This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft File: rHpOXEMf9seeT1vRtGsF-fRBEM4.mft (raw, json) Hash identifier: J5t0tqp6f+5eIu50R4uWW/ZTesScoi6QIj9FxGy0Xgg= Subject key identifier: 7B:FD:1D:28:C1:02:4C:34:C9:D5:D9:4E:3F:AA:78:45:EF:0E:E9:52 Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce Certificate serial: 019B21E2B7DC8AEF140E3427CA582DA942AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft Manifest number: 0E17 Signing time: Mon 15 Dec 2025 12:01:04 +0000 Manifest this update: Mon 15 Dec 2025 12:01:04 +0000 Manifest next update: Tue 16 Dec 2025 12:01:04 +0000 Files and hashes: 1: YFU0rK0Che90IboZIqxr-FhxEZs.roa (hash: +N2ECLyQEU3So4t+LKUIhIdvw7PoPWjMAcQERFvIBbI=) 2: rHpOXEMf9seeT1vRtGsF-fRBEM4.crl (hash: 5q7MAAA8xbygTf4UngYbazZbS11fDFVsKRCFaD+tCEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:b7:dc:8a:ef:14:0e:34:27:ca:58:2d:a9:42:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce Validity Not Before: Dec 15 12:01:04 2025 GMT Not After : Dec 16 12:01:04 2025 GMT Subject: CN=7bfd1d28c1024c34c9d5d94e3faa7845ef0ee952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:aa:24:c9:0a:37:f5:f2:e2:12:59:7b:37: 88:f1:78:50:7d:76:7b:30:1f:0a:64:7e:ca:7f:90: b7:58:71:73:1a:e1:cf:eb:1b:aa:ba:d7:d2:e8:6e: 9e:99:0a:33:c7:f9:28:be:80:c6:c9:a9:42:4c:3a: 5e:85:9c:59:fb:6c:33:83:3e:9c:d5:2d:75:dc:ff: 5e:5b:b3:5a:0d:7a:8c:0c:cb:71:66:4c:8d:2c:80: ea:d0:4e:96:8d:bb:da:a9:cf:41:d9:fc:e0:6d:b1: a9:a7:dd:66:b1:86:e7:36:16:1d:47:df:30:a6:2c: f4:08:3f:48:f6:f8:4e:89:bc:5e:37:b1:ec:26:91: c6:da:e9:78:74:34:e3:db:3e:c2:68:9a:f3:80:7e: 98:1a:96:a4:61:3e:b8:ed:2e:09:37:54:ec:d6:b0: 12:ed:e4:a7:ae:80:53:1e:56:00:ac:9c:6c:ed:2e: b4:c9:e0:99:7a:bb:1b:01:97:7a:75:c9:c0:cd:4e: 41:33:e5:ce:a9:f8:d8:9e:88:ed:6e:b3:29:f6:2a: 59:c1:d6:62:d7:7e:73:f6:c3:6f:bf:4d:b3:6d:9c: cc:7d:11:5b:f1:05:06:6c:e1:28:78:2c:05:49:be: dd:07:a0:4d:90:10:a4:e1:f2:4b:24:9d:a0:df:7d: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:1D:28:C1:02:4C:34:C9:D5:D9:4E:3F:AA:78:45:EF:0E:E9:52 X509v3 Authority Key Identifier: keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:31:47:c3:05:aa:ce:4d:41:9a:fb:68:71:64:5e:c6:62:94: 86:3f:8a:c0:c1:18:58:93:44:f2:0d:d2:02:f2:19:6b:6d:ef: 14:23:06:c2:52:30:a1:bb:52:a0:b9:24:d7:73:fa:7f:cb:83: e1:21:fe:ce:8b:8f:13:e1:0c:8a:71:59:01:c3:e6:1a:71:1b: 54:bb:fd:75:e3:2c:ec:f8:84:3d:51:fc:cd:6c:4e:9f:64:54: cd:82:3d:41:d2:92:b2:6d:b1:bb:5d:b1:1d:ad:01:e9:f0:7d: 4c:70:48:59:4a:0f:e3:48:48:41:2e:17:75:be:3d:01:40:c3: 38:81:50:3a:5f:7f:8d:99:c6:d4:95:86:40:a1:1d:2c:69:92: 13:85:04:cf:31:78:90:bc:13:d8:aa:31:6f:80:60:c1:4d:f2: 49:05:97:59:94:8f:76:90:33:36:be:cf:ab:1a:71:98:b7:e5: 30:28:2b:ba:be:fb:f1:8d:c0:f7:f1:69:e5:cc:dd:a7:be:b3: 52:7b:1d:cd:28:c9:15:cb:ce:48:f9:dd:65:e6:09:af:88:9c: 20:b1:52:22:03:34:17:d2:50:75:46:af:31:41:fb:51:5c:07: 30:51:23:c0:5c:0a:82:01:de:4c:66:41:e6:f3:6b:de:9e:96: 7f:ad:6f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4rfciu8UDjQnylgtqUKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2E0ZTVjNDMxZmY2Yzc5ZTRmNWJkMWI0NmIwNWY5ZjQ0 MTEwY2UwHhcNMjUxMjE1MTIwMTA0WhcNMjUxMjE2MTIwMTA0WjAzMTEwLwYDVQQD Eyg3YmZkMWQyOGMxMDI0YzM0YzlkNWQ5NGUzZmFhNzg0NWVmMGVlOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm6qJMkKN/Xy4hJZezeI8XhQfXZ7 MB8KZH7Kf5C3WHFzGuHP6xuqutfS6G6emQozx/kovoDGyalCTDpehZxZ+2wzgz6c 1S113P9eW7NaDXqMDMtxZkyNLIDq0E6Wjbvaqc9B2fzgbbGpp91msYbnNhYdR98w piz0CD9I9vhOibxeN7HsJpHG2ul4dDTj2z7CaJrzgH6YGpakYT647S4JN1Ts1rAS 7eSnroBTHlYArJxs7S60yeCZersbAZd6dcnAzU5BM+XOqfjYnojtbrMp9ipZwdZi 135z9sNvv02zbZzMfRFb8QUGbOEoeCwFSb7dB6BNkBCk4fJLJJ2g3317IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv9HSjBAkw0ydXZTj+qeEXvDulSMB8GA1UdIwQY MBaAFKx6TlxDH/bHnk9b0bRrBfn0QRDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMt ZjRlZmQxNzdlOWQwLzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jODhkNTAtOTIzYi00ODUzLTkwOWMtZjRlZmQxNzdlOWQw LzEvckhwT1hFTWY5c2VlVDF2UnRHc0YtZlJCRU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzFHwwWq zk1BmvtocWRexmKUhj+KwMEYWJNE8g3SAvIZa23vFCMGwlIwobtSoLkk13P6f8uD 4SH+zouPE+EMinFZAcPmGnEbVLv9deMs7PiEPVH8zWxOn2RUzYI9QdKSsm2xu12x Ha0B6fB9THBIWUoP40hIQS4Xdb49AUDDOIFQOl9/jZnG1JWGQKEdLGmSE4UEzzF4 kLwT2Koxb4BgwU3ySQWXWZSPdpAzNr7PqxpxmLflMCgrur778Y3A9/Fp5czdp76z UnsdzSjJFcvOSPndZeYJr4icILFSIgM0F9JQdUavMUH7UVwHMFEjwFwKggHeTGZB 5vNr3p6Wf61v6g== -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:02 2025 by rpki-client