This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: 87PSpLlcbNJTO6NF7c455xPPHAhcFKmI0uAmlI4cOYs= Subject key identifier: 8A:B2:98:76:F0:A8:BA:EF:63:92:A0:51:00:7F:BC:EB:0B:E2:4A:19 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B31F57A7FDD6628291B8FC79DE778A4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1797 Signing time: Thu 18 Dec 2025 14:55:29 +0000 Manifest this update: Thu 18 Dec 2025 14:55:29 +0000 Manifest next update: Fri 19 Dec 2025 14:55:29 +0000 Files and hashes: 1: 30KL19Ub13Dq1oLnMGb--SdTDFw.roa (hash: tpSHM0zHgXFiutSvVZTKKrK279w3hubdpJSBNW1R7RY=) 2: 4K6BvTiMAIEOiTtR2Ca7Dc4cIH4.roa (hash: MHAWhrg0ApNqJ4NcLLSk8Lu+ujo8Efa4wgXL5CJxuhU=) 3: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=) 4: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=) 5: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=) 6: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=) 7: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=) 8: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=) 9: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: 0YaVjWot0j4lsIBvrN906HIRbfG8sMooPMK4KBL2UTw=) 10: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:f5:7a:7f:dd:66:28:29:1b:8f:c7:9d:e7:78:a4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 18 14:55:29 2025 GMT Not After : Dec 19 14:55:29 2025 GMT Subject: CN=8ab29876f0a8baef6392a051007fbceb0be24a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:6a:8b:af:11:13:99:42:a0:6b:df:ae:d7: 32:96:3a:29:a4:fc:91:99:04:0c:37:c6:20:34:6a: b7:e8:6d:7c:8e:f6:5c:1c:92:e6:10:17:0c:ac:b7: 67:37:44:e7:6a:16:c8:1e:f5:1b:09:18:61:36:e3: 52:53:9d:be:1c:ef:86:40:a2:47:2f:8d:15:60:8c: f2:36:08:01:d2:6d:c0:90:0d:b2:0b:15:2d:fd:3c: d5:54:e8:a3:c5:f2:b2:0a:7a:c6:c8:51:e5:31:4b: 1d:a7:ae:ee:b2:64:ec:a3:c1:48:3d:af:95:b9:e2: 17:d0:45:5d:1d:7b:27:92:0c:2a:cc:9b:f4:c7:7b: 1f:ee:46:40:8d:cf:a7:7f:bf:2b:cb:18:85:15:a7: 01:d1:1f:2b:46:90:7a:b4:3c:61:48:e5:f3:80:d2: 4c:33:cd:93:bf:70:40:5c:97:38:b5:d0:5f:04:ea: 56:d9:70:51:42:9d:93:ca:17:01:ea:5a:5b:90:e9: c8:7f:b2:74:47:9a:e2:22:28:55:46:37:ad:0a:2c: a0:1d:fa:b6:81:72:32:d8:12:31:c4:79:5f:13:69: c3:48:b4:ce:b2:ac:f9:a7:f4:ad:2c:d5:a1:f8:16: 5c:b5:a2:5b:85:a1:71:30:12:ed:50:57:d2:ff:97: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B2:98:76:F0:A8:BA:EF:63:92:A0:51:00:7F:BC:EB:0B:E2:4A:19 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:91:0a:8f:fe:05:52:1e:ad:2a:f6:b2:8e:a2:cd:2c:b8:f1: 76:d3:dd:ca:f4:5b:b3:4a:a6:3f:ce:02:be:9e:ff:3d:88:08: a7:4c:a1:44:6a:84:09:8a:52:bf:90:81:7b:f7:7d:77:e5:18: 45:6b:8e:fa:5f:89:ba:b4:5c:c4:f1:c9:0a:16:6b:3d:6e:72: 06:c6:ab:6e:8a:c7:d3:c2:9a:93:f1:8c:70:cf:84:76:b6:35: 9c:d5:cd:67:61:2f:0e:22:ef:c5:3a:bd:5b:9a:e8:bb:66:1b: 44:e2:b0:58:72:0d:76:99:6b:6e:6e:3d:f4:2b:78:ee:f1:2c: 2e:83:35:39:f1:63:7e:b1:42:d6:5d:a4:ca:ed:4b:9f:ad:f3: fe:c0:cf:46:e9:3f:67:30:24:10:0a:64:c4:98:31:83:6c:c8: f6:a2:87:1b:0a:b2:94:b4:4f:de:7b:f5:37:b5:48:a5:c4:bf: 9e:13:ce:6f:b2:38:54:39:a8:f4:b6:f1:de:71:7b:44:11:01: d5:82:56:13:ea:89:7e:9d:e8:94:c6:f3:68:67:3a:9e:6a:4a: 0a:8b:c1:19:52:ae:fc:07:b9:b8:15:79:b1:eb:1b:d5:f8:14: 0b:50:53:cc:1b:c3:b6:31:67:fa:ce:24:ce:15:1a:29:69:be: 73:40:68:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx9Xp/3WYoKRuPx53neKSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjE4MTQ1NTI5WhcNMjUxMjE5MTQ1NTI5WjAzMTEwLwYDVQQD Eyg4YWIyOTg3NmYwYThiYWVmNjM5MmEwNTEwMDdmYmNlYjBiZTI0YTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLFqi68RE5lCoGvfrtcyljoppPyR mQQMN8YgNGq36G18jvZcHJLmEBcMrLdnN0TnahbIHvUbCRhhNuNSU52+HO+GQKJH L40VYIzyNggB0m3AkA2yCxUt/TzVVOijxfKyCnrGyFHlMUsdp67usmTso8FIPa+V ueIX0EVdHXsnkgwqzJv0x3sf7kZAjc+nf78ryxiFFacB0R8rRpB6tDxhSOXzgNJM M82Tv3BAXJc4tdBfBOpW2XBRQp2TyhcB6lpbkOnIf7J0R5riIihVRjetCiygHfq2 gXIy2BIxxHlfE2nDSLTOsqz5p/StLNWh+BZctaJbhaFxMBLtUFfS/5fqvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqymHbwqLrvY5KgUQB/vOsL4koZMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5EKj/4F Uh6tKvayjqLNLLjxdtPdyvRbs0qmP84Cvp7/PYgIp0yhRGqECYpSv5CBe/d9d+UY RWuO+l+JurRcxPHJChZrPW5yBsarborH08Kak/GMcM+EdrY1nNXNZ2EvDiLvxTq9 W5rou2YbROKwWHINdplrbm499Ct47vEsLoM1OfFjfrFC1l2kyu1Ln63z/sDPRuk/ ZzAkEApkxJgxg2zI9qKHGwqylLRP3nv1N7VIpcS/nhPOb7I4VDmo9Lbx3nF7RBEB 1YJWE+qJfp3olMbzaGc6nmpKCovBGVKu/Ae5uBV5sesb1fgUC1BTzBvDtjFn+s4k zhUaKWm+c0Bong== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:51 2025 by rpki-client