This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json) Hash identifier: NOlfUVdhx0C3JAKn2HyoGzVZxk+2JqnBqZpezpOypME= Subject key identifier: 20:B0:08:EB:D0:4F:1E:53:F1:8C:F8:B7:11:7D:BA:AA:C7:E3:2F:5A Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Certificate serial: 019B19F1DE07F793E0F1965F39D3F70A840A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 23:00:39 +0000 Manifest this update: Sat 13 Dec 2025 23:00:39 +0000 Manifest next update: Sun 14 Dec 2025 23:00:39 +0000 Files and hashes: 1: cJQMfm3Nb-Yj_wiSeqPIhYmhihg.roa (hash: H1zjWIW+Nmv7M4Qo9+faRg9JdVHFVBqi+Ji0husl1dg=) 2: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: 6ot/d/OYbcxyShvE0fAzWTxcSrR+vsCGMHBamHKlFlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:de:07:f7:93:e0:f1:96:5f:39:d3:f7:0a:84:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Validity Not Before: Dec 13 23:00:39 2025 GMT Not After : Dec 14 23:00:39 2025 GMT Subject: CN=20b008ebd04f1e53f18cf8b7117dbaaac7e32f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a6:29:62:2a:d1:cd:f1:19:08:58:48:d7:61: 41:51:44:a6:e2:1e:ff:9e:9c:d4:ce:2f:82:d7:f6: 4e:80:9f:27:0a:b6:38:9e:ea:c7:06:ad:f4:66:20: af:be:7d:fd:71:4b:be:da:56:ae:84:70:cb:3e:02: 5b:54:13:92:df:20:f1:0c:c8:b9:f1:7a:e0:89:1a: 6f:57:bc:e5:d1:9d:50:66:c5:13:b3:6f:a4:f9:9e: f6:b9:d6:df:92:5f:52:f8:16:f7:59:9d:f5:ed:ba: 2e:c7:4f:e8:2e:11:07:c9:b2:6f:cf:d5:39:c0:4b: 7a:95:47:de:8f:86:cc:28:8f:d1:94:40:cc:6a:8d: 87:40:5f:06:82:05:61:d2:f8:0e:88:89:a7:83:9b: ae:9f:d9:b6:6e:ef:5b:e1:59:d3:65:a3:25:4c:3f: 34:a3:13:23:99:b1:4d:14:58:f3:a0:be:e2:8b:79: a2:82:c9:27:35:5a:a5:15:87:d7:b8:7c:83:ba:5b: 9e:db:c8:be:6d:9d:5e:22:12:95:48:26:9f:bd:47: 7b:bd:8b:d1:6e:78:40:66:e0:c9:69:1d:6a:8c:97: bf:b1:19:e0:c6:4d:7d:23:69:9a:79:c8:b8:d3:48: 87:48:23:d6:8d:59:54:34:af:e3:44:f6:25:4a:a9: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:08:EB:D0:4F:1E:53:F1:8C:F8:B7:11:7D:BA:AA:C7:E3:2F:5A X509v3 Authority Key Identifier: keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1c:bd:87:8d:4e:56:08:a5:5a:be:12:a5:e5:a5:56:88:ec: 46:45:07:b6:3e:6c:f2:72:ff:aa:24:41:40:08:35:a2:3f:56: 52:a3:ec:f7:53:a5:d6:26:d1:38:a0:0f:03:b6:2c:de:e3:87: 02:0a:f2:fa:a2:3a:d9:a1:06:e1:ab:95:83:68:2e:79:b8:d2: be:f2:73:b5:77:9c:08:97:96:a5:77:03:de:3b:f7:7e:54:82: d0:6c:be:87:9b:ed:cb:f4:8e:d6:40:ad:49:32:d8:b1:7e:d3: dc:80:2d:42:b3:33:a9:11:db:dd:50:d5:56:1b:87:06:78:5f: 29:86:9b:df:e3:a9:63:da:ec:5b:75:6f:cd:ea:0c:b7:ce:6b: d7:c6:04:82:a7:91:6a:75:7c:37:8a:f9:e5:47:11:e8:1d:9d: de:b5:0c:74:f7:01:59:92:92:74:1c:69:ac:42:b2:2e:3f:14: 27:3c:10:6f:df:10:bf:6f:16:32:4a:59:85:24:68:cc:2b:d8: af:41:e4:03:e4:14:0d:48:41:9e:a1:ed:31:5f:f3:ad:2a:07: f7:4b:e1:fe:9d:48:b2:59:b6:88:12:b8:96:7b:1a:56:ad:bf: 37:9c:13:80:7a:da:71:f0:18:d0:66:2f:5b:b5:a9:c6:6f:a2: 4a:90:49:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8d4H95Pg8ZZfOdP3CoQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3 OTc2YWMwHhcNMjUxMjEzMjMwMDM5WhcNMjUxMjE0MjMwMDM5WjAzMTEwLwYDVQQD EygyMGIwMDhlYmQwNGYxZTUzZjE4Y2Y4YjcxMTdkYmFhYWM3ZTMyZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qYpYirRzfEZCFhI12FBUUSm4h7/ npzUzi+C1/ZOgJ8nCrY4nurHBq30ZiCvvn39cUu+2lauhHDLPgJbVBOS3yDxDMi5 8XrgiRpvV7zl0Z1QZsUTs2+k+Z72udbfkl9S+Bb3WZ317boux0/oLhEHybJvz9U5 wEt6lUfej4bMKI/RlEDMao2HQF8GggVh0vgOiImng5uun9m2bu9b4VnTZaMlTD80 oxMjmbFNFFjzoL7ii3migsknNVqlFYfXuHyDulue28i+bZ1eIhKVSCafvUd7vYvR bnhAZuDJaR1qjJe/sRngxk19I2maeci400iHSCPWjVlUNK/jRPYlSqkzkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCwCOvQTx5T8Yz4txF9uqrH4y9aMB8GA1UdIwQY MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRy9h41O VgilWr4SpeWlVojsRkUHtj5s8nL/qiRBQAg1oj9WUqPs91Ol1ibROKAPA7Ys3uOH Agry+qI62aEG4auVg2guebjSvvJztXecCJeWpXcD3jv3flSC0Gy+h5vty/SO1kCt STLYsX7T3IAtQrMzqRHb3VDVVhuHBnhfKYab3+OpY9rsW3VvzeoMt85r18YEgqeR anV8N4r55UcR6B2d3rUMdPcBWZKSdBxprEKyLj8UJzwQb98Qv28WMkpZhSRozCvY r0HkA+QUDUhBnqHtMV/zrSoH90vh/p1Islm2iBK4lnsaVq2/N5wTgHracfAY0GYv W7Wpxm+iSpBJYw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:14 2025 by rpki-client