This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json) Hash identifier: SUuxcvMl3h17JLKzkWhq3a6iW/eKN629Oel8DECglpE= Subject key identifier: 08:24:7C:8A:2C:F8:4E:73:AC:09:4B:F0:A1:AE:12:69:E1:37:F4:97 Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71 Certificate serial: 019B236312D887401C2A8F918EF3D97F0242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft Manifest number: 0482 Signing time: Mon 15 Dec 2025 19:00:54 +0000 Manifest this update: Mon 15 Dec 2025 19:00:54 +0000 Manifest next update: Tue 16 Dec 2025 19:00:54 +0000 Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=) 2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=) 3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: iEENmD3AHy3xu4H4j16O++LTLYwNX5fX5Bz9YYONs3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:12:d8:87:40:1c:2a:8f:91:8e:f3:d9:7f:02:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71 Validity Not Before: Dec 15 19:00:54 2025 GMT Not After : Dec 16 19:00:54 2025 GMT Subject: CN=08247c8a2cf84e73ac094bf0a1ae1269e137f497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:c1:71:85:c4:d0:5f:1f:ae:de:13:ad:8d: d8:3e:81:b4:78:f5:54:ad:fc:de:29:8d:02:1e:cf: ce:0f:24:be:b1:9c:a6:25:04:81:1f:84:06:5c:8e: 30:d8:3d:35:b4:a6:e5:6f:05:05:c2:ed:ad:90:41: 2e:a1:3e:2e:4c:fc:4a:d2:1f:b0:68:cb:b5:e3:58: d3:bd:44:71:f3:83:92:a3:5b:21:04:1c:03:ec:06: 4e:7a:62:23:e8:e4:bf:16:c8:a0:e1:37:f2:66:47: d2:bc:29:ed:9c:9f:02:0d:0a:4b:62:7e:0c:ab:ef: 57:6c:ae:f4:bb:49:d8:a1:a6:53:96:15:34:98:e3: a3:b4:ba:70:55:17:8b:4c:b6:8c:32:9a:a2:55:aa: 24:b5:bc:04:3c:08:eb:d7:72:17:73:37:a2:58:d4: df:9b:59:99:00:97:be:8d:ad:04:51:b8:b2:a5:aa: 00:84:4d:52:12:dc:b2:f5:47:07:64:5c:85:36:8c: 21:b7:60:69:39:8f:ed:2b:4b:b9:e3:c7:01:97:2b: a4:87:7f:fc:02:5e:77:34:9a:eb:2c:70:bf:99:ca: a0:1e:9e:62:ec:6e:e1:e7:b3:ac:88:04:aa:a6:66: 54:e8:6b:40:3f:58:82:64:66:a9:a2:a0:49:56:e4: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:24:7C:8A:2C:F8:4E:73:AC:09:4B:F0:A1:AE:12:69:E1:37:F4:97 X509v3 Authority Key Identifier: keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:57:3c:72:c1:b3:41:33:e0:5f:0e:48:81:17:79:2f:6d:37: 24:f5:d0:a2:91:22:f2:89:0e:8b:a5:12:4a:9f:57:45:c2:14: bb:91:f6:dc:73:93:c8:ea:cf:58:b3:e9:d9:ba:f6:da:b1:fe: 36:41:43:27:a4:6a:e2:ee:7a:35:bf:fc:91:f5:3b:1b:f9:5f: cc:97:12:76:d6:fa:6d:25:df:64:c7:49:3f:d2:09:4a:44:09: 7c:f1:b5:1b:77:c5:81:e5:f3:60:e7:9a:a2:c7:9d:48:04:b5: 4b:98:ba:e7:98:26:35:00:5f:85:ae:7b:97:db:98:44:2c:fe: 2e:21:d3:8c:01:5b:be:96:15:98:a5:9c:a1:4e:93:5e:1f:85: ca:ba:c5:f9:26:36:f9:04:21:29:ad:7a:db:78:5b:23:de:79: 29:38:15:59:69:45:c4:a9:8f:ec:4f:c7:38:d5:83:18:15:ca: bd:7a:57:12:50:29:e5:ee:96:cf:43:f5:2d:ab:ee:3e:5a:2f: b6:ee:e7:da:58:59:28:b6:39:d7:3f:03:63:70:0d:09:70:a9: 4d:c1:4b:b0:17:83:07:1e:ab:81:f9:6c:ba:26:ab:61:e3:0e: b2:06:bb:fe:02:83:ac:c2:45:49:5a:1e:bb:3f:fc:2a:fa:9d: 78:fc:19:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYxLYh0AcKo+RjvPZfwJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3 NmVmNzEwHhcNMjUxMjE1MTkwMDU0WhcNMjUxMjE2MTkwMDU0WjAzMTEwLwYDVQQD EygwODI0N2M4YTJjZjg0ZTczYWMwOTRiZjBhMWFlMTI2OWUxMzdmNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6jBcYXE0F8frt4TrY3YPoG0ePVU rfzeKY0CHs/ODyS+sZymJQSBH4QGXI4w2D01tKblbwUFwu2tkEEuoT4uTPxK0h+w aMu141jTvURx84OSo1shBBwD7AZOemIj6OS/Fsig4TfyZkfSvCntnJ8CDQpLYn4M q+9XbK70u0nYoaZTlhU0mOOjtLpwVReLTLaMMpqiVaoktbwEPAjr13IXczeiWNTf m1mZAJe+ja0EUbiypaoAhE1SEtyy9UcHZFyFNowht2BpOY/tK0u548cBlyukh3/8 Al53NJrrLHC/mcqgHp5i7G7h57OsiASqpmZU6GtAP1iCZGapoqBJVuRS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgkfIos+E5zrAlL8KGuEmnhN/SXMB8GA1UdIwQY MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFc8csGz QTPgXw5IgRd5L203JPXQopEi8okOi6USSp9XRcIUu5H23HOTyOrPWLPp2br22rH+ NkFDJ6Rq4u56Nb/8kfU7G/lfzJcSdtb6bSXfZMdJP9IJSkQJfPG1G3fFgeXzYOea osedSAS1S5i655gmNQBfha57l9uYRCz+LiHTjAFbvpYVmKWcoU6TXh+FyrrF+SY2 +QQhKa1623hbI955KTgVWWlFxKmP7E/HONWDGBXKvXpXElAp5e6Wz0P1LavuPlov tu7n2lhZKLY51z8DY3ANCXCpTcFLsBeDBx6rgflsuiarYeMOsga7/gKDrMJFSVoe uz/8KvqdePwZkw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:07:42 2025 by rpki-client