This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json) Hash identifier: O9O1sAY7fiXb/G9e4k57ZjOpa1RY7mK20ZJ89sPeVNk= Subject key identifier: 11:6C:51:E7:B7:3E:EA:43:BC:46:71:80:DD:28:22:A6:33:94:55:10 Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Certificate serial: 019B27773785D78FD47C3BA1C123AB627D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft Manifest number: 174C Signing time: Tue 16 Dec 2025 14:01:22 +0000 Manifest this update: Tue 16 Dec 2025 14:01:22 +0000 Manifest next update: Wed 17 Dec 2025 14:01:22 +0000 Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: RHOcQZqK9UAi7w0ekBswIMcKZgZtHZA4OQgej19fJYQ=) 2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:37:85:d7:8f:d4:7c:3b:a1:c1:23:ab:62:7d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Validity Not Before: Dec 16 14:01:22 2025 GMT Not After : Dec 17 14:01:22 2025 GMT Subject: CN=116c51e7b73eea43bc467180dd2822a633945510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:08:d9:06:65:ef:47:5a:0d:9c:48:1c:56: 61:53:90:78:d2:f4:98:5d:29:3a:b9:20:71:fa:08: 41:17:cf:00:7b:7c:4a:52:7b:fe:0e:54:58:1f:bd: 82:f0:d0:e8:d4:20:c9:fc:34:c0:8c:7a:96:7c:ef: fc:2c:bb:af:25:d0:99:e3:04:96:15:3e:4f:92:83: 30:25:7d:5b:ba:23:fa:8b:e9:1b:98:35:d4:6c:ce: f9:45:99:e2:b9:53:35:69:90:04:5e:f5:1e:27:a4: 46:9a:03:fb:e5:dc:3b:eb:89:b8:e9:4b:2e:09:36: 0c:b7:b9:87:29:11:4d:ba:f2:85:cc:1b:b1:e3:47: 00:2a:62:8d:f0:a8:97:ae:00:ff:fb:86:f5:3a:51: b5:90:a5:8d:b1:35:21:15:0e:19:07:33:54:82:73: fe:5b:9c:62:24:fb:26:3c:bf:27:a3:42:a5:ae:02: a8:34:18:30:da:eb:72:05:06:87:d6:3d:d5:2f:10: ff:65:45:81:50:5b:0b:74:32:f6:32:43:f1:b9:1f: be:03:fe:cf:23:6a:0a:cb:6d:5e:6a:15:d6:df:3c: 4e:77:09:75:3c:ca:0d:79:49:74:64:83:98:1e:21: ca:6b:8a:71:e8:1c:6f:af:5a:e7:8a:10:2f:8f:87: 09:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6C:51:E7:B7:3E:EA:43:BC:46:71:80:DD:28:22:A6:33:94:55:10 X509v3 Authority Key Identifier: keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:70:af:fa:2e:ec:60:8d:a0:30:48:99:d7:28:14:6c:bd:b8: 02:f5:2d:44:6d:79:8e:15:b3:d5:b9:82:2e:c7:a5:dd:17:9f: 1c:42:e4:c6:31:0a:d9:c8:18:0e:26:1a:e2:bc:7a:a7:3e:a2: 87:b0:7e:3b:27:4c:bc:88:73:59:79:5a:c2:ba:db:b1:60:e0: 76:94:0e:87:88:17:13:0c:cc:65:6f:69:67:b6:c8:da:3e:3e: 1c:e1:36:3c:41:16:54:59:31:4f:a5:22:23:b8:f1:62:5d:df: 3a:97:8b:2a:a4:e6:58:da:66:e9:f0:1d:16:3a:62:f0:29:2e: 20:ad:d8:d5:f8:6d:e7:a5:dd:3c:58:88:62:1d:fa:15:84:ca: 49:b4:c3:55:4a:c4:37:21:c4:81:da:d7:6f:c6:8e:2e:8d:7b: 2a:ed:32:5b:ca:c7:38:f2:f8:d9:cc:0b:2a:ff:42:74:d0:37: 51:c5:d9:30:5e:08:fc:53:83:9c:09:09:df:5b:00:1f:bc:c5: 5d:05:48:f5:5a:19:7e:f3:0c:e4:83:93:9a:e2:45:6e:41:ed: 0b:ff:de:cf:84:92:ea:31:5a:aa:41:55:58:9a:58:36:51:d8: 5d:d1:f3:92:2b:54:8b:b2:8e:0f:25:24:ac:52:66:1d:bb:34: 2b:46:ec:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndzeF14/UfDuhwSOrYn1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5 NDhiM2UwHhcNMjUxMjE2MTQwMTIyWhcNMjUxMjE3MTQwMTIyWjAzMTEwLwYDVQQD EygxMTZjNTFlN2I3M2VlYTQzYmM0NjcxODBkZDI4MjJhNjMzOTQ1NTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuoI2QZl70daDZxIHFZhU5B40vSY XSk6uSBx+ghBF88Ae3xKUnv+DlRYH72C8NDo1CDJ/DTAjHqWfO/8LLuvJdCZ4wSW FT5PkoMwJX1buiP6i+kbmDXUbM75RZniuVM1aZAEXvUeJ6RGmgP75dw764m46Usu CTYMt7mHKRFNuvKFzBux40cAKmKN8KiXrgD/+4b1OlG1kKWNsTUhFQ4ZBzNUgnP+ W5xiJPsmPL8no0KlrgKoNBgw2utyBQaH1j3VLxD/ZUWBUFsLdDL2MkPxuR++A/7P I2oKy21eahXW3zxOdwl1PMoNeUl0ZIOYHiHKa4px6Bxvr1rnihAvj4cJEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFsUee3PupDvEZxgN0oIqYzlFUQMB8GA1UdIwQY MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHCv+i7s YI2gMEiZ1ygUbL24AvUtRG15jhWz1bmCLsel3RefHELkxjEK2cgYDiYa4rx6pz6i h7B+OydMvIhzWXlawrrbsWDgdpQOh4gXEwzMZW9pZ7bI2j4+HOE2PEEWVFkxT6Ui I7jxYl3fOpeLKqTmWNpm6fAdFjpi8CkuIK3Y1fht56XdPFiIYh36FYTKSbTDVUrE NyHEgdrXb8aOLo17Ku0yW8rHOPL42cwLKv9CdNA3UcXZMF4I/FODnAkJ31sAH7zF XQVI9VoZfvMM5IOTmuJFbkHtC//ez4SS6jFaqkFVWJpYNlHYXdHzkitUi7KODyUk rFJmHbs0K0bs8A== -----END CERTIFICATE-----Generated at Tue Dec 16 20:22:11 2025 by rpki-client