This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json) Hash identifier: UTs2yauAH7didJiXUgtVRdUBegQvrEUCb2HGJongR0A= Subject key identifier: 09:74:D2:21:65:E7:F2:E4:B8:4C:AB:F5:76:4E:6F:F8:56:6C:5A:1B Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019AF208E19D53AB8C5ABB4FFB29D3067DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft Manifest number: 1165 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=) 2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=) 3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=) 4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: k4vDlBs4upQoGzDqW8JHfJapa4ikiE7zIaC7nfsx4CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e1:9d:53:ab:8c:5a:bb:4f:fb:29:d3:06:7d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=0974d22165e7f2e4b84cabf5764e6ff8566c5a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:a5:49:cc:be:3c:ec:82:6d:de:98:f0:2c: 3f:66:b2:ae:83:5a:4b:39:82:cd:df:fb:fd:5f:88: aa:02:7f:4b:fe:bd:93:6b:f0:a8:5b:f8:6c:69:ba: b1:55:66:b5:f4:35:40:f0:9a:af:aa:58:7b:ef:7d: 8b:aa:58:af:a0:88:89:e7:c1:f3:da:8d:3d:1e:10: e6:31:2a:e9:3b:59:85:54:c9:2d:1b:4d:a2:fc:bc: cd:36:5b:40:09:44:13:83:7a:2a:97:38:26:23:21: a4:10:c5:11:86:63:46:23:2b:0f:98:49:d0:89:9f: 04:f2:5a:f1:ef:13:bb:49:8b:41:6b:9d:ac:a2:2d: 46:39:4c:db:6d:cd:0f:57:c1:38:25:4c:bb:55:1d: ef:c6:5f:7f:5a:2d:76:ec:87:ef:49:c4:34:39:04: 9a:28:87:ab:13:16:eb:01:ec:14:92:90:ad:f0:41: 86:cf:26:94:3d:a6:a0:a1:8e:ca:68:69:5c:21:47: b7:d6:30:32:1c:6b:d2:f2:a4:f4:e8:a2:2d:3a:ad: a6:ad:be:b3:dc:31:09:90:c6:97:28:ac:ad:61:6a: fc:79:d8:f8:ae:73:b6:ec:8e:b6:72:df:00:9e:69: 88:31:e7:12:fe:c1:5e:f7:ef:68:10:6f:41:7b:2b: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:74:D2:21:65:E7:F2:E4:B8:4C:AB:F5:76:4E:6F:F8:56:6C:5A:1B X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:1a:4e:fc:44:3f:72:28:6b:d2:a8:aa:09:8e:bd:e0:d7:36: ee:ce:f7:1e:01:7e:55:f3:b4:c7:b7:a7:2c:2f:25:3d:f6:e0: 13:65:04:b4:c4:4c:6b:ac:b2:b9:76:43:87:a2:34:69:08:78: 32:18:ef:5e:51:05:ca:78:86:41:d5:a2:7e:e7:59:b9:95:b8: 83:78:f4:db:d9:77:7a:4d:98:26:5c:d1:2a:0e:a9:a4:18:08: 9f:0e:89:97:8a:17:79:79:80:93:aa:89:28:be:62:27:c0:d0: fe:8b:a4:3d:d0:7a:06:a1:5c:f1:db:47:35:9b:75:0b:b6:09: 57:48:8e:3f:11:8f:2f:dd:6f:74:05:8a:25:32:3d:76:ff:21: bf:63:a3:a7:dc:db:56:10:4b:1c:28:37:9e:23:22:5e:2e:6f: 6a:6c:b1:d2:0e:3d:6b:e3:16:69:65:ea:84:b0:16:46:f2:c5: 5b:9b:eb:e7:42:3d:d7:dd:16:0e:ba:71:97:51:ae:9a:d7:72: 4d:f9:8a:d7:3a:69:6b:c1:17:56:d2:27:d8:2a:95:8f:12:de: 30:fc:ca:dd:ca:4a:28:ef:9e:37:5a:6e:62:bf:72:7e:c9:28: f9:5f:b6:4f:bc:c8:c4:8b:e3:ac:b9:80:82:92:f1:1a:99:13: ad:c4:54:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOGdU6uMWrtP+ynTBn3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygwOTc0ZDIyMTY1ZTdmMmU0Yjg0Y2FiZjU3NjRlNmZmODU2NmM1YTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZqlScy+POyCbd6Y8Cw/ZrKug1pL OYLN3/v9X4iqAn9L/r2Ta/CoW/hsabqxVWa19DVA8Jqvqlh7732LqlivoIiJ58Hz 2o09HhDmMSrpO1mFVMktG02i/LzNNltACUQTg3oqlzgmIyGkEMURhmNGIysPmEnQ iZ8E8lrx7xO7SYtBa52soi1GOUzbbc0PV8E4JUy7VR3vxl9/Wi127IfvScQ0OQSa KIerExbrAewUkpCt8EGGzyaUPaagoY7KaGlcIUe31jAyHGvS8qT06KItOq2mrb6z 3DEJkMaXKKytYWr8edj4rnO27I62ct8AnmmIMecS/sFe9+9oEG9BeysBDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl00iFl5/LkuEyr9XZOb/hWbFobMB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhpO/EQ/ cihr0qiqCY694Nc27s73HgF+VfO0x7enLC8lPfbgE2UEtMRMa6yyuXZDh6I0aQh4 MhjvXlEFyniGQdWifudZuZW4g3j029l3ek2YJlzRKg6ppBgInw6Jl4oXeXmAk6qJ KL5iJ8DQ/oukPdB6BqFc8dtHNZt1C7YJV0iOPxGPL91vdAWKJTI9dv8hv2Ojp9zb VhBLHCg3niMiXi5vamyx0g49a+MWaWXqhLAWRvLFW5vr50I9190WDrpxl1Gumtdy TfmK1zppa8EXVtIn2CqVjxLeMPzK3cpKKO+eN1puYr9yfsko+V+2T7zIxIvjrLmA gpLxGpkTrcRUHg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:22 2025 by rpki-client