This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json) Hash identifier: xmlb71z16wSoenP4/Ws5TJyYgmXzGpLdXpFWtTkd+MI= Subject key identifier: ED:F7:EA:CB:42:41:7A:E6:22:7E:54:43:E0:58:18:05:D9:94:EC:B4 Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019B1E73AAF0D0E576B1A2ABBDB6916EF87F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft Manifest number: 117C Signing time: Sun 14 Dec 2025 20:00:55 +0000 Manifest this update: Sun 14 Dec 2025 20:00:55 +0000 Manifest next update: Mon 15 Dec 2025 20:00:55 +0000 Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=) 2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=) 3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=) 4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: m80icZxgd/riVxB0X96q+lk+akT9zyw1A2hcr+7rCDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:aa:f0:d0:e5:76:b1:a2:ab:bd:b6:91:6e:f8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Dec 14 20:00:55 2025 GMT Not After : Dec 15 20:00:55 2025 GMT Subject: CN=edf7eacb42417ae6227e5443e0581805d994ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:c2:14:63:51:5f:72:8a:95:59:00:20:ec: 06:4f:09:06:04:b5:1d:cf:c0:33:8c:4c:22:03:fa: aa:5c:e3:32:d7:dc:4a:8c:ff:c7:b3:e0:f4:34:a7: d0:8c:53:b1:8e:fa:f0:b4:41:6a:b1:b3:93:7a:7e: 53:6f:b7:3c:29:50:a4:bc:74:8f:09:8a:9e:2a:84: da:45:07:18:12:9c:8b:f3:33:2b:11:5c:3e:2f:44: 9e:30:d8:51:0e:4d:0a:76:5f:64:b0:2c:6e:d1:24: 3b:0b:eb:43:a4:e5:2f:26:62:20:00:8a:a2:b8:42: f9:16:44:8d:24:56:63:8e:00:fc:77:a7:62:13:16: 09:fd:85:53:27:7e:12:86:18:0d:1a:a9:ea:89:20: dc:d8:ea:18:ce:6f:e1:6e:12:c3:d5:a6:d0:cb:66: 4c:3b:34:22:cf:1b:9e:89:1b:bc:1a:e0:a7:b0:c3: d3:50:d4:e3:f5:07:5e:ab:be:8b:f9:b4:46:d7:e9: 56:5e:f6:d4:60:b8:83:49:77:60:93:a8:04:e1:23: 05:d7:ca:fb:81:cf:55:53:27:4e:50:a1:a8:4a:37: f3:9a:c7:dc:04:7e:79:71:8f:82:4c:fe:6e:3e:4c: 75:e4:fb:ea:8e:8c:0c:6b:74:a1:3a:24:b6:09:64: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F7:EA:CB:42:41:7A:E6:22:7E:54:43:E0:58:18:05:D9:94:EC:B4 X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1d:79:4f:b0:d9:52:9e:95:4d:40:1b:3b:b1:e0:30:8c:4b: 48:3e:02:c9:87:9d:c1:d2:28:d3:a4:49:1b:4a:57:99:8a:a5: 26:64:9e:e3:b7:ec:61:2f:21:30:95:63:bc:a2:a1:f0:a9:95: 52:8a:31:79:81:e6:24:8f:e1:2a:84:3f:ae:34:24:2c:19:03: bd:cf:27:78:b3:a9:59:78:b2:1f:a2:51:59:65:7d:8b:cb:dc: 29:72:5b:49:1b:93:36:5e:78:96:6c:34:45:25:ff:73:b4:0f: d9:1a:a4:f9:c2:37:a6:1a:f9:7c:00:1b:78:80:ab:8b:49:48: 84:6f:40:56:f6:47:9d:8e:83:3c:f0:e5:b3:ca:74:80:cc:0c: b1:8b:bb:a4:a1:df:77:be:e7:d9:68:f0:c7:90:d1:39:34:8d: 3a:4c:ee:44:98:39:64:d4:3c:b2:b3:83:e4:6d:0a:15:f4:3e: fa:68:e1:c9:52:be:de:85:5c:e5:9e:b2:ac:ec:7e:15:95:52: a2:40:36:29:b8:ad:56:23:4a:b3:44:ef:41:c8:28:ba:65:58: 15:29:a7:16:46:b1:fe:21:3b:36:dd:92:5a:69:20:fe:c0:6c: 2e:98:9d:3a:3c:00:fb:b6:04:2e:73:d8:d8:2b:ca:e3:d4:2a: fd:68:73:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec6rw0OV2saKrvbaRbvh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjUxMjE0MjAwMDU1WhcNMjUxMjE1MjAwMDU1WjAzMTEwLwYDVQQD EyhlZGY3ZWFjYjQyNDE3YWU2MjI3ZTU0NDNlMDU4MTgwNWQ5OTRlY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGDCFGNRX3KKlVkAIOwGTwkGBLUd z8AzjEwiA/qqXOMy19xKjP/Hs+D0NKfQjFOxjvrwtEFqsbOTen5Tb7c8KVCkvHSP CYqeKoTaRQcYEpyL8zMrEVw+L0SeMNhRDk0Kdl9ksCxu0SQ7C+tDpOUvJmIgAIqi uEL5FkSNJFZjjgD8d6diExYJ/YVTJ34ShhgNGqnqiSDc2OoYzm/hbhLD1abQy2ZM OzQizxueiRu8GuCnsMPTUNTj9Qdeq76L+bRG1+lWXvbUYLiDSXdgk6gE4SMF18r7 gc9VUydOUKGoSjfzmsfcBH55cY+CTP5uPkx15PvqjowMa3ShOiS2CWSj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO336stCQXrmIn5UQ+BYGAXZlOy0MB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGB15T7DZ Up6VTUAbO7HgMIxLSD4CyYedwdIo06RJG0pXmYqlJmSe47fsYS8hMJVjvKKh8KmV UooxeYHmJI/hKoQ/rjQkLBkDvc8neLOpWXiyH6JRWWV9i8vcKXJbSRuTNl54lmw0 RSX/c7QP2Rqk+cI3phr5fAAbeICri0lIhG9AVvZHnY6DPPDls8p0gMwMsYu7pKHf d77n2Wjwx5DROTSNOkzuRJg5ZNQ8srOD5G0KFfQ++mjhyVK+3oVc5Z6yrOx+FZVS okA2KbitViNKs0TvQcgoumVYFSmnFkax/iE7Nt2SWmkg/sBsLpidOjwA+7YELnPY 2CvK49Qq/WhzIQ== -----END CERTIFICATE-----Generated at Sun Dec 14 23:19:03 2025 by rpki-client