This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json) Hash identifier: YnV9Et8wL2rOiXZRVSH8Yk8BixvAIsPX6oxqi0npsyA= Subject key identifier: A9:E7:52:AF:02:F8:5E:13:D1:38:C3:3C:27:F5:65:90:A5:98:B6:22 Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Certificate serial: 019B424AEE8B980DACB833E0C90007288E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 19:02:45 +0000 Manifest this update: Sun 21 Dec 2025 19:02:45 +0000 Manifest next update: Mon 22 Dec 2025 19:02:45 +0000 Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=) 2: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: NPqpX/sSNl80TZvhhpmBSg9jD6BazHYnj4p+bWVKv3w=) 3: rgiByjqFfwFN6OSc0cOgOEZW5sw.roa (hash: t5OL+2otELmhnTASFUwNxb+1yFe65JzVGd7hwNx0lx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:ee:8b:98:0d:ac:b8:33:e0:c9:00:07:28:8e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Validity Not Before: Dec 21 19:02:45 2025 GMT Not After : Dec 22 19:02:45 2025 GMT Subject: CN=a9e752af02f85e13d138c33c27f56590a598b622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:05:58:33:5f:bd:b0:5f:2b:72:39:94:28: 5a:13:17:76:dc:4f:73:b2:81:6b:31:1a:28:5a:e8: ae:2a:78:10:bb:ef:65:46:22:93:15:b7:f6:5c:66: 64:e9:64:7f:8a:bf:2d:d3:7d:9a:8b:8e:61:61:9f: 4d:c0:54:4f:c1:42:64:0d:2e:91:35:36:6b:4e:46: 22:74:56:6d:3b:ae:9c:3e:4e:cb:8d:30:65:27:6b: ca:7d:0c:ab:f6:0c:7a:79:93:9d:33:89:ea:b2:be: 5d:6d:01:1e:97:85:58:b2:a1:9c:4f:ca:06:70:3c: 1f:8c:36:c9:f5:1e:ee:77:b6:85:61:91:0c:7d:76: 9d:df:20:89:24:76:ba:d7:92:53:c6:b2:1d:3c:52: 0b:1b:1e:3e:53:da:7e:12:f5:03:1a:96:5d:78:ee: 78:75:49:1c:f4:b8:09:93:b7:37:18:b8:d9:01:71: 2c:ff:a9:81:f3:5c:78:45:9e:f9:a6:13:00:f4:c9: 79:68:65:dd:50:42:59:50:1b:db:56:34:84:8b:5a: 48:b2:71:ae:23:48:b0:a6:1a:a0:10:ad:ce:03:1b: 8f:1b:c6:90:19:3c:0c:83:ce:94:2d:7e:35:0b:78: 74:0b:32:79:85:c8:53:2e:19:dc:79:97:f2:87:59: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E7:52:AF:02:F8:5E:13:D1:38:C3:3C:27:F5:65:90:A5:98:B6:22 X509v3 Authority Key Identifier: keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:08:37:ca:b4:57:fb:c0:87:d9:e3:ea:a0:b5:83:27:7e:fa: 62:12:78:6c:9d:1d:3a:89:3a:32:88:b6:73:6c:62:01:7c:b5: fd:23:8e:5c:75:e5:8a:23:44:82:05:0b:42:11:b3:cf:c3:a3: aa:97:84:3b:94:99:08:54:33:56:b0:1f:62:fc:8a:9c:13:ab: 10:ff:b4:b0:13:f0:91:fc:fd:a7:22:e5:16:a6:81:c8:1c:4b: 29:d4:a5:86:11:5d:13:72:41:13:27:b2:3b:c3:3c:d4:ca:02: 7e:3a:0b:07:96:6a:87:11:f0:2d:79:ec:72:d2:ca:4c:db:39: 20:c3:0a:e7:b5:86:8e:23:a8:6e:76:b7:25:85:bc:60:bb:28: 29:83:db:a2:da:d3:4b:e1:74:63:5b:cc:b9:24:b1:71:1e:57: 36:bb:cb:70:80:41:f1:97:63:b8:9f:61:b1:05:36:fd:0e:5f: 49:0c:cb:54:ea:93:cb:1c:94:08:89:1e:27:d0:f7:8c:e8:9b: d5:c5:28:d4:d9:0d:e7:d4:ec:dd:e4:83:e0:fb:d7:8a:ed:cb: ac:a7:b2:7f:25:d8:47:33:cc:ae:a0:57:b5:28:a9:a8:b2:1d: 11:84:10:d5:a8:ce:86:cc:2b:f2:ad:be:3b:e0:64:a6:e8:34: 63:64:3e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSu6LmA2suDPgyQAHKI47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz ZGI4MzQwHhcNMjUxMjIxMTkwMjQ1WhcNMjUxMjIyMTkwMjQ1WjAzMTEwLwYDVQQD EyhhOWU3NTJhZjAyZjg1ZTEzZDEzOGMzM2MyN2Y1NjU5MGE1OThiNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4MFWDNfvbBfK3I5lChaExd23E9z soFrMRooWuiuKngQu+9lRiKTFbf2XGZk6WR/ir8t032ai45hYZ9NwFRPwUJkDS6R NTZrTkYidFZtO66cPk7LjTBlJ2vKfQyr9gx6eZOdM4nqsr5dbQEel4VYsqGcT8oG cDwfjDbJ9R7ud7aFYZEMfXad3yCJJHa615JTxrIdPFILGx4+U9p+EvUDGpZdeO54 dUkc9LgJk7c3GLjZAXEs/6mB81x4RZ75phMA9Ml5aGXdUEJZUBvbVjSEi1pIsnGu I0iwphqgEK3OAxuPG8aQGTwMg86ULX41C3h0CzJ5hchTLhnceZfyh1nB0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnnUq8C+F4T0TjDPCf1ZZClmLYiMB8GA1UdIwQY MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgg3yrRX +8CH2ePqoLWDJ376YhJ4bJ0dOok6Moi2c2xiAXy1/SOOXHXliiNEggULQhGzz8Oj qpeEO5SZCFQzVrAfYvyKnBOrEP+0sBPwkfz9pyLlFqaByBxLKdSlhhFdE3JBEyey O8M81MoCfjoLB5ZqhxHwLXnsctLKTNs5IMMK57WGjiOobna3JYW8YLsoKYPbotrT S+F0Y1vMuSSxcR5XNrvLcIBB8ZdjuJ9hsQU2/Q5fSQzLVOqTyxyUCIkeJ9D3jOib 1cUo1NkN59Ts3eSD4PvXiu3LrKeyfyXYRzPMrqBXtSipqLIdEYQQ1ajOhswr8q2+ O+Bkpug0Y2Q+3w== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:04 2025 by rpki-client