This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json) Hash identifier: 2xjFAng7gqIUZOABfE3+46p4EbA3zkUJGGV4tfhkIYw= Subject key identifier: D2:4B:C4:F1:32:23:1C:29:25:E5:4D:0B:67:14:AB:00:24:EC:56:EB Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Certificate serial: 019AF23F61F9C4954C1ACD87F418756CF017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft Manifest number: 1736 Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=) 2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: 8r48aVu24jZLKkm9N5UQ14jZWWe8MrXwx9avvBsXDaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:61:f9:c4:95:4c:1a:cd:87:f4:18:75:6c:f0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=d24bc4f132231c2925e54d0b6714ab0024ec56eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:e6:37:8f:f9:bb:99:58:df:ab:b5:7b:1a: 82:9e:cd:c8:99:0b:e6:0a:01:34:bc:c9:a4:46:cb: a8:d3:9a:ce:94:ef:76:b2:9a:b8:78:2c:39:95:fc: 20:73:2d:21:94:73:92:a1:f4:8b:73:a5:60:e3:64: ef:3a:97:85:05:7c:ca:bc:12:ac:f8:47:04:26:a5: 5e:06:0a:3b:9a:aa:00:de:4e:39:f9:96:0a:cd:a3: f4:42:53:fd:10:60:66:36:73:07:4a:09:9b:55:f7: 08:b0:7f:13:c5:fc:3d:fa:a7:04:d5:28:db:c3:a9: e0:8b:fd:1c:a5:2c:76:23:80:9d:c5:8c:b4:d1:4b: 19:71:dc:5f:78:7d:cc:01:9d:ef:3f:3b:a5:64:25: 8e:79:8d:48:c6:d9:8f:1f:bf:76:78:99:c7:65:2e: 46:d0:79:1e:2c:38:3c:79:32:5a:ef:3b:5a:7e:ec: ae:05:b2:45:64:55:9f:a6:cc:f5:42:1e:a0:86:95: c1:20:16:a1:77:c4:a1:2e:2c:5b:f2:8c:f6:73:6f: 01:8a:ed:1a:fe:c3:b0:75:3b:8f:a7:26:dc:e4:fa: 62:df:30:dd:b0:97:e8:b3:28:4e:26:73:3c:f2:49: 77:32:eb:1f:96:00:4f:89:4a:3f:49:53:04:4e:12: 0a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:C4:F1:32:23:1C:29:25:E5:4D:0B:67:14:AB:00:24:EC:56:EB X509v3 Authority Key Identifier: keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f4:e8:43:fb:30:9a:64:f7:0d:53:39:a6:ca:ed:21:9e:ff: a8:3c:21:2c:da:e1:e7:f6:39:fd:8e:13:23:3e:ba:f6:98:af: 7c:cd:22:5e:aa:58:85:28:a4:35:d6:96:b1:10:5d:c2:90:b3: 34:de:17:20:b7:db:df:b7:f2:ab:c5:85:91:2c:21:e5:74:76: 5f:6e:b9:87:6f:6a:8f:a2:c7:2f:41:5d:46:05:11:a8:ac:85: 6f:95:e9:3f:8b:f7:b8:d6:1e:eb:7b:0a:9f:78:10:ca:62:24: 52:3d:dd:17:1d:37:70:59:9d:52:17:3d:c3:05:95:0e:6d:33: 53:36:92:3a:74:2f:15:6a:78:f1:39:ae:e1:b1:7e:17:66:2f: 4a:ed:3c:27:a2:14:5d:3c:9f:10:b8:c4:d7:81:a4:ea:59:99: 4e:ad:51:84:25:c1:ce:cc:d7:7c:c1:f3:cd:95:ae:a4:78:64: b4:68:e3:39:c7:86:0f:00:1c:be:6b:bd:6c:05:0d:2a:d8:61: 95:19:86:18:ef:d3:f1:24:80:ff:38:d9:43:c4:f0:a1:79:79: d7:13:3a:db:33:2d:02:a8:0c:d7:ce:48:79:b1:b7:8d:2b:81: 27:d0:c3:80:ed:57:8d:4f:1b:43:e5:57:22:a6:80:57:8b:f2: dd:29:ed:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2H5xJVMGs2H9Bh1bPAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWJlZWRmNDM4YTlhYTk2MWMzNDMyNjQzN2MyOWM0ZGQw Y2M0YmMwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD EyhkMjRiYzRmMTMyMjMxYzI5MjVlNTRkMGI2NzE0YWIwMDI0ZWM1NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnbmN4/5u5lY36u1exqCns3ImQvm CgE0vMmkRsuo05rOlO92spq4eCw5lfwgcy0hlHOSofSLc6Vg42TvOpeFBXzKvBKs +EcEJqVeBgo7mqoA3k45+ZYKzaP0QlP9EGBmNnMHSgmbVfcIsH8Txfw9+qcE1Sjb w6ngi/0cpSx2I4CdxYy00UsZcdxfeH3MAZ3vPzulZCWOeY1IxtmPH792eJnHZS5G 0HkeLDg8eTJa7ztafuyuBbJFZFWfpsz1Qh6ghpXBIBahd8ShLixb8oz2c28Biu0a /sOwdTuPpybc5Ppi3zDdsJfosyhOJnM88kl3MusflgBPiUo/SVMEThIKtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJLxPEyIxwpJeVNC2cUqwAk7FbrMB8GA1UdIwQY MBaAFIRb7t9DipqpYcNDJkN8KcTdDMS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWIt MThlNjQ0NDFkMDFlLzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hNzBhODQtZDIyMy00ZGZkLTlmZWItMThlNjQ0NDFkMDFl LzEvaEZ2dTMwT0ttcWxodzBNbVEzd3B4TjBNeEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/ToQ/sw mmT3DVM5psrtIZ7/qDwhLNrh5/Y5/Y4TIz669pivfM0iXqpYhSikNdaWsRBdwpCz NN4XILfb37fyq8WFkSwh5XR2X265h29qj6LHL0FdRgURqKyFb5XpP4v3uNYe63sK n3gQymIkUj3dFx03cFmdUhc9wwWVDm0zUzaSOnQvFWp48Tmu4bF+F2YvSu08J6IU XTyfELjE14Gk6lmZTq1RhCXBzszXfMHzzZWupHhktGjjOceGDwAcvmu9bAUNKthh lRmGGO/T8SSA/zjZQ8TwoXl51xM62zMtAqgM185IebG3jSuBJ9DDgO1XjU8bQ+VX IqaAV4vy3SntMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:11 2025 by rpki-client