This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json) Hash identifier: 5hSBPyBthLRiifCeS0+OEzdE90Y6LOZ4vyD265bFLog= Subject key identifier: 15:E5:1B:B9:48:96:91:A4:AD:0E:5F:FC:17:2B:AF:A9:1D:2F:0C:82 Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Certificate serial: 019B4739029CD38C21E423727E1D6F9A206E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft Manifest number: 128E Signing time: Mon 22 Dec 2025 18:01:17 +0000 Manifest this update: Mon 22 Dec 2025 18:01:17 +0000 Manifest next update: Tue 23 Dec 2025 18:01:17 +0000 Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=) 2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=) 3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: uLu6WfuqhHPFf7AIb1kYdhbsVLBBFizVtoaxzkGkL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:39:02:9c:d3:8c:21:e4:23:72:7e:1d:6f:9a:20:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34 Validity Not Before: Dec 22 18:01:17 2025 GMT Not After : Dec 23 18:01:17 2025 GMT Subject: CN=15e51bb9489691a4ad0e5ffc172bafa91d2f0c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:e0:e9:29:e3:01:2b:1b:8b:99:dd:81:b4: 00:dd:0e:70:58:e6:47:1b:00:17:9b:4c:6c:d6:79: 86:9e:02:59:38:da:de:fd:c8:a6:f3:0b:e9:f3:1b: 4b:7a:66:2e:22:9d:19:4a:1b:2d:4e:71:b3:70:fa: d9:b1:1f:2f:ac:a2:b2:74:23:bd:8a:6b:e7:67:62: 0a:2a:78:77:c5:45:89:19:bb:20:8b:b0:3f:48:d1: b6:79:ae:f3:56:16:76:e0:b3:dc:ca:97:85:7b:9e: 8b:4f:3a:8b:93:ad:00:1a:38:80:3e:fa:d1:3e:e5: 60:f2:50:c3:1f:a8:86:5d:4c:a8:39:ec:29:35:94: b3:da:ba:e8:9d:19:81:33:d8:0e:f6:eb:7b:47:de: 31:93:29:ed:b7:6f:47:7e:73:46:c9:67:09:1d:17: cf:48:e9:06:c1:1e:b6:f6:7e:b7:82:77:6a:55:2c: 81:77:6f:1e:4d:e5:50:d4:8a:44:2e:76:fe:4e:c0: 98:43:c6:ca:a1:6f:ae:0b:f0:49:f4:2e:c2:4c:e1: 31:75:af:5d:f7:42:74:25:e2:05:0c:04:01:2a:58: f8:e7:1d:c3:1b:11:e0:26:34:81:68:a5:7f:e7:e3: 71:96:87:f7:ef:75:68:f2:01:c1:2b:04:c1:1e:d3: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E5:1B:B9:48:96:91:A4:AD:0E:5F:FC:17:2B:AF:A9:1D:2F:0C:82 X509v3 Authority Key Identifier: keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:db:4a:a9:ac:37:e7:a8:c5:fd:25:fb:2a:84:71:5a:4f:5d: 33:cc:9d:ee:af:49:65:32:2b:8a:02:72:7c:b1:99:f0:df:a8: fc:5f:96:75:28:fa:6f:ba:ff:67:83:1f:13:11:3b:34:88:f1: da:8c:11:c0:49:64:45:e5:8a:0d:81:49:b7:ad:a3:36:e3:ce: f5:75:17:f6:9a:11:43:3f:7e:d0:54:2e:fb:e2:a8:c8:02:57: 67:f8:d6:f0:78:d7:36:e1:53:09:d3:0b:b8:da:70:f2:41:48: a7:2b:20:48:7f:f7:bd:81:1c:4f:0f:dd:34:13:b5:2e:d9:a0: b2:0b:cd:e1:cf:1f:90:1a:29:9f:8e:b6:77:ca:fa:58:9d:37: 1f:86:b0:c4:b4:b5:14:18:21:74:24:6d:8e:12:59:69:f4:69: 6b:94:4a:6b:09:1a:ff:25:8d:75:c0:22:e0:a8:b7:90:73:68: b7:ac:4d:f9:91:be:3d:70:67:69:2a:32:61:c2:50:38:7e:48: 74:ab:52:88:44:99:79:08:91:8b:1e:92:ec:0f:1b:26:78:b0: 73:46:b6:d6:d9:01:e1:62:61:b3:56:98:a5:84:44:8f:09:29: 15:f8:fe:9e:d6:d4:6c:b3:19:11:a1:8c:50:62:75:7a:69:1f: bc:73:fc:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOQKc04wh5CNyfh1vmiBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj NzZhMzQwHhcNMjUxMjIyMTgwMTE3WhcNMjUxMjIzMTgwMTE3WjAzMTEwLwYDVQQD EygxNWU1MWJiOTQ4OTY5MWE0YWQwZTVmZmMxNzJiYWZhOTFkMmYwYzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn/g6SnjASsbi5ndgbQA3Q5wWOZH GwAXm0xs1nmGngJZONre/cim8wvp8xtLemYuIp0ZShstTnGzcPrZsR8vrKKydCO9 imvnZ2IKKnh3xUWJGbsgi7A/SNG2ea7zVhZ24LPcypeFe56LTzqLk60AGjiAPvrR PuVg8lDDH6iGXUyoOewpNZSz2rronRmBM9gO9ut7R94xkyntt29HfnNGyWcJHRfP SOkGwR629n63gndqVSyBd28eTeVQ1IpELnb+TsCYQ8bKoW+uC/BJ9C7CTOExda9d 90J0JeIFDAQBKlj45x3DGxHgJjSBaKV/5+Nxlof373Vo8gHBKwTBHtPQEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXlG7lIlpGkrQ5f/Bcrr6kdLwyCMB8GA1UdIwQY MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5 LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQttKqaw3 56jF/SX7KoRxWk9dM8yd7q9JZTIrigJyfLGZ8N+o/F+WdSj6b7r/Z4MfExE7NIjx 2owRwElkReWKDYFJt62jNuPO9XUX9poRQz9+0FQu++KoyAJXZ/jW8HjXNuFTCdML uNpw8kFIpysgSH/3vYEcTw/dNBO1LtmgsgvN4c8fkBopn462d8r6WJ03H4awxLS1 FBghdCRtjhJZafRpa5RKawka/yWNdcAi4Ki3kHNot6xN+ZG+PXBnaSoyYcJQOH5I dKtSiESZeQiRix6S7A8bJniwc0a21tkB4WJhs1aYpYREjwkpFfj+ntbUbLMZEaGM UGJ1emkfvHP8nA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:29:06 2025 by rpki-client