This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json) Hash identifier: N0VpgmM7zQ+IqkZxpr6t9SS3kuLwsRr2Io+ziUNWMpM= Subject key identifier: 70:71:CA:BE:19:70:BE:08:E9:9F:FF:07:DD:E4:DA:4F:3F:A6:04:33 Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Certificate serial: 019B055932FB0638A06DCAB8485937453DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft Manifest number: 1078 Signing time: Tue 09 Dec 2025 23:01:30 +0000 Manifest this update: Tue 09 Dec 2025 23:01:30 +0000 Manifest next update: Wed 10 Dec 2025 23:01:30 +0000 Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=) 2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=) 3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=) 4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: KpiCM9nlC+SjG/KhwsIUMQoHSBw6ffRqQrjzv2L0LtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:59:32:fb:06:38:a0:6d:ca:b8:48:59:37:45:3d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Validity Not Before: Dec 9 23:01:30 2025 GMT Not After : Dec 10 23:01:30 2025 GMT Subject: CN=7071cabe1970be08e99fff07dde4da4f3fa60433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:35:36:93:4f:28:b1:75:33:9b:62:c9:24:14: 67:90:c0:26:76:db:6e:11:06:ce:88:1d:34:e2:1a: 31:89:68:be:6b:c2:db:47:f3:58:50:b8:87:8b:52: 8d:9a:55:4e:66:39:78:65:37:8e:85:0b:03:4d:fe: 3f:9e:bf:cb:3d:98:2e:e4:54:fb:5b:c7:40:28:a1: 52:04:4b:cb:20:68:69:7c:d4:66:bd:6a:5c:65:8d: 05:9f:6a:2b:c7:a3:05:33:4f:8b:49:01:3b:16:2f: f0:98:70:40:df:b5:ba:c0:5c:01:32:25:9f:b6:1a: d4:e7:19:fa:c1:f4:77:fa:a7:32:b2:40:ce:95:e5: 4e:a5:d0:59:e8:ba:53:81:0a:12:31:95:cc:74:61: f1:43:41:4c:8f:9c:f8:4c:71:58:62:34:58:a5:db: 3e:b5:12:0d:87:92:e0:90:1a:21:8b:86:06:ed:e1: 7d:39:ec:2e:35:af:10:86:47:1b:49:b0:76:dd:0d: f3:eb:d0:96:84:e4:f4:11:e0:98:08:73:6d:81:d0: 4e:7c:ae:56:0e:ac:10:bd:81:e7:c8:af:53:fc:6d: 00:8a:8e:3e:29:50:b9:b1:2e:2b:83:3d:67:e1:72: 4f:18:fd:8d:7a:7d:c8:3e:ad:cf:82:25:ca:5c:78: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:CA:BE:19:70:BE:08:E9:9F:FF:07:DD:E4:DA:4F:3F:A6:04:33 X509v3 Authority Key Identifier: keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a8:a5:fd:a2:fc:20:94:0b:95:61:3b:7f:dd:3e:cc:2b:32: 7f:1a:e7:f0:00:85:c3:28:06:ca:89:68:18:22:a2:2f:3d:95: dc:86:4a:7f:33:8f:f7:c3:f0:5c:88:81:f8:c7:5f:95:d6:89: cb:eb:96:59:ed:42:07:84:58:24:59:f9:03:99:79:0f:4c:f1: d9:c3:90:93:e9:d5:95:4b:5c:fb:b2:f7:3b:61:23:ad:94:f2: 34:70:e6:d2:c1:47:da:1a:6e:2a:0c:84:a0:14:09:2a:71:49: 85:7b:f6:ee:35:40:f4:fc:d0:c9:5d:04:7b:b0:ac:d9:14:d6: fd:b0:15:c6:75:16:a3:8e:f2:2a:a9:97:0c:60:b3:dd:f4:20: ae:71:cb:65:08:8c:f8:62:a6:b7:b0:98:33:b3:ea:8d:d2:b4: 1e:55:ec:fe:e7:f4:13:06:fd:68:b3:b8:c8:50:7e:b5:b4:0e: 9c:d5:b6:c3:79:5e:14:2d:d0:59:ed:49:12:4d:4a:2a:5b:8b: df:16:ef:35:7e:8f:74:3c:e0:b6:14:12:ef:4e:3d:8a:c4:f9: 13:97:5e:5c:dd:3f:dc:9b:64:93:d5:0d:2b:bd:c0:43:23:bc: 45:06:87:8e:dd:04:41:65:40:38:8b:89:1e:bd:f3:80:e2:85: 90:d5:6d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWTL7Bjigbcq4SFk3RT25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm Y2NkZjkwHhcNMjUxMjA5MjMwMTMwWhcNMjUxMjEwMjMwMTMwWjAzMTEwLwYDVQQD Eyg3MDcxY2FiZTE5NzBiZTA4ZTk5ZmZmMDdkZGU0ZGE0ZjNmYTYwNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jU2k08osXUzm2LJJBRnkMAmdttu EQbOiB004hoxiWi+a8LbR/NYULiHi1KNmlVOZjl4ZTeOhQsDTf4/nr/LPZgu5FT7 W8dAKKFSBEvLIGhpfNRmvWpcZY0Fn2orx6MFM0+LSQE7Fi/wmHBA37W6wFwBMiWf thrU5xn6wfR3+qcyskDOleVOpdBZ6LpTgQoSMZXMdGHxQ0FMj5z4THFYYjRYpds+ tRINh5LgkBohi4YG7eF9OewuNa8QhkcbSbB23Q3z69CWhOT0EeCYCHNtgdBOfK5W DqwQvYHnyK9T/G0Aio4+KVC5sS4rgz1n4XJPGP2Nen3IPq3PgiXKXHicJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBxyr4ZcL4I6Z//B93k2k8/pgQzMB8GA1UdIwQY MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3 LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqil/aL8 IJQLlWE7f90+zCsyfxrn8ACFwygGyoloGCKiLz2V3IZKfzOP98PwXIiB+MdfldaJ y+uWWe1CB4RYJFn5A5l5D0zx2cOQk+nVlUtc+7L3O2EjrZTyNHDm0sFH2hpuKgyE oBQJKnFJhXv27jVA9PzQyV0Ee7Cs2RTW/bAVxnUWo47yKqmXDGCz3fQgrnHLZQiM +GKmt7CYM7PqjdK0HlXs/uf0Ewb9aLO4yFB+tbQOnNW2w3leFC3QWe1JEk1KKluL 3xbvNX6PdDzgthQS7049isT5E5deXN0/3Jtkk9UNK73AQyO8RQaHjt0EQWVAOIuJ Hr3zgOKFkNVttA== -----END CERTIFICATE-----Generated at Wed Dec 10 04:57:32 2025 by rpki-client