This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json)
Hash identifier: C/O4X79t2vQF9dWCTje/4hi67HLphwfQwxD/s4Kht5k=
Subject key identifier: 50:3F:C2:92:8D:08:63:9E:B5:1D:29:E2:64:2E:B6:17:11:CD:59:E8
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 019B3231972B90215BE6C123DCC1A5340E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
Manifest number: 1497
Signing time: Thu 18 Dec 2025 16:01:09 +0000
Manifest this update: Thu 18 Dec 2025 16:01:09 +0000
Manifest next update: Fri 19 Dec 2025 16:01:09 +0000
Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=)
2: 1-fD0_gyy16CbQhND5Cq9_D_TVJM.roa (hash: 1YUT/oHeu46DAHuJD9uNps9J96AG+60Vn+GnT3asOpo=)
3: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=)
4: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=)
5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: D6oiieYEn37+dam5nsk/jT5W0CdXrGFWdpJTPPyuQLE=)
6: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=)
7: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=)
8: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=)
9: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=)
10: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=)
11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:31:97:2b:90:21:5b:e6:c1:23:dc:c1:a5:34:0e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Dec 18 16:01:09 2025 GMT
Not After : Dec 19 16:01:09 2025 GMT
Subject: CN=503fc2928d08639eb51d29e2642eb61711cd59e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:50:ee:2a:43:6a:67:00:7f:d1:e6:b8:2d:
95:9d:b4:9b:38:0b:6a:a2:6b:fc:db:db:eb:de:24:
de:08:9d:9f:ad:dd:d6:9a:d8:84:5f:43:ad:5e:b0:
1e:8c:ab:33:2c:56:31:d6:70:08:32:34:c2:55:be:
8b:6d:e2:9f:c6:2b:9a:61:a9:11:fa:5a:da:92:62:
d6:fc:ff:da:9d:46:d6:51:84:46:b3:72:00:2f:ae:
0d:40:61:3e:f7:83:b0:5b:d3:85:71:5a:fd:65:6e:
73:a0:ca:5d:94:67:33:57:b9:92:35:96:18:be:58:
e5:09:55:2d:d5:b6:1a:f1:0b:f2:a3:35:01:8d:b5:
2f:a8:fd:54:4f:d3:78:33:29:b8:29:96:ae:30:3d:
3a:cf:be:56:32:57:82:16:ce:fd:70:85:e8:b9:fe:
54:d8:4b:96:a0:47:c4:a2:48:03:d2:7c:75:13:44:
58:98:f7:26:c0:3f:3a:06:2d:2c:1c:65:2d:4d:9b:
7a:02:28:23:73:28:9a:4b:42:c6:f9:c8:57:6e:10:
7f:0e:5b:b5:a3:63:32:12:46:63:d3:f1:3d:4a:dc:
a3:25:b8:52:fb:ac:b6:d6:fd:c0:78:e9:3f:96:34:
38:13:5a:01:0f:77:d0:06:dc:6b:f2:21:94:07:27:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:C2:92:8D:08:63:9E:B5:1D:29:E2:64:2E:B6:17:11:CD:59:E8
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:04:b4:6e:68:a9:9a:9e:67:5f:eb:06:e1:c6:3e:fa:e8:87:
22:63:b9:dc:1c:49:1d:52:fb:46:af:25:a9:5f:ac:a3:90:87:
7f:56:81:d1:ec:38:d7:c2:f8:fb:9c:ce:b9:f4:61:cd:3d:57:
f6:71:c4:f0:21:3e:22:f0:5a:ef:49:00:f0:73:71:b4:f8:8c:
13:00:7a:61:be:3a:43:58:4f:3c:86:3a:51:60:70:09:eb:94:
a1:fe:88:53:4f:22:93:34:ea:48:7b:47:aa:f0:7a:1c:9a:60:
57:94:3a:4d:85:18:be:9d:25:d2:e1:cc:71:ed:da:77:31:1c:
4e:21:4c:ac:7a:1c:ca:98:af:11:95:77:c9:2b:37:eb:cd:d0:
b3:e1:5f:d7:81:8a:be:a4:d9:49:3e:f0:8d:8f:22:d9:91:64:
2f:2e:0c:4b:eb:8c:09:c9:6b:a9:eb:36:8a:26:1c:27:a4:99:
a9:84:7f:13:46:41:42:a3:1e:02:84:67:57:41:7d:8e:26:ec:
78:0c:eb:c6:e1:7b:9e:bc:62:5e:29:c5:2c:c1:c0:b4:b2:f6:
78:67:91:bf:66:87:cc:4a:1a:a4:9f:d3:f8:6f:77:97:ec:69:
df:18:c4:d5:25:1e:66:b8:22:e9:93:be:f9:5d:69:94:2d:3b:
0f:51:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:31:06 2025 by rpki-client