This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json) Hash identifier: 2UcwiWXbA7yyHNsHJ5pFKjtqf3SqVMYzQ8UVaFdoRD0= Subject key identifier: 7B:1F:B7:D3:BD:88:22:A7:CD:C1:CB:4B:42:68:39:E8:F5:91:DD:D7 Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8 Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8 Certificate serial: 019B18A85FD3A5A11CADB511ED9B29F80970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft Manifest number: 177C Signing time: Sat 13 Dec 2025 17:00:46 +0000 Manifest this update: Sat 13 Dec 2025 17:00:46 +0000 Manifest next update: Sun 14 Dec 2025 17:00:46 +0000 Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=) 2: XebRYOITfzcAbcv2WQiIUJzp9IY.roa (hash: /LlV1c2jBHdUzm3m7BbrQfvi7DnfI/2A+wzHJz5/0Eg=) 3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: jJFuSDm0I7ziL+eajdyIh1ST82U4iC2uJSNWU/PQUPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:5f:d3:a5:a1:1c:ad:b5:11:ed:9b:29:f8:09:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8 Validity Not Before: Dec 13 17:00:46 2025 GMT Not After : Dec 14 17:00:46 2025 GMT Subject: CN=7b1fb7d3bd8822a7cdc1cb4b426839e8f591ddd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:de:58:fd:67:e2:99:92:d1:a9:b2:c1:ed: b7:0b:c0:65:df:73:b8:d1:1b:50:4e:ea:03:c5:4e: cd:dd:8e:b0:17:3b:4f:fb:9b:c5:03:12:bc:38:e1: 48:a6:83:cc:91:dc:ee:83:33:3f:9c:ae:13:55:6d: 12:4b:bf:b7:6e:f8:22:6d:5c:7e:d8:68:2c:15:62: ae:3f:7c:e9:5c:f2:99:ec:52:08:ed:a0:c1:19:4a: 76:ee:1b:1a:84:8c:02:ab:7d:71:fe:17:21:55:d1: 7d:c0:9d:d7:af:c1:5e:5f:78:14:ba:58:3c:31:71: 7f:88:d4:eb:dd:09:a0:d5:39:3f:25:d9:8e:a8:9e: 9a:84:e9:56:fa:86:7c:40:1f:a5:f9:73:cf:2b:e6: 7b:42:42:1d:1f:ea:88:17:3f:fb:ed:92:b7:fd:42: a9:ac:4d:c9:19:14:2f:0e:61:b1:cc:f8:44:10:48: 3a:af:c8:5b:42:62:0d:e9:57:08:e5:a3:de:78:00: 51:d3:e5:f9:55:6d:3a:7b:6f:fe:96:69:1c:81:da: 42:6a:85:81:5c:b9:b9:8c:07:cf:e9:5c:e3:7a:bf: 8d:69:6b:5c:c5:66:e8:b5:a4:fd:bb:2f:8d:09:81: a1:5b:32:9b:1e:98:64:3e:f2:13:f6:54:f9:d7:85: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:B7:D3:BD:88:22:A7:CD:C1:CB:4B:42:68:39:E8:F5:91:DD:D7 X509v3 Authority Key Identifier: keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8e:06:2d:2e:45:dc:5f:dd:a5:84:3e:c5:23:4b:6d:c7:fc: 59:7b:56:64:14:90:b7:45:6c:21:57:1e:c3:73:36:c7:96:f9: 32:c9:9d:5f:3c:e1:3b:6e:8f:ba:79:78:ff:2e:b8:88:2e:4f: e7:8a:8a:ca:41:13:9f:7b:ff:4d:8b:6d:97:40:3a:2c:d9:61: 56:00:ad:e0:c6:bc:9e:84:3a:a2:0c:2b:05:97:8d:19:fd:47: 61:78:5f:7d:7b:4e:df:ec:01:5d:84:17:a3:85:fa:86:35:f4: 89:e4:02:6c:06:d7:b7:e4:d3:d8:06:bf:a6:26:eb:7c:1a:59: cb:fc:3c:37:80:a0:14:a6:7b:b0:74:a9:bf:78:16:d1:f1:73: 8e:3f:55:c3:38:81:9b:1f:6e:54:fb:d0:1a:bd:01:00:5f:06: 50:d7:1d:8f:be:92:93:6c:32:b4:92:f8:bf:93:14:af:b1:b0: ff:dc:e4:e5:2f:46:5c:32:b6:50:c7:51:5e:a8:9f:d1:b7:6b: 94:83:94:2a:c6:37:d2:14:1e:f9:3a:29:fa:f1:0c:8f:8f:d2: 8b:cc:cb:f8:44:39:4b:e9:a1:36:7e:2c:b3:85:81:7f:98:c0: 93:f9:b4:e1:a7:1d:ec:88:ba:d3:5b:36:07:2d:a0:13:35:63: 40:5e:f3:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqF/TpaEcrbUR7Zsp+AlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZTE0MjlhNTNlNjQ2M2IzYzc0ZjVhM2YxN2M1ZDRhNTFl YmQwYjgwHhcNMjUxMjEzMTcwMDQ2WhcNMjUxMjE0MTcwMDQ2WjAzMTEwLwYDVQQD Eyg3YjFmYjdkM2JkODgyMmE3Y2RjMWNiNGI0MjY4MzllOGY1OTFkZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr3eWP1n4pmS0amywe23C8Bl33O4 0RtQTuoDxU7N3Y6wFztP+5vFAxK8OOFIpoPMkdzugzM/nK4TVW0SS7+3bvgibVx+ 2GgsFWKuP3zpXPKZ7FII7aDBGUp27hsahIwCq31x/hchVdF9wJ3Xr8FeX3gUulg8 MXF/iNTr3Qmg1Tk/JdmOqJ6ahOlW+oZ8QB+l+XPPK+Z7QkIdH+qIFz/77ZK3/UKp rE3JGRQvDmGxzPhEEEg6r8hbQmIN6VcI5aPeeABR0+X5VW06e2/+lmkcgdpCaoWB XLm5jAfP6Vzjer+NaWtcxWbotaT9uy+NCYGhWzKbHphkPvIT9lT514XvkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsft9O9iCKnzcHLS0JoOej1kd3XMB8GA1UdIwQY MBaAFIThQppT5kY7PHT1o/F8XUpR69C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYt YzQxZGNjYThiNzc1LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYtYzQxZGNjYThiNzc1 LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI4GLS5F 3F/dpYQ+xSNLbcf8WXtWZBSQt0VsIVcew3M2x5b5MsmdXzzhO26Punl4/y64iC5P 54qKykETn3v/TYttl0A6LNlhVgCt4Ma8noQ6ogwrBZeNGf1HYXhffXtO3+wBXYQX o4X6hjX0ieQCbAbXt+TT2Aa/pibrfBpZy/w8N4CgFKZ7sHSpv3gW0fFzjj9VwziB mx9uVPvQGr0BAF8GUNcdj76Sk2wytJL4v5MUr7Gw/9zk5S9GXDK2UMdRXqif0bdr lIOUKsY30hQe+Top+vEMj4/Si8zL+EQ5S+mhNn4ss4WBf5jAk/m04acd7Ii601s2 By2gEzVjQF7zAQ== -----END CERTIFICATE-----Generated at Sat Dec 13 21:19:01 2025 by rpki-client