This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json) Hash identifier: emMhIhhC83wlM2jEGMom19RbUppmWvovnKwIi5YzZBA= Subject key identifier: D0:BC:F5:E5:80:4D:73:B5:79:17:76:1C:88:76:C6:73:F6:DF:F6:81 Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019B2B8A628BDD40D95D654D823618CD92D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 09:00:47 +0000 Manifest this update: Wed 17 Dec 2025 09:00:47 +0000 Manifest next update: Thu 18 Dec 2025 09:00:47 +0000 Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=) 2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=) 3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=) 4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=) 5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: QQIBqUCZ4MpF/374wvyNuPEp0l+2oUTbjc9UZwQpNmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:62:8b:dd:40:d9:5d:65:4d:82:36:18:cd:92:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Dec 17 09:00:47 2025 GMT Not After : Dec 18 09:00:47 2025 GMT Subject: CN=d0bcf5e5804d73b57917761c8876c673f6dff681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:2a:bb:3b:56:02:90:da:e0:77:75:94:98: 16:5a:51:d9:1e:6e:9b:d1:48:db:63:b3:f7:18:50: 78:bb:14:ad:20:7c:01:b8:c3:85:70:a7:d7:bb:a3: 83:07:40:60:2f:b5:df:57:dd:0c:ae:56:6f:05:24: d5:d0:7c:ec:76:76:60:b3:6c:89:68:fb:d3:5f:bd: e7:f0:4b:c1:40:3c:98:72:df:de:64:1b:fc:86:45: 67:80:80:61:1c:fe:18:98:d6:e2:fb:4c:b4:f2:a1: f4:a1:6c:ce:c4:0a:a9:23:f4:6d:54:c1:59:92:c7: f4:c1:e8:2d:52:8a:6b:9b:f4:d4:39:fd:02:c9:2d: 6e:2f:11:eb:88:fb:c4:e9:fe:22:6b:c7:d3:7e:19: d9:7f:f1:69:85:a9:eb:37:11:0b:f4:e8:d9:ea:95: ce:fa:2f:69:83:a7:76:dc:80:68:e6:70:f2:18:6e: 94:96:da:f3:59:f8:fe:62:74:72:bc:5b:31:fb:09: 8c:d5:82:3c:70:29:d3:b5:9e:c8:d5:94:a1:1a:c7: d4:33:16:3e:41:96:58:d3:cb:bc:4b:7a:5d:c2:44: 99:35:2c:e0:c8:db:b3:cc:5c:8f:e4:c9:55:8c:e6: aa:80:ec:5a:57:b4:3b:2e:c7:85:b3:04:4a:cc:b9: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BC:F5:E5:80:4D:73:B5:79:17:76:1C:88:76:C6:73:F6:DF:F6:81 X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:77:9d:f0:41:81:43:dc:11:46:f4:5c:a9:ec:54:ef:02:2a: 71:c5:99:3f:c3:2f:b1:22:1a:78:06:99:fa:28:43:aa:23:57: 99:8b:fb:83:27:a5:b1:e9:50:c1:ae:59:ce:54:4b:1f:21:9a: b8:70:62:9b:ef:f5:9c:c4:0b:5a:ac:87:f9:f0:15:2c:2d:cb: db:65:65:2c:c2:9d:dd:04:b7:94:0b:d1:c9:26:b5:d4:ca:e9: 6d:b9:00:87:da:6a:5f:19:8f:ef:c5:19:6b:0e:0e:6d:44:7a: 6e:ff:c2:d6:76:9a:91:41:ee:df:df:7a:f0:0d:4a:e0:ca:b0: a2:bd:82:f4:60:fe:04:c9:5d:dc:25:ff:e9:99:02:65:61:6c: 67:08:e8:19:df:7b:3f:b5:52:d8:a7:97:93:c2:63:ce:0c:12: 76:f2:19:22:59:2b:eb:de:20:96:80:79:5c:b7:e4:33:66:31: c7:a4:5d:0a:0a:74:c2:3c:e4:11:8f:9c:0b:0f:d5:45:d7:f4: 45:ce:52:58:43:ee:33:59:41:93:f8:de:d4:f1:3e:c6:f3:7b: ad:1e:87:0f:d8:01:a5:ee:5c:f9:0c:4d:12:32:84:94:3e:8b: 85:6e:d1:a1:3c:96:7d:22:66:b7:88:a5:a0:ea:c4:69:40:b6: 34:56:0e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrimKL3UDZXWVNgjYYzZLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjUxMjE3MDkwMDQ3WhcNMjUxMjE4MDkwMDQ3WjAzMTEwLwYDVQQD EyhkMGJjZjVlNTgwNGQ3M2I1NzkxNzc2MWM4ODc2YzY3M2Y2ZGZmNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx34quztWApDa4Hd1lJgWWlHZHm6b 0UjbY7P3GFB4uxStIHwBuMOFcKfXu6ODB0BgL7XfV90MrlZvBSTV0HzsdnZgs2yJ aPvTX73n8EvBQDyYct/eZBv8hkVngIBhHP4YmNbi+0y08qH0oWzOxAqpI/RtVMFZ ksf0wegtUoprm/TUOf0CyS1uLxHriPvE6f4ia8fTfhnZf/FphanrNxEL9OjZ6pXO +i9pg6d23IBo5nDyGG6UltrzWfj+YnRyvFsx+wmM1YI8cCnTtZ7I1ZShGsfUMxY+ QZZY08u8S3pdwkSZNSzgyNuzzFyP5MlVjOaqgOxaV7Q7LseFswRKzLnwBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC89eWATXO1eRd2HIh2xnP23/aBMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXed8EGB Q9wRRvRcqexU7wIqccWZP8MvsSIaeAaZ+ihDqiNXmYv7gyelselQwa5ZzlRLHyGa uHBim+/1nMQLWqyH+fAVLC3L22VlLMKd3QS3lAvRySa11MrpbbkAh9pqXxmP78UZ aw4ObUR6bv/C1naakUHu39968A1K4Mqwor2C9GD+BMld3CX/6ZkCZWFsZwjoGd97 P7VS2KeXk8JjzgwSdvIZIlkr694gloB5XLfkM2Yxx6RdCgp0wjzkEY+cCw/VRdf0 Rc5SWEPuM1lBk/je1PE+xvN7rR6HD9gBpe5c+QxNEjKElD6LhW7RoTyWfSJmt4il oOrEaUC2NFYOsw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:50:09 2025 by rpki-client