This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json) Hash identifier: MTkxVNtxEsl8Cl3JXQa6cWRtQt8U5znzFdP7nx/9xio= Subject key identifier: 50:C7:90:8F:7F:74:D0:2A:5A:D2:52:D5:AF:AB:4F:19:61:83:C2:06 Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Certificate serial: 019AF1643DDACFA0F68390341B566131173A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft Manifest number: 1488 Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=) 2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: QPcAqAZ4rGiM/APXh2ie+8ebwJz7/0Tvn7YYO7CTA5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3d:da:cf:a0:f6:83:90:34:1b:56:61:31:17:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5 Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=50c7908f7f74d02a5ad252d5afab4f196183c206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2e:bb:19:29:ee:91:77:54:30:5d:c3:fa:b9: 91:e7:49:72:03:27:f2:0b:d4:8a:a9:d6:fd:fb:74: 6a:0d:1b:2f:06:0c:ea:98:27:01:dc:e8:6f:cd:31: 11:4e:75:57:a7:37:76:b7:10:03:9b:70:8a:81:f4: fd:2b:66:8c:26:fa:e0:a3:ed:da:fb:e9:78:98:35: 5c:15:68:b2:d1:b8:26:1b:3e:17:cd:24:28:ee:9b: 61:27:12:d6:2f:78:a0:2f:a1:e0:23:bf:f1:87:45: fb:e7:01:b5:fd:f0:dc:94:59:f6:23:35:e5:91:fd: 3d:fc:95:5b:dd:0b:c7:53:26:06:4a:23:f2:be:82: f3:6b:b7:1c:0e:05:4a:03:88:d6:c0:8c:76:1a:2a: 60:b1:c5:1f:0e:64:13:9a:7d:ca:6a:50:7c:3a:71: b9:74:04:cb:c2:f5:9a:08:fb:9f:36:0b:20:d8:16: 2d:59:3e:b1:c1:8e:2e:90:13:62:f5:a8:1e:72:32: d5:f4:03:76:37:67:c1:be:ef:5e:88:52:3b:1d:3a: 13:81:e2:79:2c:3d:e0:91:8e:d3:50:30:f1:1b:5a: 76:6f:c2:c9:97:d1:4a:54:7e:59:d8:8f:42:ff:3f: c5:f0:44:ca:df:a3:50:56:e7:40:15:5a:a1:c2:75: 4d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:90:8F:7F:74:D0:2A:5A:D2:52:D5:AF:AB:4F:19:61:83:C2:06 X509v3 Authority Key Identifier: keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d7:c1:c9:3e:0b:7c:9e:08:09:9d:31:0d:bf:dc:f9:02:74: 42:05:4f:2d:d7:55:0a:d3:5f:5f:d0:1f:45:3b:7c:d9:51:82: 7b:78:b1:c9:b1:0e:d6:f8:5b:83:bd:7a:7e:b8:61:12:38:a7: 95:a2:5f:62:45:db:8f:8a:cc:81:b7:8f:98:6a:9e:aa:c6:49: 86:71:08:56:3d:12:b8:55:ae:09:7b:f2:b7:d1:b7:a3:91:a8: 76:40:62:24:1a:24:01:02:dd:93:4d:02:00:c7:62:9a:0d:59: bb:cb:ae:e5:aa:8d:02:4e:00:df:9e:65:81:d3:9b:f8:70:d2: 21:65:57:a1:1d:aa:d4:c2:f9:1e:92:03:ac:d0:f3:53:ec:dc: 01:a2:1a:55:b9:0b:d4:45:a9:0e:e1:04:5a:a7:89:ab:c8:7b: 0c:f9:9b:bb:dd:76:ac:fc:bd:69:6d:3e:71:02:ad:19:8b:d0: e6:e6:d1:19:ee:22:e1:d2:bc:67:f3:79:79:cb:d6:d2:3a:4a: 6c:6b:d3:62:9b:b3:ed:5d:f7:fa:fc:1d:49:74:31:3d:ab:2c: 84:9c:ec:90:46:fd:2b:5f:1d:f1:99:f8:e9:9f:a3:d2:58:0c: cd:d3:aa:21:33:32:92:c5:c6:51:9c:30:6b:a4:44:ad:d4:e8: 8b:84:68:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD3az6D2g5A0G1ZhMRc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NzE0YmZkOTgyZWQyOTdlNWM3M2VjZTc0ZDIyMmU1Mjc0 YzFmYjUwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD Eyg1MGM3OTA4ZjdmNzRkMDJhNWFkMjUyZDVhZmFiNGYxOTYxODNjMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i67GSnukXdUMF3D+rmR50lyAyfy C9SKqdb9+3RqDRsvBgzqmCcB3OhvzTERTnVXpzd2txADm3CKgfT9K2aMJvrgo+3a ++l4mDVcFWiy0bgmGz4XzSQo7pthJxLWL3igL6HgI7/xh0X75wG1/fDclFn2IzXl kf09/JVb3QvHUyYGSiPyvoLza7ccDgVKA4jWwIx2GipgscUfDmQTmn3KalB8OnG5 dATLwvWaCPufNgsg2BYtWT6xwY4ukBNi9agecjLV9AN2N2fBvu9eiFI7HToTgeJ5 LD3gkY7TUDDxG1p2b8LJl9FKVH5Z2I9C/z/F8ETK36NQVudAFVqhwnVNkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDHkI9/dNAqWtJS1a+rTxlhg8IGMB8GA1UdIwQY MBaAFLRxS/2YLtKX5cc+znTSIuUnTB+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUt NjJlYTFlN2U4ZmM2LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUtNjJlYTFlN2U4ZmM2 LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9fByT4L fJ4ICZ0xDb/c+QJ0QgVPLddVCtNfX9AfRTt82VGCe3ixybEO1vhbg716frhhEjin laJfYkXbj4rMgbePmGqeqsZJhnEIVj0SuFWuCXvyt9G3o5GodkBiJBokAQLdk00C AMdimg1Zu8uu5aqNAk4A355lgdOb+HDSIWVXoR2q1ML5HpIDrNDzU+zcAaIaVbkL 1EWpDuEEWqeJq8h7DPmbu912rPy9aW0+cQKtGYvQ5ubRGe4i4dK8Z/N5ecvW0jpK bGvTYpuz7V33+vwdSXQxPasshJzskEb9K18d8Zn46Z+j0lgMzdOqITMyksXGUZww a6RErdToi4Ro3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:45 2025 by rpki-client