This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json) Hash identifier: b8AGoYpvIQ6Ujs2PXZuUiXvFxmXjhLxFTXKulxbPfGI= Subject key identifier: 65:FA:4F:2B:8F:0A:A4:24:05:34:B3:91:86:54:A4:60:9C:F5:F1:1D Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1 Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1 Certificate serial: 019B3DC7EC09D781C509843AA189D6CBE116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft Manifest number: C3 Signing time: Sat 20 Dec 2025 22:01:10 +0000 Manifest this update: Sat 20 Dec 2025 22:01:10 +0000 Manifest next update: Sun 21 Dec 2025 22:01:10 +0000 Files and hashes: 1: VApcgRE4jCfqWsVvaGSgipYw68w.roa (hash: A0jt937wu1wIoLHac2gn8nLqE9B73D2kq/AGcMo7Moc=) 2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: CoG+hJC9sSV3rcqVuxFQHzZt7LdLDfJasRVwVjfxcVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ec:09:d7:81:c5:09:84:3a:a1:89:d6:cb:e1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1 Validity Not Before: Dec 20 22:01:10 2025 GMT Not After : Dec 21 22:01:10 2025 GMT Subject: CN=65fa4f2b8f0aa4240534b3918654a4609cf5f11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:a3:7b:ba:0a:bc:0a:04:3a:62:6c:4b:06: 9c:62:17:e2:07:ce:2f:2a:67:74:a7:8f:94:0e:44: 78:1f:15:b8:a8:6b:06:27:b4:2d:94:76:12:4b:f0: 76:d5:39:9c:da:aa:31:ae:83:26:11:f7:02:ea:41: eb:9d:f6:8c:42:ba:fe:7e:5c:00:56:c0:1b:f3:95: fb:e8:ca:73:41:9a:72:ed:9b:be:0a:b6:50:a9:b8: e9:ae:cc:da:af:9c:85:e5:3e:9e:25:d9:26:e7:bf: c4:3e:70:cc:d1:6d:be:d3:53:49:28:7e:77:a4:bb: 39:85:32:40:a6:a9:b2:17:c7:21:3e:bc:9b:63:de: ea:a6:5d:3d:5c:59:d7:22:ab:b2:8a:54:f0:42:f8: f4:e3:fd:e2:d7:3c:eb:78:11:b0:b5:65:a0:d9:5f: 74:9d:ef:fe:73:d4:aa:78:26:ac:db:e9:68:8a:42: 6a:f9:b5:3f:31:4c:ec:f6:96:28:e7:97:47:cd:9b: a5:a9:8f:b5:2d:7a:d1:d6:b3:cf:cb:f1:61:10:1b: e3:67:36:eb:1d:1b:88:f0:34:ff:a4:45:2f:69:75: 27:b7:df:5e:9a:f7:3d:04:2a:c4:93:20:51:6d:5e: 16:15:fb:3e:18:db:f0:f1:d5:45:68:da:1c:7a:e0: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FA:4F:2B:8F:0A:A4:24:05:34:B3:91:86:54:A4:60:9C:F5:F1:1D X509v3 Authority Key Identifier: keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c9:22:a8:d0:40:cf:ba:04:b2:13:bf:54:6d:c2:4b:61:05: 15:81:29:f8:e9:36:89:24:30:7f:19:7f:80:db:76:76:06:ff: 0c:39:3f:97:32:c7:71:9e:25:c4:ed:9d:13:26:35:1d:0d:cc: fa:ee:ae:a7:b1:43:29:88:84:e4:4b:52:17:51:c5:57:36:50: 91:6b:4a:b6:72:ca:77:e3:b7:46:08:de:79:35:a4:1d:ad:0a: c6:93:f2:58:f3:09:1b:de:b4:fe:38:77:a9:ca:b4:1f:02:c5: ca:7a:84:eb:8a:1a:a8:a9:de:4d:9d:f2:ef:4e:cf:2b:21:9a: 9f:35:e3:58:b0:8e:80:9c:12:21:00:9a:d4:1d:a0:1d:28:f7: 84:8c:77:20:01:bb:b0:65:90:2f:af:32:b8:c0:f2:be:ec:9e: 37:b7:2b:7f:32:04:33:7f:bc:1c:3d:1d:42:21:7b:95:0e:7a: b9:46:a1:46:7e:97:b6:4c:35:ed:cd:1e:e8:bf:c7:12:c6:e5: 02:82:28:7e:ab:bd:f7:ae:98:5f:2b:25:49:52:cc:21:d4:b0: 6e:cd:f2:29:f0:60:1c:48:ba:30:ab:53:1c:f4:2e:6f:89:85: f7:89:c1:96:5a:e8:9b:7b:f8:5e:70:f4:8e:1d:4f:50:ec:d1: 78:60:52:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+wJ14HFCYQ6oYnWy+EWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1M2YxZDVhMTg4YWU2YjJiNWYyYWExMzhkYjhmOTlhYTVh YWQ3YTEwHhcNMjUxMjIwMjIwMTEwWhcNMjUxMjIxMjIwMTEwWjAzMTEwLwYDVQQD Eyg2NWZhNGYyYjhmMGFhNDI0MDUzNGIzOTE4NjU0YTQ2MDljZjVmMTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Gje7oKvAoEOmJsSwacYhfiB84v Kmd0p4+UDkR4HxW4qGsGJ7QtlHYSS/B21Tmc2qoxroMmEfcC6kHrnfaMQrr+flwA VsAb85X76MpzQZpy7Zu+CrZQqbjprszar5yF5T6eJdkm57/EPnDM0W2+01NJKH53 pLs5hTJApqmyF8chPrybY97qpl09XFnXIquyilTwQvj04/3i1zzreBGwtWWg2V90 ne/+c9SqeCas2+loikJq+bU/MUzs9pYo55dHzZulqY+1LXrR1rPPy/FhEBvjZzbr HRuI8DT/pEUvaXUnt99emvc9BCrEkyBRbV4WFfs+GNvw8dVFaNoceuAGgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX6TyuPCqQkBTSzkYZUpGCc9fEdMB8GA1UdIwQY MBaAFIU/HVoYiuaytfKqE424+ZqlqtehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQt OGQzMjAwNjJhZTg5LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQtOGQzMjAwNjJhZTg5 LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8kiqNBA z7oEshO/VG3CS2EFFYEp+Ok2iSQwfxl/gNt2dgb/DDk/lzLHcZ4lxO2dEyY1HQ3M +u6up7FDKYiE5EtSF1HFVzZQkWtKtnLKd+O3RgjeeTWkHa0KxpPyWPMJG960/jh3 qcq0HwLFynqE64oaqKneTZ3y707PKyGanzXjWLCOgJwSIQCa1B2gHSj3hIx3IAG7 sGWQL68yuMDyvuyeN7crfzIEM3+8HD0dQiF7lQ56uUahRn6Xtkw17c0e6L/HEsbl AoIofqu9966YXyslSVLMIdSwbs3yKfBgHEi6MKtTHPQub4mF94nBllrom3v4XnD0 jh1PUOzReGBSKA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:44 2025 by rpki-client