This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: e+HswnHJ7v9l5uK0C3T6RKIqjRYbB9w3tTPDkZEG9VM= Subject key identifier: D2:51:45:FE:C5:6F:19:C6:F5:76:88:8B:E1:78:41:E8:12:03:18:AC Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019B0E5C246CAA7BD8BB77ABC3060410F49F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1782 Signing time: Thu 11 Dec 2025 17:01:18 +0000 Manifest this update: Thu 11 Dec 2025 17:01:18 +0000 Manifest next update: Fri 12 Dec 2025 17:01:18 +0000 Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=) 2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=) 3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=) 4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=) 5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=) 6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=) 7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: ycovF5x3B35a15qr4AYj1vrMgxxQogg/XykQLgaQEhU=) 8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:24:6c:aa:7b:d8:bb:77:ab:c3:06:04:10:f4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 11 17:01:18 2025 GMT Not After : Dec 12 17:01:18 2025 GMT Subject: CN=d25145fec56f19c6f576888be17841e8120318ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:9a:e4:c7:82:54:da:70:74:2f:0c:3f:fc: a6:01:ed:0b:83:72:cf:f8:d7:d3:a3:11:71:cc:5d: c1:d2:96:b2:d3:ac:36:59:5d:5d:bf:c6:3c:2b:95: 40:2f:40:af:e1:b4:d5:d1:3e:97:bb:8b:64:de:3b: 44:0c:5b:e8:0a:03:17:25:70:f8:e1:db:06:4d:d4: 0c:84:b0:2c:d2:d9:48:24:4d:28:33:6d:2d:1d:80: 28:5f:6d:ad:6e:ec:bc:43:1f:f6:05:aa:57:e6:c7: 42:67:46:a5:f3:f4:ff:b1:6a:d9:47:fa:e7:77:da: 8d:e5:73:13:96:62:ec:00:18:92:91:56:28:3b:41: f7:a3:74:52:f7:ed:f9:e3:df:3c:54:3c:84:17:0b: 0a:33:dc:97:6a:75:d1:5e:4e:7a:10:f5:b9:7d:ef: 2b:4d:f8:2d:02:fa:62:d4:c3:da:18:05:99:19:1b: 77:bb:ec:40:bc:3e:46:72:eb:a3:58:1c:62:a8:0a: 24:0e:48:00:ba:de:90:eb:5e:55:45:3d:3c:9f:fa: d7:33:46:3b:55:be:42:e9:e6:04:68:58:1c:8b:65: e4:07:16:55:7a:68:62:5a:26:3d:5f:e8:68:94:66: 51:ad:0e:88:93:6b:05:15:d8:23:61:5b:25:dc:9d: 30:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:51:45:FE:C5:6F:19:C6:F5:76:88:8B:E1:78:41:E8:12:03:18:AC X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:16:e4:fd:67:fa:ca:b2:df:dc:63:41:bd:e4:f0:e3:2a:0d: b7:68:84:ce:f9:fd:80:bf:e4:37:56:5c:2e:05:64:99:c6:4f: 5e:a6:48:10:a6:b9:7d:33:cd:98:60:c2:e4:97:76:69:c2:7a: de:58:f1:4e:fe:d7:3a:f5:7f:29:e8:b1:6f:e5:16:56:c6:b7: 7c:d0:5c:33:90:db:76:33:84:88:2d:71:a6:04:c2:2b:4e:06: 5c:78:74:8f:b8:58:32:30:21:80:e3:f6:fb:ee:a2:ba:fe:f7: 15:d8:7f:46:7a:b4:92:a4:09:83:36:1b:79:ce:83:b5:fd:2d: 40:7f:f1:f9:28:28:a3:a8:07:b2:c1:d6:93:84:cb:79:4a:d5: 68:46:71:56:0f:ad:0e:21:1d:32:1f:cd:af:7b:06:6e:19:7b: 5d:01:ca:58:33:af:61:8c:9c:c6:ff:39:0c:94:ea:4a:94:64: 8c:02:49:5a:33:75:03:91:76:ba:91:5a:ac:ea:39:e9:a0:2d: f2:e5:0b:db:f2:f2:d8:27:5d:c6:12:0c:fa:e4:d5:52:62:8f: 08:df:ae:ec:8d:e4:15:48:34:66:d7:f2:0b:75:77:5b:56:e0: fc:fa:e7:8f:0b:f8:5e:5d:3a:0c:ee:27:03:f7:a6:ea:7b:ef: 32:85:81:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXCRsqnvYu3erwwYEEPSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjExMTcwMTE4WhcNMjUxMjEyMTcwMTE4WjAzMTEwLwYDVQQD EyhkMjUxNDVmZWM1NmYxOWM2ZjU3Njg4OGJlMTc4NDFlODEyMDMxOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOua5MeCVNpwdC8MP/ymAe0Lg3LP +NfToxFxzF3B0pay06w2WV1dv8Y8K5VAL0Cv4bTV0T6Xu4tk3jtEDFvoCgMXJXD4 4dsGTdQMhLAs0tlIJE0oM20tHYAoX22tbuy8Qx/2BapX5sdCZ0al8/T/sWrZR/rn d9qN5XMTlmLsABiSkVYoO0H3o3RS9+354988VDyEFwsKM9yXanXRXk56EPW5fe8r TfgtAvpi1MPaGAWZGRt3u+xAvD5GcuujWBxiqAokDkgAut6Q615VRT08n/rXM0Y7 Vb5C6eYEaFgci2XkBxZVemhiWiY9X+holGZRrQ6Ik2sFFdgjYVsl3J0wkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJRRf7FbxnG9XaIi+F4QegSAxisMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBbk/Wf6 yrLf3GNBveTw4yoNt2iEzvn9gL/kN1ZcLgVkmcZPXqZIEKa5fTPNmGDC5Jd2acJ6 3ljxTv7XOvV/Keixb+UWVsa3fNBcM5DbdjOEiC1xpgTCK04GXHh0j7hYMjAhgOP2 ++6iuv73Fdh/Rnq0kqQJgzYbec6Dtf0tQH/x+Sgoo6gHssHWk4TLeUrVaEZxVg+t DiEdMh/Nr3sGbhl7XQHKWDOvYYycxv85DJTqSpRkjAJJWjN1A5F2upFarOo56aAt 8uUL2/Ly2CddxhIM+uTVUmKPCN+u7I3kFUg0ZtfyC3V3W1bg/Prnjwv4Xl06DO4n A/em6nvvMoWBpw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:28 2025 by rpki-client