This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json) Hash identifier: Im9c/1fo865m9TATGqGapGIaJh2jcUT5+9hblD7apKY= Subject key identifier: 43:58:82:89:81:69:71:6D:52:50:DF:9E:AF:20:BB:B8:BE:BB:66:AD Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d Certificate serial: 019AF20971239D3C4F0AE15466620F317E76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft Manifest number: 13B0 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=) 2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: r/subhSEw+7PaaeACOyWdSyKkLblTENpU48jmcNBOQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:71:23:9d:3c:4f:0a:e1:54:66:62:0f:31:7e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed55d23579c64127155aef650696e79531d508d Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=435882898169716d5250df9eaf20bbb8bebb66ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:2b:13:cb:89:f1:17:c6:68:51:52:46:71: 76:fa:5d:b5:9b:06:57:16:4b:62:c1:d8:3d:4b:a6: 07:04:2c:01:5a:e0:f6:f6:c4:c2:e2:5c:e5:88:d1: d8:8e:8b:b7:53:42:48:42:e6:2b:44:6d:7f:99:e4: 41:c8:75:4d:ef:34:e8:68:14:61:04:30:d5:96:21: 78:01:80:ce:d4:22:94:1b:52:df:62:74:9e:f8:9e: c3:1b:73:a5:81:56:b5:02:7d:1d:e2:5f:b3:7d:51: d5:2d:c1:80:93:b1:cd:ee:5f:5e:51:e0:70:7e:a3: ee:5d:6e:bc:2b:23:c3:45:f4:4d:d2:87:7d:a4:b4: 32:a5:c5:88:a3:05:ed:d9:74:11:35:5f:6b:4c:66: 92:28:8f:a1:6d:6f:64:70:26:0b:2f:8c:ad:82:74: 02:e8:f1:75:6a:31:9e:70:a4:df:39:4f:46:65:6b: 7f:70:33:54:22:cf:9b:0e:64:34:67:26:3b:ef:93: c5:12:ba:1f:da:ba:46:e6:1b:0b:19:08:99:d3:ee: 95:90:04:45:11:c0:7c:61:55:32:c4:87:fb:e3:d5: 01:6a:33:82:7d:8b:3a:2a:b0:e3:3e:95:a6:7e:a4: 97:a5:a2:ef:b0:75:18:e3:21:c7:53:b4:15:f6:b7: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:58:82:89:81:69:71:6D:52:50:DF:9E:AF:20:BB:B8:BE:BB:66:AD X509v3 Authority Key Identifier: keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b0:eb:cc:e8:22:c3:67:17:ed:b2:45:66:92:3c:72:67:f0: f0:1f:32:50:d8:ad:d0:bd:c3:05:9c:b5:61:b0:8b:c3:0d:49: fa:75:38:ee:0a:61:26:3b:44:83:05:78:d6:b6:46:9d:37:64: 23:b7:16:2c:02:f9:6f:d3:8c:3b:b2:5d:7d:fe:81:8d:ca:fb: 4b:3e:d1:52:83:0c:ac:2d:9d:ae:2e:a5:f3:fe:f7:23:d6:be: 84:55:d3:2c:ba:46:a4:4d:ab:bb:59:7b:cc:07:d7:fd:91:22: 51:9f:bd:a3:45:ec:36:8b:07:b0:81:3b:2f:15:82:00:af:cf: 69:f0:6d:e0:b1:24:70:85:38:c0:2f:85:d1:ac:90:09:55:e1: 3c:18:c7:ec:20:15:54:b3:6c:8c:5a:d4:fa:b5:53:f0:2f:10: 1d:84:d3:92:a7:92:67:c0:74:ec:77:84:ed:db:b6:3b:50:15: 08:bc:63:5a:63:f1:eb:f6:b8:5c:b0:36:a9:0d:74:6d:d8:f0: 21:f6:8c:5b:d8:73:4e:7c:9b:a9:cd:b5:37:67:7c:7a:87:7f: 88:ad:84:be:9e:30:27:3a:eb:b8:a5:e8:a6:ee:45:0d:58:15: 7f:b7:5e:4c:9c:32:6f:8b:fa:47:b2:90:14:04:8d:fb:f7:71: a3:35:98:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXEjnTxPCuFUZmIPMX52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDU1ZDIzNTc5YzY0MTI3MTU1YWVmNjUwNjk2ZTc5NTMx ZDUwOGQwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD Eyg0MzU4ODI4OTgxNjk3MTZkNTI1MGRmOWVhZjIwYmJiOGJlYmI2NmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv8rE8uJ8RfGaFFSRnF2+l21mwZX Fktiwdg9S6YHBCwBWuD29sTC4lzliNHYjou3U0JIQuYrRG1/meRByHVN7zToaBRh BDDVliF4AYDO1CKUG1LfYnSe+J7DG3OlgVa1An0d4l+zfVHVLcGAk7HN7l9eUeBw fqPuXW68KyPDRfRN0od9pLQypcWIowXt2XQRNV9rTGaSKI+hbW9kcCYLL4ytgnQC 6PF1ajGecKTfOU9GZWt/cDNUIs+bDmQ0ZyY775PFErof2rpG5hsLGQiZ0+6VkARF EcB8YVUyxIf749UBajOCfYs6KrDjPpWmfqSXpaLvsHUY4yHHU7QV9reG9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENYgomBaXFtUlDfnq8gu7i+u2atMB8GA1UdIwQY MBaAFB7VXSNXnGQScVWu9lBpbnlTHVCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZmIyNzQtZDg0Zi00ZmJhLTkzOGUt MWU5ZmY5MTgwOGMyLzEvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ZmIyNzQtZDg0Zi00ZmJhLTkzOGUtMWU5ZmY5MTgwOGMy LzEvSHRWZEkxZWNaQkp4VmE3MlVHbHVlVk1kVUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbDrzOgi w2cX7bJFZpI8cmfw8B8yUNit0L3DBZy1YbCLww1J+nU47gphJjtEgwV41rZGnTdk I7cWLAL5b9OMO7Jdff6Bjcr7Sz7RUoMMrC2dri6l8/73I9a+hFXTLLpGpE2ru1l7 zAfX/ZEiUZ+9o0XsNosHsIE7LxWCAK/PafBt4LEkcIU4wC+F0ayQCVXhPBjH7CAV VLNsjFrU+rVT8C8QHYTTkqeSZ8B07HeE7du2O1AVCLxjWmPx6/a4XLA2qQ10bdjw IfaMW9hzTnybqc21N2d8eod/iK2Evp4wJzrruKXopu5FDVgVf7deTJwyb4v6R7KQ FASN+/dxozWYrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:12 2025 by rpki-client