This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json) Hash identifier: tj9I86TJxwg09a6JmogGN4r2+2Q9Ep+SrusqC7ZEPWE= Subject key identifier: 13:A0:AB:D1:E6:87:A1:57:69:56:97:73:E4:21:EB:D8:7B:53:20:F7 Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520 Certificate serial: 019B1ACDB02CE340131F14C65B841EC51CAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 03:00:46 +0000 Manifest this update: Sun 14 Dec 2025 03:00:46 +0000 Manifest next update: Mon 15 Dec 2025 03:00:46 +0000 Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=) 2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=) 3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: DsFDKtPUzYV/gcERJNFmBN+446oeoCWfeRLBO2P/n8U=) 4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:b0:2c:e3:40:13:1f:14:c6:5b:84:1e:c5:1c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520 Validity Not Before: Dec 14 03:00:46 2025 GMT Not After : Dec 15 03:00:46 2025 GMT Subject: CN=13a0abd1e687a15769569773e421ebd87b5320f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:8b:1f:ed:91:74:b0:01:64:52:12:bb:c7: ed:71:ac:8f:d4:47:14:e7:6e:08:72:72:c6:95:8d: b7:07:c1:e7:01:d5:36:2c:a9:ca:c1:3b:10:78:55: eb:a8:05:b0:54:b5:c3:12:95:7c:ed:22:e3:41:1f: 26:de:d3:1d:ce:2d:be:4b:2a:fe:08:f9:c1:e7:85: 21:bc:d8:c6:5b:bb:44:bc:75:bb:95:54:90:9b:e5: ba:96:74:c4:61:e6:32:2f:a3:80:6d:a4:41:04:b5: 49:fa:2e:55:d0:fd:f7:47:c8:14:26:6b:25:af:67: 8f:08:fd:1c:6c:f7:43:75:e5:6c:ae:e2:c8:23:bc: e3:43:45:5f:a0:80:79:bf:87:75:fd:fa:40:36:c7: eb:eb:ea:31:43:4f:c7:a5:e5:1b:47:e5:ac:08:c2: 27:6f:25:99:6f:90:4e:4c:d8:af:dc:49:ee:68:3f: c0:2d:fd:51:7a:40:91:90:56:91:15:c8:d8:45:23: 9c:55:5e:6b:20:6e:23:9c:4b:d3:8d:5c:06:16:3f: 27:1b:7a:6d:67:10:62:45:39:3f:fe:b2:dd:e3:16: 23:c5:32:0c:3b:91:f7:5e:30:52:8b:61:7b:0a:20: b6:f0:43:22:57:01:d4:3c:1e:ed:aa:30:7d:8b:d0: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A0:AB:D1:E6:87:A1:57:69:56:97:73:E4:21:EB:D8:7B:53:20:F7 X509v3 Authority Key Identifier: keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1a:d7:67:62:88:7d:ff:67:84:ef:1e:89:48:c8:55:c9:4b: cf:85:78:42:b2:32:a8:49:6e:e4:50:b4:b6:83:aa:fd:18:ce: a9:99:0b:f3:0f:ce:3d:f6:ad:c3:3a:62:c9:2d:22:c2:d8:b7: 42:99:5b:8e:87:52:ae:ef:17:3e:79:16:d4:09:f6:87:71:c3: 60:04:bb:fd:1a:d8:71:15:f2:9a:4c:8e:cb:2c:50:71:87:83: 3c:e2:e9:fa:72:6a:6c:fe:e6:8f:01:a6:e1:c7:dd:c6:c4:12: ec:d0:cf:c3:cd:bf:80:d7:ac:50:8e:e7:9c:7a:c2:ea:3c:49: 9a:94:85:20:f2:7d:00:5f:9d:20:d4:00:7b:2d:08:63:e5:39: b8:12:7f:f2:4f:ff:59:fa:3f:f1:51:59:71:6a:59:67:dc:20: 86:ad:fd:a9:10:c0:8e:96:0d:b2:4b:13:9c:e0:84:05:ca:21: 11:dd:72:e9:e6:6e:79:cf:74:96:4c:ca:1d:30:52:ef:3a:79: 38:0f:93:48:67:91:02:cc:ae:51:f7:04:98:0e:4f:56:9d:d8: a9:6c:c6:4d:db:29:e0:7b:0c:b6:31:72:0d:2e:56:30:fd:c8: 59:75:34:9f:c7:82:41:14:af:ee:cf:f8:79:a2:a0:e9:f2:a9: 85:fd:58:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazbAs40ATHxTGW4QexRysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx MDI1MjAwHhcNMjUxMjE0MDMwMDQ2WhcNMjUxMjE1MDMwMDQ2WjAzMTEwLwYDVQQD EygxM2EwYWJkMWU2ODdhMTU3Njk1Njk3NzNlNDIxZWJkODdiNTMyMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSiLH+2RdLABZFISu8ftcayP1EcU 524IcnLGlY23B8HnAdU2LKnKwTsQeFXrqAWwVLXDEpV87SLjQR8m3tMdzi2+Syr+ CPnB54UhvNjGW7tEvHW7lVSQm+W6lnTEYeYyL6OAbaRBBLVJ+i5V0P33R8gUJmsl r2ePCP0cbPdDdeVsruLII7zjQ0VfoIB5v4d1/fpANsfr6+oxQ0/HpeUbR+WsCMIn byWZb5BOTNiv3EnuaD/ALf1RekCRkFaRFcjYRSOcVV5rIG4jnEvTjVwGFj8nG3pt ZxBiRTk//rLd4xYjxTIMO5H3XjBSi2F7CiC28EMiVwHUPB7tqjB9i9BsJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOgq9Hmh6FXaVaXc+Qh69h7UyD3MB8GA1UdIwQY MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt MGE3OWQ1NDk2NWE5LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5 LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBrXZ2KI ff9nhO8eiUjIVclLz4V4QrIyqElu5FC0toOq/RjOqZkL8w/OPfatwzpiyS0iwti3 QplbjodSru8XPnkW1An2h3HDYAS7/RrYcRXymkyOyyxQcYeDPOLp+nJqbP7mjwGm 4cfdxsQS7NDPw82/gNesUI7nnHrC6jxJmpSFIPJ9AF+dINQAey0IY+U5uBJ/8k// Wfo/8VFZcWpZZ9wghq39qRDAjpYNsksTnOCEBcohEd1y6eZuec90lkzKHTBS7zp5 OA+TSGeRAsyuUfcEmA5PVp3YqWzGTdsp4HsMtjFyDS5WMP3IWXU0n8eCQRSv7s/4 eaKg6fKphf1YiQ== -----END CERTIFICATE-----Generated at Sun Dec 14 05:28:14 2025 by rpki-client