This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json) Hash identifier: jZo+wq8aioN3n0hsZTmp3DPSn+StakNPO2RT3qWlzFQ= Subject key identifier: 6F:21:F9:8E:1A:16:97:19:38:F0:01:93:4A:03:91:8F:DA:46:C9:C3 Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10 Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10 Certificate serial: 019AF27655AB598672CFDCD9E008B36FAFB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft Manifest number: 106F Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=) 2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: AF+4D+K5D891RKgVQcQyqPZ1eH3B/LSsXnNf8Uw3qwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:55:ab:59:86:72:cf:dc:d9:e0:08:b3:6f:af:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=6f21f98e1a16971938f001934a03918fda46c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:b9:3a:0c:33:3f:0e:52:48:58:34:e2:dc: 6d:87:a4:7d:ea:69:1b:a1:c8:e9:51:fd:a1:fa:fd: 53:ee:43:37:de:45:6d:91:33:a4:13:ee:84:79:4d: 76:6c:c0:f9:17:d9:fb:31:59:f8:ec:22:98:b7:50: 18:79:f5:20:35:80:00:f8:c3:82:4e:e3:1e:9c:7b: cc:bb:f4:eb:86:66:05:ee:ed:17:cd:c9:12:a8:b9: 90:95:db:dc:01:55:8c:58:83:8a:e1:16:28:f1:39: f4:34:31:bf:62:50:c0:5d:f9:cb:bf:9b:58:53:48: be:0c:35:18:a4:1a:ec:b4:ca:ac:91:24:66:95:2a: 26:55:24:67:3f:23:c3:27:ec:92:ad:86:a6:1c:1e: 4a:c1:d4:35:36:52:f4:17:6e:c8:cb:52:69:af:f7: 15:75:11:1d:5a:35:ba:95:7e:03:ed:83:fe:03:5b: be:cd:50:af:66:ac:06:74:54:f1:30:20:39:0c:02: ac:03:85:8c:4f:f2:78:80:0e:18:75:6b:c4:3a:71: fe:c2:2c:37:17:bb:bb:08:11:de:13:92:9a:0d:19: bc:7a:c9:16:ce:92:a8:9f:ed:02:18:f5:b4:83:f1: ee:2a:84:9d:f2:a3:e7:0d:a6:4e:dd:d6:60:a0:0c: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:21:F9:8E:1A:16:97:19:38:F0:01:93:4A:03:91:8F:DA:46:C9:C3 X509v3 Authority Key Identifier: keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a6:8a:da:83:36:5d:a9:e5:0a:a1:f9:d1:7e:41:23:9f:7c: 82:9d:1f:32:38:44:30:07:d5:9c:05:ba:b2:10:36:97:af:77: af:51:72:03:a0:66:d6:b1:23:6a:2f:77:34:8b:3b:9a:6e:ab: 45:fe:6c:45:f7:e5:59:1f:d0:87:d1:ad:98:20:fd:d8:cb:d2: 0d:b2:8e:4a:46:be:fa:b4:e3:a8:b2:c0:23:b4:f2:bf:94:9f: 1a:8c:4e:92:e1:43:5f:87:7a:2b:db:a5:ef:87:35:d0:45:4b: 91:5d:23:5d:e6:0c:5a:43:5e:12:e0:cc:42:5e:6d:ae:67:57: b7:a3:29:8a:9b:df:65:68:85:b8:bb:e0:82:5c:2b:9a:d3:35: 5c:f5:58:b6:44:ed:94:32:3d:ad:49:0e:0c:94:77:97:5f:a7: 1c:38:32:b8:e1:8b:6b:06:9f:c8:e3:94:43:fd:9e:ab:ce:4f: 82:d1:d1:92:de:d7:e6:3a:33:c7:66:4f:40:0f:b1:14:e9:f2: c5:fc:52:13:dc:66:6d:5f:e0:b3:95:a9:0e:c1:6b:42:bd:a5: 11:fd:c6:2a:f8:ea:ff:97:d6:79:71:ac:04:f6:ca:c4:31:34: 77:73:e6:b7:77:06:c0:a5:0e:d9:b2:5a:27:2d:82:dd:7c:0e: 7e:4e:17:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlWrWYZyz9zZ4Aizb6+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4 ZTVjMTAwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD Eyg2ZjIxZjk4ZTFhMTY5NzE5MzhmMDAxOTM0YTAzOTE4ZmRhNDZjOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk65OgwzPw5SSFg04txth6R96mkb ocjpUf2h+v1T7kM33kVtkTOkE+6EeU12bMD5F9n7MVn47CKYt1AYefUgNYAA+MOC TuMenHvMu/TrhmYF7u0XzckSqLmQldvcAVWMWIOK4RYo8Tn0NDG/YlDAXfnLv5tY U0i+DDUYpBrstMqskSRmlSomVSRnPyPDJ+ySrYamHB5KwdQ1NlL0F27Iy1Jpr/cV dREdWjW6lX4D7YP+A1u+zVCvZqwGdFTxMCA5DAKsA4WMT/J4gA4YdWvEOnH+wiw3 F7u7CBHeE5KaDRm8eskWzpKon+0CGPW0g/HuKoSd8qPnDaZO3dZgoAy21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8h+Y4aFpcZOPABk0oDkY/aRsnDMB8GA1UdIwQY MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt OTlkNzI1MmY1YmUwLzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqaK2oM2 XanlCqH50X5BI598gp0fMjhEMAfVnAW6shA2l693r1FyA6Bm1rEjai93NIs7mm6r Rf5sRfflWR/Qh9GtmCD92MvSDbKOSka++rTjqLLAI7Tyv5SfGoxOkuFDX4d6K9ul 74c10EVLkV0jXeYMWkNeEuDMQl5trmdXt6MpipvfZWiFuLvgglwrmtM1XPVYtkTt lDI9rUkODJR3l1+nHDgyuOGLawafyOOUQ/2eq85PgtHRkt7X5jozx2ZPQA+xFOny xfxSE9xmbV/gs5WpDsFrQr2lEf3GKvjq/5fWeXGsBPbKxDE0d3Pmt3cGwKUO2bJa Jy2C3XwOfk4XAw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:00 2025 by rpki-client