This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json) Hash identifier: BbAj2b4Cz2tirvm7BW0DguCYUO8G9fNrOP8dfZAgyxg= Subject key identifier: F1:18:85:CB:D1:80:44:09:97:23:7B:EA:7C:4E:52:42:A8:98:91:2C Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00 Certificate issuer: /CN=846d45225cf0d4fa9c65aee88861d2261203ad00 Certificate serial: 019B3B6B5CB45A4085A32C7EB2CAD8BF926C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft Manifest number: 1222 Signing time: Sat 20 Dec 2025 11:00:50 +0000 Manifest this update: Sat 20 Dec 2025 11:00:50 +0000 Manifest next update: Sun 21 Dec 2025 11:00:50 +0000 Files and hashes: 1: XLQfftOCYwZhCKWBFvPgcWtM3ng.roa (hash: e5IwRRubP2iih1RAenDvyf84x82YlIWC8mC3l2YoKV8=) 2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: yu8ERzjpSWYYg7R//75RzyatAFuo6z2/6IdfG5z04oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:5c:b4:5a:40:85:a3:2c:7e:b2:ca:d8:bf:92:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00 Validity Not Before: Dec 20 11:00:50 2025 GMT Not After : Dec 21 11:00:50 2025 GMT Subject: CN=f11885cbd180440997237bea7c4e5242a898912c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:d8:9e:67:ab:6a:5a:bb:47:d4:ca:60:b6: 7e:57:51:ab:eb:75:55:14:c0:16:1f:59:c2:bb:dc: 10:66:60:7c:b4:16:3c:72:a7:43:f7:24:fd:93:35: 08:73:4d:e4:7c:93:6a:d8:1b:ef:74:37:12:cd:a3: f2:dd:0f:a4:32:f4:97:3b:23:67:f8:9a:e7:82:9a: e7:14:4d:48:2c:a4:22:aa:f2:ba:16:4a:85:3d:7d: cf:13:39:47:67:da:68:81:97:39:3b:83:41:c4:c3: d6:67:20:70:64:f1:7b:9f:36:41:cb:70:5d:5e:19: 49:8f:e8:8b:85:bb:2f:34:94:32:de:cc:45:c3:0a: e8:64:6a:bd:e4:c9:4d:57:32:f2:7c:8a:7d:68:6a: 83:98:00:ac:65:08:14:ff:e8:61:5c:dc:7d:b9:62: 00:2d:ca:04:99:2b:71:d7:3c:48:7d:4c:45:d3:57: b7:be:7f:c5:9d:a2:a1:3c:5c:44:42:79:ad:30:2c: 8e:2c:b1:44:d0:86:88:e3:50:be:e4:eb:6e:65:8c: 44:60:d7:a8:da:a4:90:b8:78:8f:da:a0:1b:2f:0c: 37:ec:96:61:89:44:3f:b7:c7:7c:7e:a4:17:ba:8f: 04:66:11:4e:2e:a2:21:d2:d8:a2:49:f8:39:4a:4a: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:18:85:CB:D1:80:44:09:97:23:7B:EA:7C:4E:52:42:A8:98:91:2C X509v3 Authority Key Identifier: keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:39:50:98:fa:38:d9:95:37:90:fc:1d:16:e7:f1:94:51:c5: 70:97:2b:54:c1:db:2e:ff:53:c4:2a:1e:f5:da:49:48:18:5e: 35:54:9c:e2:6e:89:43:f8:04:ba:9c:1c:b9:e9:ae:bf:be:a8: 3a:f7:a6:aa:f4:52:99:cc:95:fb:8e:0d:96:51:32:3d:cc:d3: e1:5a:ee:91:28:b2:ab:93:4a:f3:49:d4:d6:ff:1e:4b:44:a3: 5c:4b:b2:4a:d6:ec:c3:49:2d:e1:7f:9c:4e:fb:24:d7:ff:20: 9a:bb:59:66:aa:f5:de:c8:b8:05:c7:23:21:9f:62:f8:f9:12: 18:ac:0a:b1:5e:98:5a:95:7c:98:32:00:e0:df:a5:af:ac:9c: 13:57:7b:8b:8b:95:4c:bd:f9:0f:8a:44:b4:e7:b8:b9:ef:8b: fc:a1:47:76:39:85:86:a4:cf:47:f3:56:e6:6b:84:58:0d:b7: 1b:f4:5e:70:60:53:b3:c4:95:ea:d5:73:55:ca:6a:46:03:df: 99:88:4d:54:49:0c:27:ac:b9:6a:37:cd:fb:d6:85:60:68:30: db:fb:63:61:53:94:72:4e:08:11:bb:84:72:aa:c7:ef:a0:fa: 57:55:47:95:10:a5:52:f0:32:48:7f:4b:2a:60:d2:f0:44:7b: 87:70:16:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a1y0WkCFoyx+ssrYv5JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmQ0NTIyNWNmMGQ0ZmE5YzY1YWVlODg4NjFkMjI2MTIw M2FkMDAwHhcNMjUxMjIwMTEwMDUwWhcNMjUxMjIxMTEwMDUwWjAzMTEwLwYDVQQD EyhmMTE4ODVjYmQxODA0NDA5OTcyMzdiZWE3YzRlNTI0MmE4OTg5MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulvYnmeralq7R9TKYLZ+V1Gr63VV FMAWH1nCu9wQZmB8tBY8cqdD9yT9kzUIc03kfJNq2BvvdDcSzaPy3Q+kMvSXOyNn +JrngprnFE1ILKQiqvK6FkqFPX3PEzlHZ9pogZc5O4NBxMPWZyBwZPF7nzZBy3Bd XhlJj+iLhbsvNJQy3sxFwwroZGq95MlNVzLyfIp9aGqDmACsZQgU/+hhXNx9uWIA LcoEmStx1zxIfUxF01e3vn/FnaKhPFxEQnmtMCyOLLFE0IaI41C+5OtuZYxEYNeo 2qSQuHiP2qAbLww37JZhiUQ/t8d8fqQXuo8EZhFOLqIh0tiiSfg5SkqDOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEYhcvRgEQJlyN76nxOUkKomJEsMB8GA1UdIwQY MBaAFIRtRSJc8NT6nGWu6Ihh0iYSA60AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEcxRklsencxUHFjWmE3b2lHSFNKaElEclFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xNjNmNGItZGU1OS00ODdhLTkxMTAt NDYzNTMxMDQ2YzdmLzEvaEcxRklsencxUHFjWmE3b2lHSFNKaElEclFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8xNjNmNGItZGU1OS00ODdhLTkxMTAtNDYzNTMxMDQ2Yzdm LzEvaEcxRklsencxUHFjWmE3b2lHSFNKaElEclFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTlQmPo4 2ZU3kPwdFufxlFHFcJcrVMHbLv9TxCoe9dpJSBheNVSc4m6JQ/gEupwcuemuv76o OvemqvRSmcyV+44NllEyPczT4VrukSiyq5NK80nU1v8eS0SjXEuyStbsw0kt4X+c Tvsk1/8gmrtZZqr13si4BccjIZ9i+PkSGKwKsV6YWpV8mDIA4N+lr6ycE1d7i4uV TL35D4pEtOe4ue+L/KFHdjmFhqTPR/NW5muEWA23G/RecGBTs8SV6tVzVcpqRgPf mYhNVEkMJ6y5ajfN+9aFYGgw2/tjYVOUck4IEbuEcqrH76D6V1VHlRClUvAySH9L KmDS8ER7h3AWWg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:02:32 2025 by rpki-client