This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json) Hash identifier: WuwJCEbKcuzjjHae7Fz4HuKQmlhO+ACrLcqLA4bdpzM= Subject key identifier: BF:01:8D:35:11:5E:7D:B9:46:02:09:95:20:9B:3F:21:7A:31:44:D6 Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a Certificate serial: 019AF276F0AA7708242D25F0072F26F70D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=) 2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: VveMDOIH1NghNikhRiXROR0pIKpgTehASZ65+OY1cTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f0:aa:77:08:24:2d:25:f0:07:2f:26:f7:0d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=bf018d35115e7db946020995209b3f217a3144d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:2a:18:2a:0f:7e:c8:9c:4a:b3:bb:dc:56: 0e:7a:8b:8a:90:b8:23:b4:ce:b9:c2:39:f2:4e:c8: 7a:a3:ce:7e:e2:10:1b:a9:13:89:4a:96:c9:71:8f: 49:d2:16:dc:94:7a:14:0b:b2:16:55:d8:d1:87:94: b1:3f:b5:51:a5:11:e5:7c:a1:36:81:86:8e:a4:bf: b1:48:8d:47:ce:ca:7f:7c:eb:40:66:01:f3:2e:c8: df:6f:0b:b8:dc:0d:42:49:ff:cd:a3:bb:f2:44:1a: a9:3f:f5:a3:a1:aa:ba:9c:1d:cd:cd:89:e6:b6:5c: 1a:df:3c:03:76:3e:78:8b:30:de:49:9a:d9:f2:0e: 4d:2c:01:fc:32:bd:c9:0f:b7:9e:16:94:63:b8:35: 07:f5:07:a1:f9:de:61:29:25:5a:33:36:05:fe:61: ea:23:8d:3d:88:82:d8:e1:5d:8e:c1:56:ce:fa:52: 03:0c:15:0f:11:a7:4b:97:ed:4a:70:60:42:eb:0a: 68:00:ab:06:7e:5d:65:2c:0f:f7:2f:3f:7e:bb:05: fa:00:94:85:87:3a:92:18:96:18:27:77:7c:ae:42: 9a:86:57:c1:f2:6d:d1:6d:ea:e8:ed:9e:8b:5c:f9: 53:54:f0:b7:f3:5d:7d:45:44:67:da:87:df:08:8a: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:01:8D:35:11:5E:7D:B9:46:02:09:95:20:9B:3F:21:7A:31:44:D6 X509v3 Authority Key Identifier: keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:57:5f:c7:27:01:6f:cc:94:5f:8c:56:1e:f1:a1:9d:d8:d2: 60:35:99:22:fa:c7:f6:4d:78:39:8e:f6:20:29:ba:d6:cd:53: 71:82:51:22:75:81:8d:09:06:0f:08:6a:44:33:ff:ed:f0:ec: cd:74:ef:2b:39:d2:06:81:ca:cb:2d:0d:3d:3c:ad:f8:be:76: a3:25:bb:37:6b:59:15:53:df:e0:b0:76:31:cc:b3:55:49:2e: 03:d8:c8:58:92:d3:67:5b:c4:49:63:e6:69:4b:c6:dd:dc:08: de:a5:a5:a6:5f:5c:fa:78:3b:67:5f:ec:21:99:b4:2d:2e:62: d0:df:a9:80:ca:79:a3:fe:2c:04:56:a6:f7:31:34:2d:75:9b: 31:37:f3:12:49:ba:91:2d:59:96:e4:1c:df:8d:d5:85:c3:9e: ac:18:5b:cd:2c:16:b7:fb:d1:d0:17:1a:63:01:b6:61:2a:9c: 43:db:41:a6:3d:9f:3a:d3:ee:ab:bc:e9:87:24:c4:28:39:51: 3a:9b:fe:c7:41:11:32:05:cf:9f:3f:1d:2b:06:6d:58:b9:f7: 71:41:d2:f6:d3:06:6b:4e:4a:c7:fb:0d:57:20:59:77:95:a6: af:fc:0d:87:d2:3a:55:3e:37:e5:c5:49:6f:79:12:f9:ed:15: f1:24:d0:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvCqdwgkLSXwBy8m9w0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm Y2Q4NWEwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhiZjAxOGQzNTExNWU3ZGI5NDYwMjA5OTUyMDliM2YyMTdhMzE0NGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQYqGCoPfsicSrO73FYOeouKkLgj tM65wjnyTsh6o85+4hAbqROJSpbJcY9J0hbclHoUC7IWVdjRh5SxP7VRpRHlfKE2 gYaOpL+xSI1Hzsp/fOtAZgHzLsjfbwu43A1CSf/No7vyRBqpP/Wjoaq6nB3NzYnm tlwa3zwDdj54izDeSZrZ8g5NLAH8Mr3JD7eeFpRjuDUH9Qeh+d5hKSVaMzYF/mHq I409iILY4V2OwVbO+lIDDBUPEadLl+1KcGBC6wpoAKsGfl1lLA/3Lz9+uwX6AJSF hzqSGJYYJ3d8rkKahlfB8m3Rbero7Z6LXPlTVPC38119RURn2offCIrX+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8BjTURXn25RgIJlSCbPyF6MUTWMB8GA1UdIwQY MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFdfxycB b8yUX4xWHvGhndjSYDWZIvrH9k14OY72ICm61s1TcYJRInWBjQkGDwhqRDP/7fDs zXTvKznSBoHKyy0NPTyt+L52oyW7N2tZFVPf4LB2McyzVUkuA9jIWJLTZ1vESWPm aUvG3dwI3qWlpl9c+ng7Z1/sIZm0LS5i0N+pgMp5o/4sBFam9zE0LXWbMTfzEkm6 kS1ZluQc343VhcOerBhbzSwWt/vR0BcaYwG2YSqcQ9tBpj2fOtPuq7zphyTEKDlR Opv+x0ERMgXPnz8dKwZtWLn3cUHS9tMGa05Kx/sNVyBZd5Wmr/wNh9I6VT435cVJ b3kS+e0V8STQrg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:01 2025 by rpki-client