:a5:f1:36:66: d5:bf:57:27:00:8d:af:6b:9e:39:8b:3c:2f:25:8c:d0:1b:db: f8:c5:2a:6d:f4:55:6d:e8:a6:fb:0d:6f:60:5d:45:4a:36:8b: bc:d2:af:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8UgP2949TFNYqoNT6QfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGUxMDNhYWVjNDMyZmMxOTFkNDk4MTliZDFhYjcxZmUx Y2ZhODAwHhcNMjUxMjIzMTYwMTAyWhcNMjUxMjI0MTYwMTAyWjAzMTEwLwYDVQQD EyhhMDZjYjUyODFmZjE1YTZlN2VkOTY2Zjg1ZjJhZTdkMTc4MmZiYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroTiRo9LhmmpBqfEZwPwZ13eFN9M APmdfGxweXRlKAkADiDDb2E53QPaX/HZuDPS06ULiwRADFgzJUyfu55S94ExriJ/ s/CFteyIQj9lidl8qzzxQjJeql9OhohGJp6pzMNXt5b1ehuBXpj9hXSpAFiyvgNk HVpqIMN+sJW04iI/9iABSZLJYT31LcwqhYw1vtnuakoB0k7DdvhZ7k2dzXzL9WDW sEMieD+/wdPBLTva+Sk/bh8afoqlF5Nj303RgxRrGKSsJ7VbksHOcvMu/hcTHB0O +MuWV4iLnwGM9AJ25er1UWLUhXCrdc1aPUhKVdZVMWb5LgOqySDEPr8HywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBstSgf8Vpuftlm+F8q59F4L7rwMB8GA1UdIwQY MBaAFIVOEDquxDL8GR1JgZvRq3H+HPqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEt OWMwMWRmN2I5ZTY2LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEtOWMwMWRmN2I5ZTY2 LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb6t67Ff BKv4Ja6qS4YUE+YXJZw0or4w6R8C+0aL3qrVUk+ZZANUwmd5wzvHH+GwGHrTznHI BhCXHHzVg0iS7ZpC2QrCmYzZT/0AV9K54DCbV3Nd9XalBt1osfq0t1uXQrR4DlTc gg9wAFwugAUZyk4625/dz0HriadYyVxO9LgzWGYgVVJDcW3gmteYLlhaNTf3qgDj 2VEHnM63jcdr5ZxrI0gr5OzGvvenGQ803U8SOAA7BeZqBeKU6LJaUuQOxJa6Kyox WWDLqVXinrjHCuGRtz+l8TZm1b9XJwCNr2ueOYs8LyWM0Bvb+MUqbfRVbeim+w1v YF1FSjaLvNKvPQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:41 2025 by rpki-client