This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json) Hash identifier: ws86eG5dJoJew1cJNiKyG4ApfOyqUQ9l86TLevSIDKM= Subject key identifier: 03:BD:2C:B1:72:BB:20:70:5E:1F:0E:05:D0:E7:8E:36:6A:91:DE:FA Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9 Certificate serial: 019B3E6D02B3E6ABC1700B4B581A96A0EB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:30 +0000 Manifest this update: Sun 21 Dec 2025 01:01:30 +0000 Manifest next update: Mon 22 Dec 2025 01:01:30 +0000 Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=) 2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: PbBf/PbgsZCqOgeYUoiOu5wgvr6pkd38PdJqROTTk9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:02:b3:e6:ab:c1:70:0b:4b:58:1a:96:a0:eb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9 Validity Not Before: Dec 21 01:01:30 2025 GMT Not After : Dec 22 01:01:30 2025 GMT Subject: CN=03bd2cb172bb20705e1f0e05d0e78e366a91defa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:73:38:ab:5d:fb:45:a5:b5:e4:00:7f:9b: a5:5d:cd:98:b4:2b:10:d6:76:d9:2e:24:08:a4:3c: 0b:c3:e6:df:f5:79:08:32:a6:6d:00:b4:95:57:fd: 4e:ba:d8:75:3c:5e:5b:9a:61:12:bf:33:f2:11:2b: e2:1c:1f:d3:69:4b:3f:eb:78:9c:18:0b:2e:65:1f: 4a:43:57:90:61:70:a2:f9:6c:e2:c5:bd:34:fe:b1: c8:81:f2:5b:95:c4:7e:89:32:2a:2b:ec:2a:29:d8: 8d:f3:1b:53:0d:4e:18:98:fc:c8:da:07:13:42:59: a9:a7:97:cd:f9:20:16:9d:a4:1d:3e:11:6d:44:a4: c6:cc:da:eb:3f:67:20:f1:e6:39:cb:a6:43:43:a8: db:d9:d6:4a:1f:05:35:3c:8a:d1:b6:25:81:f0:7b: 63:07:fd:5e:f1:f7:a1:a0:39:3b:16:1c:d5:8e:00: 2f:8d:eb:cf:52:35:e8:e4:72:d5:75:e6:bc:0a:3b: 97:6c:c3:c1:57:43:8c:16:81:46:3d:24:20:2a:33: c0:01:81:11:aa:f2:e6:a4:25:02:7f:80:70:46:b2: ae:ac:a3:d5:41:9c:8c:92:bf:e6:85:ba:6c:d8:34: 10:b2:a9:ef:1b:8c:43:97:08:f0:4e:01:ec:e0:49: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BD:2C:B1:72:BB:20:70:5E:1F:0E:05:D0:E7:8E:36:6A:91:DE:FA X509v3 Authority Key Identifier: keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b4:33:19:04:4a:e7:41:e3:48:37:ca:42:a2:f6:41:c9:cc: 74:73:d0:e9:de:ac:cf:12:20:c4:58:72:ca:ba:8d:b2:ec:ea: d1:2b:e2:fc:33:f5:c6:a0:21:08:4d:8a:6c:c2:b9:83:62:58: 46:30:64:25:3b:a2:c2:79:46:6f:6d:b2:27:74:db:4c:0b:89: d1:04:03:8a:84:6d:e4:35:23:00:a8:1e:39:82:2f:bf:14:e5: 86:a6:cb:14:e6:dd:a5:0e:61:0d:5d:8b:d9:86:8e:f1:f6:d4: 30:b5:27:72:bc:cb:a9:57:a6:2e:09:e1:d3:7b:e7:68:37:b3: 57:c2:34:39:33:30:da:66:b3:7f:a0:62:22:07:16:c4:ca:87: 25:13:df:0e:49:ca:40:11:37:a5:20:84:94:b8:7e:a2:a4:51: f0:aa:0f:2c:48:da:12:46:55:8e:5f:14:8a:2a:ba:f1:c8:48: 25:b7:f7:9e:c1:a1:57:87:21:53:78:1a:96:77:db:e1:57:09: 0a:6e:45:b7:e7:1a:1d:06:18:cb:61:c3:18:34:28:ae:c2:f1: 43:33:59:8f:14:65:23:94:8a:c2:b4:a9:05:09:48:9e:d3:9c: 36:25:0a:68:e5:29:1d:ea:c6:98:82:fa:e2:e9:27:29:a0:19: e9:2a:bb:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQKz5qvBcAtLWBqWoOt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx MTk4YTkwHhcNMjUxMjIxMDEwMTMwWhcNMjUxMjIyMDEwMTMwWjAzMTEwLwYDVQQD EygwM2JkMmNiMTcyYmIyMDcwNWUxZjBlMDVkMGU3OGUzNjZhOTFkZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNxzOKtd+0WlteQAf5ulXc2YtCsQ 1nbZLiQIpDwLw+bf9XkIMqZtALSVV/1Outh1PF5bmmESvzPyESviHB/TaUs/63ic GAsuZR9KQ1eQYXCi+Wzixb00/rHIgfJblcR+iTIqK+wqKdiN8xtTDU4YmPzI2gcT Qlmpp5fN+SAWnaQdPhFtRKTGzNrrP2cg8eY5y6ZDQ6jb2dZKHwU1PIrRtiWB8Htj B/1e8fehoDk7FhzVjgAvjevPUjXo5HLVdea8CjuXbMPBV0OMFoFGPSQgKjPAAYER qvLmpCUCf4BwRrKurKPVQZyMkr/mhbps2DQQsqnvG4xDlwjwTgHs4ElFSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAO9LLFyuyBwXh8OBdDnjjZqkd76MB8GA1UdIwQY MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt N2NjYmI0NWRjYTUxLzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbQzGQRK 50HjSDfKQqL2QcnMdHPQ6d6szxIgxFhyyrqNsuzq0Svi/DP1xqAhCE2KbMK5g2JY RjBkJTuiwnlGb22yJ3TbTAuJ0QQDioRt5DUjAKgeOYIvvxTlhqbLFObdpQ5hDV2L 2YaO8fbUMLUncrzLqVemLgnh03vnaDezV8I0OTMw2mazf6BiIgcWxMqHJRPfDknK QBE3pSCElLh+oqRR8KoPLEjaEkZVjl8Uiiq68chIJbf3nsGhV4chU3galnfb4VcJ Cm5Ft+caHQYYy2HDGDQorsLxQzNZjxRlI5SKwrSpBQlIntOcNiUKaOUpHerGmIL6 4uknKaAZ6Sq7Bw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:15 2025 by rpki-client