This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft File: hGr1TmVYz8hiUpRuRpKrknd8DhA.mft (raw, json) Hash identifier: +0+tCvzyrbRieKacHTcI2HvosGf6jVm52BLKGN6Mexc= Subject key identifier: B1:40:F8:77:E2:A3:17:12:D2:8B:64:DE:2D:C8:07:37:2B:FF:6F:7C Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10 Certificate serial: 019AF1D1ECDD90BE25C810236646796DFC18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft Manifest number: 1385 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: EAjdVmmPDgRsaYdJzqxZsWJ1dtQ.roa (hash: MpPa88zI8gAyzjuIqd3qZ9dmTTo9CAG0jQ+czPWKrY0=) 2: ZpIa8d84ZFXt_ZFQqAeQWbEn8cE.roa (hash: yg+iHdLIlyvv1zJT3FKVPdTj2ezKdgH8bzRxXJFfD+M=) 3: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (hash: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=) 4: hGr1TmVYz8hiUpRuRpKrknd8DhA.crl (hash: za2QL9UUCNsnoujUfjAwoHcJ7EdMWKMFLvLVNp0r1fY=) 5: pT_R2pT5fkigCUc46LgmyNvu26w.roa (hash: f5EDq84NioAgiZfb2l0opuOPnSnHoDIa4FyPu++58Hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ec:dd:90:be:25:c8:10:23:66:46:79:6d:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=b140f877e2a31712d28b64de2dc807372bff6f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:15:a8:e8:79:33:88:d7:9f:a8:aa:5c:4b: 5f:d5:4b:0f:3f:89:6c:17:94:1d:11:87:de:18:c3: f6:0b:b6:dc:cc:4c:c7:e2:32:29:04:85:9f:37:35: e3:34:36:27:8f:da:6c:7e:1b:4d:93:1c:29:e3:90: a2:f9:b9:ed:a6:72:f2:b5:74:be:bf:1d:26:42:3e: 68:b8:89:3d:0f:9c:f1:e6:7a:bd:02:5e:24:72:62: 51:cb:5e:8e:ba:9f:78:07:32:56:38:31:44:cd:15: 3d:58:bc:86:5f:d3:f4:b8:7d:06:23:85:dc:3f:84: 2f:01:2f:73:6d:ea:3c:a0:8b:77:d6:06:c1:fe:d7: 76:e5:68:46:03:2b:75:8c:d4:01:89:15:00:b5:09: bb:3f:a2:8a:74:e2:e4:61:79:13:11:b8:0a:22:89: ae:2e:70:0e:22:64:cd:e2:78:6a:f0:84:b3:52:25: 3a:ca:8f:11:ad:ce:20:45:46:43:90:ca:a8:73:88: 3f:b8:f8:30:66:2e:b1:e1:3a:d6:62:62:24:1c:79: a3:6d:09:77:11:2b:59:31:90:71:d9:26:1d:60:5b: fa:f1:5e:76:61:ed:57:04:79:77:02:e6:83:e2:ef: 13:77:b1:f3:33:25:fb:21:28:8d:05:47:e0:73:27: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:F8:77:E2:A3:17:12:D2:8B:64:DE:2D:C8:07:37:2B:FF:6F:7C X509v3 Authority Key Identifier: keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:96:b6:54:e2:5b:70:8b:5d:88:4c:34:2d:47:81:d3:91:41: f4:1e:3c:6a:82:2e:eb:d9:11:d8:08:cf:a7:88:74:15:e3:54: 9c:4c:40:12:fa:43:4e:b8:e7:66:ab:c7:c4:8e:5d:03:55:1f: 1a:aa:1d:7e:e1:ef:ff:22:73:00:e0:69:95:bf:19:71:fd:00: a6:40:50:65:00:ea:ea:ac:12:55:63:38:97:8d:9e:a0:d3:11: ed:40:53:61:0d:14:58:86:32:73:8f:27:dc:81:5b:b9:d7:f4: 60:9b:7f:92:15:39:7c:7f:46:e2:d7:e6:e7:86:70:30:11:9b: bd:7b:0a:c4:f5:d8:06:8d:91:01:d9:b2:a1:ac:5c:62:b2:ac: 14:ab:9c:d6:2c:58:49:cd:19:28:5a:99:d4:1e:2c:63:26:27: 44:97:91:54:43:c1:76:a1:c7:bb:bc:bc:c1:11:14:d9:a7:d7: 8f:00:15:f0:6e:62:a8:2e:24:ac:b2:2a:25:33:e8:96:19:f1: 59:c9:02:82:fa:e2:3a:10:e5:52:83:09:dc:6e:6a:28:56:41: c3:57:f1:3a:df:85:0a:98:02:cb:04:28:cd:30:26:70:5f:02: fe:b4:d8:e8:ab:a1:fd:67:d4:b2:75:ab:48:7d:83:b7:f5:f4: ab:b2:8a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ezdkL4lyBAjZkZ5bfwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3 YzBlMTAwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EyhiMTQwZjg3N2UyYTMxNzEyZDI4YjY0ZGUyZGM4MDczNzJiZmY2ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FEVqOh5M4jXn6iqXEtf1UsPP4ls F5QdEYfeGMP2C7bczEzH4jIpBIWfNzXjNDYnj9psfhtNkxwp45Ci+bntpnLytXS+ vx0mQj5ouIk9D5zx5nq9Al4kcmJRy16Oup94BzJWODFEzRU9WLyGX9P0uH0GI4Xc P4QvAS9zbeo8oIt31gbB/td25WhGAyt1jNQBiRUAtQm7P6KKdOLkYXkTEbgKIomu LnAOImTN4nhq8ISzUiU6yo8Rrc4gRUZDkMqoc4g/uPgwZi6x4TrWYmIkHHmjbQl3 EStZMZBx2SYdYFv68V52Ye1XBHl3AuaD4u8Td7HzMyX7ISiNBUfgcyfxGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFA+HfioxcS0otk3i3IBzcr/298MB8GA1UdIwQY MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt MDdlMzZlZmM1ZTQyLzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5a2VOJb cItdiEw0LUeB05FB9B48aoIu69kR2AjPp4h0FeNUnExAEvpDTrjnZqvHxI5dA1Uf GqodfuHv/yJzAOBplb8Zcf0ApkBQZQDq6qwSVWM4l42eoNMR7UBTYQ0UWIYyc48n 3IFbudf0YJt/khU5fH9G4tfm54ZwMBGbvXsKxPXYBo2RAdmyoaxcYrKsFKuc1ixY Sc0ZKFqZ1B4sYyYnRJeRVEPBdqHHu7y8wREU2afXjwAV8G5iqC4krLIqJTPolhnx WckCgvriOhDlUoMJ3G5qKFZBw1fxOt+FCpgCywQozTAmcF8C/rTY6Kuh/WfUsnWr SH2Dt/X0q7KKFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:20 2025 by rpki-client