This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft File: hDz1u4drdyt63kMpBctpbxNMqjk.mft (raw, json) Hash identifier: 3ybDhNuYMsRv3Wb1zwhEqwmKVaTi31QAQ+2Facstu6c= Subject key identifier: 13:2E:B9:73:E6:76:23:C2:3C:13:3D:BA:FF:8D:F4:FB:93:A1:05:2D Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39 Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39 Certificate serial: 019AF5778FFE08C5CE1819D4B210BC8F5B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 21:00:44 +0000 Manifest this update: Sat 06 Dec 2025 21:00:44 +0000 Manifest next update: Sun 07 Dec 2025 21:00:44 +0000 Files and hashes: 1: 8SOVzbdZRi1TiXuPdQBPQag2b1I.roa (hash: 4UxgH1Bm5rLISlPUt1abtwizcDNcCBaAAK4mH1Wxzxk=) 2: hDz1u4drdyt63kMpBctpbxNMqjk.crl (hash: XVyvqZCxmrvXgrKS6MgHesm7+NtvvSQTNxSTZYOlDJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:8f:fe:08:c5:ce:18:19:d4:b2:10:bc:8f:5b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39 Validity Not Before: Dec 6 21:00:44 2025 GMT Not After : Dec 7 21:00:44 2025 GMT Subject: CN=132eb973e67623c23c133dbaff8df4fb93a1052d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:70:69:43:65:66:fb:ff:f6:d1:67:4e:c2: 0c:a7:1a:cb:ec:ac:7f:16:e6:54:3f:cd:ab:d6:a5: 73:7b:fe:1a:97:3d:49:d5:09:b0:69:04:9e:d8:d3: b6:a3:67:fb:b5:4c:53:1e:00:2c:f0:ac:8e:a7:0a: a8:e1:7f:10:99:8b:78:cf:c9:b5:23:26:ce:d9:07: fd:0c:3b:9e:ee:2c:59:15:e8:d3:e2:37:e9:89:75: a9:78:b0:7e:8f:ee:f8:d8:25:80:e2:bb:6a:a7:ad: ae:b1:d9:6a:8f:52:2b:79:05:7a:ff:5e:ae:b4:b0: 7e:fc:40:12:c5:81:c1:77:4c:5d:81:e5:ca:c9:fd: 0f:de:3c:c5:56:dc:ff:27:d2:e0:15:5c:b8:d5:f5: 6c:cf:80:3d:a0:4e:fc:3f:bc:71:61:f0:2d:ea:8c: 56:b8:cc:e4:24:69:cc:58:cd:f2:22:4b:d7:49:14: 05:43:98:37:63:97:86:da:73:ba:3e:a8:e6:75:be: e7:d2:73:7d:a9:3d:10:62:a8:38:7f:2b:ee:c1:24: 10:d9:da:f3:e2:a2:dd:3e:b2:44:36:85:f4:23:6e: 51:1c:e5:cc:74:26:f8:42:05:2f:4e:74:54:40:27: eb:7e:fd:1b:4f:cc:44:c4:87:8d:8f:ad:8c:6d:85: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:B9:73:E6:76:23:C2:3C:13:3D:BA:FF:8D:F4:FB:93:A1:05:2D X509v3 Authority Key Identifier: keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:20:e0:29:52:a7:cf:ae:7d:c2:5e:80:61:92:4d:3c:27:38: fb:3a:70:2e:e8:5c:2f:1a:2a:47:f1:e4:41:f2:ed:d5:bc:7b: 46:be:bb:c9:e7:1b:f6:fd:3f:a8:86:56:b1:40:a4:3f:21:42: 56:0b:8c:01:cb:9e:b2:62:20:3f:a6:37:ae:19:2c:e5:0d:37: 0e:7a:36:70:e4:c8:bc:74:79:0f:07:b0:5c:3f:b9:bc:70:25: ec:0e:79:d8:f9:e8:44:aa:68:d4:8f:2b:e3:33:9f:5c:d4:aa: be:9c:ce:bf:de:2d:c2:33:ab:7e:ce:95:20:91:2e:f7:df:5f: 2e:7f:72:cb:82:fe:67:95:47:d9:8d:8a:64:08:de:b4:32:b1: 8f:4d:5b:6c:ae:bc:57:47:60:07:5d:60:a7:e5:1d:1e:90:d1: 56:49:2b:a6:88:07:ae:7a:68:84:2f:63:c9:ab:d4:ca:84:d0: 4d:87:5f:5b:3b:1b:c2:43:93:26:0c:da:04:fe:f0:14:8b:66: d4:92:90:f5:82:a1:44:8e:10:07:6b:eb:0b:55:98:59:c7:f1: 83:e7:9f:5e:1d:75:0b:34:e1:65:7c:64:eb:f1:61:23:df:d7: 7a:93:30:d0:ae:62:6d:a0:27:aa:95:ea:23:9d:78:5f:cf:c6: f6:e2:ac:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d4/+CMXOGBnUshC8j1tmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0M2NmNWJiODc2Yjc3MmI3YWRlNDMyOTA1Y2I2OTZmMTM0 Y2FhMzkwHhcNMjUxMjA2MjEwMDQ0WhcNMjUxMjA3MjEwMDQ0WjAzMTEwLwYDVQQD EygxMzJlYjk3M2U2NzYyM2MyM2MxMzNkYmFmZjhkZjRmYjkzYTEwNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QZwaUNlZvv/9tFnTsIMpxrL7Kx/ FuZUP82r1qVze/4alz1J1QmwaQSe2NO2o2f7tUxTHgAs8KyOpwqo4X8QmYt4z8m1 IybO2Qf9DDue7ixZFejT4jfpiXWpeLB+j+742CWA4rtqp62usdlqj1IreQV6/16u tLB+/EASxYHBd0xdgeXKyf0P3jzFVtz/J9LgFVy41fVsz4A9oE78P7xxYfAt6oxW uMzkJGnMWM3yIkvXSRQFQ5g3Y5eG2nO6Pqjmdb7n0nN9qT0QYqg4fyvuwSQQ2drz 4qLdPrJENoX0I25RHOXMdCb4QgUvTnRUQCfrfv0bT8xExIeNj62MbYUzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMuuXPmdiPCPBM9uv+N9PuToQUtMB8GA1UdIwQY MBaAFIQ89buHa3cret5DKQXLaW8TTKo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaER6MXU0ZHJkeXQ2M2tNcEJjdHBieE5NcWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81MTIyMTQtZTc4ZS00OTMxLWJmYmIt MTZmNWE1NjM2MjQ0LzEvaER6MXU0ZHJkeXQ2M2tNcEJjdHBieE5NcWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81MTIyMTQtZTc4ZS00OTMxLWJmYmItMTZmNWE1NjM2MjQ0 LzEvaER6MXU0ZHJkeXQ2M2tNcEJjdHBieE5NcWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyDgKVKn z659wl6AYZJNPCc4+zpwLuhcLxoqR/HkQfLt1bx7Rr67yecb9v0/qIZWsUCkPyFC VguMAcuesmIgP6Y3rhks5Q03Dno2cOTIvHR5DwewXD+5vHAl7A552PnoRKpo1I8r 4zOfXNSqvpzOv94twjOrfs6VIJEu999fLn9yy4L+Z5VH2Y2KZAjetDKxj01bbK68 V0dgB11gp+UdHpDRVkkrpogHrnpohC9jyavUyoTQTYdfWzsbwkOTJgzaBP7wFItm 1JKQ9YKhRI4QB2vrC1WYWcfxg+efXh11CzThZXxk6/FhI9/XepMw0K5ibaAnqpXq I514X8/G9uKsyA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:59 2025 by rpki-client