This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json) Hash identifier: h7a+lMTWSl0oJP5gJwNgt3yOqNKeZrpDwOmFFiRYE1M= Subject key identifier: F1:12:C2:E9:DC:5B:CE:AC:70:30:55:54:C5:C8:D7:3B:27:14:2E:C8 Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Certificate serial: 019AF540A9FC343EB08EF74C8631FF18602F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft Manifest number: 1732 Signing time: Sat 06 Dec 2025 20:00:46 +0000 Manifest this update: Sat 06 Dec 2025 20:00:46 +0000 Manifest next update: Sun 07 Dec 2025 20:00:46 +0000 Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: Ig9sZnOoMxa+rP2w/v69lpSPzLUPRlLlJXe5guqZS+g=) 2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:a9:fc:34:3e:b0:8e:f7:4c:86:31:ff:18:60:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e Validity Not Before: Dec 6 20:00:46 2025 GMT Not After : Dec 7 20:00:46 2025 GMT Subject: CN=f112c2e9dc5bceac70305554c5c8d73b27142ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:44:16:2d:44:b4:81:46:65:6b:3b:8a:9f: 11:f2:fc:fb:2d:fd:e0:46:20:c0:be:d2:c6:97:1b: 9f:39:3e:81:ba:c9:8e:26:4c:06:10:6f:ae:0f:6f: 62:2c:7b:92:93:ab:09:c1:17:81:5f:1f:fd:8a:13: bc:ab:94:26:81:03:fe:3e:77:d3:be:09:43:14:e5: c8:70:c4:41:2d:43:a0:8f:85:f0:7c:74:e8:47:b8: bc:b3:78:0c:e3:be:c0:3e:10:6f:38:96:eb:ae:19: c4:dd:ce:51:16:26:6a:57:2e:ba:4b:9f:79:b8:3e: 59:4b:8f:7e:b8:62:51:8e:de:2a:a4:03:6b:fa:67: b0:4a:33:35:2d:8d:75:01:ec:66:28:fb:20:ba:8d: 04:cd:b0:d9:1a:f6:e8:8f:f7:0a:c4:ec:5b:7d:3e: 3e:c6:8f:f6:38:68:79:fa:63:41:f1:a5:bd:8e:66: ba:ac:65:ce:9b:fb:de:a3:ba:93:f6:a6:cf:33:b1: 6d:4c:8a:ab:83:2d:ba:d3:de:84:f1:e5:5c:3b:34: c4:56:98:fe:d7:68:86:cd:dc:5c:74:e1:1c:b8:6f: 8b:86:b4:93:d2:a8:37:79:d3:53:96:46:f7:4b:86: ec:6e:2b:b1:a5:ff:c1:f9:2b:98:b5:d7:2f:05:6b: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:12:C2:E9:DC:5B:CE:AC:70:30:55:54:C5:C8:D7:3B:27:14:2E:C8 X509v3 Authority Key Identifier: keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:95:c9:1b:73:4f:80:d6:38:ad:7f:a6:cf:ab:f0:20:e7:c5: 3b:ca:4f:c4:c9:41:85:45:4f:fa:b4:a9:67:ab:dc:c6:8d:54: b4:5a:6e:90:1b:65:12:c5:8d:65:3d:b4:5c:5b:94:33:95:2c: 46:03:e3:b5:bc:2f:15:37:76:7a:88:d7:78:1e:be:bd:9a:aa: ff:d7:e2:a1:a9:2c:a0:4c:43:9e:eb:37:a5:37:44:b1:9b:20: 51:83:2d:18:25:a9:ba:5d:f3:35:13:de:20:63:83:d4:d6:25: a7:52:e5:4e:51:98:b9:cb:36:08:b7:09:ca:5d:83:3c:da:22: 94:6f:5a:ee:77:aa:18:28:e7:44:7e:44:b4:c4:2b:97:5a:c7: d7:68:4e:df:13:be:94:db:a7:c9:15:c6:41:6d:2b:0c:1b:8e: 14:24:af:a9:e7:84:b0:54:02:6d:15:25:84:15:54:ba:31:e3: ad:8b:8b:d7:fd:cc:cd:3c:9f:79:60:1d:e1:5f:40:98:03:c7: f0:3e:d1:26:49:4a:2a:58:67:29:b0:15:2a:bb:6a:d9:e7:d9: ec:4b:bf:8f:32:a7:7e:44:5f:35:39:93:d7:c1:ee:c8:0f:03: c5:52:dd:d4:69:b8:37:1e:64:bf:8c:cd:c9:b0:bd:01:a6:e0: 9d:ff:95:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QKn8ND6wjvdMhjH/GGAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5 NDhiM2UwHhcNMjUxMjA2MjAwMDQ2WhcNMjUxMjA3MjAwMDQ2WjAzMTEwLwYDVQQD EyhmMTEyYzJlOWRjNWJjZWFjNzAzMDU1NTRjNWM4ZDczYjI3MTQyZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPBEFi1EtIFGZWs7ip8R8vz7Lf3g RiDAvtLGlxufOT6BusmOJkwGEG+uD29iLHuSk6sJwReBXx/9ihO8q5QmgQP+PnfT vglDFOXIcMRBLUOgj4XwfHToR7i8s3gM477APhBvOJbrrhnE3c5RFiZqVy66S595 uD5ZS49+uGJRjt4qpANr+mewSjM1LY11AexmKPsguo0EzbDZGvboj/cKxOxbfT4+ xo/2OGh5+mNB8aW9jma6rGXOm/veo7qT9qbPM7FtTIqrgy26096E8eVcOzTEVpj+ 12iGzdxcdOEcuG+LhrST0qg3edNTlkb3S4bsbiuxpf/B+SuYtdcvBWvQMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPESwuncW86scDBVVMXI1zsnFC7IMB8GA1UdIwQY MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZXJG3NP gNY4rX+mz6vwIOfFO8pPxMlBhUVP+rSpZ6vcxo1UtFpukBtlEsWNZT20XFuUM5Us RgPjtbwvFTd2eojXeB6+vZqq/9fioaksoExDnus3pTdEsZsgUYMtGCWpul3zNRPe IGOD1NYlp1LlTlGYucs2CLcJyl2DPNoilG9a7neqGCjnRH5EtMQrl1rH12hO3xO+ lNunyRXGQW0rDBuOFCSvqeeEsFQCbRUlhBVUujHjrYuL1/3MzTyfeWAd4V9AmAPH 8D7RJklKKlhnKbAVKrtq2efZ7Eu/jzKnfkRfNTmT18HuyA8DxVLd1Gm4Nx5kv4zN ybC9Aabgnf+VYA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:16 2025 by rpki-client