This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json) Hash identifier: oOvt0pa4hb2DPiUDDFrDvmPdbHgIA7RKWREKXgh+Cn4= Subject key identifier: AE:F3:12:37:61:E5:F9:85:D6:2C:34:07:DC:2A:B6:53:F6:49:21:67 Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a Certificate serial: 019AF19AAC55FEA4A89160382CEBC0D55C02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft Manifest number: 07F2 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=) 2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: 919TaqmuVa2J/Vr2pDVHRlzOpUubVd5Gv+bhB53S5rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ac:55:fe:a4:a8:91:60:38:2c:eb:c0:d5:5c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=aef3123761e5f985d62c3407dc2ab653f6492167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ff:9c:26:ad:42:e3:fd:dc:6a:35:ad:7c:36: 05:38:a3:70:7e:19:76:59:73:58:61:39:63:c7:bf: 3d:b5:f0:15:3f:2a:a4:a0:16:10:dd:ee:11:96:33: 2c:4d:5c:50:cc:c7:43:71:05:f9:be:6e:7c:7c:ac: 7a:59:b2:26:fe:b7:53:3d:48:7b:ff:8c:9f:b6:3a: 05:ac:e1:d8:50:90:4f:6d:d7:32:26:bd:2d:6b:39: 9d:bb:14:8b:b7:df:cd:3a:a1:76:c8:a8:21:6c:36: 59:8f:34:26:ca:06:e5:9c:67:61:b8:0a:14:be:34: c6:82:88:2a:73:be:13:ae:48:b7:a2:0b:48:17:89: 81:aa:7d:e9:27:68:a8:fd:66:2f:f8:4b:fb:58:d7: 76:55:c6:cc:ba:7e:a7:38:3d:83:4a:81:60:b1:ab: c8:2e:fe:fb:a5:3d:72:ff:c5:c5:60:04:18:8a:7d: fa:98:8f:ca:b2:b9:28:c3:5a:43:15:cc:52:e5:f5: ec:f2:d0:c7:22:21:c1:7d:3c:43:39:18:0e:ae:7e: c8:bb:f0:2c:f5:da:cf:36:04:d8:de:f6:43:f7:0f: 4f:4a:02:d9:7b:f1:21:0f:2e:1b:2f:71:a3:99:dc: 72:7e:0b:d2:fd:e7:c9:3b:e8:a7:c8:ff:42:ac:bc: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:12:37:61:E5:F9:85:D6:2C:34:07:DC:2A:B6:53:F6:49:21:67 X509v3 Authority Key Identifier: keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:74:e3:4e:d1:64:a2:5b:44:7b:50:65:b6:da:35:76:25:5b: 9a:67:d7:e6:7d:6d:dc:94:df:d0:1f:59:46:b8:f9:cf:38:46: 52:5f:26:71:e2:24:af:d6:fc:0f:e9:da:f4:49:09:32:04:b9: 79:e7:aa:0b:5f:ec:66:89:58:24:05:ad:1d:aa:78:ab:ab:1f: ea:a9:53:bd:53:45:41:11:a1:c7:54:5b:19:b6:75:59:0f:6c: a5:84:0a:44:00:11:72:75:8b:7f:d5:17:65:9d:41:b2:ac:37: 8e:86:bf:56:76:4e:db:38:ff:68:11:85:c1:9f:68:39:56:c0: 60:ea:c0:64:f4:a6:96:22:ff:be:1d:77:e9:c4:91:be:3a:83: 30:3d:5b:0d:5d:1b:77:9c:5f:9f:78:e0:71:da:1c:d6:83:6b: de:70:a5:3f:03:d5:c3:4d:6c:db:28:dc:77:36:3e:a8:d6:88: ae:80:2f:b9:b4:69:69:e3:ce:d0:87:dd:ec:da:f8:c6:d9:0a: c4:66:8b:f4:84:9d:fc:83:d3:d9:42:e0:d8:a2:5f:f7:e3:c3: eb:ee:ab:8d:8d:4a:5e:d3:39:88:dd:6e:17:32:6a:0f:96:14: e4:81:d5:81:c0:73:c1:03:88:37:9f:42:ec:a5:fc:cc:e0:13: 25:73:94:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqxV/qSokWA4LOvA1VwCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlN2UwOGQ1NjQ3NWJhZTQwN2E0ZjJiY2E4ZTg5YTA5OTc2 ODVhM2EwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhhZWYzMTIzNzYxZTVmOTg1ZDYyYzM0MDdkYzJhYjY1M2Y2NDkyMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+P+cJq1C4/3cajWtfDYFOKNwfhl2 WXNYYTljx789tfAVPyqkoBYQ3e4RljMsTVxQzMdDcQX5vm58fKx6WbIm/rdTPUh7 /4yftjoFrOHYUJBPbdcyJr0tazmduxSLt9/NOqF2yKghbDZZjzQmygblnGdhuAoU vjTGgogqc74Trki3ogtIF4mBqn3pJ2io/WYv+Ev7WNd2VcbMun6nOD2DSoFgsavI Lv77pT1y/8XFYAQYin36mI/Ksrkow1pDFcxS5fXs8tDHIiHBfTxDORgOrn7Iu/As 9drPNgTY3vZD9w9PSgLZe/EhDy4bL3GjmdxyfgvS/efJO+inyP9CrLz8RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7zEjdh5fmF1iw0B9wqtlP2SSFnMB8GA1UdIwQY MBaAFB5+CNVkdbrkB6TyvKjomgmXaFo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQt MzAwMmRmODI1ZDVkLzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQtMzAwMmRmODI1ZDVk LzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3TjTtFk oltEe1Bltto1diVbmmfX5n1t3JTf0B9ZRrj5zzhGUl8mceIkr9b8D+na9EkJMgS5 eeeqC1/sZolYJAWtHap4q6sf6qlTvVNFQRGhx1RbGbZ1WQ9spYQKRAARcnWLf9UX ZZ1Bsqw3joa/VnZO2zj/aBGFwZ9oOVbAYOrAZPSmliL/vh136cSRvjqDMD1bDV0b d5xfn3jgcdoc1oNr3nClPwPVw01s2yjcdzY+qNaIroAvubRpaePO0Ifd7Nr4xtkK xGaL9ISd/IPT2ULg2KJf9+PD6+6rjY1KXtM5iN1uFzJqD5YU5IHVgcBzwQOIN59C 7KX8zOATJXOUQg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:43 2025 by rpki-client