This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json) Hash identifier: iVZlBZM5kraGmu6iBhQmfxJSZqMjsD0F7IZvU/T6Rh8= Subject key identifier: 6D:D5:AA:B6:D4:29:89:F9:64:75:54:31:FF:09:2C:58:FF:8E:7E:5C Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Certificate serial: 019B3C10899CB4AC10D43A547BB6D55EB92F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 14:01:15 +0000 Manifest this update: Sat 20 Dec 2025 14:01:15 +0000 Manifest next update: Sun 21 Dec 2025 14:01:15 +0000 Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=) 2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: eRbF3u5uyoekBWdEGouDZZNXsf7LPmNgFNf5R2brEQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:89:9c:b4:ac:10:d4:3a:54:7b:b6:d5:5e:b9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54 Validity Not Before: Dec 20 14:01:15 2025 GMT Not After : Dec 21 14:01:15 2025 GMT Subject: CN=6dd5aab6d42989f964755431ff092c58ff8e7e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:c8:4e:0a:1b:60:39:d6:b5:d5:a8:20:2b: 70:44:43:49:76:34:22:2f:32:5e:aa:af:62:03:56: c4:30:0a:c6:54:c9:90:8f:49:f4:b2:94:b1:64:11: b6:36:db:49:6d:cf:77:65:32:f8:e8:52:ad:7e:10: 0b:ce:61:2f:43:36:46:fb:b4:92:46:11:bc:56:d2: db:0f:2d:e0:ac:19:1c:78:d0:05:73:72:24:7f:f5: 82:dd:cf:53:d0:fd:85:14:0a:27:8d:dd:9f:e1:d9: 72:68:5b:6f:a8:45:4a:e5:8e:cf:07:64:19:08:b7: 52:f0:62:8c:9d:54:e4:c0:e3:7c:60:b4:ab:d6:f4: 05:5f:e9:84:87:59:56:72:e1:83:d5:19:dd:40:44: d5:53:73:76:7e:9f:7d:ff:8a:b2:9e:00:33:05:d7: f3:c3:85:60:ca:60:16:57:f4:a6:5f:8a:d3:43:4d: ac:6b:4d:cb:0f:78:12:6d:31:bc:82:0b:47:1c:56: b6:18:f3:63:4b:3c:34:f3:cd:d4:cf:d8:98:4f:3e: 3d:46:d1:15:55:20:96:7c:f9:c4:b3:b9:d9:35:00: dd:cc:e3:6c:39:d6:f0:9e:ee:ea:04:3d:ef:82:0c: e2:6d:b7:87:26:cb:1d:e6:ca:75:70:6a:98:f1:0c: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D5:AA:B6:D4:29:89:F9:64:75:54:31:FF:09:2C:58:FF:8E:7E:5C X509v3 Authority Key Identifier: keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:43:6b:d9:3b:fe:16:96:f0:5a:83:05:fb:2d:49:76:ca:e9: 4b:89:93:94:4a:7c:33:0a:13:bd:7e:49:11:a6:4b:4b:ee:0a: 1a:dc:21:70:43:50:fd:ed:c9:71:21:96:ab:f1:0b:a9:ff:e1: 4d:48:b5:54:3b:e4:af:67:e9:4a:dd:50:51:1a:56:49:d4:64: 18:18:7b:37:f7:a5:0a:84:f3:c1:50:2f:10:7a:f0:df:43:d3: 5d:3d:4e:49:59:57:0a:1c:a1:00:18:11:57:35:b6:d7:b8:17: e2:a3:37:26:ea:29:65:44:f8:7e:78:3b:4c:eb:d8:50:44:c1: 6b:28:98:68:2f:a4:49:02:de:1b:66:fc:cd:91:09:5c:53:10: e3:68:ce:81:34:cf:61:a8:12:34:28:da:db:7b:aa:ad:ee:78: f2:4c:41:99:9a:ae:92:d5:94:40:92:ca:bc:01:f1:8a:eb:44: 90:93:68:6d:ac:c2:af:6a:72:72:cb:e8:87:02:c3:4e:ce:14: 4f:5d:0b:38:57:48:4a:89:df:85:69:d8:52:8a:2a:21:21:56: dc:53:bc:46:14:ac:04:0f:8f:46:f0:17:a1:c4:63:7a:16:bb: 1c:50:da:b7:c9:21:c4:47:a0:63:fe:ce:25:48:54:45:ad:36: 73:b8:dd:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EImctKwQ1DpUe7bVXrkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2 NzRhNTQwHhcNMjUxMjIwMTQwMTE1WhcNMjUxMjIxMTQwMTE1WjAzMTEwLwYDVQQD Eyg2ZGQ1YWFiNmQ0Mjk4OWY5NjQ3NTU0MzFmZjA5MmM1OGZmOGU3ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCrITgobYDnWtdWoICtwRENJdjQi LzJeqq9iA1bEMArGVMmQj0n0spSxZBG2NttJbc93ZTL46FKtfhALzmEvQzZG+7SS RhG8VtLbDy3grBkceNAFc3Ikf/WC3c9T0P2FFAonjd2f4dlyaFtvqEVK5Y7PB2QZ CLdS8GKMnVTkwON8YLSr1vQFX+mEh1lWcuGD1RndQETVU3N2fp99/4qyngAzBdfz w4VgymAWV/SmX4rTQ02sa03LD3gSbTG8ggtHHFa2GPNjSzw0883Uz9iYTz49RtEV VSCWfPnEs7nZNQDdzONsOdbwnu7qBD3vggzibbeHJssd5sp1cGqY8QyL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3VqrbUKYn5ZHVUMf8JLFj/jn5cMB8GA1UdIwQY MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0Nr2Tv+ FpbwWoMF+y1JdsrpS4mTlEp8MwoTvX5JEaZLS+4KGtwhcENQ/e3JcSGWq/ELqf/h TUi1VDvkr2fpSt1QURpWSdRkGBh7N/elCoTzwVAvEHrw30PTXT1OSVlXChyhABgR VzW217gX4qM3JuopZUT4fng7TOvYUETBayiYaC+kSQLeG2b8zZEJXFMQ42jOgTTP YagSNCja23uqre548kxBmZquktWUQJLKvAHxiutEkJNobazCr2pycsvohwLDTs4U T10LOFdISonfhWnYUooqISFW3FO8RhSsBA+PRvAXocRjeha7HFDat8khxEegY/7O JUhURa02c7jdJA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:28 2025 by rpki-client