This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json) Hash identifier: NnHcE1kgFri4UX+PkxPJ6hS/Z1DvGZWwTm+ycCrQIbg= Subject key identifier: BA:21:9F:0A:D7:41:1F:BF:FE:42:EA:8C:94:52:1A:30:2A:DA:31:65 Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a Certificate serial: 019B07B500728683D43DD32126492833AD52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft Manifest number: 1702 Signing time: Wed 10 Dec 2025 10:01:01 +0000 Manifest this update: Wed 10 Dec 2025 10:01:01 +0000 Manifest next update: Thu 11 Dec 2025 10:01:01 +0000 Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=) 2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: Hyuix5cYMMIHCxq6o+cJ5IulMtVHV1fNxCGox8cra+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:00:72:86:83:d4:3d:d3:21:26:49:28:33:ad:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a Validity Not Before: Dec 10 10:01:01 2025 GMT Not After : Dec 11 10:01:01 2025 GMT Subject: CN=ba219f0ad7411fbffe42ea8c94521a302ada3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:ad:53:91:49:41:98:06:0a:5c:bc:54:9b: 6e:68:5d:b6:33:df:c5:cb:c3:60:e5:75:86:03:a4: e9:6d:7d:14:37:46:3a:e1:32:fa:f8:eb:cd:ac:8f: 50:bf:ac:30:3e:3b:d1:f7:21:66:0a:d6:2f:53:12: fc:ab:7b:94:88:f7:e0:33:fb:ab:7f:ca:20:79:94: 30:0b:90:76:2f:5a:58:b8:7f:f6:74:2a:b7:cb:dc: c2:81:89:a2:cd:4c:c4:cf:d7:45:0d:91:27:b8:bb: 37:77:b1:65:5a:39:84:bb:f8:33:67:93:7c:88:05: 04:75:bf:5e:11:99:16:25:f6:2e:cc:71:4f:6a:f7: 1c:72:c9:90:26:28:e1:30:35:79:8d:e0:76:12:0c: d1:c3:d0:c0:e2:88:b5:ec:c7:04:58:e9:b7:2a:71: f6:12:7a:c9:55:f6:81:54:13:98:21:36:be:27:33: c6:7c:f8:f4:b9:27:cd:47:1c:e1:8a:34:84:53:6b: 57:43:58:1c:ce:49:ac:02:7e:b4:19:be:f8:0b:1c: f8:2c:41:a8:99:4a:a1:99:36:1b:15:b9:f5:a4:5d: a8:49:8d:d9:b0:1a:0e:e0:69:14:a4:8b:f0:9b:36: 48:aa:b9:9b:1a:46:ef:2e:76:6f:71:71:49:a2:d7: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:9F:0A:D7:41:1F:BF:FE:42:EA:8C:94:52:1A:30:2A:DA:31:65 X509v3 Authority Key Identifier: keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:f9:50:6b:2e:4c:66:e1:25:bd:c5:54:63:59:36:fd:85:d2: 34:92:f7:1b:e9:a0:e5:13:94:df:ef:f3:a9:84:5a:23:c0:d1: a3:c5:25:13:48:93:94:a4:34:56:d7:c5:3c:1a:06:87:1e:de: 4b:f4:3c:60:00:8a:69:a3:1c:47:a1:ff:99:9d:7c:38:b2:d1: 04:73:52:91:88:ef:ca:4c:96:32:7f:dc:a0:6d:83:80:7e:76: 4e:44:ca:d6:66:4a:a9:31:e0:ea:cc:a0:ce:af:6d:97:51:4e: 02:39:03:43:fa:ff:4a:11:6a:18:63:5b:d9:3b:8b:a9:fb:ef: 68:db:49:a7:e6:fb:26:b0:6e:9d:32:1a:67:fe:b1:ad:7c:53: c4:3c:51:88:f2:9c:b2:37:b2:1c:9e:8d:a5:b6:25:4c:64:df: 1f:4c:05:80:1d:e6:92:a5:92:20:01:98:de:3d:7a:bc:27:14: 5c:d0:b1:75:2f:20:03:4f:bf:d0:94:3b:e8:13:7b:de:d3:d3: 4d:3c:1d:d8:1d:75:37:0a:47:60:3c:85:95:5a:1c:de:bf:48: d0:94:bd:c7:45:56:c9:19:16:43:d2:c8:6e:46:fa:78:3b:8c: bb:7f:d9:c1:d0:0c:95:f1:ad:28:f7:2f:72:ae:3a:e8:34:eb: 44:2c:74:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtQByhoPUPdMhJkkoM61SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm Y2Q4NWEwHhcNMjUxMjEwMTAwMTAxWhcNMjUxMjExMTAwMTAxWjAzMTEwLwYDVQQD EyhiYTIxOWYwYWQ3NDExZmJmZmU0MmVhOGM5NDUyMWEzMDJhZGEzMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9etU5FJQZgGCly8VJtuaF22M9/F y8Ng5XWGA6TpbX0UN0Y64TL6+OvNrI9Qv6wwPjvR9yFmCtYvUxL8q3uUiPfgM/ur f8ogeZQwC5B2L1pYuH/2dCq3y9zCgYmizUzEz9dFDZEnuLs3d7FlWjmEu/gzZ5N8 iAUEdb9eEZkWJfYuzHFPavcccsmQJijhMDV5jeB2EgzRw9DA4oi17McEWOm3KnH2 EnrJVfaBVBOYITa+JzPGfPj0uSfNRxzhijSEU2tXQ1gczkmsAn60Gb74Cxz4LEGo mUqhmTYbFbn1pF2oSY3ZsBoO4GkUpIvwmzZIqrmbGkbvLnZvcXFJotfDRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLohnwrXQR+//kLqjJRSGjAq2jFlMB8GA1UdIwQY MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOflQay5M ZuElvcVUY1k2/YXSNJL3G+mg5ROU3+/zqYRaI8DRo8UlE0iTlKQ0VtfFPBoGhx7e S/Q8YACKaaMcR6H/mZ18OLLRBHNSkYjvykyWMn/coG2DgH52TkTK1mZKqTHg6syg zq9tl1FOAjkDQ/r/ShFqGGNb2TuLqfvvaNtJp+b7JrBunTIaZ/6xrXxTxDxRiPKc sjeyHJ6NpbYlTGTfH0wFgB3mkqWSIAGY3j16vCcUXNCxdS8gA0+/0JQ76BN73tPT TTwd2B11NwpHYDyFlVoc3r9I0JS9x0VWyRkWQ9LIbkb6eDuMu3/ZwdAMlfGtKPcv cq466DTrRCx08g== -----END CERTIFICATE-----Generated at Wed Dec 10 18:02:54 2025 by rpki-client