This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json) Hash identifier: u2fdi8GOejldxdrmMoZukFfSWuLkQIEWhBaNmoUatOE= Subject key identifier: 26:22:E8:3A:D8:9A:A2:C2:65:8E:C4:8D:07:27:36:75:59:08:A4:E0 Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Certificate serial: 019AF50BB5120478B51121A0C440C4660F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft Manifest number: 0A7B Signing time: Sat 06 Dec 2025 19:02:56 +0000 Manifest this update: Sat 06 Dec 2025 19:02:56 +0000 Manifest next update: Sun 07 Dec 2025 19:02:56 +0000 Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=) 2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: GwI9X3gLrtWj35qen6/uH1enigdZKbVOOlB0RxdD0vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:b5:12:04:78:b5:11:21:a0:c4:40:c4:66:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Validity Not Before: Dec 6 19:02:56 2025 GMT Not After : Dec 7 19:02:56 2025 GMT Subject: CN=2622e83ad89aa2c2658ec48d072736755908a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:f6:a2:89:ec:e3:c2:66:a2:71:5f:55:e9: 4b:d9:9b:b5:1f:23:52:f4:30:0c:ad:cb:7c:85:2c: 75:45:29:70:28:0b:9f:6e:2e:97:bc:ae:0a:19:5c: 7c:df:fc:7c:dd:19:89:71:16:c1:43:59:9f:8e:89: 75:1d:d5:bc:3c:88:d6:5d:53:8c:c1:a8:b2:ea:88: 68:39:76:4a:9e:8e:d5:7a:28:1b:0f:a1:64:01:e0: c6:fe:34:be:42:5a:ee:b7:cc:5e:5c:2f:1c:ed:d4: 1b:b4:74:d3:56:81:49:92:0e:e3:6e:81:11:35:da: 15:8f:fd:36:e6:53:de:cb:f6:74:6b:15:e6:7b:e9: 72:28:0d:9f:88:08:b3:00:0b:69:02:4f:bf:10:a5: a9:44:86:08:50:e7:47:53:d7:d0:5d:43:09:17:f8: 52:59:d3:f1:63:16:ea:a1:70:5b:e4:02:08:d7:db: 4e:97:b4:38:50:44:6e:59:c3:88:ca:97:79:f2:b6: c8:b7:bf:4e:aa:2a:8b:61:96:13:4e:3d:2a:3e:3c: ac:d6:6b:2d:8d:e5:9b:5e:45:b5:7d:c7:69:d4:b3: 48:79:75:03:70:93:fd:49:fb:b4:56:ef:d1:7e:0e: 9e:ee:c5:2a:92:23:8f:60:e6:49:da:c6:4b:c0:f8: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:E8:3A:D8:9A:A2:C2:65:8E:C4:8D:07:27:36:75:59:08:A4:E0 X509v3 Authority Key Identifier: keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:9b:bf:66:55:4d:e4:4a:0e:9a:34:62:6f:a8:ef:28:1a:87: dc:83:74:9b:33:08:33:ed:af:6a:fb:db:4b:13:03:d6:c7:06: 61:cc:4a:8f:ba:26:e3:45:f9:7c:d4:a2:cf:c2:4c:e0:d6:60: 5a:43:ed:6d:32:d7:65:cc:62:04:fe:c7:63:ee:20:02:18:b7: bf:40:f0:4d:80:52:5d:b1:45:ca:92:6c:86:b9:72:0e:77:06: c0:50:e4:86:ea:05:ea:0b:04:f6:17:9d:1c:75:f2:d3:8b:da: 81:a1:ae:31:78:d4:52:82:7f:83:a0:e9:2d:2d:35:e7:01:44: d2:e2:1b:7f:ca:8c:0a:ef:fd:18:42:28:3a:eb:6c:3a:34:fc: 57:5d:de:15:55:7b:ae:f2:a7:f4:d8:83:73:14:65:b6:52:2b: 7b:c7:7f:93:7d:61:64:ed:f1:f8:67:78:a2:c2:b2:b9:a4:36: bc:5b:05:e9:e7:78:d1:6e:d5:df:98:37:e5:10:36:1f:d7:d9: 43:3c:a1:a3:69:66:1e:26:4d:dd:97:fc:5f:11:dc:2b:49:c6: 2a:a8:42:d1:db:4c:e3:b7:98:43:43:44:65:a3:7c:ed:70:a5: 42:37:9c:52:0f:b4:9a:fb:a8:ee:d1:26:75:a9:ae:ad:d9:e9: d8:43:61:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7USBHi1ESGgxEDEZg+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl ZTMzMmUwHhcNMjUxMjA2MTkwMjU2WhcNMjUxMjA3MTkwMjU2WjAzMTEwLwYDVQQD EygyNjIyZTgzYWQ4OWFhMmMyNjU4ZWM0OGQwNzI3MzY3NTU5MDhhNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18b2oons48JmonFfVelL2Zu1HyNS 9DAMrct8hSx1RSlwKAufbi6XvK4KGVx83/x83RmJcRbBQ1mfjol1HdW8PIjWXVOM waiy6ohoOXZKno7VeigbD6FkAeDG/jS+Qlrut8xeXC8c7dQbtHTTVoFJkg7jboER NdoVj/025lPey/Z0axXme+lyKA2fiAizAAtpAk+/EKWpRIYIUOdHU9fQXUMJF/hS WdPxYxbqoXBb5AII19tOl7Q4UERuWcOIypd58rbIt79OqiqLYZYTTj0qPjys1mst jeWbXkW1fcdp1LNIeXUDcJP9Sfu0Vu/Rfg6e7sUqkiOPYOZJ2sZLwPhDaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYi6DrYmqLCZY7EjQcnNnVZCKTgMB8GA1UdIwQY MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3 LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJu/ZlVN 5EoOmjRib6jvKBqH3IN0mzMIM+2vavvbSxMD1scGYcxKj7om40X5fNSiz8JM4NZg WkPtbTLXZcxiBP7HY+4gAhi3v0DwTYBSXbFFypJshrlyDncGwFDkhuoF6gsE9hed HHXy04vagaGuMXjUUoJ/g6DpLS015wFE0uIbf8qMCu/9GEIoOutsOjT8V13eFVV7 rvKn9NiDcxRltlIre8d/k31hZO3x+Gd4osKyuaQ2vFsF6ed40W7V35g35RA2H9fZ Qzyho2lmHiZN3Zf8XxHcK0nGKqhC0dtM47eYQ0NEZaN87XClQjecUg+0mvuo7tEm damurdnp2ENhqA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:06 2025 by rpki-client