This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: uo2BkPAAZ1ovy6LTnIt372qWK4sFZOmFgmwyFWOBxOQ=
Subject key identifier: 9D:F6:08:C8:8D:03:24:0B:5A:3E:AD:9E:E5:39:94:AD:DB:6C:62:2A
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 019B2175561EA507909D2059C36BAFD2739C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 177C
Signing time: Mon 15 Dec 2025 10:01:36 +0000
Manifest this update: Mon 15 Dec 2025 10:01:36 +0000
Manifest next update: Tue 16 Dec 2025 10:01:36 +0000
Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: x2N/DKk14SBcCJ/oBLZSvsSXzP95T3DaZggM2jgjbLs=)
4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:21:75:56:1e:a5:07:90:9d:20:59:c3:6b:af:d2:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Dec 15 10:01:36 2025 GMT
Not After : Dec 16 10:01:36 2025 GMT
Subject: CN=9df608c88d03240b5a3ead9ee53994addb6c622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:c9:18:e0:fa:61:99:07:e2:c2:82:36:95:
08:93:71:c6:26:80:cb:b2:12:8d:2c:6f:1d:f5:3c:
d2:17:7a:df:96:1a:2f:7b:ac:e5:0a:cf:9c:fb:99:
21:0a:aa:d8:d9:0d:b3:8c:fe:05:fc:a0:af:3c:a9:
3f:ec:15:76:a4:de:08:8a:96:14:f7:70:b4:6c:8f:
fc:f4:b4:8a:24:1b:a7:c1:f9:15:0a:34:0e:0d:c0:
b6:69:6a:ee:f0:0d:aa:b4:09:69:32:de:2a:7a:05:
a1:b1:88:e8:0f:a2:e7:a9:a3:90:f7:5a:38:e9:47:
94:d9:34:e2:ab:1a:a1:f7:5b:d6:44:c2:f6:f9:b6:
32:a6:2c:44:43:4c:7c:d2:9e:a9:b0:40:c5:91:2b:
8f:b3:56:e6:94:be:b9:23:01:10:a2:88:92:35:fe:
d1:02:43:f0:35:64:3c:6d:34:2b:fe:3f:50:98:bf:
30:d1:c4:42:41:a6:b8:ce:a5:eb:40:6f:03:88:d2:
e1:b0:b2:d1:48:f4:09:95:4b:40:3f:19:a8:56:bf:
bb:a2:aa:51:d3:34:f5:81:9c:61:31:b9:8c:29:36:
4e:60:bc:26:c1:ca:24:15:88:49:cc:78:b7:32:c1:
61:80:65:89:73:d9:85:59:73:62:1c:c3:28:49:b4:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:08:C8:8D:03:24:0B:5A:3E:AD:9E:E5:39:94:AD:DB:6C:62:2A
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a3:e2:38:26:d5:f8:89:21:fa:12:fa:98:33:5c:ac:00:55:
43:c5:5d:39:ae:1f:c1:d9:2e:59:fa:fe:76:2d:aa:a8:ae:1b:
e4:44:17:af:4e:a6:c3:8a:c0:9f:bd:1c:02:22:0c:14:a3:56:
ea:05:3c:03:d5:75:ee:17:eb:e5:91:17:9a:e8:76:03:e6:5d:
1b:c6:dd:27:48:66:51:e9:9b:7f:54:88:27:80:39:ab:22:fd:
4b:0e:18:a7:6d:b9:55:5b:8d:75:a6:64:82:80:4d:c9:6c:8f:
80:6b:7f:c4:fa:2f:48:6f:de:08:9c:8d:06:89:cc:c9:f7:0e:
00:0a:a7:10:f9:38:99:95:93:96:6d:80:3b:66:65:e2:9c:01:
08:fe:06:24:d5:2a:1c:5a:a5:89:16:6d:0a:ed:ed:ad:23:b6:
82:86:fd:6f:18:13:29:43:a1:ff:10:6b:80:0c:7f:55:ad:29:
64:44:46:2b:53:b9:01:f3:86:e8:97:26:d3:3e:42:1e:2f:3b:
c4:e4:75:7e:9e:33:41:fb:f8:e0:48:fe:17:ba:e6:ae:02:2e:
1f:f5:a1:ad:4c:d1:a6:3e:6b:fb:97:98:1b:25:e5:54:40:ef:
04:7a:6b:0d:3f:f6:c5:a7:5b:1c:ae:b8:eb:f9:ae:a7:e4:80:
9b:eb:12:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZshdVYepQeQnSBZw2uv0nOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YWJmMGM5ODE3MDFhYmE5N2U0ZmNkMGJlZDRlNGNkYjg2
OTIwNDcwHhcNMjUxMjE1MTAwMTM2WhcNMjUxMjE2MTAwMTM2WjAzMTEwLwYDVQQD
Eyg5ZGY2MDhjODhkMDMyNDBiNWEzZWFkOWVlNTM5OTRhZGRiNmM2MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5bJGOD6YZkH4sKCNpUIk3HGJoDL
shKNLG8d9TzSF3rflhove6zlCs+c+5khCqrY2Q2zjP4F/KCvPKk/7BV2pN4IipYU
93C0bI/89LSKJBunwfkVCjQODcC2aWru8A2qtAlpMt4qegWhsYjoD6LnqaOQ91o4
6UeU2TTiqxqh91vWRML2+bYypixEQ0x80p6psEDFkSuPs1bmlL65IwEQooiSNf7R
AkPwNWQ8bTQr/j9QmL8w0cRCQaa4zqXrQG8DiNLhsLLRSPQJlUtAPxmoVr+7oqpR
0zT1gZxhMbmMKTZOYLwmwcokFYhJzHi3MsFhgGWJc9mFWXNiHMMoSbSqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ32CMiNAyQLWj6tnuU5lK3bbGIqMB8GA1UdIwQY
MBaAFISr8MmBcBq6l+T80L7U5M24aSBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAt
NjFiYzdlY2M0ODVjLzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAtNjFiYzdlY2M0ODVj
LzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqPiOCbV
+Ikh+hL6mDNcrABVQ8VdOa4fwdkuWfr+di2qqK4b5EQXr06mw4rAn70cAiIMFKNW
6gU8A9V17hfr5ZEXmuh2A+ZdG8bdJ0hmUembf1SIJ4A5qyL9Sw4Yp225VVuNdaZk
goBNyWyPgGt/xPovSG/eCJyNBonMyfcOAAqnEPk4mZWTlm2AO2Zl4pwBCP4GJNUq
HFqliRZtCu3trSO2gob9bxgTKUOh/xBrgAx/Va0pZERGK1O5AfOG6Jcm0z5CHi87
xOR1fp4zQfv44Ej+F7rmrgIuH/WhrUzRpj5r+5eYGyXlVEDvBHprDT/2xadbHK64
6/mup+SAm+sSUw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 18:50:37 2025 by rpki-client