This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: b8SaN4p2c9NbhdI7Zlb0flAZWwEelRGTQamCg4tuNt4= Subject key identifier: 73:9E:F8:47:F0:7A:0A:7E:78:BE:E8:B9:84:74:0E:20:15:40:31:BF Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019AF27689EA317382FC5633657962CDBAA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 1813 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 2: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 3: RS_eHXQUq41tQvgc6GbNLviSAns.roa (hash: TQU9cNt++mpDY6Fc1sIB45y0XyCZcVPTbN6xJWetVtM=) 4: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 5: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 6: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: T6XgNh/lCNigz0WXA7ZDHcVhcBAAPJO7JEik/u4UG54=) 7: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 8: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 9: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:89:ea:31:73:82:fc:56:33:65:79:62:cd:ba:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=739ef847f07a0a7e78bee8b984740e20154031bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:07:52:57:56:a3:79:84:8c:02:a2:27:66: e8:33:cc:d4:26:1f:6c:c8:cd:50:04:48:36:30:69: d9:b6:ab:44:5c:52:30:f4:98:64:0a:a0:c4:18:78: dd:ec:af:3f:da:42:b8:a6:a8:8f:66:c7:33:bb:8f: 3f:6f:b6:18:11:fc:9e:ff:58:96:50:7f:10:b2:7d: ec:f4:80:3f:40:06:ae:40:9a:be:5e:35:dd:08:0c: e6:c5:63:1b:b2:d3:56:32:a4:bf:f5:91:4e:c2:8f: 1b:ee:60:7b:12:0d:64:75:b2:03:7c:4f:20:0d:96: 85:60:0f:64:f3:2a:03:20:a3:a7:7b:c6:36:ab:46: 80:5a:70:79:eb:71:ea:ff:5a:92:c9:0c:96:45:97: 7e:aa:a7:69:f9:a8:3a:99:ac:54:b6:ae:01:e1:5f: 54:8e:95:d7:14:b8:37:d2:46:a0:01:4e:43:d8:68: f5:f2:96:32:9c:38:b2:a2:67:e1:40:b2:88:db:6a: b7:62:dd:8f:3f:d1:59:24:59:6d:84:91:65:1b:57: ef:a2:41:d8:28:0f:b3:b3:2b:26:7c:9e:37:7f:a2: 3d:f3:fd:64:83:de:68:d9:a3:9c:0a:72:fd:7d:94: 87:08:59:3c:e6:ce:14:bf:4e:cf:83:03:b6:3a:ca: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9E:F8:47:F0:7A:0A:7E:78:BE:E8:B9:84:74:0E:20:15:40:31:BF X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a6:45:e1:e0:81:ac:22:db:0e:6b:34:59:24:42:5d:5b:29: 6c:5d:b3:8d:35:29:48:2f:9b:1b:66:94:5f:ef:c1:ca:73:4a: 05:82:f5:7c:60:b0:d3:44:6a:f8:de:bf:37:de:ac:9a:88:37: c9:ad:34:30:1f:df:05:f0:30:7f:f7:cf:f1:51:7f:47:39:d4: 8e:7f:cf:94:09:39:ae:11:26:a5:da:09:16:12:d8:c4:74:e4: 84:16:bf:91:f2:8d:9a:f0:54:ab:db:c0:ae:3e:02:a2:95:be: 60:31:64:9c:6f:ef:3a:55:f6:4c:43:dd:2f:f8:bc:49:74:b8: bf:28:98:29:da:fc:0e:f1:b7:8c:09:c1:2b:9e:d5:3b:2f:39: 94:cf:a0:83:99:3a:a6:fe:a7:8a:f2:80:a0:66:b6:27:8f:b8: e1:fd:8e:38:82:ac:ea:b6:f5:9f:1a:c1:09:6b:25:af:58:47: fd:c3:2b:52:1f:0e:d0:86:10:70:ad:ed:24:4c:d8:4f:00:93: 23:b6:ca:8f:8c:30:5f:d5:85:98:1c:82:4f:e0:e1:49:76:4c: e4:f3:5f:18:56:32:46:63:97:d6:c1:95:d5:0a:f1:6b:d2:da: 94:f9:41:73:fe:23:24:01:1c:06:eb:e9:1e:a0:3c:6c:16:f9: 13:39:1b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydonqMXOC/FYzZXlizbqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg3MzllZjg0N2YwN2EwYTdlNzhiZWU4Yjk4NDc0MGUyMDE1NDAzMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBEHUldWo3mEjAKiJ2boM8zUJh9s yM1QBEg2MGnZtqtEXFIw9JhkCqDEGHjd7K8/2kK4pqiPZsczu48/b7YYEfye/1iW UH8Qsn3s9IA/QAauQJq+XjXdCAzmxWMbstNWMqS/9ZFOwo8b7mB7Eg1kdbIDfE8g DZaFYA9k8yoDIKOne8Y2q0aAWnB563Hq/1qSyQyWRZd+qqdp+ag6maxUtq4B4V9U jpXXFLg30kagAU5D2Gj18pYynDiyomfhQLKI22q3Yt2PP9FZJFlthJFlG1fvokHY KA+zsysmfJ43f6I98/1kg95o2aOcCnL9fZSHCFk85s4Uv07PgwO2Oso4kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOe+Efwegp+eL7ouYR0DiAVQDG/MB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqZF4eCB rCLbDms0WSRCXVspbF2zjTUpSC+bG2aUX+/BynNKBYL1fGCw00Rq+N6/N96smog3 ya00MB/fBfAwf/fP8VF/RznUjn/PlAk5rhEmpdoJFhLYxHTkhBa/kfKNmvBUq9vA rj4CopW+YDFknG/vOlX2TEPdL/i8SXS4vyiYKdr8DvG3jAnBK57VOy85lM+gg5k6 pv6nivKAoGa2J4+44f2OOIKs6rb1nxrBCWslr1hH/cMrUh8O0IYQcK3tJEzYTwCT I7bKj4wwX9WFmByCT+DhSXZM5PNfGFYyRmOX1sGV1Qrxa9LalPlBc/4jJAEcBuvp HqA8bBb5Ezkbzg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:02 2025 by rpki-client