This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json) Hash identifier: j8DDdzvX9WptYfrx1LnaNeAVDCSPHS8zR7cCQrH63xU= Subject key identifier: 9A:12:FA:1D:08:6C:CC:61:85:66:FA:63:7D:7B:72:6A:E7:66:E6:1B Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Certificate serial: 019B0F0105424254560195FD7B46733EF4F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft Manifest number: 14B1 Signing time: Thu 11 Dec 2025 20:01:23 +0000 Manifest this update: Thu 11 Dec 2025 20:01:23 +0000 Manifest next update: Fri 12 Dec 2025 20:01:23 +0000 Files and hashes: 1: 1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa (hash: otqMBUJ0t81q8O5ZwH5j1LnN11Nn61m+zKuZ8xsbQeQ=) 2: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=) 3: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=) 4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 9/uDvuyWy/bGOpT1N2jVAfLTJM5QGzHqD6JyhX0sEWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:05:42:42:54:56:01:95:fd:7b:46:73:3e:f4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Validity Not Before: Dec 11 20:01:23 2025 GMT Not After : Dec 12 20:01:23 2025 GMT Subject: CN=9a12fa1d086ccc618566fa637d7b726ae766e61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:9d:e1:20:14:8f:8f:fa:d4:fc:f9:b0:76: 09:5e:88:3d:bc:08:31:5a:2d:94:20:2a:4f:d1:01: a8:84:ee:38:1c:fc:e9:49:b4:43:30:ab:0e:89:8f: be:a8:cf:d0:4f:1a:68:9f:3b:67:b1:fb:d8:bc:97: 82:3a:fb:db:43:eb:f9:5f:3f:e3:01:c5:94:8f:03: ec:e9:c3:5f:d1:29:49:f8:b2:de:d7:a5:95:e5:3d: 75:af:7c:27:ca:f9:ec:a4:23:c3:d0:fc:57:12:84: 0e:06:1e:7e:93:d6:93:0d:11:6c:a8:c7:8c:e7:b3: 8c:4f:4e:e8:02:4a:d4:aa:d9:33:5a:79:72:8a:7d: 77:93:2b:7c:f6:af:d0:ca:21:b0:36:1c:4c:c3:9a: 9a:e3:df:62:60:5e:1a:b2:95:59:d9:0c:5b:08:38: c7:00:cc:94:05:a9:5c:4c:05:bf:3b:50:21:01:b5: 8c:98:67:63:7a:65:11:17:44:96:66:2d:cf:11:42: 9c:cc:38:d5:85:99:c4:bd:c7:2d:ff:81:7f:68:a4: 74:80:16:64:1e:50:3b:41:20:c4:ab:62:d1:57:c2: 55:a1:fd:e0:c2:c4:ca:e6:37:6e:ad:5f:47:5b:83: d9:85:4d:ea:98:f8:7b:c4:36:0b:72:8d:14:bf:13: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:12:FA:1D:08:6C:CC:61:85:66:FA:63:7D:7B:72:6A:E7:66:E6:1B X509v3 Authority Key Identifier: keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4f:2b:b2:07:ef:7d:61:2a:e1:58:e5:fe:bd:ad:0b:03:a9: ff:ef:dd:99:03:f4:c7:d9:39:a7:5f:15:ac:fe:d8:7d:3f:24: c5:c7:2e:32:ad:25:86:96:bb:f3:36:3f:4f:45:ae:cd:60:40: 36:a7:ea:61:a3:13:bc:cf:fd:7b:00:98:78:8a:2f:f3:c6:f9: a0:7f:40:e0:9f:fa:cc:f0:3f:f1:12:54:1f:5f:97:e8:f1:40: 11:00:28:c9:ac:e8:bc:47:ae:21:0f:c7:1e:a9:c8:4c:5a:80: b8:17:58:6d:ae:62:f9:6b:33:34:06:5e:88:3b:a6:ba:27:9e: 00:28:a3:c6:85:66:c7:7a:87:76:92:80:88:3a:3c:ae:b2:8f: 8a:99:42:d6:06:04:d7:47:84:39:5f:38:7e:ac:ef:25:87:26: b9:94:01:2d:31:af:7a:5b:e4:1b:a9:c9:93:eb:98:67:7e:9c: 0c:8c:dc:07:33:4b:41:a2:d5:80:35:b0:82:3b:16:57:1e:23: 1d:09:2f:aa:9b:7f:66:28:e7:4a:3b:0c:3e:83:c2:2a:83:d6: 63:87:3c:c4:10:83:7f:1f:2c:ac:4b:2e:dd:c9:c0:e6:da:64: 61:4f:2c:30:da:57:2f:6b:8d:2d:2c:7b:cc:43:4c:9d:d2:a0: 75:39:52:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQVCQlRWAZX9e0ZzPvT4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZGI3NDdiMjg5NzE3YTA2ODRjZDZhYzgyMzA3YWE2N2Ji MmQ3YmIwHhcNMjUxMjExMjAwMTIzWhcNMjUxMjEyMjAwMTIzWjAzMTEwLwYDVQQD Eyg5YTEyZmExZDA4NmNjYzYxODU2NmZhNjM3ZDdiNzI2YWU3NjZlNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ2d4SAUj4/61Pz5sHYJXog9vAgx Wi2UICpP0QGohO44HPzpSbRDMKsOiY++qM/QTxponztnsfvYvJeCOvvbQ+v5Xz/j AcWUjwPs6cNf0SlJ+LLe16WV5T11r3wnyvnspCPD0PxXEoQOBh5+k9aTDRFsqMeM 57OMT07oAkrUqtkzWnlyin13kyt89q/QyiGwNhxMw5qa499iYF4aspVZ2QxbCDjH AMyUBalcTAW/O1AhAbWMmGdjemURF0SWZi3PEUKczDjVhZnEvcct/4F/aKR0gBZk HlA7QSDEq2LRV8JVof3gwsTK5jdurV9HW4PZhU3qmPh7xDYLco0UvxNUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoS+h0IbMxhhWb6Y317cmrnZuYbMB8GA1UdIwQY MBaAFITbdHsolxegaEzWrIIweqZ7ste7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQt OWZlN2VlOWMwMzY4LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQtOWZlN2VlOWMwMzY4 LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu08rsgfv fWEq4Vjl/r2tCwOp/+/dmQP0x9k5p18VrP7YfT8kxccuMq0lhpa78zY/T0WuzWBA NqfqYaMTvM/9ewCYeIov88b5oH9A4J/6zPA/8RJUH1+X6PFAEQAoyazovEeuIQ/H HqnITFqAuBdYba5i+WszNAZeiDumuieeACijxoVmx3qHdpKAiDo8rrKPiplC1gYE 10eEOV84fqzvJYcmuZQBLTGvelvkG6nJk+uYZ36cDIzcBzNLQaLVgDWwgjsWVx4j HQkvqpt/ZijnSjsMPoPCKoPWY4c8xBCDfx8srEsu3cnA5tpkYU8sMNpXL2uNLSx7 zENMndKgdTlSBQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:35:07 2025 by rpki-client