This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json) Hash identifier: lczljsejl5ppb5tb8VgiOF1wJFyYQBe2y2Eqb58n+Ko= Subject key identifier: B7:FC:CE:11:34:C5:2C:D0:6A:9F:07:6D:0D:BD:77:0C:9C:4D:D1:38 Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe Certificate serial: 019AF16412B82209EFA3773A129723461A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft Manifest number: 140A Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: D3bRMlTDClBFr3S51rSxiY9VG9A.roa (hash: aR3n5btl/hz9D4qsdHX0kbRtCNTOPvoaLGVTTlP76Qo=) 2: ZxguzW17xFrUP53FIAJUfjkeqvQ.roa (hash: Sn/df7xibUqHylpF6Ngt+9h48Sxd84uF3fpZ9SuTgf8=) 3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: Ncdc2fqgzDByt9h1DtN3TThTnnPi/G4jd7w3qSo3FZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:12:b8:22:09:ef:a3:77:3a:12:97:23:46:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=b7fcce1134c52cd06a9f076d0dbd770c9c4dd138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:af:fd:02:c6:54:a6:be:29:66:68:bd:b5: 7f:b4:44:cf:fb:3d:6b:6d:93:f1:85:1a:2b:56:3a: f3:c0:88:04:2e:03:7d:bb:ac:8a:7b:8a:a9:b6:b4: a1:5c:87:3c:0c:3c:06:02:88:75:99:72:22:93:e8: d5:a9:5a:07:f1:46:90:1b:79:8e:9c:64:c3:aa:06: f0:50:cb:79:b5:2f:54:9a:81:31:43:e4:dc:bf:d3: 47:ef:17:0b:de:33:bb:f3:8c:b2:92:62:03:7b:35: ab:9a:4d:39:21:b0:73:86:04:a3:ae:37:f5:02:23: cd:3a:5d:3d:39:9d:19:52:2a:2f:ef:9f:9d:e6:4f: 18:b7:59:e5:31:65:b8:b3:73:4a:7f:1d:74:be:aa: 2f:19:d7:31:7c:61:f4:17:af:18:98:1c:c5:84:b0: 96:9f:93:c7:16:94:4d:62:b9:9c:aa:03:21:40:ea: 7f:3e:37:79:87:10:56:f5:bf:ab:ab:99:37:95:e3: 37:ca:9d:d1:9a:b3:40:e6:47:76:ed:05:8d:6c:88: 77:0d:cc:9a:0b:20:96:9f:a5:43:ef:5b:b6:51:17: fd:10:fe:75:b2:c5:cd:84:41:3d:c7:c1:c7:ce:95: 8d:83:b7:4b:49:90:4e:b7:cb:34:17:6b:57:99:b8: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FC:CE:11:34:C5:2C:D0:6A:9F:07:6D:0D:BD:77:0C:9C:4D:D1:38 X509v3 Authority Key Identifier: keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d3:31:e9:89:a9:b4:46:8e:fc:91:a2:b9:e4:04:e6:6e:29: d1:e9:a2:97:8d:d3:ae:ef:2f:75:49:54:2d:db:f9:98:49:06: 0b:ba:08:64:e7:47:99:5c:5b:3a:4b:02:7f:55:e1:57:00:69: 34:88:33:8f:b3:72:41:19:80:c1:2a:98:b9:06:c1:82:05:b6: b6:53:43:f0:5a:9e:6d:d4:14:fa:c4:8d:9b:92:64:fd:35:4c: 66:e1:18:69:83:88:6a:cf:a1:8a:74:e2:f9:08:d5:33:c4:9f: 84:24:82:c9:71:c6:e3:f7:3f:cf:52:77:34:2c:75:fa:f6:40: 1d:f6:4b:88:30:56:01:a3:69:47:fd:4b:87:05:7e:38:75:b0: 05:3a:be:f4:a4:e4:1c:29:5e:2b:bc:b6:d0:58:a8:60:d8:a8: 2c:9e:d7:07:4d:eb:0e:6d:fb:21:41:2a:16:49:55:f4:91:f5: cf:7f:c4:52:87:57:3c:4c:c1:96:34:74:cb:ed:15:96:d1:2b: 54:02:52:92:0a:2a:b2:87:f0:f4:ac:2d:0c:ad:3a:c0:ca:59: 53:cf:90:f5:09:ff:45:d6:fd:34:77:dc:a5:f9:66:b9:65:4b: cd:13:6b:47:2f:b7:b7:f9:3b:30:7f:07:51:65:b9:db:70:37: 9d:9a:c9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBK4Ignvo3c6EpcjRhpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw MDRjZmUwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EyhiN2ZjY2UxMTM0YzUyY2QwNmE5ZjA3NmQwZGJkNzcwYzljNGRkMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ymv/QLGVKa+KWZovbV/tETP+z1r bZPxhRorVjrzwIgELgN9u6yKe4qptrShXIc8DDwGAoh1mXIik+jVqVoH8UaQG3mO nGTDqgbwUMt5tS9UmoExQ+Tcv9NH7xcL3jO784yykmIDezWrmk05IbBzhgSjrjf1 AiPNOl09OZ0ZUiov75+d5k8Yt1nlMWW4s3NKfx10vqovGdcxfGH0F68YmBzFhLCW n5PHFpRNYrmcqgMhQOp/Pjd5hxBW9b+rq5k3leM3yp3RmrNA5kd27QWNbIh3Dcya CyCWn6VD71u2URf9EP51ssXNhEE9x8HHzpWNg7dLSZBOt8s0F2tXmbieCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf8zhE0xSzQap8HbQ29dwycTdE4MB8GA1UdIwQY MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtMx6Ymp tEaO/JGiueQE5m4p0emil43Tru8vdUlULdv5mEkGC7oIZOdHmVxbOksCf1XhVwBp NIgzj7NyQRmAwSqYuQbBggW2tlND8FqebdQU+sSNm5Jk/TVMZuEYaYOIas+hinTi +QjVM8SfhCSCyXHG4/c/z1J3NCx1+vZAHfZLiDBWAaNpR/1LhwV+OHWwBTq+9KTk HCleK7y20FioYNioLJ7XB03rDm37IUEqFklV9JH1z3/EUodXPEzBljR0y+0VltEr VAJSkgoqsofw9KwtDK06wMpZU8+Q9Qn/Rdb9NHfcpflmuWVLzRNrRy+3t/k7MH8H UWW523A3nZrJqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:10 2025 by rpki-client