This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json) Hash identifier: grTwEeQFc2bOpqRVogWQWprvmrQ7G7CaUJ37Sn944RA= Subject key identifier: A3:CB:FD:C1:BC:28:9F:F9:47:E7:89:F8:4E:33:EB:3A:59:D8:E5:56 Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Certificate serial: 019AC89F40DC815D04017C480FEF0C00E346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft Manifest number: 129D Signing time: Fri 28 Nov 2025 04:01:11 +0000 Manifest this update: Fri 28 Nov 2025 04:01:11 +0000 Manifest next update: Sat 29 Nov 2025 04:01:11 +0000 Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=) 2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: q8o69VM2UWupawgSPxTAue78BIFHyaZRkxRlOESszGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c8:9f:40:dc:81:5d:04:01:7c:48:0f:ef:0c:00:e3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1 Validity Not Before: Nov 28 04:01:11 2025 GMT Not After : Nov 29 04:01:11 2025 GMT Subject: CN=a3cbfdc1bc289ff947e789f84e33eb3a59d8e556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:57:99:bc:33:74:f4:35:84:0b:89:6c:b9: ae:fe:cb:4a:62:c8:e1:a2:7b:6e:30:6e:bd:c1:9d: 8a:e2:08:eb:5a:d1:29:6b:d5:5d:54:7c:1c:c5:1a: 1b:55:ac:d5:2d:58:56:45:99:c7:f6:c5:04:55:03: 4f:5e:12:57:c9:dc:47:1b:b7:0d:c7:37:e5:c4:03: 3b:23:ce:44:a7:dd:de:d3:e9:fa:88:72:ac:ad:75: bb:e3:d0:ec:d1:84:3e:74:65:91:0a:91:5c:4f:e4: af:fc:23:89:3f:56:b4:5a:63:2e:3f:6f:5d:1b:aa: 38:5b:37:bd:bf:96:59:d3:8f:1b:c7:7f:1e:76:bb: 3b:67:14:6e:8d:62:3f:a8:c6:a0:d5:30:5e:b1:59: 00:13:ab:b5:72:30:9c:64:c7:71:6d:43:07:34:34: 02:9f:19:b5:87:ac:4a:ab:10:9b:27:ca:30:17:77: dd:94:16:6e:4f:be:f0:07:41:ec:00:98:22:b1:02: d9:f0:e4:cc:33:c9:b7:ea:10:44:d4:26:1c:d4:bb: ee:b4:f2:17:94:22:90:bb:56:ac:3a:9e:db:37:d3: 08:b5:d8:0e:35:55:20:b8:01:be:de:63:10:3c:f0: 30:f8:9f:84:42:a4:c0:10:f2:9d:36:1c:72:99:85: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:FD:C1:BC:28:9F:F9:47:E7:89:F8:4E:33:EB:3A:59:D8:E5:56 X509v3 Authority Key Identifier: keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:61:6c:66:91:01:b9:3b:ea:c8:12:77:19:b6:91:1b:23:58: 22:31:2a:f8:19:8e:48:e1:d1:79:9f:d3:3f:14:76:cc:dd:2c: 35:6e:22:d3:83:90:7d:b2:e7:28:52:9f:ba:08:9e:8b:e8:30: 40:8c:d5:9c:b9:29:bb:52:f1:28:97:e1:3b:a0:de:60:49:28: e0:07:1d:35:ae:3b:2b:85:cb:47:40:13:a8:31:8d:29:f6:47: 20:5e:fd:d8:27:ca:3d:14:6b:28:68:f3:c3:04:05:82:32:df: cc:f1:be:57:ff:88:47:cc:c9:20:b8:75:ca:2e:c7:d4:7d:cc: 27:9c:d6:c6:06:3d:8f:20:e7:28:2c:fd:a0:93:56:8d:b5:93: 39:f3:12:e8:8b:cb:9e:fe:ab:55:9e:a6:6a:4f:50:78:46:78: 3a:54:08:ea:92:a5:4c:28:a1:88:10:7f:4d:4a:39:b8:6c:f0: 89:6b:ed:d4:57:83:53:ee:34:73:98:05:50:0f:d8:b5:cc:b2: e2:3d:12:39:80:38:80:ba:a5:b2:99:3d:a4:ae:a7:91:6b:24: e0:12:bc:8a:de:7e:7b:f2:cf:1c:5f:57:7b:1e:76:1e:a3:1a: ed:2b:bb:de:4c:3d:a9:ce:d5:7e:2c:d4:81:78:bb:6d:cd:61: fb:26:cd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrIn0DcgV0EAXxID+8MAONGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz ODM5YjEwHhcNMjUxMTI4MDQwMTExWhcNMjUxMTI5MDQwMTExWjAzMTEwLwYDVQQD EyhhM2NiZmRjMWJjMjg5ZmY5NDdlNzg5Zjg0ZTMzZWIzYTU5ZDhlNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJxXmbwzdPQ1hAuJbLmu/stKYsjh ontuMG69wZ2K4gjrWtEpa9VdVHwcxRobVazVLVhWRZnH9sUEVQNPXhJXydxHG7cN xzflxAM7I85Ep93e0+n6iHKsrXW749Ds0YQ+dGWRCpFcT+Sv/COJP1a0WmMuP29d G6o4Wze9v5ZZ048bx38edrs7ZxRujWI/qMag1TBesVkAE6u1cjCcZMdxbUMHNDQC nxm1h6xKqxCbJ8owF3fdlBZuT77wB0HsAJgisQLZ8OTMM8m36hBE1CYc1LvutPIX lCKQu1asOp7bN9MItdgONVUguAG+3mMQPPAw+J+EQqTAEPKdNhxymYWlLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPL/cG8KJ/5R+eJ+E4z6zpZ2OVWMB8GA1UdIwQY MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWFsZpEB uTvqyBJ3GbaRGyNYIjEq+BmOSOHReZ/TPxR2zN0sNW4i04OQfbLnKFKfugiei+gw QIzVnLkpu1LxKJfhO6DeYEko4AcdNa47K4XLR0ATqDGNKfZHIF792CfKPRRrKGjz wwQFgjLfzPG+V/+IR8zJILh1yi7H1H3MJ5zWxgY9jyDnKCz9oJNWjbWTOfMS6IvL nv6rVZ6mak9QeEZ4OlQI6pKlTCihiBB/TUo5uGzwiWvt1FeDU+40c5gFUA/Ytcyy 4j0SOYA4gLqlspk9pK6nkWsk4BK8it5+e/LPHF9Xex52HqMa7Su73kw9qc7VfizU gXi7bc1h+ybN+Q== -----END CERTIFICATE-----Generated at Fri Nov 28 05:42:45 2025 by rpki-client