This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: 72nPSXSEVWbK4guxiYyXyo/0nPu7LOpUPIc26aet5wk= Subject key identifier: 70:3C:79:B4:F8:48:AF:E4:97:42:93:08:E5:9F:51:7A:11:0A:AD:78 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019AF163D6D1C87C9616EC70DCC43DA14EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=) 2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=) 3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=) 4: gXTQ_DqBbvWK4zOCraUhqqUl7Zk.roa (hash: qOt1Z426R0Ot2Dml4Qmnhu+irkAmbjEf1aZkvn7kIfc=) 5: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=) 6: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=) 7: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: g61ouNh3Tyz1aEdeeyL7IyhFv7Tn9eisssQtVKlp16A=) 8: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d6:d1:c8:7c:96:16:ec:70:dc:c4:3d:a1:4e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=703c79b4f848afe497429308e59f517a110aad78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:15:b7:3c:ac:93:15:af:ba:57:da:b1:9f: e0:8c:b5:a7:ee:03:d9:c2:85:f1:74:7a:7c:ee:a6: 5f:91:25:82:db:95:42:a5:53:5d:80:6e:0e:a3:c1: ad:98:9e:a6:a4:66:9f:12:8f:3c:1e:f2:f2:1d:91: 30:84:82:90:14:fb:e0:e0:87:cf:b1:12:d8:d2:75: 8b:e6:b5:f0:b8:15:06:70:28:70:8a:4c:9e:f2:67: 48:0e:aa:a0:ad:32:d5:95:0a:45:56:a1:24:b5:09: 16:32:e1:cb:e4:67:ae:54:bd:2a:b2:28:67:a5:35: db:ee:cb:6f:47:cc:69:19:29:b8:7b:6d:ab:c5:90: 98:11:73:ee:aa:a6:f2:89:ba:60:02:a5:56:05:6b: df:8e:f7:0a:b6:47:52:ad:1f:3b:5e:d1:fd:16:e7: a6:3f:1a:73:46:45:d3:7d:e2:7d:c8:30:32:5d:00: 73:20:17:46:0f:f2:cb:39:92:08:14:42:1c:c9:50: 5a:5b:66:a9:a9:ac:96:72:86:50:57:f7:9d:77:06: 52:4b:c5:c9:c6:ce:b4:f8:e5:90:0a:7c:66:18:be: ae:7c:70:f3:9b:19:44:82:b9:d3:e3:3b:3b:26:81: 40:de:50:f5:14:c4:54:96:76:79:e4:00:a9:84:b7: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3C:79:B4:F8:48:AF:E4:97:42:93:08:E5:9F:51:7A:11:0A:AD:78 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:d2:36:56:f2:b1:80:4a:d1:13:5e:42:71:28:51:5b:92: 25:ec:dd:aa:e7:f9:8d:e0:cf:23:68:71:ba:e2:3c:ad:af:6f: dc:d6:28:94:38:f0:e9:16:41:ca:dc:76:0b:c7:a1:af:20:92: 80:55:45:a2:5b:b0:30:e4:ff:6f:bb:a5:6b:ff:a6:5a:0c:d0: 9d:d4:0f:88:05:ed:d9:c8:6d:76:c7:00:55:15:90:c6:c2:1f: 9e:5e:17:fb:5d:42:30:23:82:c0:13:41:b0:d1:c3:af:4c:b1: 37:89:18:02:96:f0:05:a9:a4:64:d7:d8:52:34:89:2e:66:f4: bc:47:f7:3a:fd:61:66:0b:4d:5d:bf:8d:61:2d:a5:d9:fb:74: e6:dc:99:da:a8:1a:c3:62:73:3f:81:47:08:9f:f4:4c:87:71: 02:42:61:d4:6c:f6:72:72:d6:38:7f:32:b6:f8:35:33:12:1e: 4f:91:d5:72:1d:36:ee:e6:a4:71:3f:0c:ab:98:08:38:9b:4e: 56:51:d8:4a:5f:fe:15:c6:09:c3:e4:2c:15:2b:9a:9f:17:5b: 9a:84:ba:96:5e:e2:72:9d:b3:4d:c7:98:94:61:ed:98:b7:0b: f2:ee:18:a3:ed:0f:6c:31:da:50:d7:0d:f1:fc:3a:1a:40:99: 50:0f:76:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9bRyHyWFuxw3MQ9oU78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD Eyg3MDNjNzliNGY4NDhhZmU0OTc0MjkzMDhlNTlmNTE3YTExMGFhZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCIVtzyskxWvulfasZ/gjLWn7gPZ woXxdHp87qZfkSWC25VCpVNdgG4Oo8GtmJ6mpGafEo88HvLyHZEwhIKQFPvg4IfP sRLY0nWL5rXwuBUGcChwikye8mdIDqqgrTLVlQpFVqEktQkWMuHL5GeuVL0qsihn pTXb7stvR8xpGSm4e22rxZCYEXPuqqbyibpgAqVWBWvfjvcKtkdSrR87XtH9Fuem PxpzRkXTfeJ9yDAyXQBzIBdGD/LLOZIIFEIcyVBaW2apqayWcoZQV/eddwZSS8XJ xs60+OWQCnxmGL6ufHDzmxlEgrnT4zs7JoFA3lD1FMRUlnZ55ACphLe6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHA8ebT4SK/kl0KTCOWfUXoRCq14MB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5PSNlby sYBK0RNeQnEoUVuSJezdquf5jeDPI2hxuuI8ra9v3NYolDjw6RZBytx2C8ehryCS gFVFoluwMOT/b7ula/+mWgzQndQPiAXt2chtdscAVRWQxsIfnl4X+11CMCOCwBNB sNHDr0yxN4kYApbwBamkZNfYUjSJLmb0vEf3Ov1hZgtNXb+NYS2l2ft05tyZ2qga w2JzP4FHCJ/0TIdxAkJh1Gz2cnLWOH8ytvg1MxIeT5HVch027uakcT8Mq5gIOJtO VlHYSl/+FcYJw+QsFSuanxdbmoS6ll7icp2zTceYlGHtmLcL8u4Yo+0PbDHaUNcN 8fw6GkCZUA920A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:07 2025 by rpki-client