This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json) Hash identifier: dOw9wNVhFGFPs7A1cmaewk15YgeFDGocDQbtxl7s4H8= Subject key identifier: A7:43:C7:FC:1B:5B:0B:08:D8:0C:0A:7F:E2:64:84:4A:2A:60:01:47 Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2 Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2 Certificate serial: 019B20CFC6164B69456D1BBED16D37AC82BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft Manifest number: 1780 Signing time: Mon 15 Dec 2025 07:00:46 +0000 Manifest this update: Mon 15 Dec 2025 07:00:46 +0000 Manifest next update: Tue 16 Dec 2025 07:00:46 +0000 Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=) 2: A1sHhifnNT-Aumc_ps2nMEQ_8zU.roa (hash: RWo0jZxaIA2cGMFm2ziPtN2NQqQk5lPvGyA4RgrQKHQ=) 3: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=) 4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: 4pn35iw8KudJJGWyeMF0RrGvGiMmsgeQfDxpLF+j3qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:c6:16:4b:69:45:6d:1b:be:d1:6d:37:ac:82:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2 Validity Not Before: Dec 15 07:00:46 2025 GMT Not After : Dec 16 07:00:46 2025 GMT Subject: CN=a743c7fc1b5b0b08d80c0a7fe264844a2a600147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:7b:74:a1:b2:6d:d7:f8:d4:ed:43:d9:13: c3:f9:44:6a:3e:74:1f:6d:66:2f:1e:d0:1b:9d:7c: e1:60:28:09:62:23:21:36:f3:5d:44:14:b8:70:64: a9:b9:9f:5a:c9:fd:86:4e:4d:65:4d:71:a8:f0:f3: 3c:56:42:bb:a0:23:6e:2c:cb:e3:97:64:17:37:e5: ef:74:c9:58:a0:69:17:72:29:ef:9c:8a:5c:67:18: 53:f6:8c:3c:8f:4a:cd:76:e1:79:60:ec:0d:d5:34: 54:81:c7:16:f3:81:0d:ac:81:38:59:8f:ec:c1:df: 7b:3c:07:80:f6:f4:31:92:87:2a:dd:b4:d7:d1:ce: 1e:f5:e2:00:7d:98:ee:ba:77:58:45:d5:34:bb:90: 1f:69:6d:38:10:dc:6b:37:2f:13:de:8e:f0:6e:02: d9:d7:af:96:00:b7:2f:33:72:d0:3b:39:a3:c9:56: 44:82:53:a7:d3:b2:76:82:ad:dc:91:62:fa:43:11: dc:19:25:c3:3a:07:78:4a:91:ca:7c:5b:d6:98:04: 98:fa:4a:d3:17:2a:19:cf:36:6e:f4:de:90:f0:3f: ae:80:c2:c9:1a:59:fc:e7:74:8f:aa:ad:24:e9:1c: 27:55:32:9d:b0:80:9e:65:25:cd:0f:39:1f:a0:f4: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:C7:FC:1B:5B:0B:08:D8:0C:0A:7F:E2:64:84:4A:2A:60:01:47 X509v3 Authority Key Identifier: keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f6:a2:0b:1a:6d:a8:29:06:9e:14:b8:17:6a:18:a2:f6:af: de:03:f5:0f:73:20:17:61:89:c5:37:71:07:57:d3:a7:53:36: 3a:71:f1:0b:24:09:8f:c9:c6:0c:be:96:c2:ad:44:c5:f9:c0: 0d:a2:e0:db:68:4a:b7:16:e2:4f:ca:0c:97:61:06:92:e5:51: 43:7e:cb:69:ad:01:7f:07:37:80:75:7c:5e:9f:9a:84:17:99: cc:93:3c:c2:aa:a6:40:41:53:3b:71:93:8e:bf:a3:02:fe:62: bb:4f:d9:a4:e4:23:be:10:22:78:6c:4c:21:fd:c7:1f:0d:13: 5c:7c:36:b1:08:0e:14:78:40:58:77:51:0a:bb:e3:3f:19:ae: b6:59:83:00:58:9e:19:c5:44:ef:16:f7:ef:16:38:19:a6:ea: e9:81:5d:45:a0:ca:86:eb:a9:8b:bd:d8:b1:c7:0f:43:a5:e9: d1:57:2a:31:2d:ea:12:14:84:6b:fc:2c:30:02:e6:76:76:87: 56:7a:cd:d8:e4:68:fc:89:f6:3b:ca:d0:8c:67:9c:9c:bc:4c: 62:95:fa:8c:d6:bd:6b:d8:02:6c:d0:70:c3:bf:1c:1e:1d:af: fd:60:f8:a4:52:21:0f:6e:7b:6c:df:1b:36:e0:11:86:06:d8: e0:01:d4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz8YWS2lFbRu+0W03rIK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MGQ5ZjAxYTk4YjUxNGViZDNjMjcyM2Q3ZjdlYjQ0ODMy NmY1ZTIwHhcNMjUxMjE1MDcwMDQ2WhcNMjUxMjE2MDcwMDQ2WjAzMTEwLwYDVQQD EyhhNzQzYzdmYzFiNWIwYjA4ZDgwYzBhN2ZlMjY0ODQ0YTJhNjAwMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSJ7dKGybdf41O1D2RPD+URqPnQf bWYvHtAbnXzhYCgJYiMhNvNdRBS4cGSpuZ9ayf2GTk1lTXGo8PM8VkK7oCNuLMvj l2QXN+XvdMlYoGkXcinvnIpcZxhT9ow8j0rNduF5YOwN1TRUgccW84ENrIE4WY/s wd97PAeA9vQxkocq3bTX0c4e9eIAfZjuundYRdU0u5AfaW04ENxrNy8T3o7wbgLZ 16+WALcvM3LQOzmjyVZEglOn07J2gq3ckWL6QxHcGSXDOgd4SpHKfFvWmASY+krT FyoZzzZu9N6Q8D+ugMLJGln853SPqq0k6RwnVTKdsICeZSXNDzkfoPTR6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdDx/wbWwsI2AwKf+JkhEoqYAFHMB8GA1UdIwQY MBaAFIYNnwGpi1FOvTwnI9f360SDJvXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQt NjFjYjQzYzJkYjg1LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yM2JlYTYtOTAwMS00NDFkLTgzNjQtNjFjYjQzYzJkYjg1 LzEvaGcyZkFhbUxVVTY5UENjajFfZnJSSU1tOWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPaiCxpt qCkGnhS4F2oYovav3gP1D3MgF2GJxTdxB1fTp1M2OnHxCyQJj8nGDL6Wwq1ExfnA DaLg22hKtxbiT8oMl2EGkuVRQ37Laa0Bfwc3gHV8Xp+ahBeZzJM8wqqmQEFTO3GT jr+jAv5iu0/ZpOQjvhAieGxMIf3HHw0TXHw2sQgOFHhAWHdRCrvjPxmutlmDAFie GcVE7xb37xY4Gabq6YFdRaDKhuupi73YsccPQ6Xp0VcqMS3qEhSEa/wsMALmdnaH VnrN2ORo/In2O8rQjGecnLxMYpX6jNa9a9gCbNBww78cHh2v/WD4pFIhD257bN8b NuARhgbY4AHUbg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:07:50 2025 by rpki-client