This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json) Hash identifier: OBlPmEStPoIjVk4h0wlSdbbuOlSed4v8AoyRok45GjA= Subject key identifier: D9:5E:C0:F2:CB:27:34:50:C9:A5:D6:4A:DF:E2:E2:4B:8E:CF:24:94 Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00 Certificate issuer: /CN=846d45225cf0d4fa9c65aee88861d2261203ad00 Certificate serial: 019B4ADEB3DB17D78B7E05CDD807CE36EEFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft Manifest number: 122A Signing time: Tue 23 Dec 2025 11:01:07 +0000 Manifest this update: Tue 23 Dec 2025 11:01:07 +0000 Manifest next update: Wed 24 Dec 2025 11:01:07 +0000 Files and hashes: 1: XLQfftOCYwZhCKWBFvPgcWtM3ng.roa (hash: e5IwRRubP2iih1RAenDvyf84x82YlIWC8mC3l2YoKV8=) 2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: XJf6RGQUOWAOVPeWQoFSf97NoDBVCGxIlpcaYlvbqbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:b3:db:17:d7:8b:7e:05:cd:d8:07:ce:36:ee:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00 Validity Not Before: Dec 23 11:01:07 2025 GMT Not After : Dec 24 11:01:07 2025 GMT Subject: CN=d95ec0f2cb273450c9a5d64adfe2e24b8ecf2494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:55:8a:2c:cc:b5:a3:e7:9d:06:bb:c2:ce: f3:59:1c:c4:e6:2e:3f:2b:42:da:10:e9:df:35:b1: 7a:d3:3f:fc:4e:f7:05:a0:01:91:e1:1d:67:c1:f1: e1:60:bd:b7:ee:1f:c3:08:c2:55:e3:72:1e:42:bb: 3d:61:3d:25:85:ae:bd:b0:4b:28:6c:50:0c:90:91: a2:79:a8:ec:69:b4:7f:31:2e:c7:01:38:d1:ad:e8: 97:86:c3:25:e0:af:8f:3a:bd:c5:5e:f8:d2:a5:18: 50:da:41:ae:d3:83:65:d7:72:b6:25:66:45:c8:8b: 58:0b:ee:88:0b:17:23:b0:6e:9b:1a:90:82:7a:7c: 8a:f3:43:9c:ea:49:01:15:84:ee:a6:ec:51:5f:d4: 5f:cd:29:7e:30:05:1b:e0:3f:a3:a4:7a:95:9a:3e: ae:20:41:3c:3c:23:85:1a:32:72:88:f9:ad:bf:74: 5f:5e:c4:4e:66:4e:c2:0c:49:03:9f:86:a4:ec:77: e3:67:68:e9:88:c8:12:19:fb:f0:6a:9e:f8:be:ef: 46:a4:1b:e2:54:11:fc:e8:dc:2e:1b:10:33:4b:bb: bf:6d:fb:db:4d:e0:99:fa:9a:a2:a2:fd:74:06:ed: 5e:36:2a:d5:41:2e:09:e6:89:87:c9:7c:34:2c:88: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5E:C0:F2:CB:27:34:50:C9:A5:D6:4A:DF:E2:E2:4B:8E:CF:24:94 X509v3 Authority Key Identifier: keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2a:06:6c:82:85:c0:ff:30:33:8a:11:2e:0b:42:50:9d:b0: 17:47:83:5a:c2:ec:dc:71:a4:d6:91:69:c7:9e:f4:5d:9b:a1: a4:15:0e:b5:e0:15:24:6c:52:21:bf:e5:9a:41:f3:e0:a7:78: 16:ed:d7:93:78:65:d6:ce:1b:7a:01:67:b1:0c:47:8c:cf:c2: bd:64:26:2e:1b:da:95:64:a6:aa:32:f7:b5:08:64:a0:07:7d: 2c:bd:51:19:77:44:98:78:5d:e0:29:15:a5:a3:27:04:11:d9: 02:87:19:33:1f:dd:b6:c5:cd:b7:60:33:c8:66:6a:59:91:c9: 6f:9a:61:32:57:4d:6f:da:4a:1b:68:0b:48:04:b8:1d:56:63: 18:bb:ec:e4:09:81:9e:11:fc:e9:bd:86:38:5a:43:d3:2d:3b: 98:99:83:ec:d6:75:27:51:7c:17:e0:07:e8:3e:ec:c2:6b:2a: de:7e:64:3d:6a:64:be:a2:ad:5f:b6:70:83:3f:17:18:17:14: 1c:30:76:ea:c1:96:d3:00:38:d4:44:d1:3d:8a:30:b0:0b:d2: 18:99:11:8b:be:62:e6:bf:42:0a:b7:97:0f:00:c8:e1:4b:11: 91:a1:ba:88:06:f6:59:7e:d4:6f:d6:99:4d:57:6a:68:76:9e: 5d:e5:e7:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3rPbF9eLfgXN2AfONu79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmQ0NTIyNWNmMGQ0ZmE5YzY1YWVlODg4NjFkMjI2MTIw M2FkMDAwHhcNMjUxMjIzMTEwMTA3WhcNMjUxMjI0MTEwMTA3WjAzMTEwLwYDVQQD EyhkOTVlYzBmMmNiMjczNDUwYzlhNWQ2NGFkZmUyZTI0YjhlY2YyNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUVViizMtaPnnQa7ws7zWRzE5i4/ K0LaEOnfNbF60z/8TvcFoAGR4R1nwfHhYL237h/DCMJV43IeQrs9YT0lha69sEso bFAMkJGieajsabR/MS7HATjRreiXhsMl4K+POr3FXvjSpRhQ2kGu04Nl13K2JWZF yItYC+6ICxcjsG6bGpCCenyK80Oc6kkBFYTupuxRX9RfzSl+MAUb4D+jpHqVmj6u IEE8PCOFGjJyiPmtv3RfXsROZk7CDEkDn4ak7HfjZ2jpiMgSGfvwap74vu9GpBvi VBH86NwuGxAzS7u/bfvbTeCZ+pqiov10Bu1eNirVQS4J5omHyXw0LIgG9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlewPLLJzRQyaXWSt/i4kuOzySUMB8GA1UdIwQY MBaAFIRtRSJc8NT6nGWu6Ihh0iYSA60AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEcxRklsencxUHFjWmE3b2lHSFNKaElEclFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xNjNmNGItZGU1OS00ODdhLTkxMTAt NDYzNTMxMDQ2YzdmLzEvaEcxRklsencxUHFjWmE3b2lHSFNKaElEclFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xNjNmNGItZGU1OS00ODdhLTkxMTAtNDYzNTMxMDQ2Yzdm LzEvaEcxRklsencxUHFjWmE3b2lHSFNKaElEclFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqioGbIKF wP8wM4oRLgtCUJ2wF0eDWsLs3HGk1pFpx570XZuhpBUOteAVJGxSIb/lmkHz4Kd4 Fu3Xk3hl1s4begFnsQxHjM/CvWQmLhvalWSmqjL3tQhkoAd9LL1RGXdEmHhd4CkV paMnBBHZAocZMx/dtsXNt2AzyGZqWZHJb5phMldNb9pKG2gLSAS4HVZjGLvs5AmB nhH86b2GOFpD0y07mJmD7NZ1J1F8F+AH6D7swmsq3n5kPWpkvqKtX7Zwgz8XGBcU HDB26sGW0wA41ETRPYowsAvSGJkRi75i5r9CCreXDwDI4UsRkaG6iAb2WX7Ub9aZ TVdqaHaeXeXnIQ== -----END CERTIFICATE-----Generated at Tue Dec 23 14:39:24 2025 by rpki-client