This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json) Hash identifier: W164+t38EIf5239XMk0Ih9cc5h9o/ZUG5MB+RD2aRlg= Subject key identifier: 99:D0:00:24:2F:86:46:7C:3D:27:A9:1C:38:34:83:41:8F:C2:65:13 Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Certificate serial: 019B3CEC467EB3F8293487C361061A2323EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:15 +0000 Manifest this update: Sat 20 Dec 2025 18:01:15 +0000 Manifest next update: Sun 21 Dec 2025 18:01:15 +0000 Files and hashes: 1: ejHPALN-gjmcIUS4qvI8FUQoGLs.roa (hash: t6ZQ6lviMlaQN/1zPBkaInJA/2XG79lcf/SyBOeFSW8=) 2: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: rvVOrrgV7T8/R0WNVLxrMZbrh+XskoVSDlSJ8ZR7lBo=) 3: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:46:7e:b3:f8:29:34:87:c3:61:06:1a:23:23:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Validity Not Before: Dec 20 18:01:15 2025 GMT Not After : Dec 21 18:01:15 2025 GMT Subject: CN=99d000242f86467c3d27a91c383483418fc26513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:48:ed:c5:e7:a1:1f:06:ce:5a:06:ea:9e: 3b:9f:ac:ff:66:44:00:46:75:d0:9b:7d:71:f3:0a: b5:bc:55:34:af:f7:2f:43:2e:26:b6:ae:dd:5f:eb: ea:12:a0:5c:45:f0:55:bc:ab:b0:90:9b:b8:3a:63: 70:49:46:03:a9:7e:d9:c3:be:96:47:a9:44:da:f7: fc:15:ff:fb:12:b9:46:16:4e:df:13:b5:b8:a8:02: 7c:7c:27:f0:49:03:b7:dc:21:fb:e5:d2:a9:1c:6d: 78:60:29:63:8b:35:ed:74:c0:08:f6:37:51:0d:85: ec:0c:f9:05:5d:9c:cf:6e:1d:eb:24:1d:9c:17:da: 44:ee:f9:b3:f9:35:f3:fe:ef:15:b0:e2:d7:75:ff: 45:f0:f4:fd:98:50:fb:bf:4c:7d:06:8f:5b:46:41: 0b:af:b4:e9:cc:c0:f5:82:08:5a:85:92:1c:dc:0a: 2c:4b:91:55:7f:bc:e4:95:9d:ce:bf:ba:a6:98:dc: 4c:eb:8a:52:48:71:c8:7a:04:d7:c7:f3:78:74:5c: b0:6c:89:56:d2:33:25:da:7a:be:1a:7c:1d:c9:00: 99:cd:dd:d2:0b:fd:ed:ef:54:e7:ad:93:6a:1d:74: 80:1b:f5:c3:b4:67:0f:1d:78:5b:09:47:d1:59:db: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D0:00:24:2F:86:46:7C:3D:27:A9:1C:38:34:83:41:8F:C2:65:13 X509v3 Authority Key Identifier: keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:43:a0:a2:c1:a8:e3:53:53:d5:d0:7e:11:ee:64:01:08:77: fd:6e:41:17:69:9e:1a:69:0d:9b:2b:1b:d0:ba:8c:3e:b6:54: 78:53:b2:f8:9f:af:b0:75:c4:69:a0:fb:9a:38:04:9a:ae:a3: a3:14:b1:b3:63:48:ac:ba:c3:dd:d4:b5:a2:c3:7f:94:50:1c: 4f:7b:2d:1d:bf:62:9c:53:1b:fe:5e:a8:be:b0:91:fe:f4:fe: 98:f8:b5:02:dd:91:2e:a1:65:23:e9:85:ab:7b:9d:54:b6:85: ef:ca:19:02:f4:15:81:21:d1:dc:85:df:6f:44:9b:89:a9:af: 41:83:93:8c:4d:7f:40:34:74:dc:7d:33:1f:0a:86:90:1c:68: d0:bb:c0:2b:9e:62:d9:7c:f7:9c:60:f1:24:e3:00:b2:fe:4e: d5:e3:6d:35:7d:17:ab:13:fa:43:6c:7c:66:43:80:fc:45:7c: 3e:3b:dd:ae:dc:84:3e:84:e8:cb:b0:81:3a:d8:bc:14:a3:85: 09:74:6b:d9:f0:5a:ad:37:84:41:08:6d:c7:77:39:a6:01:b1: 04:8a:2c:26:34:96:56:54:7d:f4:5f:19:56:75:15:a1:c5:2c: 03:0e:b4:cd:52:8a:39:42:6d:6e:14:cd:be:24:0b:f0:b4:4b: 94:7d:4f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87EZ+s/gpNIfDYQYaIyPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy ZThjNDcwHhcNMjUxMjIwMTgwMTE1WhcNMjUxMjIxMTgwMTE1WjAzMTEwLwYDVQQD Eyg5OWQwMDAyNDJmODY0NjdjM2QyN2E5MWMzODM0ODM0MThmYzI2NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oxI7cXnoR8GzloG6p47n6z/ZkQA RnXQm31x8wq1vFU0r/cvQy4mtq7dX+vqEqBcRfBVvKuwkJu4OmNwSUYDqX7Zw76W R6lE2vf8Ff/7ErlGFk7fE7W4qAJ8fCfwSQO33CH75dKpHG14YCljizXtdMAI9jdR DYXsDPkFXZzPbh3rJB2cF9pE7vmz+TXz/u8VsOLXdf9F8PT9mFD7v0x9Bo9bRkEL r7TpzMD1gghahZIc3AosS5FVf7zklZ3Ov7qmmNxM64pSSHHIegTXx/N4dFywbIlW 0jMl2nq+GnwdyQCZzd3SC/3t71TnrZNqHXSAG/XDtGcPHXhbCUfRWdvsDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnQACQvhkZ8PSepHDg0g0GPwmUTMB8GA1UdIwQY MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct MWJlNjljYTM5M2JhLzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0OgosGo 41NT1dB+Ee5kAQh3/W5BF2meGmkNmysb0LqMPrZUeFOy+J+vsHXEaaD7mjgEmq6j oxSxs2NIrLrD3dS1osN/lFAcT3stHb9inFMb/l6ovrCR/vT+mPi1At2RLqFlI+mF q3udVLaF78oZAvQVgSHR3IXfb0SbiamvQYOTjE1/QDR03H0zHwqGkBxo0LvAK55i 2Xz3nGDxJOMAsv5O1eNtNX0XqxP6Q2x8ZkOA/EV8PjvdrtyEPoToy7CBOti8FKOF CXRr2fBarTeEQQhtx3c5pgGxBIosJjSWVlR99F8ZVnUVocUsAw60zVKKOUJtbhTN viQL8LRLlH1POw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:44 2025 by rpki-client