This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json) Hash identifier: HVbxLI7kH7SudXnUpzWrN8A/e114HgTlfu8lgBW2BVc= Subject key identifier: 3F:2A:AA:5B:3E:DD:CF:C8:80:97:CF:35:C3:B0:DC:66:22:8C:B6:16 Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Certificate serial: 019AF208F5C2159E53975B9417229966EC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft Manifest number: 128D Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=) 2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: IBI5A5EfHFr8KmcW833zyLGt2WUKeoVk4Dy5TUkxYzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f5:c2:15:9e:53:97:5b:94:17:22:99:66:ec:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=3f2aaa5b3eddcfc88097cf35c3b0dc66228cb616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:47:cb:3c:5c:f5:40:fb:e3:58:e6:db:20: c9:9f:4a:40:92:71:15:c6:29:35:b2:d4:ef:47:f9: aa:48:48:91:3e:8c:2e:b6:e2:25:3b:c2:c3:ec:7d: 53:8f:fc:df:09:83:16:76:27:e3:ff:31:09:1e:55: 75:1b:be:cd:6a:ad:ec:1b:79:33:2e:20:a2:b1:2f: 5c:d1:98:72:fd:3d:0a:14:83:07:bf:47:84:98:ff: 1c:52:19:24:d1:4f:d3:aa:b4:ca:80:9f:5c:4f:b7: 8a:3e:b8:af:0c:46:5c:dd:09:3e:a8:fd:9b:40:f0: 63:f8:2b:72:93:56:bd:0b:9a:33:b9:1d:f5:81:9d: b6:ec:33:77:3d:61:75:cd:2e:72:2c:c0:2d:0c:aa: 45:f1:5a:e0:3b:84:dc:58:18:7e:ad:01:54:a3:31: 2a:51:d8:df:3f:86:f1:32:37:b7:30:58:09:fd:0b: 2e:f0:49:35:ab:7e:75:fc:15:42:78:91:2a:af:f4: 5e:6b:cc:6f:ec:45:11:29:f5:ed:c6:5b:18:96:dc: 46:81:8f:b3:94:5e:8f:81:f0:e7:4c:41:88:dc:60: 3c:4c:ef:de:a4:8b:25:8b:24:dc:d0:50:22:28:43: 85:05:84:c5:68:96:88:43:de:52:a7:f3:96:b8:dd: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2A:AA:5B:3E:DD:CF:C8:80:97:CF:35:C3:B0:DC:66:22:8C:B6:16 X509v3 Authority Key Identifier: keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:44:07:f7:c2:17:7a:f4:39:39:b1:97:7f:6e:47:72:57:12: 2b:4d:88:d0:60:64:37:44:6c:84:1b:b0:7b:69:27:66:f3:56: 3e:c2:f9:67:19:d4:08:3c:08:89:74:6c:b7:19:b5:c1:83:55: 80:b9:c8:f8:df:2f:4e:e3:5c:5c:03:0e:27:48:fc:88:59:be: d1:d2:e7:d7:f6:64:26:1a:f9:4a:0e:85:bc:c7:ee:5c:98:ac: 6f:d1:09:1e:99:52:0f:61:93:39:de:ec:4f:c0:b1:a6:d1:a5: 9c:4f:5f:8b:34:6b:27:3c:18:76:d6:d2:b2:b7:dc:f7:5b:56: d9:be:cb:16:11:d1:5a:29:45:ed:d0:20:10:46:7b:2a:6b:fb: df:43:5f:57:4c:2c:1e:b0:00:98:05:4d:78:57:36:26:cf:fd: 7c:83:83:8d:61:e6:ac:8d:f8:6b:45:23:43:67:68:02:f0:25: b3:ec:d6:1b:96:94:56:9a:15:f4:6d:4a:76:d5:9b:ae:df:c2: d8:a9:b1:aa:f8:42:39:21:16:03:2d:35:c6:6a:fd:06:24:57: 42:fb:d0:3f:75:a6:47:e0:0e:a6:57:eb:8e:a2:c3:d9:ff:36: 45:99:6c:17:fa:e2:9d:7d:6a:8b:89:d0:2b:98:3c:55:45:4b: 5b:50:71:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPXCFZ5Tl1uUFyKZZuxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjJjZTcxYzZmZmNlODc1NjBkNTY1ZWU1Y2NkYTMxZTAx YjljMTUwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EygzZjJhYWE1YjNlZGRjZmM4ODA5N2NmMzVjM2IwZGM2NjIyOGNiNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dHyzxc9UD741jm2yDJn0pAknEV xik1stTvR/mqSEiRPowutuIlO8LD7H1Tj/zfCYMWdifj/zEJHlV1G77Naq3sG3kz LiCisS9c0Zhy/T0KFIMHv0eEmP8cUhkk0U/TqrTKgJ9cT7eKPrivDEZc3Qk+qP2b QPBj+Ctyk1a9C5ozuR31gZ227DN3PWF1zS5yLMAtDKpF8VrgO4TcWBh+rQFUozEq UdjfP4bxMje3MFgJ/Qsu8Ek1q351/BVCeJEqr/Rea8xv7EURKfXtxlsYltxGgY+z lF6PgfDnTEGI3GA8TO/epIsliyTc0FAiKEOFBYTFaJaIQ95Sp/OWuN308wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8qqls+3c/IgJfPNcOw3GYijLYWMB8GA1UdIwQY MBaAFITyznHG/86HVg1WXuXM2jHgG5wVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0Mjgt N2I5OGM3NDYyYTdlLzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYWM5ODAtMjI1OS00NmZkLWE0MjgtN2I5OGM3NDYyYTdl LzEvaFBMT2NjYl96b2RXRFZaZTVjemFNZUFibkJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUQH98IX evQ5ObGXf25HclcSK02I0GBkN0RshBuwe2knZvNWPsL5ZxnUCDwIiXRstxm1wYNV gLnI+N8vTuNcXAMOJ0j8iFm+0dLn1/ZkJhr5Sg6FvMfuXJisb9EJHplSD2GTOd7s T8CxptGlnE9fizRrJzwYdtbSsrfc91tW2b7LFhHRWilF7dAgEEZ7Kmv730NfV0ws HrAAmAVNeFc2Js/9fIODjWHmrI34a0UjQ2doAvAls+zWG5aUVpoV9G1KdtWbrt/C 2KmxqvhCOSEWAy01xmr9BiRXQvvQP3WmR+AOplfrjqLD2f82RZlsF/rinX1qi4nQ K5g8VUVLW1BxaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:00 2025 by rpki-client