This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json) Hash identifier: alCL+SkqXi/i65KEiWxD3+x8gz9niWyo8AQdwL3DZjU= Subject key identifier: 98:A3:EF:79:6F:EC:F4:6E:5E:A0:2A:B4:68:6E:B8:0F:55:40:C9:4B Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5 Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5 Certificate serial: 019B5A88A9562AA57F78DF550CD12CBDC18B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 12:01:04 +0000 Manifest this update: Fri 26 Dec 2025 12:01:04 +0000 Manifest next update: Sat 27 Dec 2025 12:01:04 +0000 Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=) 2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=) 3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: zgDYEQGe+01W16kCVNx6FykgHOFCY+BhmOQ5/HonA/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a9:56:2a:a5:7f:78:df:55:0c:d1:2c:bd:c1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5 Validity Not Before: Dec 26 12:01:04 2025 GMT Not After : Dec 27 12:01:04 2025 GMT Subject: CN=98a3ef796fecf46e5ea02ab4686eb80f5540c94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:c3:02:65:96:c8:f9:41:8a:2f:05:6b:32: 20:bd:bb:51:30:fa:f2:e5:2b:ec:dc:9f:f3:28:b5: f7:35:f7:ee:1c:c1:f9:91:78:fc:c1:94:91:af:ff: 72:0a:82:02:c4:d8:fb:f7:d0:73:c0:80:ef:95:3e: 58:e5:09:c1:49:27:35:39:d8:14:1a:7d:92:f5:2b: ad:63:b8:50:5e:5d:74:f1:b0:9c:18:9e:76:51:3c: 89:29:9a:44:4d:ba:3b:4c:07:1d:65:10:60:09:2f: b5:14:e0:de:5e:7d:98:e6:74:ea:84:63:e9:f1:a1: c9:bc:9d:3e:c4:f7:7a:37:67:56:80:54:ed:9f:33: f6:95:04:e2:46:d1:46:fc:fc:b4:ca:f3:5f:fc:2c: 4e:f6:05:fe:ed:87:46:b4:0c:8e:17:25:fd:d7:2e: d4:20:44:c5:f1:67:7f:ad:1f:e5:28:23:a9:24:18: e8:f8:04:d4:2e:f3:a6:40:a7:16:60:2c:64:be:f5: c5:ff:7d:52:6e:ec:49:ec:00:1c:91:f6:30:c2:03: 82:f3:47:89:7b:7d:16:6e:28:ea:8e:42:d4:f5:89: 8d:af:45:bd:1d:5e:df:e5:b2:75:c9:89:a3:02:d1: b2:fb:1e:87:f5:5b:87:00:73:d6:83:61:c2:27:f4: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A3:EF:79:6F:EC:F4:6E:5E:A0:2A:B4:68:6E:B8:0F:55:40:C9:4B X509v3 Authority Key Identifier: keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fe:52:eb:62:13:aa:83:1b:e3:dd:02:06:b3:06:86:2f:6c: 08:bb:51:28:c9:76:6b:e7:71:ab:25:da:63:d9:1f:29:75:ce: 6e:96:2b:f4:b0:53:99:b5:27:f8:0a:8b:37:dd:50:7d:d6:a2: 74:e0:f8:45:24:e4:81:b1:ab:0c:33:22:59:c0:38:76:fe:e2: a6:36:cc:cc:e1:f6:54:22:00:af:bc:d0:fd:7a:b3:d7:e3:16: a0:9c:12:a5:44:9f:35:27:87:3f:cd:ef:06:f2:c0:8d:2a:6d: 3e:50:21:3e:70:0f:5f:7e:2c:b6:c9:87:a7:e5:1c:3b:21:1f: 7e:0a:36:ad:9c:69:97:46:f1:42:b2:53:73:98:97:15:fb:1e: df:6e:ca:5a:19:3f:4e:34:da:2a:31:70:0d:7b:40:9e:20:0c: 5e:90:9b:07:ea:3c:c9:b7:a9:fb:e2:6c:71:2d:80:df:d7:73: 74:f6:cf:4e:f7:f4:4f:b4:44:64:73:15:e5:88:cc:cd:2d:47: c4:34:40:b5:f6:81:c9:e7:7a:3d:4e:56:c1:34:93:6a:b9:72: d5:23:1d:4c:10:23:0e:0c:f9:4e:6f:24:2e:1d:2a:71:72:3c: ff:97:31:73:57:76:0e:c1:2a:14:e0:b4:64:9a:79:a3:bf:13: bd:fd:18:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKlWKqV/eN9VDNEsvcGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4 ZDI1YTUwHhcNMjUxMjI2MTIwMTA0WhcNMjUxMjI3MTIwMTA0WjAzMTEwLwYDVQQD Eyg5OGEzZWY3OTZmZWNmNDZlNWVhMDJhYjQ2ODZlYjgwZjU1NDBjOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAvDAmWWyPlBii8FazIgvbtRMPry 5Svs3J/zKLX3NffuHMH5kXj8wZSRr/9yCoICxNj799BzwIDvlT5Y5QnBSSc1OdgU Gn2S9SutY7hQXl108bCcGJ52UTyJKZpETbo7TAcdZRBgCS+1FODeXn2Y5nTqhGPp 8aHJvJ0+xPd6N2dWgFTtnzP2lQTiRtFG/Py0yvNf/CxO9gX+7YdGtAyOFyX91y7U IETF8Wd/rR/lKCOpJBjo+ATULvOmQKcWYCxkvvXF/31SbuxJ7AAckfYwwgOC80eJ e30WbijqjkLU9YmNr0W9HV7f5bJ1yYmjAtGy+x6H9VuHAHPWg2HCJ/QPlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJij73lv7PRuXqAqtGhuuA9VQMlLMB8GA1UdIwQY MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf5S62IT qoMb490CBrMGhi9sCLtRKMl2a+dxqyXaY9kfKXXObpYr9LBTmbUn+AqLN91Qfdai dOD4RSTkgbGrDDMiWcA4dv7ipjbMzOH2VCIAr7zQ/Xqz1+MWoJwSpUSfNSeHP83v BvLAjSptPlAhPnAPX34stsmHp+UcOyEffgo2rZxpl0bxQrJTc5iXFfse327KWhk/ TjTaKjFwDXtAniAMXpCbB+o8ybep++JscS2A39dzdPbPTvf0T7REZHMV5YjMzS1H xDRAtfaByed6PU5WwTSTarly1SMdTBAjDgz5Tm8kLh0qcXI8/5cxc1d2DsEqFOC0 ZJp5o78Tvf0YXQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:29 2025 by rpki-client