This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json) Hash identifier: RNnZm0DBiSiqdwwRz/A4x7rWWCVQ/EkerCb4Bl47FFY= Subject key identifier: 6C:A9:D1:87:FA:14:5D:AC:F1:32:A5:C1:83:D4:6B:17:53:40:27:4D Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Certificate serial: 019B435BD1D658379FFB51BAC2508B4ADEA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft Manifest number: 141F Signing time: Mon 22 Dec 2025 00:00:49 +0000 Manifest this update: Mon 22 Dec 2025 00:00:49 +0000 Manifest next update: Tue 23 Dec 2025 00:00:49 +0000 Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=) 2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=) 3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: PRNI4sMjDMNUVqfGxOx/zRuopQcW4dz7JTj9nebpeng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:d1:d6:58:37:9f:fb:51:ba:c2:50:8b:4a:de:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Validity Not Before: Dec 22 00:00:49 2025 GMT Not After : Dec 23 00:00:49 2025 GMT Subject: CN=6ca9d187fa145dacf132a5c183d46b175340274d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:68:85:da:04:e3:13:f7:27:81:7b:0a:96: df:f6:ac:f8:97:cd:f9:9b:13:b6:28:89:f6:e0:ec: 7b:a7:ca:34:16:77:93:b0:2d:67:9a:b2:93:d2:31: 23:1f:02:3d:aa:3a:07:cc:28:47:64:dc:21:5d:46: a0:db:64:a4:2a:03:dd:0d:17:2a:2f:cd:ba:82:b5: 74:65:5f:6e:f0:bf:ae:08:ee:d9:cf:65:44:a9:90: 59:d3:4a:4a:b2:f5:53:83:50:03:b1:f0:73:8f:30: a4:5a:75:04:1c:6d:19:e7:f0:eb:2a:50:6c:db:ff: 5a:73:ac:17:ab:6f:82:65:ae:8d:91:05:d4:bf:12: 7e:df:d3:c0:19:b3:06:5e:d4:7c:ca:95:cf:b6:ff: f3:ef:07:77:f8:5e:0c:83:54:95:d5:81:94:49:52: 0c:96:3d:9d:14:58:b4:53:4c:fb:c4:18:27:9a:9c: 56:60:ea:28:73:50:67:40:b5:4b:5a:67:56:37:9d: ae:c5:f3:a2:6a:b3:86:ea:f3:06:5c:40:6b:3e:43: 7b:d7:c8:f6:d8:71:17:81:52:7b:7a:e8:5b:58:54: ca:72:32:06:ab:34:d0:f4:f4:cd:60:b3:4a:c6:8e: eb:29:1e:7e:57:41:d1:2d:5e:47:8b:54:c9:15:93: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A9:D1:87:FA:14:5D:AC:F1:32:A5:C1:83:D4:6B:17:53:40:27:4D X509v3 Authority Key Identifier: keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e9:c9:e5:42:ef:03:1f:92:62:28:a1:ea:de:c6:69:24:f0: 32:37:f2:c6:29:dd:40:65:06:e5:12:c2:0a:39:08:4e:b2:bc: b0:16:c0:90:47:f4:46:fd:67:40:3d:fc:77:46:c9:10:8c:41: 14:93:43:94:e6:66:e0:db:23:e2:f1:6d:5c:27:1d:45:ad:25: 53:7e:2a:c0:60:83:4d:03:09:b4:33:f2:cf:62:d2:b1:9f:d6: a5:a2:d6:2d:d3:d4:40:0d:fb:1f:8a:24:5b:29:31:c7:73:0b: 17:7c:17:aa:ff:9b:0a:04:47:de:c1:e0:6a:37:e6:58:cd:7b: b5:05:21:1d:b2:2c:e3:82:15:b3:da:79:f8:6f:25:ea:be:b4: e7:e8:a5:24:8f:4f:d2:64:06:e2:90:89:a6:9d:14:4b:9e:28: 15:70:71:4b:5e:a0:6a:c4:e9:a5:6b:3a:81:7a:1e:78:a3:a6: 4e:9d:35:14:54:1f:b1:cb:3b:33:39:dd:b1:5c:24:71:a5:fd: ef:61:e5:ed:77:86:76:72:d6:49:1c:95:eb:c7:4e:1a:27:34: c0:f6:25:f0:dd:43:23:0c:22:79:c7:88:77:b8:5e:89:59:9e: a3:a2:ec:48:b0:53:4e:39:24:52:5d:b3:70:ea:9f:3b:fe:d5: 37:a3:10:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW9HWWDef+1G6wlCLSt6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0 ZjRkNGIwHhcNMjUxMjIyMDAwMDQ5WhcNMjUxMjIzMDAwMDQ5WjAzMTEwLwYDVQQD Eyg2Y2E5ZDE4N2ZhMTQ1ZGFjZjEzMmE1YzE4M2Q0NmIxNzUzNDAyNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqFohdoE4xP3J4F7Cpbf9qz4l835 mxO2KIn24Ox7p8o0FneTsC1nmrKT0jEjHwI9qjoHzChHZNwhXUag22SkKgPdDRcq L826grV0ZV9u8L+uCO7Zz2VEqZBZ00pKsvVTg1ADsfBzjzCkWnUEHG0Z5/DrKlBs 2/9ac6wXq2+CZa6NkQXUvxJ+39PAGbMGXtR8ypXPtv/z7wd3+F4Mg1SV1YGUSVIM lj2dFFi0U0z7xBgnmpxWYOooc1BnQLVLWmdWN52uxfOiarOG6vMGXEBrPkN718j2 2HEXgVJ7euhbWFTKcjIGqzTQ9PTNYLNKxo7rKR5+V0HRLV5Hi1TJFZMwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyp0Yf6FF2s8TKlwYPUaxdTQCdNMB8GA1UdIwQY MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+nJ5ULv Ax+SYiih6t7GaSTwMjfyxindQGUG5RLCCjkITrK8sBbAkEf0Rv1nQD38d0bJEIxB FJNDlOZm4Nsj4vFtXCcdRa0lU34qwGCDTQMJtDPyz2LSsZ/WpaLWLdPUQA37H4ok Wykxx3MLF3wXqv+bCgRH3sHgajfmWM17tQUhHbIs44IVs9p5+G8l6r605+ilJI9P 0mQG4pCJpp0US54oFXBxS16gasTppWs6gXoeeKOmTp01FFQfscs7MzndsVwkcaX9 72Hl7XeGdnLWSRyV68dOGic0wPYl8N1DIwwieceId7heiVmeo6LsSLBTTjkkUl2z cOqfO/7VN6MQgg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:26:56 2025 by rpki-client