This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json) Hash identifier: jj76ux5NHaomOg4jGVkUX/z63tjESgsf6SEj7swatSI= Subject key identifier: B0:9F:2C:CC:16:F0:EB:24:AB:C9:24:09:4E:58:F3:73:1C:08:72:8F Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27 Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527 Certificate serial: 019B2BC238398F20DF55BB5CFD9CE842B407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 10:01:47 +0000 Manifest this update: Wed 17 Dec 2025 10:01:47 +0000 Manifest next update: Thu 18 Dec 2025 10:01:47 +0000 Files and hashes: 1: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (hash: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=) 2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: WmdC3rY6Sj816DE7S3o0qySc9a/fF6SFlsyVah+KhWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:38:39:8f:20:df:55:bb:5c:fd:9c:e8:42:b4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527 Validity Not Before: Dec 17 10:01:47 2025 GMT Not After : Dec 18 10:01:47 2025 GMT Subject: CN=b09f2ccc16f0eb24abc924094e58f3731c08728f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:01:47:10:b0:83:bf:e8:c6:61:29:a2:81: b5:b6:bb:06:64:6e:89:65:fe:4b:34:9a:43:3a:c7: e1:08:f7:7d:43:ec:6b:b3:bb:ce:2e:94:70:ab:d3: c2:cb:2b:93:b1:0f:d5:63:36:e9:e7:8e:49:c5:cb: dc:53:35:de:49:58:09:ed:fd:26:3a:d8:1d:e5:3f: 62:29:e6:e3:90:76:9c:15:9b:a4:6e:c3:b9:24:8c: 13:f0:fb:3e:56:14:11:d0:49:67:46:bb:a3:01:43: 90:7c:61:13:c4:0b:81:e6:4d:a6:04:c0:bc:05:42: d6:26:37:55:af:63:19:1c:5b:df:3b:5e:41:1a:15: 39:56:71:fa:50:5b:29:02:f1:f7:3a:9e:90:58:f4: 50:c9:ba:d4:be:32:ae:96:d8:b2:53:c3:0d:e5:d5: 47:52:7a:9a:17:85:a7:37:be:4f:6d:3c:86:90:56: ba:7c:3a:2e:ad:90:59:20:65:02:74:b6:7e:2e:ed: fe:b1:79:47:75:65:a0:8d:1a:cf:36:fc:d6:7b:e0: eb:b3:70:d8:9d:b0:35:3b:a7:ce:5c:99:4c:9b:1b: 8e:1f:b6:f7:75:e9:e6:a3:55:e8:07:eb:3d:0e:18: b8:7b:87:96:f1:e4:72:88:38:5b:28:87:cf:ea:05: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9F:2C:CC:16:F0:EB:24:AB:C9:24:09:4E:58:F3:73:1C:08:72:8F X509v3 Authority Key Identifier: keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c4:a3:92:a3:7d:d5:3b:69:a6:13:7b:3f:07:57:7d:35:19: f0:95:42:bd:cc:c0:92:b7:98:68:c6:6a:bd:db:fc:da:2b:88: 2a:35:29:34:05:73:84:68:8e:c7:75:03:10:c6:57:53:95:b0: 27:72:bb:a1:b1:db:87:f3:7e:31:f7:89:80:1f:79:a7:06:66: 5e:ba:a6:ad:eb:96:95:80:11:fd:65:12:85:96:e4:17:14:a9: 08:7d:d0:db:0b:c2:0c:ee:7e:39:b2:fe:bb:58:13:75:4d:74: 5f:d3:ae:31:0d:8a:af:f1:b7:d7:5e:45:0a:ca:95:05:d8:2a: 4e:91:63:66:42:5d:5f:ad:87:9f:39:f8:b7:81:41:8d:72:8e: 45:44:9f:ff:6d:d8:32:4e:92:62:5c:4f:8d:15:50:1e:b0:c7: 1b:e6:41:ff:9a:7a:d0:17:60:13:97:bd:f8:f1:77:c2:83:d7: 56:82:98:b0:03:e9:68:e5:6a:e0:8e:da:15:db:f6:a8:99:40: 4c:9a:49:f5:25:33:38:8e:ea:36:6b:3d:0a:d3:d1:46:8a:f1: 2d:d7:04:a7:41:8a:39:b7:f1:5d:9a:b8:93:2f:c9:b2:28:8f: 6c:c6:05:8a:f4:16:b2:01:31:06:07:50:c9:d3:ec:a2:88:58: 90:3f:6b:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwjg5jyDfVbtc/ZzoQrQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj NDg1MjcwHhcNMjUxMjE3MTAwMTQ3WhcNMjUxMjE4MTAwMTQ3WjAzMTEwLwYDVQQD EyhiMDlmMmNjYzE2ZjBlYjI0YWJjOTI0MDk0ZTU4ZjM3MzFjMDg3MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2EBRxCwg7/oxmEpooG1trsGZG6J Zf5LNJpDOsfhCPd9Q+xrs7vOLpRwq9PCyyuTsQ/VYzbp545JxcvcUzXeSVgJ7f0m Otgd5T9iKebjkHacFZukbsO5JIwT8Ps+VhQR0ElnRrujAUOQfGETxAuB5k2mBMC8 BULWJjdVr2MZHFvfO15BGhU5VnH6UFspAvH3Op6QWPRQybrUvjKultiyU8MN5dVH UnqaF4WnN75PbTyGkFa6fDourZBZIGUCdLZ+Lu3+sXlHdWWgjRrPNvzWe+Drs3DY nbA1O6fOXJlMmxuOH7b3denmo1XoB+s9Dhi4e4eW8eRyiDhbKIfP6gXegwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCfLMwW8Oskq8kkCU5Y83McCHKPMB8GA1UdIwQY MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2 LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsSjkqN9 1TtpphN7PwdXfTUZ8JVCvczAkreYaMZqvdv82iuIKjUpNAVzhGiOx3UDEMZXU5Ww J3K7obHbh/N+MfeJgB95pwZmXrqmreuWlYAR/WUShZbkFxSpCH3Q2wvCDO5+ObL+ u1gTdU10X9OuMQ2Kr/G3115FCsqVBdgqTpFjZkJdX62Hnzn4t4FBjXKORUSf/23Y Mk6SYlxPjRVQHrDHG+ZB/5p60BdgE5e9+PF3woPXVoKYsAPpaOVq4I7aFdv2qJlA TJpJ9SUzOI7qNms9CtPRRorxLdcEp0GKObfxXZq4ky/JsiiPbMYFivQWsgExBgdQ ydPsoohYkD9r4Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:06:27 2025 by rpki-client