This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft File: HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json) Hash identifier: OvX6/WBkcnu/Zzc1h9DkBpThCKi4ebiHahitdqnbGvU= Subject key identifier: 26:6F:A6:BA:90:31:B0:25:3A:F4:65:A0:3E:57:6B:DD:8F:D2:F5:6E Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Certificate serial: 019B3A8F57D1F8BDFDBD200E007F5BCD16AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 07:00:31 +0000 Manifest this update: Sat 20 Dec 2025 07:00:31 +0000 Manifest next update: Sun 21 Dec 2025 07:00:31 +0000 Files and hashes: 1: 3E7aBqsHg6THlsFLCGCu1ykhumg.roa (hash: vdRC30YdnIGNPLtMGa2MkjovoqgS/LCgWDKRJk5Yhko=) 2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: ITLGoMArBfl4XLvd5tgUfa/nwtrFrlaYmhzOP1CLqHc=) 3: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (hash: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=) 4: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (hash: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:57:d1:f8:bd:fd:bd:20:0e:00:7f:5b:cd:16:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c Validity Not Before: Dec 20 07:00:31 2025 GMT Not After : Dec 21 07:00:31 2025 GMT Subject: CN=266fa6ba9031b0253af465a03e576bdd8fd2f56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:c2:04:ca:ca:ae:b4:9b:55:a0:2c:d8:4f: d1:c6:63:48:57:86:a9:d5:8f:2c:74:78:f0:ea:fa: 46:20:62:54:e6:52:e4:63:7f:78:fe:15:be:1f:4f: 0a:20:50:5d:dc:9a:e3:2e:ae:18:dc:8b:ac:cf:a7: c0:33:1d:c3:ea:f5:73:63:3f:a7:2b:49:37:f6:a0: fc:06:cc:b3:a9:74:c6:4d:99:7b:13:a5:91:87:ec: 2e:71:49:e6:c5:e5:c6:fa:43:89:b7:d8:19:3b:88: cd:40:9d:1d:8b:43:d5:0c:f6:df:75:ea:ee:9d:cc: 1c:0b:c1:16:b0:2d:3e:2d:80:69:3a:96:4f:f7:15: bf:1b:9d:f6:49:5d:80:c2:50:44:c2:8f:e2:d3:42: 89:50:fd:63:ce:6f:1d:64:e6:d8:d9:f2:5f:a9:d7: ea:e6:40:64:f9:29:27:39:d6:91:58:39:75:cb:e5: 64:8f:7e:b7:96:cd:f1:48:12:bb:0c:b5:24:a0:f5: 55:9a:b1:f4:ae:8a:34:b5:fe:c7:72:be:d3:0b:ee: 1e:a0:8f:7e:c8:4d:d0:12:3c:12:fa:d7:7e:82:f1: d6:97:ef:44:02:4d:90:8f:c7:09:27:0f:cf:85:e7: c0:0a:14:00:a9:e7:ce:d1:7e:3c:01:bb:23:c4:13: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6F:A6:BA:90:31:B0:25:3A:F4:65:A0:3E:57:6B:DD:8F:D2:F5:6E X509v3 Authority Key Identifier: keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:92:e7:fe:13:19:a8:c6:69:9c:2e:0a:8f:a4:fc:5c:ec:8f: 64:ac:1b:a8:31:53:1a:ef:f3:71:df:c3:a4:6a:f8:76:9d:49: 6f:6a:06:56:7c:a2:43:5d:48:15:81:97:cf:7a:83:51:25:1e: 63:30:bb:eb:d9:f8:2c:15:37:63:19:be:f9:20:d6:5b:4c:87: e8:7c:57:6b:bf:b3:b3:4a:f7:38:6a:f1:b5:9b:a5:9a:61:09: 11:d2:d1:fa:c3:e7:ab:f9:75:9b:c7:19:d5:d8:e7:0d:b6:a5: e7:be:76:5c:fc:ab:0d:70:fd:ab:a5:40:7b:e2:3c:2b:cd:cd: 5e:1e:7c:cd:0a:2e:d3:cc:ed:de:a2:a6:37:b7:76:82:52:0c: fe:ea:e1:5e:43:66:50:2b:e0:6e:24:94:b7:44:2d:97:40:c6: 09:60:6b:ce:e6:a2:bd:00:59:51:19:ec:cd:d3:12:09:3e:7f: 31:a6:28:3a:a1:b6:70:31:1a:3e:44:8a:b6:68:a9:e1:24:da: 6b:bb:24:00:fc:0b:57:80:ef:08:7b:07:4b:95:db:28:66:a4: 36:af:b4:ec:40:c9:e5:85:f7:3b:82:63:46:c1:da:9c:5e:da: 97:c7:9e:14:d0:6c:14:1c:40:7a:05:9d:05:e2:e5:7e:ea:2f: 10:72:e1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j1fR+L39vSAOAH9bzRarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmNkY2I5Yzc2ZjVlMGNlMGMzODVkN2UwZWYxNTU3MmQx NWE1NGMwHhcNMjUxMjIwMDcwMDMxWhcNMjUxMjIxMDcwMDMxWjAzMTEwLwYDVQQD EygyNjZmYTZiYTkwMzFiMDI1M2FmNDY1YTAzZTU3NmJkZDhmZDJmNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwHCBMrKrrSbVaAs2E/RxmNIV4ap 1Y8sdHjw6vpGIGJU5lLkY394/hW+H08KIFBd3JrjLq4Y3Iusz6fAMx3D6vVzYz+n K0k39qD8BsyzqXTGTZl7E6WRh+wucUnmxeXG+kOJt9gZO4jNQJ0di0PVDPbfderu ncwcC8EWsC0+LYBpOpZP9xW/G532SV2AwlBEwo/i00KJUP1jzm8dZObY2fJfqdfq 5kBk+SknOdaRWDl1y+Vkj363ls3xSBK7DLUkoPVVmrH0roo0tf7Hcr7TC+4eoI9+ yE3QEjwS+td+gvHWl+9EAk2Qj8cJJw/PhefAChQAqefO0X48AbsjxBM0uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZvprqQMbAlOvRloD5Xa92P0vVuMB8GA1UdIwQY MBaAFB0s3LnHb14M4MOF1+DvFVctFaVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUt NzYwZTRlZTRjNmIyLzEvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNjY2NjYtYjNiNy00MjQ4LWFlNjUtNzYwZTRlZTRjNmIy LzEvSFN6Y3VjZHZYZ3pndzRYWDRPOFZWeTBWcFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZLn/hMZ qMZpnC4Kj6T8XOyPZKwbqDFTGu/zcd/DpGr4dp1Jb2oGVnyiQ11IFYGXz3qDUSUe YzC769n4LBU3Yxm++SDWW0yH6HxXa7+zs0r3OGrxtZulmmEJEdLR+sPnq/l1m8cZ 1djnDbal5752XPyrDXD9q6VAe+I8K83NXh58zQou08zt3qKmN7d2glIM/urhXkNm UCvgbiSUt0Qtl0DGCWBrzuaivQBZURnszdMSCT5/MaYoOqG2cDEaPkSKtmip4STa a7skAPwLV4DvCHsHS5XbKGakNq+07EDJ5YX3O4JjRsHanF7al8eeFNBsFBxAegWd BeLlfuovEHLhUw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:02:28 2025 by rpki-client