This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json) Hash identifier: CtL9PpU46Y7WbhfSb+c4ta7q4eo1JWKPvtWDNCPhkvg= Subject key identifier: E0:4C:A4:80:5E:AC:08:83:53:B4:CB:27:83:21:CF:FA:E3:CE:E8:48 Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Certificate serial: 019B2D423E639CC65457216250D5499BEE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft Manifest number: 174F Signing time: Wed 17 Dec 2025 17:01:14 +0000 Manifest this update: Wed 17 Dec 2025 17:01:14 +0000 Manifest next update: Thu 18 Dec 2025 17:01:14 +0000 Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: gCB+PxXNFUOfeSr91tw5xl433bm6acgyfmD2XD+M5l4=) 2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:42:3e:63:9c:c6:54:57:21:62:50:d5:49:9b:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Validity Not Before: Dec 17 17:01:14 2025 GMT Not After : Dec 18 17:01:14 2025 GMT Subject: CN=e04ca4805eac088353b4cb278321cffae3cee848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:e3:99:d2:80:7c:3b:4d:90:a7:4d:af:e8: 04:b6:ab:15:2b:71:ec:1a:61:13:64:ab:46:64:8e: aa:9c:6d:68:ec:66:ff:80:ba:77:d5:ed:21:3f:75: c1:7f:47:3d:e1:1e:c1:a3:da:41:1e:6b:dc:22:4f: 99:eb:c7:93:28:4a:18:48:39:48:5f:24:8d:f0:ca: 8e:6f:09:76:ea:47:2f:c8:b6:c9:ef:32:90:78:a5: 77:88:f4:b5:da:6b:a9:dc:44:e5:86:97:e0:af:6c: 60:5b:93:b7:70:3f:86:8b:94:d8:1d:ca:b8:0e:4b: 39:16:91:ca:ad:bf:93:c8:c9:7f:34:f7:d3:a9:03: d0:fb:ff:d8:f3:e8:1e:43:7c:20:d1:33:e3:46:59: be:ad:a2:3b:4e:e4:3a:8e:e9:f2:12:68:d3:ea:e9: 30:cb:18:f5:79:ac:f0:98:f5:a8:71:71:72:85:f1: 83:b8:25:65:d9:5b:1f:53:26:8e:e9:34:98:25:9e: af:20:c8:c9:c0:72:5d:47:05:55:d5:47:83:db:5d: bb:7d:7b:b0:88:be:0d:bc:6a:5c:a5:78:c4:0f:64: 69:f9:5b:53:34:94:24:fc:8e:4e:91:71:f5:94:a2: 22:d5:29:23:88:d3:ac:3e:fc:e7:60:7e:76:47:1a: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:A4:80:5E:AC:08:83:53:B4:CB:27:83:21:CF:FA:E3:CE:E8:48 X509v3 Authority Key Identifier: keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7d:b2:6a:79:b5:9b:09:a9:40:cc:b7:48:87:fd:bf:d1:c0: ab:79:54:37:4d:07:c3:9d:37:33:e5:cb:6a:62:ab:64:99:55: 13:6e:fb:02:d0:14:bd:c6:1f:8f:84:d2:5d:f4:b2:3b:92:de: 37:75:0c:2c:98:10:44:d0:23:9c:41:0f:97:b0:c0:9a:8a:1e: 52:14:78:cf:cc:e1:2a:3d:92:19:97:6d:84:1e:a4:76:2a:c7: 4d:95:7a:e8:c5:bb:ce:43:8a:b4:a8:67:b4:cb:14:bb:83:05: 6b:ee:24:54:16:d6:8d:6c:9e:2a:de:f6:f0:93:d1:eb:74:91: 56:12:37:5a:e4:eb:66:80:a6:9b:7e:20:7f:b1:cb:b9:fc:7e: e2:08:49:4d:38:de:00:a6:62:0d:77:c4:e8:f8:be:c4:d6:f8: 70:b0:70:10:95:a2:40:0a:f8:e9:18:44:44:fc:5c:37:5e:68: b8:36:a5:38:eb:9f:c9:5c:8f:f7:19:53:8b:0f:7a:40:ba:da: dd:fc:6f:0d:b1:d7:4e:95:6d:32:57:2e:0d:50:e1:60:9e:fc: 66:f5:8c:22:e1:7b:59:cb:3b:bb:28:8b:33:66:0d:a7:51:45: 71:28:3e:c4:8e:c7:47:7a:13:ec:51:8a:f2:73:39:cb:f3:47: bd:47:92:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQj5jnMZUVyFiUNVJm+6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5 NDhiM2UwHhcNMjUxMjE3MTcwMTE0WhcNMjUxMjE4MTcwMTE0WjAzMTEwLwYDVQQD EyhlMDRjYTQ4MDVlYWMwODgzNTNiNGNiMjc4MzIxY2ZmYWUzY2VlODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv37jmdKAfDtNkKdNr+gEtqsVK3Hs GmETZKtGZI6qnG1o7Gb/gLp31e0hP3XBf0c94R7Bo9pBHmvcIk+Z68eTKEoYSDlI XySN8MqObwl26kcvyLbJ7zKQeKV3iPS12mup3ETlhpfgr2xgW5O3cD+Gi5TYHcq4 Dks5FpHKrb+TyMl/NPfTqQPQ+//Y8+geQ3wg0TPjRlm+raI7TuQ6junyEmjT6ukw yxj1eazwmPWocXFyhfGDuCVl2VsfUyaO6TSYJZ6vIMjJwHJdRwVV1UeD2127fXuw iL4NvGpcpXjED2Rp+VtTNJQk/I5OkXH1lKIi1SkjiNOsPvznYH52Rxq4DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBMpIBerAiDU7TLJ4Mhz/rjzuhIMB8GA1UdIwQY MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgH2yanm1 mwmpQMy3SIf9v9HAq3lUN00Hw503M+XLamKrZJlVE277AtAUvcYfj4TSXfSyO5Le N3UMLJgQRNAjnEEPl7DAmooeUhR4z8zhKj2SGZdthB6kdirHTZV66MW7zkOKtKhn tMsUu4MFa+4kVBbWjWyeKt728JPR63SRVhI3WuTrZoCmm34gf7HLufx+4ghJTTje AKZiDXfE6Pi+xNb4cLBwEJWiQAr46RhERPxcN15ouDalOOufyVyP9xlTiw96QLra 3fxvDbHXTpVtMlcuDVDhYJ78ZvWMIuF7Wcs7uyiLM2YNp1FFcSg+xI7HR3oT7FGK 8nM5y/NHvUeSWQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:09:58 2025 by rpki-client