This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json) Hash identifier: twc3oykpstRJBd7UTM7Tc2usDvmEml9mCw3zKBpJSBI= Subject key identifier: EC:3F:F0:74:B9:A6:9D:4A:71:38:A0:4B:79:19:2D:53:5C:5A:CD:A2 Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Certificate serial: 019B3BA24BAAAC414422D6FE44B1961F36F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft Manifest number: 141B Signing time: Sat 20 Dec 2025 12:00:50 +0000 Manifest this update: Sat 20 Dec 2025 12:00:50 +0000 Manifest next update: Sun 21 Dec 2025 12:00:50 +0000 Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=) 2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=) 3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: cTRUOPXbl7odWPzSQaZ/CKeE5/g1DyTnTcAynWRuaO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:4b:aa:ac:41:44:22:d6:fe:44:b1:96:1f:36:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Validity Not Before: Dec 20 12:00:50 2025 GMT Not After : Dec 21 12:00:50 2025 GMT Subject: CN=ec3ff074b9a69d4a7138a04b79192d535c5acda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:09:09:60:78:4e:c5:d5:fa:a8:12:eb:e4: 09:c0:ce:d0:31:e0:22:5e:f4:eb:2a:20:cd:fb:33: 18:a0:48:ab:ad:2b:17:12:23:15:d9:90:bb:41:db: c9:8f:a9:dd:cc:e6:32:89:ff:5d:4b:2d:3f:70:13: 3d:e3:07:06:af:5a:13:06:5b:21:7f:19:f8:7f:c2: 26:51:4c:20:5a:70:20:e4:35:81:6e:ad:07:dc:3a: a1:fd:dd:15:a6:fe:94:d6:12:a7:f0:46:91:d4:4d: 73:9e:5c:9f:ab:7f:d4:21:b5:a3:40:64:f2:5a:4f: 28:c2:b1:08:a7:7c:7b:53:59:01:bb:26:01:af:cd: 0a:a6:eb:0a:99:00:61:10:1f:24:3b:6f:46:38:26: 4d:c6:aa:f3:e9:d8:5c:4b:29:1a:dc:14:5b:a8:4d: 2f:63:71:49:0f:ed:59:25:24:8e:8a:00:e9:14:a7: 27:40:ba:18:8b:93:ae:48:13:12:2a:ec:0f:b4:76: d7:8d:1e:94:0b:47:95:16:65:a7:5c:43:12:56:fa: de:10:ed:25:10:99:f9:33:4c:a0:cd:f5:aa:fa:d6: d8:f8:08:14:53:35:fb:3b:c8:da:d8:dd:ca:60:c2: f8:8c:cd:f4:0b:b1:4d:0c:89:e0:d3:be:41:47:83: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:F0:74:B9:A6:9D:4A:71:38:A0:4B:79:19:2D:53:5C:5A:CD:A2 X509v3 Authority Key Identifier: keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f4:4d:af:fb:35:98:1b:ec:0d:46:62:f7:06:d5:51:84:55: a0:83:10:08:9e:3b:15:24:4a:09:5d:5b:aa:a4:a7:8f:c8:50: 57:fd:c2:da:f3:f8:7a:cb:1a:78:f6:98:a4:57:56:45:54:da: c6:eb:f7:cd:96:ff:f8:e7:f5:93:09:79:63:87:18:d8:b9:cc: 1c:8a:79:bf:62:e8:2e:92:3d:6a:3d:ee:cd:97:13:d5:be:97: e6:f4:d9:de:b4:45:44:24:6b:bd:c6:9f:4c:42:57:67:21:24: 27:59:e4:8f:cd:88:61:3d:5c:ae:f1:00:3b:2c:20:88:08:6c: 8e:3f:84:73:9a:c8:cf:18:da:fb:ea:99:f9:9f:bb:d5:dc:66: 36:86:18:92:4c:2f:59:10:7d:56:4e:d5:ec:03:08:17:ae:a1: f6:84:1f:98:26:94:2d:8e:02:10:f5:94:62:c1:5d:31:db:61: 3d:34:97:1b:19:67:db:58:32:03:88:59:af:67:0b:29:03:52: a8:b4:c7:2c:38:ac:b8:80:86:03:f6:6b:85:cd:34:68:a1:d9: 93:53:ec:04:d3:ae:fc:2d:b6:9b:6c:43:c4:bf:b1:98:f3:12: da:35:12:4c:d8:56:04:40:f2:9e:06:af:cc:32:1c:e8:c6:15: 51:af:95:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7okuqrEFEItb+RLGWHzb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0 ZjRkNGIwHhcNMjUxMjIwMTIwMDUwWhcNMjUxMjIxMTIwMDUwWjAzMTEwLwYDVQQD EyhlYzNmZjA3NGI5YTY5ZDRhNzEzOGEwNGI3OTE5MmQ1MzVjNWFjZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRgJCWB4TsXV+qgS6+QJwM7QMeAi XvTrKiDN+zMYoEirrSsXEiMV2ZC7QdvJj6ndzOYyif9dSy0/cBM94wcGr1oTBlsh fxn4f8ImUUwgWnAg5DWBbq0H3Dqh/d0Vpv6U1hKn8EaR1E1znlyfq3/UIbWjQGTy Wk8owrEIp3x7U1kBuyYBr80KpusKmQBhEB8kO29GOCZNxqrz6dhcSyka3BRbqE0v Y3FJD+1ZJSSOigDpFKcnQLoYi5OuSBMSKuwPtHbXjR6UC0eVFmWnXEMSVvreEO0l EJn5M0ygzfWq+tbY+AgUUzX7O8ja2N3KYML4jM30C7FNDIng075BR4OeXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOw/8HS5pp1KcTigS3kZLVNcWs2iMB8GA1UdIwQY MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/RNr/s1 mBvsDUZi9wbVUYRVoIMQCJ47FSRKCV1bqqSnj8hQV/3C2vP4essaePaYpFdWRVTa xuv3zZb/+Of1kwl5Y4cY2LnMHIp5v2LoLpI9aj3uzZcT1b6X5vTZ3rRFRCRrvcaf TEJXZyEkJ1nkj82IYT1crvEAOywgiAhsjj+Ec5rIzxja++qZ+Z+71dxmNoYYkkwv WRB9Vk7V7AMIF66h9oQfmCaULY4CEPWUYsFdMdthPTSXGxln21gyA4hZr2cLKQNS qLTHLDisuICGA/Zrhc00aKHZk1PsBNOu/C22m2xDxL+xmPMS2jUSTNhWBEDyngav zDIc6MYVUa+V9w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:51 2025 by rpki-client