This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json) Hash identifier: bZeuu8izvUZtGxO2LZ9s83z45EBsiY21tCuFN6U7OWQ= Subject key identifier: 54:BE:C5:5B:12:7D:BC:6E:03:DF:1B:83:AB:0E:A5:94:59:65:3F:7E Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71 Certificate serial: 019AFCC5434286047AA0EBFE2EC476133FA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft Manifest number: 046E Signing time: Mon 08 Dec 2025 07:02:57 +0000 Manifest this update: Mon 08 Dec 2025 07:02:57 +0000 Manifest next update: Tue 09 Dec 2025 07:02:57 +0000 Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=) 2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=) 3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: P4y2qXnsx3JTzPbvdJcqNZtDjQ51LC1RnBufxy3NjPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c5:43:42:86:04:7a:a0:eb:fe:2e:c4:76:13:3f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71 Validity Not Before: Dec 8 07:02:57 2025 GMT Not After : Dec 9 07:02:57 2025 GMT Subject: CN=54bec55b127dbc6e03df1b83ab0ea59459653f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:92:87:f5:9e:4f:36:bd:85:cc:c7:29:1d: 50:3d:3e:62:f9:e3:ae:8d:6c:21:42:b4:b7:03:e5: 52:88:ce:73:50:c5:c3:99:32:d5:d1:8b:9b:f4:70: b8:eb:42:78:9d:90:b1:84:18:6d:d7:a3:bd:f6:8f: bc:a5:ab:ec:8a:6c:40:f2:64:08:c8:ec:f5:6b:ac: f9:a5:df:e8:fb:69:3f:65:ab:1b:0c:9a:59:1a:31: 77:e3:2d:eb:17:51:67:c5:c5:61:f9:03:19:27:fd: 0b:fc:95:75:75:a9:f9:6f:e6:42:6b:d9:a4:cc:0f: 33:6e:1c:9e:d8:7d:49:15:39:8a:b8:01:d7:1e:cf: d7:33:5b:3a:1d:4d:8f:06:9c:47:8c:42:bf:68:ec: 51:14:0a:c2:dc:af:3a:1f:86:96:13:d5:b6:f2:ad: 56:6a:7b:ff:7a:fd:91:b3:dc:2e:30:3f:5a:51:ca: 0d:f9:de:a8:f9:08:a8:7e:f8:6d:46:c4:14:e8:16: 7c:59:cd:52:3f:f0:b5:71:58:ea:07:5c:7c:3a:03: f6:1e:41:02:de:10:9a:e3:79:4e:ee:e9:86:df:39: 8a:35:20:b7:48:47:e0:ab:72:06:c9:68:16:6a:eb: 21:ee:b0:e6:95:b7:a0:9f:2c:ac:c2:f2:c2:5b:a6: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BE:C5:5B:12:7D:BC:6E:03:DF:1B:83:AB:0E:A5:94:59:65:3F:7E X509v3 Authority Key Identifier: keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e1:d3:06:75:f7:65:19:dc:a9:0a:ec:d5:32:97:0f:d2:12: f1:3a:7e:7e:90:91:b4:f0:36:0b:83:15:a2:1a:6e:3f:fc:8e: d2:b9:d4:7c:7b:7f:f2:9f:9b:8e:e8:96:eb:cf:d7:42:fd:b0: e7:4e:0d:20:42:88:63:3d:4e:3e:54:57:40:bc:31:4a:6b:86: 8c:04:2e:dd:93:a3:df:c6:34:8c:bf:df:67:48:3b:42:6f:a9: 73:d3:7e:20:b4:83:f5:84:79:58:32:e6:cc:78:00:2a:44:18: 18:86:0c:7a:ce:f5:98:88:64:2c:63:6a:21:16:a2:2d:ee:16: 45:f7:8d:24:0d:8a:c3:6d:c0:c0:78:0f:77:da:fd:f5:68:80: c2:6d:8d:58:39:7a:2f:67:22:00:25:e8:ee:40:e3:e7:0a:6c: a3:ce:55:c8:00:e4:f4:ca:ac:4d:f9:53:25:d0:ef:07:47:dc: 97:70:d2:7d:b2:f6:48:ae:54:53:b2:40:c0:92:66:63:b6:b6: 59:0e:73:99:cd:25:98:30:d5:93:35:a8:83:7c:c3:b4:50:f9: da:ee:3d:8b:99:1a:a0:48:cf:ef:b6:97:1c:38:6a:93:f9:3b: 88:67:9a:fd:be:7f:a1:d5:7a:37:0a:92:7a:b5:76:e8:b6:5d: 17:e1:77:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xUNChgR6oOv+LsR2Ez+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3 NmVmNzEwHhcNMjUxMjA4MDcwMjU3WhcNMjUxMjA5MDcwMjU3WjAzMTEwLwYDVQQD Eyg1NGJlYzU1YjEyN2RiYzZlMDNkZjFiODNhYjBlYTU5NDU5NjUzZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshCSh/WeTza9hczHKR1QPT5i+eOu jWwhQrS3A+VSiM5zUMXDmTLV0Yub9HC460J4nZCxhBht16O99o+8pavsimxA8mQI yOz1a6z5pd/o+2k/ZasbDJpZGjF34y3rF1FnxcVh+QMZJ/0L/JV1dan5b+ZCa9mk zA8zbhye2H1JFTmKuAHXHs/XM1s6HU2PBpxHjEK/aOxRFArC3K86H4aWE9W28q1W anv/ev2Rs9wuMD9aUcoN+d6o+QiofvhtRsQU6BZ8Wc1SP/C1cVjqB1x8OgP2HkEC 3hCa43lO7umG3zmKNSC3SEfgq3IGyWgWaush7rDmlbegnyyswvLCW6aRKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS+xVsSfbxuA98bg6sOpZRZZT9+MB8GA1UdIwQY MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuHTBnX3 ZRncqQrs1TKXD9IS8Tp+fpCRtPA2C4MVohpuP/yO0rnUfHt/8p+bjuiW68/XQv2w 504NIEKIYz1OPlRXQLwxSmuGjAQu3ZOj38Y0jL/fZ0g7Qm+pc9N+ILSD9YR5WDLm zHgAKkQYGIYMes71mIhkLGNqIRaiLe4WRfeNJA2Kw23AwHgPd9r99WiAwm2NWDl6 L2ciACXo7kDj5wpso85VyADk9MqsTflTJdDvB0fcl3DSfbL2SK5UU7JAwJJmY7a2 WQ5zmc0lmDDVkzWog3zDtFD52u49i5kaoEjP77aXHDhqk/k7iGea/b5/odV6NwqS erV26LZdF+F3iw== -----END CERTIFICATE-----Generated at Mon Dec 8 10:46:36 2025 by rpki-client