This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json) Hash identifier: 1rwnHK3QWPSDyon78w9IbGgmfDJdhfUneuvwkLI1rvo= Subject key identifier: 6F:9F:7C:43:2B:B2:2B:56:D8:13:29:AD:D1:0E:4D:D4:13:E1:74:79 Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a Certificate serial: 019B191655DFE42D05B6A5A5F5462543BF5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft Manifest number: 170B Signing time: Sat 13 Dec 2025 19:00:52 +0000 Manifest this update: Sat 13 Dec 2025 19:00:52 +0000 Manifest next update: Sun 14 Dec 2025 19:00:52 +0000 Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=) 2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: /itdkdiWTu4NtFW/2bQqQrjt1EfTx7sk3vnlxVOxH18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:55:df:e4:2d:05:b6:a5:a5:f5:46:25:43:bf:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a Validity Not Before: Dec 13 19:00:52 2025 GMT Not After : Dec 14 19:00:52 2025 GMT Subject: CN=6f9f7c432bb22b56d81329add10e4dd413e17479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:13:e8:bf:6c:70:e7:90:11:47:89:d7:6d: b3:81:05:d3:7a:27:99:9c:78:44:bd:66:c7:8e:11: c5:55:68:83:f6:a8:eb:98:ce:fa:3c:7f:19:52:28: b8:1d:96:17:ed:8a:75:41:2a:f1:10:ed:a1:6b:73: e2:fa:d4:86:fa:11:33:85:da:28:71:ec:95:1f:63: 28:43:2f:3c:bf:c8:3a:4e:7c:b3:03:b5:4b:e5:41: 6b:e9:42:f0:f9:6d:f8:23:f0:bb:da:16:8d:c2:1d: a5:42:05:88:66:c1:ac:88:67:43:e0:b8:50:c3:5b: fb:6b:ee:41:cc:0b:b3:dc:9c:b4:1f:9f:27:20:eb: 78:72:40:f3:20:27:88:ee:40:75:e0:01:f5:ea:c8: 5a:33:ca:b0:7c:43:c2:de:d1:8a:c6:2e:3b:c8:ad: 15:5b:a0:0d:99:da:30:60:7c:04:13:3b:52:9c:c1: 19:94:f6:20:63:23:d2:31:33:51:f5:59:9c:ab:f1: 67:7d:b8:a4:13:9a:9c:ff:cb:30:bb:8f:f2:64:be: 43:ad:fe:12:1d:85:23:b0:74:b7:a9:00:3b:ad:fb: 01:82:17:b0:e6:be:27:a4:ba:64:b8:aa:52:c7:ad: 6b:b7:75:51:5b:c1:c1:1b:a9:8f:42:d8:e4:cd:0e: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9F:7C:43:2B:B2:2B:56:D8:13:29:AD:D1:0E:4D:D4:13:E1:74:79 X509v3 Authority Key Identifier: keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e3:ab:b3:a4:2b:c6:b0:57:d6:9c:0e:90:9d:c5:6c:4b:76: f3:cf:94:4d:fe:c9:39:9d:53:c9:9e:53:d7:eb:be:ae:cf:33: cb:9f:22:f9:78:e8:b1:f0:9f:c5:bb:e6:fa:28:73:7a:44:c6: a1:a7:aa:e4:94:99:2b:ab:cd:43:1a:ab:6d:d2:f6:26:59:02: 67:e6:95:9c:82:ab:01:20:b7:9f:14:81:8a:6f:4c:9e:68:ee: cf:aa:41:e8:46:3a:ac:4b:ca:59:88:6d:2d:52:90:8a:93:f4: 8a:9d:7a:b5:e8:c6:62:25:17:19:da:72:d6:8b:71:ee:15:a7: de:1e:a7:85:61:a2:65:f9:f9:19:9c:a8:f4:7d:a4:a3:c7:1a: f2:26:1c:d2:54:73:2e:eb:9d:fb:0d:88:10:20:8e:0b:04:33: 8e:a2:c6:f4:82:66:c0:84:b0:35:ce:0e:b5:43:04:ac:10:84: a9:2c:0e:46:26:1b:af:3b:01:ab:49:38:db:65:be:bb:8f:42: c0:42:d6:1c:7b:42:af:c5:8a:b5:38:3e:43:2b:04:69:f1:5d: bf:33:44:89:7d:0b:2c:38:23:51:56:92:88:ba:90:4b:d7:2f: cd:51:bd:94:da:c1:87:71:86:db:5a:96:59:78:ae:1e:e1:27: 69:79:47:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFlXf5C0FtqWl9UYlQ79dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm Y2Q4NWEwHhcNMjUxMjEzMTkwMDUyWhcNMjUxMjE0MTkwMDUyWjAzMTEwLwYDVQQD Eyg2ZjlmN2M0MzJiYjIyYjU2ZDgxMzI5YWRkMTBlNGRkNDEzZTE3NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskkT6L9scOeQEUeJ122zgQXTeieZ nHhEvWbHjhHFVWiD9qjrmM76PH8ZUii4HZYX7Yp1QSrxEO2ha3Pi+tSG+hEzhdoo ceyVH2MoQy88v8g6TnyzA7VL5UFr6ULw+W34I/C72haNwh2lQgWIZsGsiGdD4LhQ w1v7a+5BzAuz3Jy0H58nIOt4ckDzICeI7kB14AH16shaM8qwfEPC3tGKxi47yK0V W6ANmdowYHwEEztSnMEZlPYgYyPSMTNR9Vmcq/FnfbikE5qc/8swu4/yZL5Drf4S HYUjsHS3qQA7rfsBghew5r4npLpkuKpSx61rt3VRW8HBG6mPQtjkzQ7wBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+ffEMrsitW2BMprdEOTdQT4XR5MB8GA1UdIwQY MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+Ors6Qr xrBX1pwOkJ3FbEt288+UTf7JOZ1TyZ5T1+u+rs8zy58i+XjosfCfxbvm+ihzekTG oaeq5JSZK6vNQxqrbdL2JlkCZ+aVnIKrASC3nxSBim9Mnmjuz6pB6EY6rEvKWYht LVKQipP0ip16tejGYiUXGdpy1otx7hWn3h6nhWGiZfn5GZyo9H2ko8ca8iYc0lRz Luud+w2IECCOCwQzjqLG9IJmwISwNc4OtUMErBCEqSwORiYbrzsBq0k422W+u49C wELWHHtCr8WKtTg+QysEafFdvzNEiX0LLDgjUVaSiLqQS9cvzVG9lNrBh3GG21qW WXiuHuEnaXlH2w== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:42 2025 by rpki-client