This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json) Hash identifier: zchm98fTziAKfPGtSovLGhfGhchGYAp9yqyQoshuB6Y= Subject key identifier: E5:81:8F:3D:A3:6B:C3:AC:A9:67:F1:94:CC:DF:EF:5A:71:52:D8:C3 Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44 Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44 Certificate serial: 019B360E25BFFA0DCF9B428E9D6F57AC47AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft Manifest number: 1722 Signing time: Fri 19 Dec 2025 10:00:55 +0000 Manifest this update: Fri 19 Dec 2025 10:00:55 +0000 Manifest next update: Sat 20 Dec 2025 10:00:55 +0000 Files and hashes: 1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=) 2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=) 3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=) 4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=) 5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: 9V/sdv63mc3gT972o/lyMeV6v6Q6Dg8uAj5c2hpUQKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:25:bf:fa:0d:cf:9b:42:8e:9d:6f:57:ac:47:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44 Validity Not Before: Dec 19 10:00:55 2025 GMT Not After : Dec 20 10:00:55 2025 GMT Subject: CN=e5818f3da36bc3aca967f194ccdfef5a7152d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:58:53:2a:4b:b1:e7:e2:2a:f6:26:30:a0: 9f:b2:71:44:dc:2a:4a:b9:c0:a8:82:b8:a0:bd:02: 23:12:10:73:f4:83:6d:39:9f:3e:00:18:10:2c:8f: 78:68:ff:56:fd:70:e8:e4:22:b3:12:98:85:52:c5: be:89:b1:c8:05:1d:8e:b6:f4:11:d2:87:ec:6a:eb: 9e:f7:65:53:a7:46:eb:00:b9:b0:12:4f:16:81:e9: cb:9c:2b:7e:13:ea:67:14:1b:00:6c:93:94:15:b7: 9f:56:27:ae:b7:b1:35:62:29:9e:e4:66:7d:9d:c9: 88:74:10:b8:21:f3:d1:12:01:6d:f5:b6:8a:c9:1d: 34:93:05:88:8f:39:4a:d9:60:50:01:69:c7:b5:79: 32:2d:e8:f3:b5:44:5b:f0:d4:ef:d6:46:16:d7:65: f0:5f:e4:f5:a2:7f:e4:53:3c:07:15:4a:08:a3:6c: 9e:ce:a1:4a:ed:bf:c3:23:40:8d:5d:ec:c3:b5:66: 3e:42:31:cd:7d:bd:5a:64:b6:66:b3:bb:0f:f1:5c: 76:ba:45:9c:b9:d6:d8:67:d1:e5:59:74:d6:3c:c5: a6:da:28:48:39:4e:9a:ea:bd:f4:dc:43:10:b9:9e: 4e:84:da:4b:8d:a2:4d:c8:bd:f3:6a:bf:64:b2:32: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:81:8F:3D:A3:6B:C3:AC:A9:67:F1:94:CC:DF:EF:5A:71:52:D8:C3 X509v3 Authority Key Identifier: keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:58:53:3c:26:74:64:8a:97:44:f7:29:0b:1c:28:fc:ec:f9: 87:7c:51:a9:2e:da:92:a9:10:19:aa:47:9f:c4:d5:d8:bf:07: ab:51:f6:25:c8:72:f4:fe:50:d3:01:aa:4c:c3:4e:1f:22:df: 1b:c0:5c:d7:30:a2:ab:da:aa:fc:e8:54:42:a2:19:4f:2f:d9: eb:ab:2c:e8:ce:51:a9:aa:bc:0d:a5:74:c0:f8:db:bb:6c:86: 27:2f:fa:94:8f:8a:f3:46:d3:dd:38:ae:9c:a2:3e:20:17:d0: 92:1f:51:08:9c:ea:9e:51:7c:13:6f:1a:99:87:3a:de:7f:36: 57:d2:a4:fe:ab:af:99:06:c4:94:4d:39:79:20:27:e1:de:35: 76:27:0d:97:e8:d1:23:f0:54:57:f7:38:b9:f6:8e:3b:71:11: 9b:63:c3:3e:49:e7:ce:f7:37:3a:a2:4b:8c:60:df:2e:f2:0d: ac:af:b8:8f:c2:3a:34:65:82:27:fc:45:36:3a:39:56:d3:98: f6:0d:73:b8:69:97:b5:88:66:f4:73:40:4c:5a:a1:c6:be:06: 90:4b:8c:bd:f6:7f:ba:b9:db:89:ef:57:93:37:da:55:ef:36: 49:55:d9:22:58:0c:b3:95:ef:2f:0b:20:ef:da:08:22:91:64: 28:22:4c:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DiW/+g3Pm0KOnW9XrEetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4 MzdiNDQwHhcNMjUxMjE5MTAwMDU1WhcNMjUxMjIwMTAwMDU1WjAzMTEwLwYDVQQD EyhlNTgxOGYzZGEzNmJjM2FjYTk2N2YxOTRjY2RmZWY1YTcxNTJkOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1ZYUypLsefiKvYmMKCfsnFE3CpK ucCogrigvQIjEhBz9INtOZ8+ABgQLI94aP9W/XDo5CKzEpiFUsW+ibHIBR2OtvQR 0ofsauue92VTp0brALmwEk8WgenLnCt+E+pnFBsAbJOUFbefVieut7E1Yime5GZ9 ncmIdBC4IfPREgFt9baKyR00kwWIjzlK2WBQAWnHtXkyLejztURb8NTv1kYW12Xw X+T1on/kUzwHFUoIo2yezqFK7b/DI0CNXezDtWY+QjHNfb1aZLZms7sP8Vx2ukWc udbYZ9HlWXTWPMWm2ihIOU6a6r303EMQuZ5OhNpLjaJNyL3zar9ksjIXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWBjz2ja8OsqWfxlMzf71pxUtjDMB8GA1UdIwQY MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt ZDhjMzUxZDkzZWM2LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2 LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVhTPCZ0 ZIqXRPcpCxwo/Oz5h3xRqS7akqkQGapHn8TV2L8Hq1H2Jchy9P5Q0wGqTMNOHyLf G8Bc1zCiq9qq/OhUQqIZTy/Z66ss6M5Rqaq8DaV0wPjbu2yGJy/6lI+K80bT3Tiu nKI+IBfQkh9RCJzqnlF8E28amYc63n82V9Kk/quvmQbElE05eSAn4d41dicNl+jR I/BUV/c4ufaOO3ERm2PDPknnzvc3OqJLjGDfLvINrK+4j8I6NGWCJ/xFNjo5VtOY 9g1zuGmXtYhm9HNATFqhxr4GkEuMvfZ/urnbie9XkzfaVe82SVXZIlgMs5XvLwsg 79oIIpFkKCJMqg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:26:33 2025 by rpki-client