This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json) Hash identifier: GyoEuNVwdvaxEvx4mKrcm4VqAv1N6r3KpZsDVNwU15s= Subject key identifier: 4D:A9:F1:79:B3:78:8B:2A:08:95:BA:9E:9A:D4:D8:B4:83:D1:47:38 Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Certificate serial: 019AF27656DFCD7709B5C858BB230F3170E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft Manifest number: 11F0 Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=) 2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: L7iRgJid2HjMA2TKsFm6UOY7CmwvqTGTPILhwOEEJq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:56:df:cd:77:09:b5:c8:58:bb:23:0f:31:70:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=4da9f179b3788b2a0895ba9e9ad4d8b483d14738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4b:7d:89:1c:7c:5a:ab:75:c7:60:d6:96:90: 62:2e:fe:a4:55:1c:ef:34:ea:6c:34:33:cf:68:7f: 71:ad:b7:57:aa:05:c2:45:97:d1:5b:ec:2e:2e:c8: 18:99:a2:d4:83:1b:70:43:c1:1f:48:c3:cb:55:d2: 79:ff:19:8e:5a:43:b5:6a:e5:05:5d:8c:17:46:56: 38:5d:0f:da:76:8a:92:b1:54:b2:bd:00:c3:85:f8: 2b:8f:de:7c:63:4a:f1:b1:29:75:34:0d:a6:c4:3b: 3e:76:0f:fa:04:77:a8:0e:14:80:da:3c:3a:24:dd: e6:27:e8:bc:57:98:31:ca:a5:11:c6:7d:17:e6:f3: 10:5b:da:c5:e2:55:47:6d:f0:c8:07:db:3d:f4:af: 5a:ba:7d:6f:08:14:e0:6b:19:13:12:be:8f:4b:e4: 9d:1d:c8:4b:d7:7e:39:2e:d7:f2:00:f2:91:0e:46: 55:83:d4:32:3c:bb:0d:13:20:72:39:0d:91:7e:23: b8:21:1e:64:3a:d9:36:75:53:a9:8c:9c:bc:71:d3: 5d:bd:af:5d:ed:44:f2:9f:26:69:b6:a4:b7:78:c8: 79:34:7f:bb:ba:40:a6:88:60:3e:a4:54:3e:e8:9c: 8c:06:2e:6b:c7:d5:06:c5:cb:93:e2:39:89:48:05: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:F1:79:B3:78:8B:2A:08:95:BA:9E:9A:D4:D8:B4:83:D1:47:38 X509v3 Authority Key Identifier: keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4d:d8:0c:14:47:d2:d8:41:f2:5c:96:0e:4d:42:e5:9d:05: 94:42:ee:31:98:aa:94:f9:e1:ee:44:5d:04:81:1d:60:30:a3: 3a:0d:42:3e:30:ce:fb:c8:63:07:cd:80:16:4f:08:04:0e:ca: 7f:88:24:26:a8:1f:23:df:61:c9:0c:94:34:08:6a:e3:9f:39: 0f:e0:d7:eb:c1:fc:af:53:9e:75:ed:3b:e4:1a:54:75:02:09: 45:8b:eb:43:81:76:ca:6c:95:2a:72:31:65:51:ca:8f:db:76: e5:25:94:97:80:53:fe:74:d8:8f:b8:a6:b5:49:f6:6c:73:84: 88:e3:33:da:17:ff:e0:d2:bd:3e:c5:49:4b:97:29:dd:fe:af: 92:ec:dd:34:fa:11:7c:b9:da:8a:25:2a:7f:49:59:c4:cf:e6: 72:0e:c4:3c:c6:17:c2:26:96:c0:64:a7:1e:5c:d6:0d:a9:b7: d9:ea:b5:29:f5:2a:be:21:fd:ea:0e:d3:5c:77:18:d9:16:e2: 39:7b:be:4c:c9:26:67:bf:98:51:d9:38:86:88:8c:7f:24:15: 7d:46:19:69:27:9e:39:55:07:57:ff:b5:3b:07:e3:35:38:71: 90:f8:8f:e7:44:ff:20:b6:1f:08:dd:48:86:8d:4a:68:c1:be: 6b:a8:90:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlbfzXcJtchYuyMPMXDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMzExMzlmODllODI1OTYyYTdlMzM4MGFkZTc1YjU2YWI1 YmFhZDUwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD Eyg0ZGE5ZjE3OWIzNzg4YjJhMDg5NWJhOWU5YWQ0ZDhiNDgzZDE0NzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEt9iRx8Wqt1x2DWlpBiLv6kVRzv NOpsNDPPaH9xrbdXqgXCRZfRW+wuLsgYmaLUgxtwQ8EfSMPLVdJ5/xmOWkO1auUF XYwXRlY4XQ/adoqSsVSyvQDDhfgrj958Y0rxsSl1NA2mxDs+dg/6BHeoDhSA2jw6 JN3mJ+i8V5gxyqURxn0X5vMQW9rF4lVHbfDIB9s99K9aun1vCBTgaxkTEr6PS+Sd HchL1345LtfyAPKRDkZVg9QyPLsNEyByOQ2RfiO4IR5kOtk2dVOpjJy8cdNdva9d 7UTynyZptqS3eMh5NH+7ukCmiGA+pFQ+6JyMBi5rx9UGxcuT4jmJSAUCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2p8XmzeIsqCJW6nprU2LSD0Uc4MB8GA1UdIwQY MBaAFB8xE5+J6CWWKn4zgK3nW1arW6rVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2Yt YmUxN2I4YWFkNTU0LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2YtYmUxN2I4YWFkNTU0 LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh03YDBRH 0thB8lyWDk1C5Z0FlELuMZiqlPnh7kRdBIEdYDCjOg1CPjDO+8hjB82AFk8IBA7K f4gkJqgfI99hyQyUNAhq4585D+DX68H8r1Oede075BpUdQIJRYvrQ4F2ymyVKnIx ZVHKj9t25SWUl4BT/nTYj7imtUn2bHOEiOMz2hf/4NK9PsVJS5cp3f6vkuzdNPoR fLnaiiUqf0lZxM/mcg7EPMYXwiaWwGSnHlzWDam32eq1KfUqviH96g7TXHcY2Rbi OXu+TMkmZ7+YUdk4hoiMfyQVfUYZaSeeOVUHV/+1OwfjNThxkPiP50T/ILYfCN1I ho1KaMG+a6iQNA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:41 2025 by rpki-client