This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json) Hash identifier: NrNUyCQnwW6aUb3jhLOREBtp4vhYL5YM+ZKWUmhD7so= Subject key identifier: 73:DF:33:23:D5:DB:EB:4C:A0:B7:51:2C:3A:70:F0:AF:08:96:92:66 Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019B0E931118FA0167944332FC0E312718A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 18:01:17 +0000 Manifest this update: Thu 11 Dec 2025 18:01:17 +0000 Manifest next update: Fri 12 Dec 2025 18:01:17 +0000 Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=) 2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=) 3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=) 4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=) 5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: zzleStz8tUM1FyOZluby/5FaoFfZyXQwWMftgM235SQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:11:18:fa:01:67:94:43:32:fc:0e:31:27:18:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Dec 11 18:01:17 2025 GMT Not After : Dec 12 18:01:17 2025 GMT Subject: CN=73df3323d5dbeb4ca0b7512c3a70f0af08969266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:ae:ab:46:ec:78:d8:36:8c:dd:8b:6c:37: 1c:16:a0:55:4f:eb:11:81:5e:8b:dd:1d:1c:75:e9: 2a:fb:a4:2c:61:89:5f:e0:64:ec:8b:78:45:49:12: 04:c2:24:7b:7d:6e:e1:fe:1f:58:73:ca:85:d8:3f: eb:75:82:6d:93:9f:c9:30:bb:31:e6:cc:f0:dd:fc: 17:6c:73:a3:72:8b:d2:68:98:32:68:3e:56:4b:ba: 48:e3:83:28:14:23:c6:39:9a:2d:68:b2:df:7a:57: 27:43:2a:94:6b:7a:e8:a9:aa:78:61:9d:c4:8d:84: 71:67:6d:bd:ab:f0:ae:71:70:47:0b:10:70:43:19: 42:81:c5:4f:5e:51:74:bb:b4:73:bd:19:b8:68:21: 65:6d:a1:26:67:ae:c1:7f:17:8f:5f:dd:d8:3c:bc: 91:4b:cd:71:af:a0:90:88:3f:fe:a5:6e:0e:e5:4f: 58:d0:08:ce:63:50:fd:50:1a:18:25:8d:af:7d:77: b0:8a:7d:c1:9e:41:02:f0:25:61:8e:3a:34:ea:43: 37:c5:15:2e:34:b2:15:b2:0f:c6:90:ed:00:2b:7e: 29:17:92:24:7e:82:7c:f4:1a:3c:96:c3:ac:71:91: 21:17:1b:69:ff:dc:a1:43:30:31:7a:89:05:a9:62: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:33:23:D5:DB:EB:4C:A0:B7:51:2C:3A:70:F0:AF:08:96:92:66 X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2f:72:55:de:1f:ca:0e:a4:13:55:02:9c:fd:4e:1b:65:d2: f9:52:87:2c:b0:13:c4:26:fb:c7:62:b7:7d:72:6a:3f:2e:6b: 39:34:18:ce:1a:55:55:ac:0e:f8:8c:d8:c3:b3:dc:6e:9f:4d: bf:f1:7e:9e:3c:b8:26:fb:e4:55:0e:35:ed:d1:4f:62:79:50: 6c:d2:83:93:19:a8:33:61:4b:8a:0b:b7:52:f0:54:20:a7:96: 1e:50:be:eb:02:59:a0:f0:4e:9c:89:89:21:d3:cc:25:9c:83: db:49:66:6d:8d:c3:38:77:7b:ec:38:4a:ae:6b:8d:ec:25:7c: c5:22:93:41:94:8f:76:2c:9d:eb:da:b5:8e:7e:72:31:2f:ec: a0:8a:ec:d7:43:d6:45:cf:32:52:b6:3a:5e:4a:25:7a:37:5e: b4:45:50:99:60:93:ad:77:eb:f7:21:45:dc:09:6b:24:a4:88: 8a:f5:c1:e2:33:40:e1:e3:dc:9d:18:28:a5:49:b2:7e:0f:4e: 17:ce:b2:e5:3d:1a:ad:74:0a:fc:32:74:66:44:51:84:aa:dc: 04:c5:08:1c:ac:b1:a4:56:69:d8:2a:76:95:c3:6f:24:b0:7f: 7d:d1:51:ac:55:1b:2e:44:52:af:5f:6c:5c:3a:29:53:e7:4f: cd:26:09:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxEY+gFnlEMy/A4xJximMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjUxMjExMTgwMTE3WhcNMjUxMjEyMTgwMTE3WjAzMTEwLwYDVQQD Eyg3M2RmMzMyM2Q1ZGJlYjRjYTBiNzUxMmMzYTcwZjBhZjA4OTY5MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfGuq0bseNg2jN2LbDccFqBVT+sR gV6L3R0cdekq+6QsYYlf4GTsi3hFSRIEwiR7fW7h/h9Yc8qF2D/rdYJtk5/JMLsx 5szw3fwXbHOjcovSaJgyaD5WS7pI44MoFCPGOZotaLLfelcnQyqUa3roqap4YZ3E jYRxZ229q/CucXBHCxBwQxlCgcVPXlF0u7RzvRm4aCFlbaEmZ67BfxePX93YPLyR S81xr6CQiD/+pW4O5U9Y0AjOY1D9UBoYJY2vfXewin3BnkEC8CVhjjo06kM3xRUu NLIVsg/GkO0AK34pF5IkfoJ89Bo8lsOscZEhFxtp/9yhQzAxeokFqWJIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPfMyPV2+tMoLdRLDpw8K8IlpJmMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHy9yVd4f yg6kE1UCnP1OG2XS+VKHLLATxCb7x2K3fXJqPy5rOTQYzhpVVawO+IzYw7Pcbp9N v/F+njy4JvvkVQ417dFPYnlQbNKDkxmoM2FLigu3UvBUIKeWHlC+6wJZoPBOnImJ IdPMJZyD20lmbY3DOHd77DhKrmuN7CV8xSKTQZSPdiyd69q1jn5yMS/soIrs10PW Rc8yUrY6XkolejdetEVQmWCTrXfr9yFF3AlrJKSIivXB4jNA4ePcnRgopUmyfg9O F86y5T0arXQK/DJ0ZkRRhKrcBMUIHKyxpFZp2Cp2lcNvJLB/fdFRrFUbLkRSr19s XDopU+dPzSYJVw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:08:26 2025 by rpki-client