This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json) Hash identifier: 8fF19qUuU+B2CudA+lpQbRY7yqIaNOhFkCdpezsHR/s= Subject key identifier: D4:CD:F1:F0:53:40:70:E5:89:5D:20:28:A8:4C:E6:AB:B6:3E:70:F0 Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019B397D5BF899C7CE29CF18D8D8F0836E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft Manifest number: 118A Signing time: Sat 20 Dec 2025 02:01:15 +0000 Manifest this update: Sat 20 Dec 2025 02:01:15 +0000 Manifest next update: Sun 21 Dec 2025 02:01:15 +0000 Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=) 2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=) 3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=) 4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: FB6lqO29DLqEhZV9bP/C5e+t5k/vbYIayyF3RNUFq3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:5b:f8:99:c7:ce:29:cf:18:d8:d8:f0:83:6e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Dec 20 02:01:15 2025 GMT Not After : Dec 21 02:01:15 2025 GMT Subject: CN=d4cdf1f0534070e5895d2028a84ce6abb63e70f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:1a:a2:cb:5f:ad:e1:ec:f6:06:b9:f3:ce: 1f:84:18:f8:95:f2:71:8f:4d:8f:08:07:b1:2c:b4: c2:07:24:02:b5:3f:2e:8b:32:98:d4:cb:73:ca:44: b8:87:0d:2c:5f:28:91:68:3b:89:7c:7b:e4:34:a8: 99:72:2d:68:fb:d5:ec:f6:45:64:bc:02:97:b5:44: 62:b0:ee:24:7f:1c:91:d8:47:c1:2e:01:6f:a7:32: 3b:6a:4e:4f:06:21:7d:f5:17:5e:70:38:67:7e:d1: ad:d2:16:40:03:5d:88:61:7b:94:ad:30:d2:c3:b7: ae:b9:f9:b9:67:87:a8:0d:bc:d4:70:78:67:41:ab: af:67:ed:3b:2c:b5:8e:ea:5a:8c:45:7f:80:34:23: b1:2d:06:cc:fc:90:38:87:5d:b6:d4:0d:58:8d:3c: 8d:1c:0f:41:5d:d8:fd:5e:97:33:f2:d2:8b:31:0b: c8:1e:8d:ac:b4:0b:7d:56:68:fc:9c:fe:81:5f:46: d6:bf:c6:8e:2e:e7:51:9c:60:c4:e8:c4:96:e5:dd: 5b:bb:de:0a:de:75:98:c7:53:28:7c:db:69:a2:93: 35:5f:36:f6:18:2d:f3:e2:74:37:9d:09:25:cf:39: b1:b5:19:43:31:5b:55:9e:62:63:10:ba:b7:d7:97: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CD:F1:F0:53:40:70:E5:89:5D:20:28:A8:4C:E6:AB:B6:3E:70:F0 X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9f:f8:5a:48:1c:ff:bb:64:3b:ed:ef:95:35:cb:68:ca:b8: 91:74:28:48:24:1a:2f:2b:83:d7:56:02:41:2a:10:08:ac:0c: 81:63:71:d5:94:d0:46:44:6a:97:0f:dc:dd:4a:5b:3b:ec:16: 91:3f:c5:15:0c:81:b3:20:53:7c:6b:a1:fd:84:bc:1d:15:89: 6c:60:65:88:30:ed:52:55:bc:8a:ca:94:f6:4f:3d:b7:4e:f6: e6:0f:26:11:c0:9e:ab:d1:20:ec:1c:84:94:86:ea:55:c0:53: d7:e3:c8:34:51:89:77:de:56:11:f9:60:a8:ce:dd:0b:7f:d4: 54:ba:75:7a:08:1e:37:d1:7b:f5:bb:c0:dc:12:6c:74:35:61: 49:39:80:e1:45:da:ad:ce:75:a2:6d:92:12:05:b6:6e:7d:11: a7:83:05:1f:75:8c:c3:b9:e5:23:5b:d4:cd:11:42:e7:9a:e2: 7b:de:1d:5b:00:91:49:68:aa:2b:e6:51:b6:0f:7a:c0:7a:cf: f2:f8:ba:1c:1c:ef:77:94:28:23:ea:01:e6:8d:2a:8c:08:dd: 03:bd:8f:1e:f8:6d:cd:20:7b:c9:20:13:fd:c7:aa:c9:c5:57: 3c:e7:7c:44:57:9c:a7:d8:57:95:0c:c2:e5:d7:e3:fc:c1:f5: 23:93:a9:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVv4mcfOKc8Y2Njwg25WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjUxMjIwMDIwMTE1WhcNMjUxMjIxMDIwMTE1WjAzMTEwLwYDVQQD EyhkNGNkZjFmMDUzNDA3MGU1ODk1ZDIwMjhhODRjZTZhYmI2M2U3MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+kaostfreHs9ga5884fhBj4lfJx j02PCAexLLTCByQCtT8uizKY1MtzykS4hw0sXyiRaDuJfHvkNKiZci1o+9Xs9kVk vAKXtURisO4kfxyR2EfBLgFvpzI7ak5PBiF99RdecDhnftGt0hZAA12IYXuUrTDS w7euufm5Z4eoDbzUcHhnQauvZ+07LLWO6lqMRX+ANCOxLQbM/JA4h1221A1YjTyN HA9BXdj9Xpcz8tKLMQvIHo2stAt9Vmj8nP6BX0bWv8aOLudRnGDE6MSW5d1bu94K 3nWYx1MofNtpopM1Xzb2GC3z4nQ3nQklzzmxtRlDMVtVnmJjELq315dpYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTN8fBTQHDliV0gKKhM5qu2PnDwMB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5/4Wkgc /7tkO+3vlTXLaMq4kXQoSCQaLyuD11YCQSoQCKwMgWNx1ZTQRkRqlw/c3UpbO+wW kT/FFQyBsyBTfGuh/YS8HRWJbGBliDDtUlW8isqU9k89t0725g8mEcCeq9Eg7ByE lIbqVcBT1+PINFGJd95WEflgqM7dC3/UVLp1eggeN9F79bvA3BJsdDVhSTmA4UXa rc51om2SEgW2bn0Rp4MFH3WMw7nlI1vUzRFC55rie94dWwCRSWiqK+ZRtg96wHrP 8vi6HBzvd5QoI+oB5o0qjAjdA72PHvhtzSB7ySAT/ceqycVXPOd8RFecp9hXlQzC 5dfj/MH1I5OpCg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:19 2025 by rpki-client