This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json) Hash identifier: EniIEQugksM0ZUVhrTqjbO1HoATvXyqN9iepv3yn214= Subject key identifier: C6:F0:82:39:F6:A0:97:31:BE:B1:6C:E4:C3:01:86:BE:E5:BC:A8:74 Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Certificate serial: 019AF31B6FC4F2E3DF2E4FEE19D41ACA71FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=) 2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: MOCy8JGLwYyS/ogqsUrC3srRrWTfGqXfuC2NiFawfRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6f:c4:f2:e3:df:2e:4f:ee:19:d4:1a:ca:71:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=c6f08239f6a09731beb16ce4c30186bee5bca874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:66:eb:11:45:e4:bc:11:98:84:16:72:bb: 38:aa:1a:80:80:18:d3:a5:00:e5:a1:4e:94:01:7e: 3f:85:32:91:f9:f5:6f:a9:3f:ee:16:9d:df:65:8a: d1:91:33:73:7b:1b:d0:b7:51:ca:a8:ba:95:6b:5e: 91:2b:9e:60:a7:bb:38:78:8a:4a:03:b7:1d:fb:54: 5f:65:5c:d1:ac:b8:36:8c:76:13:a9:56:87:30:14: 67:58:09:70:27:36:3a:73:6c:d8:ae:0f:2d:de:fc: d5:24:90:41:13:c5:c9:5c:e4:74:ae:d4:c6:74:0b: 9b:60:27:b2:cb:61:6f:72:90:3b:81:c5:a0:a8:7e: a0:5d:13:7e:85:02:db:05:f2:04:2d:a7:55:f6:7f: d9:5b:6a:93:d2:60:5d:81:ce:4f:eb:c5:f3:cb:b0: 2f:8a:98:93:17:1e:b1:02:9b:1b:c2:27:64:67:30: 5e:ca:6e:32:4c:9d:2c:97:43:5c:10:74:de:a5:ff: cf:92:a5:82:1b:68:c1:18:ec:29:61:ac:6a:c7:b5: 00:d7:96:4e:c2:01:7d:11:45:fa:e7:eb:94:56:b4: 9e:8d:f8:7c:a6:a5:93:cb:30:3a:83:cb:35:3c:20: 20:71:2d:72:1c:d9:0f:80:2f:c1:e7:89:d8:78:92: 08:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F0:82:39:F6:A0:97:31:BE:B1:6C:E4:C3:01:86:BE:E5:BC:A8:74 X509v3 Authority Key Identifier: keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7f:b9:c1:46:97:75:8d:56:f7:e5:ad:0b:b7:23:4d:79:59: 93:ff:6e:59:45:d7:c8:82:d7:cf:e2:61:f2:cf:c0:f3:81:9c: 3e:da:40:67:d1:cf:81:8b:94:08:44:c6:b9:bf:dc:50:67:2a: 85:fb:4c:dd:f9:bd:29:22:0c:77:53:a8:5b:b5:c4:81:1d:e8: b8:54:05:67:f1:82:e8:bc:87:c9:89:25:61:d9:19:d9:49:88: c9:b0:cc:60:3e:25:83:19:55:f4:7f:de:ed:89:db:56:0a:38: be:1f:11:02:18:9f:e3:2a:a7:44:a0:d8:c8:ae:22:2a:03:af: 60:38:f0:6c:9c:bf:5a:c9:33:6f:5a:56:3a:c1:a9:7a:7f:3b: e5:a2:b9:fe:d7:02:c1:37:a9:35:8b:3b:8c:87:44:f5:f6:67: 44:23:a0:39:48:0b:36:ff:1e:1e:b8:61:c4:63:4b:c2:77:be: 65:56:42:98:73:f5:1a:51:c0:d5:c9:82:46:43:69:5f:c1:77: 36:78:ce:29:8e:ce:76:6c:ee:53:bb:f8:5e:27:01:71:ec:e0: 46:c0:4a:e5:07:fa:23:4e:a7:2f:9c:ec:83:b9:00:b4:35:57: ca:80:b7:6c:8c:5b:f7:10:7b:4b:29:1d:89:f6:0a:fd:4a:6e: b0:d7:48:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2/E8uPfLk/uGdQaynH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGUxMDNhYWVjNDMyZmMxOTFkNDk4MTliZDFhYjcxZmUx Y2ZhODAwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EyhjNmYwODIzOWY2YTA5NzMxYmViMTZjZTRjMzAxODZiZWU1YmNhODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaFm6xFF5LwRmIQWcrs4qhqAgBjT pQDloU6UAX4/hTKR+fVvqT/uFp3fZYrRkTNzexvQt1HKqLqVa16RK55gp7s4eIpK A7cd+1RfZVzRrLg2jHYTqVaHMBRnWAlwJzY6c2zYrg8t3vzVJJBBE8XJXOR0rtTG dAubYCeyy2FvcpA7gcWgqH6gXRN+hQLbBfIELadV9n/ZW2qT0mBdgc5P68Xzy7Av ipiTFx6xApsbwidkZzBeym4yTJ0sl0NcEHTepf/PkqWCG2jBGOwpYaxqx7UA15ZO wgF9EUX65+uUVrSejfh8pqWTyzA6g8s1PCAgcS1yHNkPgC/B54nYeJII+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbwgjn2oJcxvrFs5MMBhr7lvKh0MB8GA1UdIwQY MBaAFIVOEDquxDL8GR1JgZvRq3H+HPqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEt OWMwMWRmN2I5ZTY2LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEtOWMwMWRmN2I5ZTY2 LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX+5wUaX dY1W9+WtC7cjTXlZk/9uWUXXyILXz+Jh8s/A84GcPtpAZ9HPgYuUCETGub/cUGcq hftM3fm9KSIMd1OoW7XEgR3ouFQFZ/GC6LyHyYklYdkZ2UmIybDMYD4lgxlV9H/e 7YnbVgo4vh8RAhif4yqnRKDYyK4iKgOvYDjwbJy/Wskzb1pWOsGpen875aK5/tcC wTepNYs7jIdE9fZnRCOgOUgLNv8eHrhhxGNLwne+ZVZCmHP1GlHA1cmCRkNpX8F3 NnjOKY7OdmzuU7v4XicBcezgRsBK5Qf6I06nL5zsg7kAtDVXyoC3bIxb9xB7Sykd ifYK/UpusNdIog== -----END CERTIFICATE-----Generated at Sat Dec 6 19:52:25 2025 by rpki-client