This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: HjoNMQgZIJX9Kx2D/84l2VVNKA0Saryx3NLdoC6p8/c= Subject key identifier: F2:71:57:7C:17:D9:C8:B0:E8:1C:C7:19:24:FA:1E:77:24:D5:0F:E4 Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019AF3F7DE8A99F960BE28E5A19A5DA0F132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 167C Signing time: Sat 06 Dec 2025 14:01:38 +0000 Manifest this update: Sat 06 Dec 2025 14:01:38 +0000 Manifest next update: Sun 07 Dec 2025 14:01:38 +0000 Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=) 2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=) 3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: 5mPO6r27XhgddZHWd2TOxCbeXm2tul8NsHH2DP5fz30=) 4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:de:8a:99:f9:60:be:28:e5:a1:9a:5d:a0:f1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Dec 6 14:01:38 2025 GMT Not After : Dec 7 14:01:38 2025 GMT Subject: CN=f271577c17d9c8b0e81cc71924fa1e7724d50fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:1c:cb:f9:ae:7f:62:06:58:3f:b1:0a:aa: ea:63:52:67:a8:9e:7e:6e:0d:f8:90:da:5a:20:df: 85:5d:93:f3:79:f3:40:96:c2:fb:5e:cd:f4:9a:09: 50:c2:d4:46:07:5d:52:46:53:5d:f9:20:aa:aa:50: 7a:b3:aa:e0:32:d5:71:59:3b:7d:a5:bd:2a:36:d2: 1b:94:59:14:56:ce:04:b3:88:15:87:85:84:ca:d0: 78:59:ae:12:da:e5:27:8e:d7:cb:f4:6c:46:1a:4f: f0:08:86:24:b7:5b:df:42:25:55:c4:c7:37:15:e3: 7f:55:6d:5e:c6:f5:39:6e:21:38:fa:c4:b6:5e:d1: 0f:09:2a:b1:ed:1e:a9:25:d1:72:bd:6b:4f:ec:6b: 70:c7:93:27:cf:09:55:6c:7b:a5:41:98:5d:98:1c: 22:fd:26:ca:33:da:a0:6b:4c:dd:74:34:fa:6e:b5: f0:78:24:87:07:0f:d1:f1:31:b7:fa:49:8a:4e:fd: 96:52:aa:42:13:0f:b9:c3:b8:e8:51:d4:17:23:be: 9c:55:80:67:be:45:c1:99:8a:72:49:65:bf:cd:26: c5:a5:c4:21:c5:61:df:04:ce:51:a7:3d:2b:98:e6: 0d:40:6f:0e:a1:55:79:43:51:9e:08:76:da:dc:15: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:71:57:7C:17:D9:C8:B0:E8:1C:C7:19:24:FA:1E:77:24:D5:0F:E4 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:54:bf:6c:d4:f6:0a:32:68:c1:13:9e:d6:20:ea:7c:86:95: 43:3b:1d:e9:73:d8:82:c4:7b:94:ab:e4:e9:1c:b6:59:c3:53: 25:b5:b9:2e:9d:90:35:6d:19:41:18:38:e9:aa:0e:59:c5:87: 1a:2e:d1:ff:9c:22:45:d8:d2:56:38:77:bc:a9:96:ab:38:28: b8:1b:57:81:68:e6:2b:aa:8f:26:3b:5f:ac:7a:6c:ac:64:b8: 2a:76:c7:5c:82:09:8f:79:4b:fa:05:ce:70:63:53:72:4c:bf: 93:4b:5d:e6:48:11:6a:61:b7:ed:a2:a9:9a:aa:7e:cc:66:8f: 35:6b:50:c0:02:2c:bb:40:5e:9c:6e:38:76:12:55:27:94:a7: 3a:83:a5:75:11:ce:5c:fc:2b:2c:54:9c:25:e5:5d:b7:84:30: 3e:9e:93:46:e3:94:1a:73:8a:f9:32:78:79:0a:8e:d7:8a:28: 0f:29:aa:fa:eb:63:42:71:1c:64:e1:86:ae:e3:86:ce:4f:08: d8:02:7d:57:89:fb:08:eb:eb:b8:fa:df:8b:12:f6:0c:a8:7b: 9a:6a:f9:e5:b1:4b:a0:8c:14:09:cf:27:d9:39:ae:5b:95:b5: f6:94:17:1e:c2:44:07:49:0d:27:da:83:8d:0b:ca:43:76:c4: 75:71:d7:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz996KmflgvijloZpdoPEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjUxMjA2MTQwMTM4WhcNMjUxMjA3MTQwMTM4WjAzMTEwLwYDVQQD EyhmMjcxNTc3YzE3ZDljOGIwZTgxY2M3MTkyNGZhMWU3NzI0ZDUwZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzMcy/muf2IGWD+xCqrqY1JnqJ5+ bg34kNpaIN+FXZPzefNAlsL7Xs30mglQwtRGB11SRlNd+SCqqlB6s6rgMtVxWTt9 pb0qNtIblFkUVs4Es4gVh4WEytB4Wa4S2uUnjtfL9GxGGk/wCIYkt1vfQiVVxMc3 FeN/VW1exvU5biE4+sS2XtEPCSqx7R6pJdFyvWtP7Gtwx5MnzwlVbHulQZhdmBwi /SbKM9qga0zddDT6brXweCSHBw/R8TG3+kmKTv2WUqpCEw+5w7joUdQXI76cVYBn vkXBmYpySWW/zSbFpcQhxWHfBM5Rpz0rmOYNQG8OoVV5Q1GeCHba3BXMLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJxV3wX2ciw6BzHGST6Hnck1Q/kMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFS/bNT2 CjJowROe1iDqfIaVQzsd6XPYgsR7lKvk6Ry2WcNTJbW5Lp2QNW0ZQRg46aoOWcWH Gi7R/5wiRdjSVjh3vKmWqzgouBtXgWjmK6qPJjtfrHpsrGS4KnbHXIIJj3lL+gXO cGNTcky/k0td5kgRamG37aKpmqp+zGaPNWtQwAIsu0BenG44dhJVJ5SnOoOldRHO XPwrLFScJeVdt4QwPp6TRuOUGnOK+TJ4eQqO14ooDymq+utjQnEcZOGGruOGzk8I 2AJ9V4n7COvruPrfixL2DKh7mmr55bFLoIwUCc8n2TmuW5W19pQXHsJEB0kNJ9qD jQvKQ3bEdXHXHg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:46:18 2025 by rpki-client