This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json) Hash identifier: 8FDLga3OGB5O33DiomvpnLUP9useU9fpXq3irVAvKvQ= Subject key identifier: 4A:A5:2C:8E:72:EE:2F:EC:E3:23:42:4C:AB:D2:1B:F7:84:78:FB:85 Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6 Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6 Certificate serial: 019B3ED9F762E22680541FC28ABD13AB94A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 03:00:30 +0000 Manifest this update: Sun 21 Dec 2025 03:00:30 +0000 Manifest next update: Mon 22 Dec 2025 03:00:30 +0000 Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=) 2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: A3R0fzzBkYLGoe39Oe32EKYGK0zRV4gnhlTH4YXNM90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:d9:f7:62:e2:26:80:54:1f:c2:8a:bd:13:ab:94:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6 Validity Not Before: Dec 21 03:00:30 2025 GMT Not After : Dec 22 03:00:30 2025 GMT Subject: CN=4aa52c8e72ee2fece323424cabd21bf78478fb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:78:27:f9:f5:56:0c:87:72:b5:cd:89:b3: 67:8b:87:3a:d9:05:d5:d2:71:d9:fc:17:89:ae:2e: 36:43:94:86:87:7f:76:8b:c8:39:5b:e5:16:6c:2b: df:66:22:74:2d:8a:59:3e:6c:98:54:7c:03:84:4d: 57:57:ac:be:3a:1e:5e:4a:ca:61:5b:38:e0:cc:4f: be:23:80:43:29:d8:ce:e3:5a:03:09:e4:ce:02:69: 43:e0:a4:52:a2:fc:63:4c:50:7f:1d:20:e6:d0:f9: 03:e8:78:73:aa:bf:e5:8b:66:a4:13:71:35:4d:00: 7c:e1:21:47:30:34:38:f3:6f:95:0a:ba:69:51:f7: 33:cc:b7:9d:4a:6d:e3:d3:ff:5a:0a:41:b8:8c:14: 6d:24:f8:f2:7f:34:94:9f:b9:fb:dc:0d:02:c6:f9: 3b:98:ee:43:ec:85:7f:34:6d:4e:39:56:ac:81:63: 06:ed:e2:7f:8a:f9:e4:4b:d1:fb:97:42:73:02:0a: b4:b2:6f:26:88:4c:8e:49:fc:8e:ba:c1:97:1e:a3: 74:1d:08:98:49:81:50:75:15:c7:bd:1c:de:48:12: d5:66:5b:47:76:45:01:8c:93:8a:22:a1:56:06:57: a8:76:f5:dc:fb:e1:e3:a3:15:26:b4:8f:e2:42:b2: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A5:2C:8E:72:EE:2F:EC:E3:23:42:4C:AB:D2:1B:F7:84:78:FB:85 X509v3 Authority Key Identifier: keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:48:d2:5b:8f:93:f2:db:b0:7d:45:42:e3:ef:fb:a2:ed:f0: 36:c8:6a:9e:aa:67:73:a9:89:a4:c4:81:89:c5:79:c5:2c:15: e1:6b:68:b1:a4:68:70:9c:83:1a:a3:23:a4:a0:e2:bf:b6:80: 19:02:fb:18:81:46:c1:ba:6d:9d:7d:83:74:9f:9b:a6:51:3e: c8:3a:db:ad:97:ae:23:87:6b:05:6e:73:d9:70:19:dd:2a:15: 12:d9:61:ad:1f:58:44:7e:51:22:e1:13:2b:c3:45:b2:7c:94: 08:cb:13:7e:74:1f:b5:a2:37:db:e7:82:fe:f1:2e:45:fc:ef: a7:24:52:2a:0c:39:ba:75:81:c0:08:84:b3:c4:c0:61:dc:fa: d2:c0:97:a2:c3:fa:15:67:0a:58:da:d4:65:d4:93:e9:a2:85: 10:21:de:40:67:ca:97:07:e7:96:ec:19:b2:2d:d4:18:4c:af: 68:7e:55:12:df:e0:cc:5e:70:ed:9a:a7:7c:a4:fb:a4:44:60: b7:1d:1f:af:f6:2b:27:2c:9b:50:a7:c4:b7:70:d8:db:8e:c3: 2d:be:27:25:cf:bc:df:fa:18:1e:ae:43:c7:45:67:c8:11:52: ea:b0:79:5e:b8:1b:e7:19:42:26:76:18:66:c5:b8:34:09:16: c8:a9:79:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2fdi4iaAVB/Cir0Tq5SiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTNkZmVlMTc2ODczOWViNTk3NmMyNDViNWFkMDA1YjMy NThlYzYwHhcNMjUxMjIxMDMwMDMwWhcNMjUxMjIyMDMwMDMwWjAzMTEwLwYDVQQD Eyg0YWE1MmM4ZTcyZWUyZmVjZTMyMzQyNGNhYmQyMWJmNzg0NzhmYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjN4J/n1VgyHcrXNibNni4c62QXV 0nHZ/BeJri42Q5SGh392i8g5W+UWbCvfZiJ0LYpZPmyYVHwDhE1XV6y+Oh5eSsph WzjgzE++I4BDKdjO41oDCeTOAmlD4KRSovxjTFB/HSDm0PkD6Hhzqr/li2akE3E1 TQB84SFHMDQ482+VCrppUfczzLedSm3j0/9aCkG4jBRtJPjyfzSUn7n73A0Cxvk7 mO5D7IV/NG1OOVasgWMG7eJ/ivnkS9H7l0JzAgq0sm8miEyOSfyOusGXHqN0HQiY SYFQdRXHvRzeSBLVZltHdkUBjJOKIqFWBleodvXc++HjoxUmtI/iQrLWfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqlLI5y7i/s4yNCTKvSG/eEePuFMB8GA1UdIwQY MBaAFIaT3+4XaHOetZdsJFta0AWzJY7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAt NjY0ODIwNzFiODE5LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYjA2M2YtNGMzYy00OTcxLWFlNTAtNjY0ODIwNzFiODE5 LzEvaHBQZjdoZG9jNTYxbDJ3a1cxclFCYk1sanNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0jSW4+T 8tuwfUVC4+/7ou3wNshqnqpnc6mJpMSBicV5xSwV4WtosaRocJyDGqMjpKDiv7aA GQL7GIFGwbptnX2DdJ+bplE+yDrbrZeuI4drBW5z2XAZ3SoVEtlhrR9YRH5RIuET K8NFsnyUCMsTfnQftaI32+eC/vEuRfzvpyRSKgw5unWBwAiEs8TAYdz60sCXosP6 FWcKWNrUZdST6aKFECHeQGfKlwfnluwZsi3UGEyvaH5VEt/gzF5w7ZqnfKT7pERg tx0fr/YrJyybUKfEt3DY247DLb4nJc+83/oYHq5Dx0VnyBFS6rB5Xrgb5xlCJnYY ZsW4NAkWyKl5iw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:01:27 2025 by rpki-client