This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json) Hash identifier: vcTDINPVGzWo6BnlCW3Qjfz154VaUGU/Bw5pDX2KsE0= Subject key identifier: C7:F7:5E:E0:3D:DC:86:7D:BA:CF:24:C3:E0:9B:27:3E:17:A3:E8:52 Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Certificate serial: 019B2BF8B7491471E097A7F8E971F5050324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft Manifest number: 1435 Signing time: Wed 17 Dec 2025 11:01:18 +0000 Manifest this update: Wed 17 Dec 2025 11:01:18 +0000 Manifest next update: Thu 18 Dec 2025 11:01:18 +0000 Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=) 2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 2/tsvhoZgpoL0S0E1+GRo4EE87kF5UXxKKAX416pRgs=) 3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:b7:49:14:71:e0:97:a7:f8:e9:71:f5:05:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d Validity Not Before: Dec 17 11:01:18 2025 GMT Not After : Dec 18 11:01:18 2025 GMT Subject: CN=c7f75ee03ddc867dbacf24c3e09b273e17a3e852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:c7:43:aa:71:19:33:99:cc:b4:63:dd:c3: 6b:39:34:87:52:8c:32:32:31:5f:99:d6:c2:fe:7e: 4d:fa:6d:2f:ed:f1:c0:32:50:27:db:36:44:09:05: 1c:b9:43:78:c5:e1:91:50:a0:63:e6:16:ad:c3:32: 08:14:82:fb:a2:4b:13:97:34:50:62:ff:3d:de:21: ab:88:c6:b4:bd:c9:93:fa:fd:4a:d0:f8:ce:dd:ed: 1f:cc:75:fb:c1:49:75:e1:a0:07:a5:33:61:9b:09: 8c:4a:f0:f4:2a:ab:a6:48:09:f7:cf:92:63:b7:e9: ed:10:9d:db:1e:9b:3a:db:e5:02:1a:73:e4:25:f0: bd:af:d3:db:c6:08:a0:ff:90:82:87:2d:e2:0a:3c: f5:a5:0f:d1:9f:6e:75:dc:e9:b0:3f:61:16:e3:8e: c7:3b:a8:8a:1d:10:cd:6f:8f:a1:8c:96:b8:a3:c9: 0c:b5:b5:ef:95:9c:a6:87:c5:bc:66:38:fb:4a:99: 1e:8f:06:b4:70:f5:ee:fb:aa:a7:59:73:b7:02:17: 7c:2a:8e:44:9c:ce:9a:12:08:9c:c1:2f:1e:79:69: 93:23:eb:10:72:e5:20:a8:b1:92:5a:30:22:32:68: 73:ed:6e:d6:87:05:78:dc:82:5b:65:50:0e:65:6f: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:5E:E0:3D:DC:86:7D:BA:CF:24:C3:E0:9B:27:3E:17:A3:E8:52 X509v3 Authority Key Identifier: keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7c:6e:ea:d4:4d:9d:7e:12:d7:0b:25:99:75:9f:b0:13:55: a0:e6:c7:f0:35:89:91:ea:f1:1e:50:7b:00:72:d7:7f:d4:c9: a4:33:93:85:e9:d8:aa:c7:b7:cf:39:e6:09:e7:49:44:8c:a1: e9:83:a3:cb:c6:ce:c6:52:a4:a2:5f:33:74:5e:4d:d6:e3:ee: e4:0e:ab:f6:30:76:92:f6:20:cc:45:d0:91:26:56:74:f1:3d: 7d:db:f4:97:03:59:b1:04:65:de:fe:26:df:d7:14:f7:cf:7a: 86:f4:06:ec:11:76:47:2d:b2:a7:10:75:06:94:77:b6:ae:38: 2a:03:d7:04:30:ae:a5:b7:d8:da:5f:6f:2a:94:37:b6:b5:11: 96:21:d4:68:bc:e3:3a:fa:cb:b4:f7:29:63:73:e5:f4:46:88: 79:fd:30:a2:ef:89:6c:92:e4:74:dc:02:0b:c4:5e:ee:34:8e: 07:29:b2:1a:8d:8b:78:0d:89:b7:7d:9f:51:7c:dc:23:6d:a6: cc:3e:2f:3c:bf:7e:2b:ba:ac:70:1b:b8:98:cc:41:f8:ee:b9: 4b:3b:91:32:7a:21:88:f3:a3:69:e4:7e:e2:6e:e9:14:89:b3: 6d:98:13:f7:d5:14:44:f0:d2:b8:3a:91:dc:8b:61:bc:76:72: b1:9e:66:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+LdJFHHgl6f46XH1BQMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5 NmZhMmQwHhcNMjUxMjE3MTEwMTE4WhcNMjUxMjE4MTEwMTE4WjAzMTEwLwYDVQQD EyhjN2Y3NWVlMDNkZGM4NjdkYmFjZjI0YzNlMDliMjczZTE3YTNlODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI3HQ6pxGTOZzLRj3cNrOTSHUowy MjFfmdbC/n5N+m0v7fHAMlAn2zZECQUcuUN4xeGRUKBj5hatwzIIFIL7oksTlzRQ Yv893iGriMa0vcmT+v1K0PjO3e0fzHX7wUl14aAHpTNhmwmMSvD0KqumSAn3z5Jj t+ntEJ3bHps62+UCGnPkJfC9r9Pbxgig/5CChy3iCjz1pQ/Rn2513OmwP2EW447H O6iKHRDNb4+hjJa4o8kMtbXvlZymh8W8Zjj7Spkejwa0cPXu+6qnWXO3Ahd8Ko5E nM6aEgicwS8eeWmTI+sQcuUgqLGSWjAiMmhz7W7WhwV43IJbZVAOZW+KfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf3XuA93IZ9us8kw+CbJz4Xo+hSMB8GA1UdIwQY MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt ZDMyZTU2ZDc5YjJhLzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinxu6tRN nX4S1wslmXWfsBNVoObH8DWJkerxHlB7AHLXf9TJpDOThenYqse3zznmCedJRIyh 6YOjy8bOxlKkol8zdF5N1uPu5A6r9jB2kvYgzEXQkSZWdPE9fdv0lwNZsQRl3v4m 39cU9896hvQG7BF2Ry2ypxB1BpR3tq44KgPXBDCupbfY2l9vKpQ3trURliHUaLzj OvrLtPcpY3Pl9EaIef0wou+JbJLkdNwCC8Re7jSOBymyGo2LeA2Jt32fUXzcI22m zD4vPL9+K7qscBu4mMxB+O65SzuRMnohiPOjaeR+4m7pFImzbZgT99UURPDSuDqR 3IthvHZysZ5muQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:11 2025 by rpki-client