This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json) Hash identifier: buaQiPu+jzE4MXUWd1QXVVdAbWUjdjjZvHNQsDpDYvM= Subject key identifier: 48:9F:26:8F:BA:C5:D4:7A:ED:DA:2F:4B:34:7A:C1:A9:ED:7F:49:CA Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019AF19B2B332B708BC187356AF5F08DBB52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=) 2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=) 3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=) 4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=) 5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: L4oug9WndkHdvWyCimvc0EZpVHXzja9JA3BUwmeg3Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2b:33:2b:70:8b:c1:87:35:6a:f5:f0:8d:bb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=489f268fbac5d47aedda2f4b347ac1a9ed7f49ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:fb:03:eb:80:72:bb:57:96:14:95:d4:3a: db:56:44:a9:a7:8d:e7:64:a1:97:3f:55:b2:35:e1: f3:53:ae:be:d2:b9:da:41:35:77:cd:ef:dd:0e:b0: 34:10:0b:ba:d5:09:fa:1e:33:b9:aa:d8:9c:18:0f: 53:41:46:9f:4b:81:ab:cd:aa:8a:dd:f5:b7:46:8b: 4a:69:b0:5e:14:e7:e4:e1:59:c1:78:b4:35:87:8f: 69:1d:a2:26:af:d6:25:9e:77:e6:87:77:a4:2f:be: b4:4f:cc:07:7d:22:d4:d9:62:f3:d6:32:49:fb:7b: 78:4d:c5:ae:95:45:69:cd:63:7e:c9:70:cb:3a:ee: f8:bb:f0:a0:d3:7e:b6:b3:05:d5:ea:98:9f:1b:3d: ca:09:a2:0f:ff:2a:4c:a4:92:36:b5:6f:6b:f6:33: f1:e3:c3:ca:06:72:d5:8c:b2:b0:ac:48:58:6c:d4: 8c:c0:7f:19:15:4d:64:99:62:83:ee:14:e8:9d:b8: a9:3f:76:79:2a:59:ac:65:24:71:5b:51:1a:84:7e: db:98:d2:8e:71:f8:7c:29:ab:55:96:98:68:1f:61: 0b:2a:f2:8b:69:b9:eb:b8:f5:64:76:7c:ec:0e:b0: c4:3d:1a:6c:65:3e:e2:0a:f2:ef:d9:8b:96:6e:6e: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:26:8F:BA:C5:D4:7A:ED:DA:2F:4B:34:7A:C1:A9:ED:7F:49:CA X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:af:80:12:d4:15:41:66:9c:a7:b5:e6:68:62:54:03:06:ad: 2d:1d:31:da:fe:e7:b5:85:4e:77:8b:0f:41:e8:04:9d:09:53: 4f:0e:62:d2:58:49:d5:86:f3:62:1e:02:a5:59:49:2f:d8:b6: af:5e:89:97:33:7d:81:f5:66:b1:26:17:9f:88:72:b1:a7:30: 66:7a:49:21:a9:a4:30:cf:4f:bc:bb:ad:f6:12:87:60:46:17: 6b:28:9c:de:fe:28:00:99:83:58:09:5c:3c:c9:b3:e6:38:48: 55:d8:f6:b5:16:36:75:f7:54:da:c3:52:e1:cc:2c:b4:8b:a8: ee:b7:35:28:32:88:97:81:37:e6:4d:78:ee:45:83:a5:d3:17: 0b:3b:0a:2b:bf:6a:1b:35:51:17:fc:50:ad:26:5a:f2:9b:c9: 33:5f:d5:a3:29:5a:16:38:b8:41:61:73:a4:36:61:66:0a:18: 50:ff:40:6d:c7:01:78:74:27:20:91:78:cd:68:f2:ba:91:82: a2:9c:81:da:70:8b:c3:ee:f9:52:7c:27:fc:21:33:04:a4:99: 38:f0:41:95:23:44:c0:f2:0d:b7:72:7b:fe:0a:11:10:81:63: 95:f1:cb:04:96:7b:45:70:b3:d6:e8:4a:1b:0f:00:19:59:34: 47:39:01:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyszK3CLwYc1avXwjbtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD Eyg0ODlmMjY4ZmJhYzVkNDdhZWRkYTJmNGIzNDdhYzFhOWVkN2Y0OWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssz7A+uAcrtXlhSV1DrbVkSpp43n ZKGXP1WyNeHzU66+0rnaQTV3ze/dDrA0EAu61Qn6HjO5qticGA9TQUafS4GrzaqK 3fW3RotKabBeFOfk4VnBeLQ1h49pHaImr9Ylnnfmh3ekL760T8wHfSLU2WLz1jJJ +3t4TcWulUVpzWN+yXDLOu74u/Cg0362swXV6pifGz3KCaIP/ypMpJI2tW9r9jPx 48PKBnLVjLKwrEhYbNSMwH8ZFU1kmWKD7hTonbipP3Z5KlmsZSRxW1EahH7bmNKO cfh8KatVlphoH2ELKvKLabnruPVkdnzsDrDEPRpsZT7iCvLv2YuWbm7RzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEifJo+6xdR67dovSzR6wantf0nKMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK+AEtQV QWacp7XmaGJUAwatLR0x2v7ntYVOd4sPQegEnQlTTw5i0lhJ1YbzYh4CpVlJL9i2 r16JlzN9gfVmsSYXn4hysacwZnpJIamkMM9PvLut9hKHYEYXayic3v4oAJmDWAlc PMmz5jhIVdj2tRY2dfdU2sNS4cwstIuo7rc1KDKIl4E35k147kWDpdMXCzsKK79q GzVRF/xQrSZa8pvJM1/VoylaFji4QWFzpDZhZgoYUP9AbccBeHQnIJF4zWjyupGC opyB2nCLw+75Unwn/CEzBKSZOPBBlSNEwPINt3J7/goREIFjlfHLBJZ7RXCz1uhK Gw8AGVk0RzkBSg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:48 2025 by rpki-client