This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json) Hash identifier: AoamLM1fX5KbE4EjrfRrUG8irvIcdccdErrnpbve8vs= Subject key identifier: 91:8C:81:1A:78:3B:3F:0B:B3:0D:30:04:4A:52:19:45:EF:A1:B0:46 Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f Certificate serial: 019B0E92E59941835A3F4F839DCE9845C3A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft Manifest number: 1224 Signing time: Thu 11 Dec 2025 18:01:06 +0000 Manifest this update: Thu 11 Dec 2025 18:01:06 +0000 Manifest next update: Fri 12 Dec 2025 18:01:06 +0000 Files and hashes: 1: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (hash: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=) 2: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: rGuyyJsvLqKRLM2ioXzi8uK1oiZAg8pknLYaFtaFhDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:e5:99:41:83:5a:3f:4f:83:9d:ce:98:45:c3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f Validity Not Before: Dec 11 18:01:06 2025 GMT Not After : Dec 12 18:01:06 2025 GMT Subject: CN=918c811a783b3f0bb30d30044a521945efa1b046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:64:65:70:58:68:fd:cb:97:96:d8:3f:58:a3: 0f:9c:67:37:b6:cf:cc:fa:5c:32:67:c7:95:23:57: f8:f6:d7:f9:01:3e:04:54:6a:73:80:e0:f6:04:f6: 7e:ea:a7:98:53:9d:58:aa:93:9a:b8:5a:8c:b0:38: 95:4b:93:3d:79:8e:bd:f8:b8:5f:4d:9a:dd:f8:b8: a4:b1:bb:5d:d2:0d:62:d8:89:6a:08:89:cc:44:b2: c2:18:4c:ca:3f:56:47:53:bd:8c:07:02:7b:5c:13: db:6f:3a:42:46:80:d4:5a:c7:c7:24:ca:5c:7b:c8: d8:bf:f9:09:02:9f:5b:f9:d3:23:66:16:28:8d:56: 1d:1b:5b:5d:07:f5:a1:61:2d:e6:b5:87:11:4e:d9: b9:b0:22:05:c7:ae:45:9d:48:3f:02:8e:91:46:c5: e4:07:4e:fb:88:c9:f5:a8:48:e5:88:ff:fe:e4:91: f2:60:6d:74:b3:23:c1:cb:81:75:a5:c2:4b:e4:02: 06:5c:4c:54:b4:cc:8d:e1:aa:21:df:5a:90:b2:0f: f2:3d:86:b4:54:c8:b0:1a:e8:ac:98:ef:bc:81:83: a9:86:53:45:bb:d2:e1:af:de:61:1a:a5:e6:89:5e: 9b:9a:7b:35:b7:b7:98:e5:b4:3e:db:32:78:ff:27: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8C:81:1A:78:3B:3F:0B:B3:0D:30:04:4A:52:19:45:EF:A1:B0:46 X509v3 Authority Key Identifier: keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b8:ef:6e:0f:58:dd:ff:5f:c8:9d:21:e7:fe:62:05:b6:a4: cf:62:81:14:29:aa:2f:dc:89:ef:7a:2e:83:10:88:76:d8:02: 97:82:97:a0:22:1b:5f:20:e2:ec:2c:99:96:1a:58:07:ef:a4: 3b:5c:71:17:b0:f0:c5:d6:64:4e:3d:3f:86:10:58:8e:f7:36: 66:5d:44:0b:be:1c:05:0d:76:e9:17:3b:75:a8:50:2e:1d:38: 89:01:3f:81:09:c8:5a:f4:ea:ad:72:6a:db:fc:b4:07:5a:ba: d2:03:3b:9a:76:ed:d7:4f:f8:36:eb:68:1f:ac:ac:91:a3:9a: c7:0e:c7:5c:c5:4f:96:d5:70:a4:3a:cb:63:78:98:72:1d:da: 55:3f:9f:55:d9:e9:d6:df:f5:7b:40:89:e9:49:ad:48:01:ba: b5:43:34:54:8d:cf:54:8f:cc:0f:cd:9f:c0:f3:9e:d9:f0:d4: 1a:4b:34:5c:6f:f5:5f:f0:15:fd:b9:4f:8b:96:3e:01:23:4c: 4d:6b:41:4e:79:ab:9e:50:df:b8:6d:3c:58:86:e3:1b:63:1b: 71:64:bc:0e:11:46:04:c3:97:af:33:2b:ea:9e:12:25:40:e4: 29:be:db:b9:68:92:b3:4e:54:8e:f6:5d:c7:80:9f:9e:6a:54: da:be:c6:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkuWZQYNaP0+Dnc6YRcOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjQzMGQ5YWQ5Y2I5YzQyYzRiZDY2OTBlOWY1ODEyYTQ1 N2EwMmYwHhcNMjUxMjExMTgwMTA2WhcNMjUxMjEyMTgwMTA2WjAzMTEwLwYDVQQD Eyg5MThjODExYTc4M2IzZjBiYjMwZDMwMDQ0YTUyMTk0NWVmYTFiMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WRlcFho/cuXltg/WKMPnGc3ts/M +lwyZ8eVI1f49tf5AT4EVGpzgOD2BPZ+6qeYU51YqpOauFqMsDiVS5M9eY69+Lhf TZrd+Liksbtd0g1i2IlqCInMRLLCGEzKP1ZHU72MBwJ7XBPbbzpCRoDUWsfHJMpc e8jYv/kJAp9b+dMjZhYojVYdG1tdB/WhYS3mtYcRTtm5sCIFx65FnUg/Ao6RRsXk B077iMn1qEjliP/+5JHyYG10syPBy4F1pcJL5AIGXExUtMyN4aoh31qQsg/yPYa0 VMiwGuismO+8gYOphlNFu9Lhr95hGqXmiV6bmns1t7eY5bQ+2zJ4/yfc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGMgRp4Oz8Lsw0wBEpSGUXvobBGMB8GA1UdIwQY MBaAFIT0MNmtnLnELEvWaQ6fWBKkV6AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQt YjkwNTZlYmJjNTc2LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hYmQwMDQtYzY4Zi00OWIxLWEyYzQtYjkwNTZlYmJjNTc2 LzEvaFBRdzJhMmN1Y1FzUzlacERwOVlFcVJYb0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLjvbg9Y 3f9fyJ0h5/5iBbakz2KBFCmqL9yJ73ougxCIdtgCl4KXoCIbXyDi7CyZlhpYB++k O1xxF7DwxdZkTj0/hhBYjvc2Zl1EC74cBQ126Rc7dahQLh04iQE/gQnIWvTqrXJq 2/y0B1q60gM7mnbt10/4NutoH6yskaOaxw7HXMVPltVwpDrLY3iYch3aVT+fVdnp 1t/1e0CJ6UmtSAG6tUM0VI3PVI/MD82fwPOe2fDUGks0XG/1X/AV/blPi5Y+ASNM TWtBTnmrnlDfuG08WIbjG2MbcWS8DhFGBMOXrzMr6p4SJUDkKb7buWiSs05UjvZd x4CfnmpU2r7Gfw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:11:34 2025 by rpki-client