This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json) Hash identifier: +8ucEWkIdqCabtDW36CFOQM76z1K2amrHPmgwm9JoWc= Subject key identifier: 3D:97:4F:DC:A2:28:DE:A3:33:DB:F5:41:37:A9:F1:8D:1A:15:D0:1E Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8 Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8 Certificate serial: 019B4324B297E9840350404689661C4B873E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 23:00:37 +0000 Manifest this update: Sun 21 Dec 2025 23:00:37 +0000 Manifest next update: Mon 22 Dec 2025 23:00:37 +0000 Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=) 2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: PVLFHIoLygscaKD00iQeHPPdMKzkCKSIlg5ilcaEeC8=) 3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:b2:97:e9:84:03:50:40:46:89:66:1c:4b:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8 Validity Not Before: Dec 21 23:00:37 2025 GMT Not After : Dec 22 23:00:37 2025 GMT Subject: CN=3d974fdca228dea333dbf54137a9f18d1a15d01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:99:60:08:41:71:7d:55:60:46:39:09:e1: dd:62:13:04:54:52:14:98:eb:cd:73:4b:8a:2b:b5: e3:79:a4:cc:9a:fb:39:5f:26:98:cd:a0:cd:8b:12: 48:06:0a:bc:79:50:dc:0c:f6:3a:59:ef:b9:58:c2: a3:db:90:c7:c5:76:85:76:14:03:d5:1a:3b:86:be: e6:d8:a4:21:dd:cf:ed:38:e5:c5:4c:42:2d:fc:13: c9:3e:4d:f9:21:f8:ae:04:36:7b:60:81:a0:8f:b3: ed:d5:14:1e:85:ee:d5:ab:50:df:29:a5:ad:0e:63: 0a:80:1f:71:b3:e3:34:7d:46:a7:95:5a:4c:b7:a8: 98:bc:6f:d8:0d:b6:bf:e9:be:b4:0e:e9:63:8b:3d: d1:71:ef:74:7f:ad:cf:ac:f1:1d:17:6c:e1:51:6f: cb:4a:42:d5:da:6f:8a:4f:10:5f:5f:33:9a:10:b5: 84:a4:57:6a:9d:f9:fb:25:b4:6f:6c:06:e9:77:94: dd:00:f8:d9:e7:e3:08:a2:be:a1:1a:b8:e4:85:ff: 7f:6b:7b:00:82:54:67:c7:6f:8d:80:70:59:6f:14: c2:ad:77:70:65:b0:87:2b:68:f5:1a:9c:f7:0e:70: 7a:5e:d9:30:bc:9a:b8:97:fd:7b:30:66:30:66:ab: 31:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:4F:DC:A2:28:DE:A3:33:DB:F5:41:37:A9:F1:8D:1A:15:D0:1E X509v3 Authority Key Identifier: keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:15:73:a8:44:46:93:90:58:c5:ce:b4:4e:7a:1c:ef:5d:4d: db:8b:0a:0f:ed:6a:cf:66:44:f9:ce:4c:44:33:2b:7e:b1:88: 41:77:04:7d:aa:99:09:cc:74:b3:d0:d7:ad:53:51:68:15:b6: 12:76:6a:2a:3c:0e:49:3c:57:1d:e4:44:4c:98:a9:53:bc:0d: 37:2c:fe:1f:38:67:20:e2:13:a1:40:39:07:71:8b:24:b9:be: de:95:54:eb:b8:c3:97:6a:77:c1:cf:10:af:23:bb:a4:0c:6c: c7:ef:dc:8c:8a:3d:52:18:72:98:ff:c7:3b:33:9f:80:a1:3d: 3c:8b:f0:bc:c4:7e:fa:b1:fa:d0:c4:33:87:9d:ac:0d:8d:e9: 0e:5e:a4:f0:09:af:f0:82:41:93:b8:ed:18:36:e0:b7:45:8a: 50:e1:3a:02:c1:c4:ce:54:0e:00:60:b1:3e:1c:62:e5:25:92: 73:d3:5c:a3:e5:e7:97:4a:e9:eb:15:99:b4:8d:ad:85:c9:91: eb:7d:bc:52:f3:4f:2b:f5:36:f2:72:ee:43:78:83:91:4e:fb: fa:b7:e8:1f:e8:3d:ff:de:b8:4d:d8:26:78:c5:c2:ef:be:39: 99:67:9d:36:de:f4:88:4c:90:da:ba:bc:b3:4f:b2:aa:0e:69: 7c:7e:ce:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLKX6YQDUEBGiWYcS4c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZDYwZDJkYzZhZDgyYTI1NzBlMDAwMGZkZDk5Mzk0OGJj NDU0ZDgwHhcNMjUxMjIxMjMwMDM3WhcNMjUxMjIyMjMwMDM3WjAzMTEwLwYDVQQD EygzZDk3NGZkY2EyMjhkZWEzMzNkYmY1NDEzN2E5ZjE4ZDFhMTVkMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gmZYAhBcX1VYEY5CeHdYhMEVFIU mOvNc0uKK7XjeaTMmvs5XyaYzaDNixJIBgq8eVDcDPY6We+5WMKj25DHxXaFdhQD 1Ro7hr7m2KQh3c/tOOXFTEIt/BPJPk35IfiuBDZ7YIGgj7Pt1RQehe7Vq1DfKaWt DmMKgB9xs+M0fUanlVpMt6iYvG/YDba/6b60Duljiz3Rce90f63PrPEdF2zhUW/L SkLV2m+KTxBfXzOaELWEpFdqnfn7JbRvbAbpd5TdAPjZ5+MIor6hGrjkhf9/a3sA glRnx2+NgHBZbxTCrXdwZbCHK2j1Gpz3DnB6XtkwvJq4l/17MGYwZqsxrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2XT9yiKN6jM9v1QTep8Y0aFdAeMB8GA1UdIwQY MBaAFITWDS3GrYKiVw4AAP3Zk5SLxFTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAt NTRmNmJjODVhYWMwLzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAtNTRmNmJjODVhYWMw LzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxVzqERG k5BYxc60Tnoc711N24sKD+1qz2ZE+c5MRDMrfrGIQXcEfaqZCcx0s9DXrVNRaBW2 EnZqKjwOSTxXHeRETJipU7wNNyz+HzhnIOIToUA5B3GLJLm+3pVU67jDl2p3wc8Q ryO7pAxsx+/cjIo9UhhymP/HOzOfgKE9PIvwvMR++rH60MQzh52sDY3pDl6k8Amv 8IJBk7jtGDbgt0WKUOE6AsHEzlQOAGCxPhxi5SWSc9Nco+Xnl0rp6xWZtI2thcmR 6328UvNPK/U28nLuQ3iDkU77+rfoH+g9/964TdgmeMXC7745mWedNt70iEyQ2rq8 s0+yqg5pfH7OyA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:14:28 2025 by rpki-client