This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json) Hash identifier: vL8i6DP8+5WOOVzNiUBFWyyqDpZD1GxjCqAYd9JmWs4= Subject key identifier: 16:D3:9F:84:63:33:3A:CF:56:31:C5:FB:13:91:11:19:C7:DE:C4:05 Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27 Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527 Certificate serial: 019B10B87549CDBE5A4B996A6514205447A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 04:01:22 +0000 Manifest this update: Fri 12 Dec 2025 04:01:22 +0000 Manifest next update: Sat 13 Dec 2025 04:01:22 +0000 Files and hashes: 1: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (hash: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=) 2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: 7rN0hzhrHLzryt0R+RenLBEdbnAzf+IlEtCkrqMDxfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:75:49:cd:be:5a:4b:99:6a:65:14:20:54:47:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527 Validity Not Before: Dec 12 04:01:22 2025 GMT Not After : Dec 13 04:01:22 2025 GMT Subject: CN=16d39f8463333acf5631c5fb13911119c7dec405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:bb:fd:97:cc:62:4f:15:11:ed:1e:45:f3: d7:0a:d3:72:f4:09:b2:7b:b9:8f:1f:c5:7d:d0:dd: 82:51:63:20:79:d8:f6:9f:f2:3b:d0:01:19:90:85: 56:10:5a:49:0f:76:4e:88:0d:5e:31:c6:72:e6:57: 96:d7:f2:22:59:c4:60:f0:da:bd:95:64:d6:59:f2: 6a:b7:fd:59:16:f5:0c:f0:d9:6f:a6:0a:c3:87:8d: 47:91:c5:c7:06:ef:4d:65:83:b6:fa:c1:cc:29:88: e1:15:3e:bc:e0:37:f9:48:64:0e:e4:e4:a5:c9:bc: 04:0e:68:21:5d:f3:1d:8a:1e:60:91:e6:7b:ea:07: 8e:68:90:cb:04:b2:5a:9a:6d:e9:52:6a:55:af:6c: b4:1e:6d:b6:8b:1f:7e:46:72:da:cc:34:ac:35:4d: a8:c3:52:a0:85:50:3b:12:59:94:0a:cb:62:71:64: 31:3e:15:46:f0:68:f1:67:ac:bc:69:4b:c7:98:1e: 4a:8d:c3:3a:42:8d:f6:79:fe:d4:ae:4d:fc:95:35: 18:ef:74:4d:61:8e:81:4e:42:0e:f8:cf:8f:a5:5b: e5:97:bf:30:ac:4a:99:f4:7b:d9:5a:a8:cc:93:20: 24:fe:01:45:22:36:ce:4e:91:f0:d5:46:78:a1:d0: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:9F:84:63:33:3A:CF:56:31:C5:FB:13:91:11:19:C7:DE:C4:05 X509v3 Authority Key Identifier: keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3d:98:68:e3:54:90:16:54:83:49:97:1d:dc:38:da:9d:41: 26:01:69:7b:44:14:e0:b2:a5:ae:1e:c7:3f:a8:12:ac:e2:23: c4:e7:a3:d6:1c:ed:b6:f2:df:5a:2c:c6:0e:17:34:7b:fc:8e: a7:3c:c9:cb:b0:c3:07:61:61:c4:e2:b1:2f:bc:0e:47:d3:7d: 87:cc:1b:83:77:b6:6d:c6:8c:3b:18:af:86:18:3f:c6:d0:b8: 0d:ee:65:f1:7a:b7:ab:bb:be:c4:6c:67:39:d5:2d:db:0d:f7: af:b0:93:51:17:00:44:96:67:f4:53:da:a3:bd:22:de:86:35: 8f:f4:60:ae:5f:ce:10:fa:f2:d5:23:04:34:f1:bb:b0:7e:54: 29:75:d9:57:d0:a9:b8:40:0a:50:df:37:5d:fd:11:81:a1:bf: 94:ab:70:cc:bb:cc:7d:84:f0:2e:16:34:b8:0f:73:89:54:23: 38:6e:ba:ec:58:9c:c4:a8:7f:a2:b7:3f:0e:3b:d0:e7:cc:81: c0:05:dc:a1:98:49:7c:9c:22:12:b6:ae:d3:e7:99:5f:98:80: d8:b8:cf:54:b3:a9:77:5e:15:32:f2:06:2f:4e:d8:1a:af:6e: 47:3f:50:13:46:a4:2f:dc:ca:22:0f:ab:64:68:f0:e6:c7:b8: 7e:64:28:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuHVJzb5aS5lqZRQgVEeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj NDg1MjcwHhcNMjUxMjEyMDQwMTIyWhcNMjUxMjEzMDQwMTIyWjAzMTEwLwYDVQQD EygxNmQzOWY4NDYzMzMzYWNmNTYzMWM1ZmIxMzkxMTExOWM3ZGVjNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAG7/ZfMYk8VEe0eRfPXCtNy9Amy e7mPH8V90N2CUWMgedj2n/I70AEZkIVWEFpJD3ZOiA1eMcZy5leW1/IiWcRg8Nq9 lWTWWfJqt/1ZFvUM8NlvpgrDh41HkcXHBu9NZYO2+sHMKYjhFT684Df5SGQO5OSl ybwEDmghXfMdih5gkeZ76geOaJDLBLJamm3pUmpVr2y0Hm22ix9+RnLazDSsNU2o w1KghVA7ElmUCsticWQxPhVG8GjxZ6y8aUvHmB5KjcM6Qo32ef7Urk38lTUY73RN YY6BTkIO+M+PpVvll78wrEqZ9HvZWqjMkyAk/gFFIjbOTpHw1UZ4odCniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbTn4RjMzrPVjHF+xORERnH3sQFMB8GA1UdIwQY MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2 LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXj2YaONU kBZUg0mXHdw42p1BJgFpe0QU4LKlrh7HP6gSrOIjxOej1hzttvLfWizGDhc0e/yO pzzJy7DDB2FhxOKxL7wOR9N9h8wbg3e2bcaMOxivhhg/xtC4De5l8Xq3q7u+xGxn OdUt2w33r7CTURcARJZn9FPao70i3oY1j/Rgrl/OEPry1SMENPG7sH5UKXXZV9Cp uEAKUN83Xf0RgaG/lKtwzLvMfYTwLhY0uA9ziVQjOG667FicxKh/orc/DjvQ58yB wAXcoZhJfJwiErau0+eZX5iA2LjPVLOpd14VMvIGL07YGq9uRz9QE0akL9zKIg+r ZGjw5se4fmQoBQ== -----END CERTIFICATE-----Generated at Fri Dec 12 07:42:03 2025 by rpki-client