This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json) Hash identifier: dy3RI4xdI7RIdPlKzN2J0f+aLVg/FAoC3gii8C1Pam8= Subject key identifier: 5E:05:08:93:CF:64:42:E8:CA:D7:EC:E0:14:B0:BA:BA:2B:F6:F3:8B Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9 Certificate serial: 019B4438FD1380DCA6E9EA9519A07CAE3941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 04:02:23 +0000 Manifest this update: Mon 22 Dec 2025 04:02:23 +0000 Manifest next update: Tue 23 Dec 2025 04:02:23 +0000 Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=) 2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: lUjjyBA9LCirmmJLgL8XGBITJJGEDyG85GdAR/i6W5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:fd:13:80:dc:a6:e9:ea:95:19:a0:7c:ae:39:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9 Validity Not Before: Dec 22 04:02:23 2025 GMT Not After : Dec 23 04:02:23 2025 GMT Subject: CN=5e050893cf6442e8cad7ece014b0baba2bf6f38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:80:cc:ae:bd:74:f5:48:47:cc:cd:f4:ac: 13:45:5c:f2:bb:ba:2f:b0:f8:79:b4:58:b2:c1:f9: 61:3c:0a:f7:4f:90:e9:56:11:23:23:a9:6c:fa:30: eb:c6:ef:c3:20:2f:db:ec:2f:28:aa:34:3f:26:21: c2:cc:31:a5:06:a4:3a:38:11:c8:51:37:73:41:f4: 7b:12:a9:37:60:19:88:e2:e5:be:8a:ab:44:57:3d: 71:48:40:b7:07:4c:b5:0c:e3:2d:09:47:55:e3:9b: a3:ab:06:2d:6d:f4:49:48:6a:d7:ff:aa:c6:27:1a: f7:b0:f8:bf:9b:bb:6b:f6:df:6a:d6:6a:3b:99:b1: ba:c9:1a:c1:0b:64:25:b8:22:ae:e4:d3:0b:5d:aa: a3:63:c4:c9:9e:44:91:a3:9d:ae:49:73:00:d8:3c: a6:70:b8:91:ce:c2:57:f0:f2:a6:b9:4f:41:cf:75: 45:0c:dd:e8:52:89:1b:5d:60:1d:82:6a:90:5e:00: b3:3c:27:dc:ae:fe:01:61:1a:6b:ab:84:eb:1e:d8: d1:25:23:62:68:e2:8e:1a:5c:1f:6b:12:20:d3:c3: 55:ac:04:d1:10:5c:ff:68:78:d4:70:48:2c:61:44: fc:f6:dd:62:2b:92:ec:f2:8f:f7:55:74:ab:b4:68: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:05:08:93:CF:64:42:E8:CA:D7:EC:E0:14:B0:BA:BA:2B:F6:F3:8B X509v3 Authority Key Identifier: keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:09:0e:fb:06:ce:64:05:0a:71:ae:a6:9e:47:86:26:18:ea: d9:5b:5f:01:c3:de:33:1d:e9:23:34:34:a3:55:0c:fa:4c:4e: 75:b1:8e:c1:1f:65:ff:8b:e0:16:1c:66:a6:7e:23:9c:dc:03: 6d:83:0a:94:06:36:68:28:6f:27:d2:13:e6:5a:b2:3f:b9:4d: 1b:96:49:58:7b:75:c9:b1:66:33:47:28:54:e8:fe:c0:5e:63: 15:9a:57:0b:e5:44:a9:9d:88:ba:24:46:bc:f8:77:43:1e:c5: e3:ca:1c:62:3f:69:61:53:77:55:c6:56:7f:55:76:48:1f:ed: 04:21:10:f1:67:a6:33:c3:a9:c1:2f:de:a7:3b:29:e6:3c:9b: 0e:dd:00:09:46:2c:41:b2:33:5b:c5:1b:c2:08:dd:ba:bd:07: 31:c3:37:e7:94:0b:52:a8:71:a3:25:4a:ae:f0:15:a4:66:5f: df:16:1e:00:31:f7:bf:74:56:d6:11:e4:56:75:9c:c6:6b:61: 78:94:cb:17:20:cf:42:ad:24:07:ac:17:5e:63:5e:d5:d1:dc: e6:79:8d:56:da:45:2b:97:79:30:44:fa:e2:4b:85:4f:b6:aa: cc:9c:71:77:29:37:1c:13:de:cf:12:f9:7b:a4:29:c5:6c:d9: c3:4b:97:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOP0TgNym6eqVGaB8rjlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx MTk4YTkwHhcNMjUxMjIyMDQwMjIzWhcNMjUxMjIzMDQwMjIzWjAzMTEwLwYDVQQD Eyg1ZTA1MDg5M2NmNjQ0MmU4Y2FkN2VjZTAxNGIwYmFiYTJiZjZmMzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6uAzK69dPVIR8zN9KwTRVzyu7ov sPh5tFiywflhPAr3T5DpVhEjI6ls+jDrxu/DIC/b7C8oqjQ/JiHCzDGlBqQ6OBHI UTdzQfR7Eqk3YBmI4uW+iqtEVz1xSEC3B0y1DOMtCUdV45ujqwYtbfRJSGrX/6rG Jxr3sPi/m7tr9t9q1mo7mbG6yRrBC2QluCKu5NMLXaqjY8TJnkSRo52uSXMA2Dym cLiRzsJX8PKmuU9Bz3VFDN3oUokbXWAdgmqQXgCzPCfcrv4BYRprq4TrHtjRJSNi aOKOGlwfaxIg08NVrATREFz/aHjUcEgsYUT89t1iK5Ls8o/3VXSrtGh9HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4FCJPPZELoytfs4BSwuror9vOLMB8GA1UdIwQY MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt N2NjYmI0NWRjYTUxLzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAkO+wbO ZAUKca6mnkeGJhjq2VtfAcPeMx3pIzQ0o1UM+kxOdbGOwR9l/4vgFhxmpn4jnNwD bYMKlAY2aChvJ9IT5lqyP7lNG5ZJWHt1ybFmM0coVOj+wF5jFZpXC+VEqZ2IuiRG vPh3Qx7F48ocYj9pYVN3VcZWf1V2SB/tBCEQ8WemM8OpwS/epzsp5jybDt0ACUYs QbIzW8Ubwgjdur0HMcM355QLUqhxoyVKrvAVpGZf3xYeADH3v3RW1hHkVnWcxmth eJTLFyDPQq0kB6wXXmNe1dHc5nmNVtpFK5d5MET64kuFT7aqzJxxdyk3HBPezxL5 e6QpxWzZw0uX6w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:18 2025 by rpki-client