This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json) Hash identifier: 4CsUFYX1CnysnzpJ+R663/Lu2U2UHrxxgdN1VHAH4lU= Subject key identifier: 7C:65:C9:5F:F2:B5:DE:C3:DA:F9:71:74:DA:42:17:E7:FC:E4:0B:AD Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61 Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161 Certificate serial: 019B0E9327E26AB65967493D1B72ED0068D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft Manifest number: 1211 Signing time: Thu 11 Dec 2025 18:01:23 +0000 Manifest this update: Thu 11 Dec 2025 18:01:23 +0000 Manifest next update: Fri 12 Dec 2025 18:01:23 +0000 Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=) 2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: r+F9GyN8JWcNHQXYHdKbOdLz84zDYh9nxIiKOVzaCeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:27:e2:6a:b6:59:67:49:3d:1b:72:ed:00:68:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161 Validity Not Before: Dec 11 18:01:23 2025 GMT Not After : Dec 12 18:01:23 2025 GMT Subject: CN=7c65c95ff2b5dec3daf97174da4217e7fce40bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:93:84:57:95:a6:d0:0b:8b:71:89:d4:e5:e0: 4d:1e:a7:08:b3:1d:6e:fa:52:4c:9b:f0:5b:07:ea: 10:e1:2e:c2:df:6e:5c:52:1d:7d:b3:34:c7:6a:ba: 1a:1a:23:c0:f3:aa:5d:4a:42:bc:6f:cd:f7:c4:5b: aa:fc:8b:86:ba:40:b5:51:f7:6e:72:d7:27:34:b2: d2:e0:a3:a6:cf:f8:3e:98:84:83:f3:45:dc:a9:a9: 1a:16:15:de:41:57:57:11:cd:3b:dd:e7:fa:64:bc: fe:26:99:0d:b1:ba:f9:11:e4:e9:b5:d6:2e:11:2f: ef:bf:fe:ea:ea:2a:fd:75:ac:0d:af:93:f1:79:dc: a9:a4:59:ce:20:4a:0b:5d:cf:da:8f:a2:76:18:ac: 62:f8:8b:ca:ce:5a:41:ea:3b:ed:1d:3a:de:9f:87: d1:db:1a:0e:55:01:18:fc:6f:2d:e6:b4:c8:9a:58: 45:cb:fb:cf:60:48:17:13:42:d9:3d:fa:72:74:a7: d9:98:b0:8b:fc:28:73:f4:c0:f2:b0:75:0d:fe:3a: de:a6:5e:19:a5:d4:49:9b:2d:da:f5:e0:b1:a0:0b: 76:6a:f0:4b:1d:46:05:0d:4b:18:6f:49:48:e3:5c: df:70:1f:fe:1e:ad:b8:99:ea:75:db:a6:b2:89:fc: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:65:C9:5F:F2:B5:DE:C3:DA:F9:71:74:DA:42:17:E7:FC:E4:0B:AD X509v3 Authority Key Identifier: keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c9:66:e0:3a:bd:1b:32:ec:9e:10:a6:db:69:1c:01:e1:5f: 77:17:4c:31:11:d0:de:f3:c6:59:cc:7c:e8:27:a8:5e:21:67: 31:6b:6a:d2:56:c7:50:ac:f7:78:04:c1:24:c0:b5:1d:79:5e: 5b:2f:be:98:e9:12:ba:bf:e8:d2:66:08:71:28:37:68:2e:c8: 42:85:d2:00:d5:8c:29:8a:fc:89:b7:92:36:5a:aa:19:7e:a4: a3:66:7b:44:f0:6e:e9:79:cf:57:8c:75:ce:53:6d:62:8e:87: a0:99:d1:77:3f:43:50:d5:d1:71:e3:5d:58:1e:87:da:8a:c1: dd:e7:c4:f6:bf:b3:90:4d:6e:f0:0e:ed:21:cb:cb:7d:60:24: 93:58:58:f7:d6:0e:17:6f:12:2f:11:35:87:3b:52:c6:9e:be: ce:e6:b4:00:77:3f:6f:f0:67:44:48:8e:c1:3f:aa:3f:1e:09: 1c:75:31:07:70:2b:6d:4a:29:7b:b3:06:cd:b9:00:90:46:b6: 19:8e:12:41:7b:51:0a:b6:ae:5a:e4:b0:67:7f:0a:e5:29:6c: e7:ce:b8:0d:04:d7:9d:c2:52:18:10:a2:32:1d:55:cf:0b:c5: 8a:2d:8b:2a:f3:dc:39:33:d1:15:ff:f2:2c:0c:da:2f:ea:db: 21:9f:5d:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkyfiarZZZ0k9G3LtAGjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4 NTgxNjEwHhcNMjUxMjExMTgwMTIzWhcNMjUxMjEyMTgwMTIzWjAzMTEwLwYDVQQD Eyg3YzY1Yzk1ZmYyYjVkZWMzZGFmOTcxNzRkYTQyMTdlN2ZjZTQwYmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45OEV5Wm0AuLcYnU5eBNHqcIsx1u +lJMm/BbB+oQ4S7C325cUh19szTHaroaGiPA86pdSkK8b833xFuq/IuGukC1Ufdu ctcnNLLS4KOmz/g+mISD80XcqakaFhXeQVdXEc073ef6ZLz+JpkNsbr5EeTptdYu ES/vv/7q6ir9dawNr5PxedyppFnOIEoLXc/aj6J2GKxi+IvKzlpB6jvtHTren4fR 2xoOVQEY/G8t5rTImlhFy/vPYEgXE0LZPfpydKfZmLCL/Chz9MDysHUN/jrepl4Z pdRJmy3a9eCxoAt2avBLHUYFDUsYb0lI41zfcB/+Hq24mep126ayifwOywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxlyV/ytd7D2vlxdNpCF+f85AutMB8GA1UdIwQY MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2 LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMlm4Dq9 GzLsnhCm22kcAeFfdxdMMRHQ3vPGWcx86CeoXiFnMWtq0lbHUKz3eATBJMC1HXle Wy++mOkSur/o0mYIcSg3aC7IQoXSANWMKYr8ibeSNlqqGX6ko2Z7RPBu6XnPV4x1 zlNtYo6HoJnRdz9DUNXRceNdWB6H2orB3efE9r+zkE1u8A7tIcvLfWAkk1hY99YO F28SLxE1hztSxp6+zua0AHc/b/BnREiOwT+qPx4JHHUxB3ArbUope7MGzbkAkEa2 GY4SQXtRCrauWuSwZ38K5Sls5864DQTXncJSGBCiMh1VzwvFii2LKvPcOTPRFf/y LAzaL+rbIZ9dJA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:20 2025 by rpki-client