This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json) Hash identifier: TZaUzRZUaGK4V/ndBardPcMEwI1O3KYmiqVPe3dCkjY= Subject key identifier: 2D:2B:1D:B3:D2:11:EA:14:02:27:FA:E3:57:69:62:17:C3:4C:10:54 Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1 Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1 Certificate serial: 019B1FF435E18A13851A1B42EFCE107273D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft Manifest number: 172F Signing time: Mon 15 Dec 2025 03:00:56 +0000 Manifest this update: Mon 15 Dec 2025 03:00:56 +0000 Manifest next update: Tue 16 Dec 2025 03:00:56 +0000 Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: Y2qT5hX/pBJlBS9DnR11P0qLAdWCoa/NR8nzpuo1VSo=) 2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:35:e1:8a:13:85:1a:1b:42:ef:ce:10:72:73:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1 Validity Not Before: Dec 15 03:00:56 2025 GMT Not After : Dec 16 03:00:56 2025 GMT Subject: CN=2d2b1db3d211ea140227fae357696217c34c1054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:78:68:59:21:df:78:c3:58:28:40:47:39:18: 15:95:34:63:62:b4:31:4b:16:1a:f5:73:7b:e6:99: 57:b5:3d:28:0e:d2:99:1d:4e:c2:32:c0:3e:e9:44: 98:ae:a5:e9:cd:1e:9d:89:06:16:01:9c:0b:b4:ae: d1:b8:f9:85:2d:95:f9:7c:55:da:bc:de:c3:ca:f7: dc:e5:f7:fb:80:65:d6:82:2b:31:10:16:30:52:cf: a1:d7:94:50:79:90:51:f9:02:d5:08:90:21:24:93: 6f:95:1e:62:f3:7b:d2:50:85:1a:04:a1:6a:a2:3b: 38:e1:a3:c8:74:6b:8c:c6:aa:8d:31:94:11:10:e3: 73:50:82:f4:3b:cc:94:a9:80:18:2e:57:57:fb:61: 99:f8:60:8a:02:40:52:eb:ff:19:62:bc:63:1e:0c: 3b:d7:59:04:3d:92:06:83:b2:8e:b2:06:1a:11:54: 1f:07:87:50:49:3d:72:5b:c5:c0:f1:8f:78:b9:22: b8:83:17:21:21:52:a8:f7:0c:8f:3a:36:be:3e:59: 93:c8:bf:5c:4e:00:34:2b:57:c5:fa:d5:1c:8c:4c: ba:1b:56:62:ec:de:ed:b8:34:96:47:c8:77:6e:f0: 4f:66:7f:04:fa:ed:cc:44:33:a2:24:39:3f:3a:81: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2B:1D:B3:D2:11:EA:14:02:27:FA:E3:57:69:62:17:C3:4C:10:54 X509v3 Authority Key Identifier: keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4b:72:8c:a1:69:7d:ba:63:1c:00:f1:d8:2d:a4:15:b2:6c: 87:c5:13:db:32:ae:7b:27:f5:c3:3a:3e:3f:43:ef:fa:e4:67: b7:01:96:fa:ce:35:89:15:50:49:e3:a9:e8:28:d7:35:d8:9d: fe:e5:09:3a:49:11:ac:3c:0c:49:2d:f9:cb:6d:3d:e1:ef:55: 57:e9:fe:c1:75:96:ab:4c:69:4c:f8:00:00:74:87:3d:0a:ea: 17:9e:90:b1:d6:09:c8:24:de:cc:c1:03:56:95:07:c5:89:1e: 25:57:dc:df:ac:b4:20:02:84:ed:81:59:c7:d5:e4:87:ec:8d: 88:a3:bd:39:ff:71:b4:cc:89:b9:a9:e6:05:ab:48:6e:b1:a2: 1b:a4:19:d4:5d:72:b3:8e:69:06:ee:a1:47:db:73:d6:09:31: 8f:4f:d1:d6:d2:22:3a:13:fd:01:43:5c:22:d9:70:13:9a:1f: 3e:89:11:a7:b1:39:81:eb:20:d6:71:b0:be:26:93:4f:45:89: 31:86:90:f5:7c:9a:6e:17:48:f4:cd:7b:e7:c3:3b:a2:5e:25: 58:11:4e:05:43:77:a4:48:38:fe:48:f4:d1:89:ca:39:a7:43: 1f:e1:34:54:03:85:53:0b:33:c0:be:b1:ee:3f:5c:a9:58:dc: 2f:08:d9:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9DXhihOFGhtC784QcnPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGEyZjdlMjZjYjdkN2E1NmFjNjQwNWU5MGM2YTYxYTky YWQyZDEwHhcNMjUxMjE1MDMwMDU2WhcNMjUxMjE2MDMwMDU2WjAzMTEwLwYDVQQD EygyZDJiMWRiM2QyMTFlYTE0MDIyN2ZhZTM1NzY5NjIxN2MzNGMxMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nhoWSHfeMNYKEBHORgVlTRjYrQx SxYa9XN75plXtT0oDtKZHU7CMsA+6USYrqXpzR6diQYWAZwLtK7RuPmFLZX5fFXa vN7Dyvfc5ff7gGXWgisxEBYwUs+h15RQeZBR+QLVCJAhJJNvlR5i83vSUIUaBKFq ojs44aPIdGuMxqqNMZQREONzUIL0O8yUqYAYLldX+2GZ+GCKAkBS6/8ZYrxjHgw7 11kEPZIGg7KOsgYaEVQfB4dQST1yW8XA8Y94uSK4gxchIVKo9wyPOja+PlmTyL9c TgA0K1fF+tUcjEy6G1Zi7N7tuDSWR8h3bvBPZn8E+u3MRDOiJDk/OoFuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0rHbPSEeoUAif641dpYhfDTBBUMB8GA1UdIwQY MBaAFB3aL34my316VqxkBekMamGpKtLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yOGIxNWYtZTdlOC00ZGE0LWJmYzct NzQ4MGI1YTBkOTczLzEvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yOGIxNWYtZTdlOC00ZGE0LWJmYzctNzQ4MGI1YTBkOTcz LzEvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUtyjKFp fbpjHADx2C2kFbJsh8UT2zKueyf1wzo+P0Pv+uRntwGW+s41iRVQSeOp6CjXNdid /uUJOkkRrDwMSS35y2094e9VV+n+wXWWq0xpTPgAAHSHPQrqF56QsdYJyCTezMED VpUHxYkeJVfc36y0IAKE7YFZx9Xkh+yNiKO9Of9xtMyJuanmBatIbrGiG6QZ1F1y s45pBu6hR9tz1gkxj0/R1tIiOhP9AUNcItlwE5ofPokRp7E5gesg1nGwviaTT0WJ MYaQ9XyabhdI9M1758M7ol4lWBFOBUN3pEg4/kj00YnKOadDH+E0VAOFUwszwL6x 7j9cqVjcLwjZeA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:43 2025 by rpki-client