This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json) Hash identifier: zwaW8SO1mdFn3O/mB2byAkJ2HZk4/M8JWRm7A3uRzMc= Subject key identifier: 80:B0:C1:3C:AC:F4:68:4F:4D:75:63:0C:FE:B2:11:55:26:72:FF:47 Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97 Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97 Certificate serial: 019B372169BBA523E6B70FA1F10ACBFD902F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 15:01:35 +0000 Manifest this update: Fri 19 Dec 2025 15:01:35 +0000 Manifest next update: Sat 20 Dec 2025 15:01:35 +0000 Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: nKkjiljWPIJ9p9Nx/XjxVp2kS9rkuV3hfxfIVWzqU4I=) 2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:69:bb:a5:23:e6:b7:0f:a1:f1:0a:cb:fd:90:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97 Validity Not Before: Dec 19 15:01:35 2025 GMT Not After : Dec 20 15:01:35 2025 GMT Subject: CN=80b0c13cacf4684f4d75630cfeb211552672ff47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:66:f2:a3:3f:02:93:6d:bf:14:87:59:38: 8d:40:16:5a:95:be:72:3d:41:6c:14:ee:5c:a7:98: 50:c2:f6:8f:d0:17:36:12:19:77:f1:57:80:fa:e1: bd:9d:ed:4d:36:70:25:e0:0f:d5:a3:87:5b:9d:12: d4:4c:bc:b6:1e:41:f7:5d:72:3c:23:0e:c7:e8:cb: 49:9b:c9:c5:3c:fa:04:56:f2:0e:a0:6c:9c:63:dd: 13:df:17:f4:fd:a8:77:d6:99:32:d7:ba:82:0a:6b: dd:de:7e:b6:87:65:b5:2a:de:ae:51:e0:0b:0a:d0: e4:ce:49:02:88:af:36:6f:af:61:a3:3a:68:d4:8e: 91:31:f9:78:a4:2a:4c:42:39:cd:4d:66:e0:a1:45: d1:6f:74:87:04:ba:b5:e8:d7:9d:dd:29:a7:6a:a6: 6b:a2:9b:60:13:62:61:96:52:38:6d:eb:f7:ff:b4: e0:f1:7f:e6:0c:6a:d0:30:75:a1:f1:df:5c:18:c0: 24:ae:83:e3:84:e5:5b:88:83:83:aa:1f:7e:98:fe: 41:6a:4f:c0:1e:92:0f:ac:c5:77:2e:f8:5e:31:70: 6b:e9:6a:7d:41:9c:92:ad:b6:78:9e:64:6c:bf:11: 05:c8:5c:98:5a:8e:07:33:a4:3b:80:1c:bd:83:10: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B0:C1:3C:AC:F4:68:4F:4D:75:63:0C:FE:B2:11:55:26:72:FF:47 X509v3 Authority Key Identifier: keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:99:24:aa:4f:49:47:23:bb:a8:b3:15:ac:c2:79:05:f5:88: 50:d1:ee:04:12:03:ad:40:09:d0:e4:35:95:c8:17:36:bc:3b: d3:00:7b:bc:01:57:7b:9c:d6:aa:a2:c0:d7:9e:39:c0:95:df: 7f:06:73:34:0f:7d:ef:32:26:e6:65:78:94:57:0f:d1:86:78: 2a:54:5e:de:66:8b:35:c6:22:7a:7f:d3:4d:f8:c2:6a:cf:c1: c9:e5:13:e6:50:06:ac:23:03:33:f5:19:4a:01:c9:0b:e1:67: 86:68:9b:18:ff:ba:d2:f6:af:99:f8:22:01:ae:98:c1:3a:4f: fa:20:b4:b0:95:6b:f2:76:61:c6:9d:1e:42:c8:3a:47:8c:1c: e7:cd:d6:84:33:8c:64:43:bd:14:ab:35:8a:8a:1c:7a:1c:18: 64:b2:08:04:ac:86:a9:0b:53:a8:62:90:78:a5:72:a5:ce:51: a9:07:57:57:4d:80:6d:06:ef:b2:77:88:94:f2:90:4a:97:c2: 38:83:bd:c9:82:5b:a3:e4:0c:c3:9d:33:4a:3b:c3:01:32:ec: 70:a3:67:0c:11:bb:79:e4:cc:be:95:80:bc:9b:d2:d4:62:ba: 9a:ee:43:67:5e:40:7e:c1:66:ae:ff:2b:70:26:d8:d0:ca:fd: ad:e2:9f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWm7pSPmtw+h8QrL/ZAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGQxNWVmMmY1OWFiYjk1ZjJkOWJlNWNlZTMzMDM4ODg2 MjNiOTcwHhcNMjUxMjE5MTUwMTM1WhcNMjUxMjIwMTUwMTM1WjAzMTEwLwYDVQQD Eyg4MGIwYzEzY2FjZjQ2ODRmNGQ3NTYzMGNmZWIyMTE1NTI2NzJmZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMhm8qM/ApNtvxSHWTiNQBZalb5y PUFsFO5cp5hQwvaP0Bc2Ehl38VeA+uG9ne1NNnAl4A/Vo4dbnRLUTLy2HkH3XXI8 Iw7H6MtJm8nFPPoEVvIOoGycY90T3xf0/ah31pky17qCCmvd3n62h2W1Kt6uUeAL CtDkzkkCiK82b69hozpo1I6RMfl4pCpMQjnNTWbgoUXRb3SHBLq16Ned3SmnaqZr optgE2JhllI4bev3/7Tg8X/mDGrQMHWh8d9cGMAkroPjhOVbiIODqh9+mP5Bak/A HpIPrMV3LvheMXBr6Wp9QZySrbZ4nmRsvxEFyFyYWo4HM6Q7gBy9gxCULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICwwTys9GhPTXVjDP6yEVUmcv9HMB8GA1UdIwQY MBaAFB3dFe8vWau5Xy2b5c7jMDiIYjuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1Mjgt OGI2MGU0Yjk0YmNmLzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8wYWZhODgtYjUyNi00NzYzLTk1MjgtOGI2MGU0Yjk0YmNm LzEvSGQwVjd5OVpxN2xmTFp2bHp1TXdPSWhpTzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZkkqk9J RyO7qLMVrMJ5BfWIUNHuBBIDrUAJ0OQ1lcgXNrw70wB7vAFXe5zWqqLA1545wJXf fwZzNA997zIm5mV4lFcP0YZ4KlRe3maLNcYien/TTfjCas/ByeUT5lAGrCMDM/UZ SgHJC+FnhmibGP+60vavmfgiAa6YwTpP+iC0sJVr8nZhxp0eQsg6R4wc583WhDOM ZEO9FKs1ioocehwYZLIIBKyGqQtTqGKQeKVypc5RqQdXV02AbQbvsneIlPKQSpfC OIO9yYJbo+QMw50zSjvDATLscKNnDBG7eeTMvpWAvJvS1GK6mu5DZ15AfsFmrv8r cCbY0Mr9reKfUw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:51 2025 by rpki-client