This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: y6YpA1d3g8eiigqpBr3m/hV/sgSVOIz9vvzt5Pgu6aA= Subject key identifier: 21:79:DE:C0:F5:B4:D1:D8:22:AD:E4:CE:6C:2B:79:8D:23:D1:1F:2A Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019B360E4E39C0BCC2F64649059A8C81A618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 1836 Signing time: Fri 19 Dec 2025 10:01:05 +0000 Manifest this update: Fri 19 Dec 2025 10:01:05 +0000 Manifest next update: Sat 20 Dec 2025 10:01:05 +0000 Files and hashes: 1: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 2: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 3: RS_eHXQUq41tQvgc6GbNLviSAns.roa (hash: TQU9cNt++mpDY6Fc1sIB45y0XyCZcVPTbN6xJWetVtM=) 4: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 5: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 6: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: YxeXgYg3EvcWPF/KtyN1V/geMjrPOhRco6pIF4roXMk=) 7: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 8: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 9: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:4e:39:c0:bc:c2:f6:46:49:05:9a:8c:81:a6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Dec 19 10:01:05 2025 GMT Not After : Dec 20 10:01:05 2025 GMT Subject: CN=2179dec0f5b4d1d822ade4ce6c2b798d23d11f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:51:43:9f:27:bd:17:ac:07:33:d7:f6:c9: 85:f4:5d:06:ec:55:b8:4d:f2:86:e7:1c:0b:0f:75: 63:aa:80:3b:ad:d0:e2:f0:ff:f2:1e:1a:74:51:fb: d0:73:26:ce:e7:e6:13:54:51:84:e6:de:f5:2e:d5: c9:c4:f3:74:f2:9a:cd:09:0a:c3:3e:33:dd:ee:ec: 5d:64:5d:84:40:28:70:bf:5b:7a:16:04:6f:a6:63: 87:f4:1a:0a:3a:f4:dc:f5:2d:e4:be:40:f2:ec:86: fa:4e:d7:2b:e3:30:f2:2a:5c:b1:c3:f9:0b:c9:23: 89:b4:c2:8c:4a:ac:29:c6:4a:2c:96:82:1d:74:17: cf:be:2b:5a:8c:1f:3b:20:db:fc:1d:a1:5d:a7:2f: 56:73:cd:9d:15:f5:9d:01:65:28:3d:0e:16:c3:9c: ca:0c:4a:20:44:02:35:d2:da:81:76:f2:1e:fe:58: f5:02:0c:fa:5b:39:60:23:59:99:6d:e0:21:1f:ce: 61:9e:d0:ae:4e:2d:4c:d2:9c:1c:06:2f:c4:00:d9: 50:c8:cc:99:cf:12:ce:e1:4f:0b:76:36:9d:9e:12: 64:ba:88:ee:7b:0b:b7:da:50:95:cd:50:3a:df:ec: 41:3f:5a:f9:a5:98:cb:a6:d6:80:68:29:80:5d:b7: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:79:DE:C0:F5:B4:D1:D8:22:AD:E4:CE:6C:2B:79:8D:23:D1:1F:2A X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a7:40:44:41:ea:17:82:8e:d2:49:79:45:ab:c3:37:73:d4: 8b:3a:48:64:85:9c:17:79:54:92:68:43:f1:9f:95:a1:10:a9: 55:8a:1e:2e:f2:7f:57:35:53:4e:fc:a7:bd:e2:a2:75:36:71: f7:bc:19:be:04:93:52:d5:f5:fb:0e:78:3f:38:87:20:d1:04: 7c:b1:62:8a:34:29:0c:6e:b3:8f:0f:4e:d4:5b:da:74:18:0f: 41:3d:b9:6e:01:51:2a:1a:56:1c:cb:3c:fb:fa:8e:d7:d4:f3: b9:64:f9:eb:a7:97:9e:c1:22:62:a0:ee:0e:50:18:03:64:f8: 4d:af:67:0e:12:9d:0e:d6:8c:4e:04:59:69:0c:cc:bf:fc:07: 03:62:d9:b2:40:82:0a:d1:a2:79:6c:38:7d:40:8e:de:cc:cd: 1c:9f:71:70:05:3f:11:48:54:22:65:c7:17:f7:bc:cd:4f:48: 57:50:bf:91:91:c4:c3:dc:85:68:3b:49:ba:45:1e:48:51:b3: 61:ee:6e:56:5e:6f:9e:36:ca:82:44:8f:b5:7b:aa:f2:2b:25: 83:fa:04:7e:25:dd:8e:42:d3:1f:27:3d:a5:54:97:78:5a:e5: 72:f6:b7:a1:a5:89:10:41:26:9f:59:73:f3:44:94:ae:03:63: 49:0b:fa:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dk45wLzC9kZJBZqMgaYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUxMjE5MTAwMTA1WhcNMjUxMjIwMTAwMTA1WjAzMTEwLwYDVQQD EygyMTc5ZGVjMGY1YjRkMWQ4MjJhZGU0Y2U2YzJiNzk4ZDIzZDExZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBJRQ58nvResBzPX9smF9F0G7FW4 TfKG5xwLD3VjqoA7rdDi8P/yHhp0UfvQcybO5+YTVFGE5t71LtXJxPN08prNCQrD PjPd7uxdZF2EQChwv1t6FgRvpmOH9BoKOvTc9S3kvkDy7Ib6Ttcr4zDyKlyxw/kL ySOJtMKMSqwpxkosloIddBfPvitajB87INv8HaFdpy9Wc82dFfWdAWUoPQ4Ww5zK DEogRAI10tqBdvIe/lj1Agz6WzlgI1mZbeAhH85hntCuTi1M0pwcBi/EANlQyMyZ zxLO4U8LdjadnhJkuojuewu32lCVzVA63+xBP1r5pZjLptaAaCmAXbcq1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF53sD1tNHYIq3kzmwreY0j0R8qMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6dAREHq F4KO0kl5RavDN3PUizpIZIWcF3lUkmhD8Z+VoRCpVYoeLvJ/VzVTTvynveKidTZx 97wZvgSTUtX1+w54PziHINEEfLFiijQpDG6zjw9O1FvadBgPQT25bgFRKhpWHMs8 +/qO19TzuWT566eXnsEiYqDuDlAYA2T4Ta9nDhKdDtaMTgRZaQzMv/wHA2LZskCC CtGieWw4fUCO3szNHJ9xcAU/EUhUImXHF/e8zU9IV1C/kZHEw9yFaDtJukUeSFGz Ye5uVl5vnjbKgkSPtXuq8islg/oEfiXdjkLTHyc9pVSXeFrlcva3oaWJEEEmn1lz 80SUrgNjSQv6DA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:32 2025 by rpki-client