This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json) Hash identifier: afobhvmlKL6Rkk9vNzK0xOAwMVPTDBz2ZeCoONfvLU4= Subject key identifier: 48:A1:23:DC:3A:A6:D4:68:B5:9C:C2:F6:AB:17:18:73:85:DF:91:28 Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA Certificate issuer: /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba Certificate serial: 019AF1D24717B3A318B1CF1A6FC5B0131FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft Manifest number: 1147 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: 86_3LCbOcCp3yM191EWRi4FTvKM.roa (hash: T6YVBcckx9oAAL2sgQLtUYTYtIf9ZyYKJMrHcxK/x/E=) 2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: 0jpGsaIVVvALUiMTC6JGZAn2VqsFPcid2vM8xOxsdtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:47:17:b3:a3:18:b1:cf:1a:6f:c5:b0:13:1f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=48a123dc3aa6d468b59cc2f6ab17187385df9128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:86:30:8b:01:a0:b1:04:11:a3:88:06:5c: fa:bd:db:dc:bc:20:1b:ee:ed:d5:aa:b5:e9:42:1c: 34:de:be:34:4a:0d:69:b6:b7:76:32:84:88:25:4e: c2:f9:81:ec:95:5f:9c:d3:26:dc:f4:a3:17:1f:7f: 6b:f0:5b:10:8b:41:cf:85:7c:72:90:2e:4e:9b:f2: 94:87:5b:7c:e6:e4:ce:3e:35:57:7f:ee:48:f5:42: bb:c5:e7:de:b7:38:a1:a9:3c:af:8a:2c:09:21:d0: b8:43:c7:f9:a6:83:15:ee:59:39:74:33:db:eb:2c: f0:13:69:b8:6b:c4:05:9c:81:ef:26:da:5f:71:d7: a5:c1:c6:10:b3:69:5d:be:88:d8:0f:fb:b6:60:a5: fc:04:3f:a8:28:75:62:b5:05:c1:0a:94:c2:e2:95: 21:a9:df:07:8a:e5:89:17:cd:61:4b:1e:cb:09:e1: 86:a7:d2:b4:ca:07:c1:70:84:bb:0d:e8:8a:d9:8a: 98:16:f2:72:21:e8:88:33:20:fa:82:66:a7:ba:1e: ee:1f:e3:12:69:ab:93:5c:27:6a:78:ae:8c:12:bd: b7:b6:25:11:1f:ff:3c:ab:bb:d8:9d:48:88:41:62: df:97:7c:cc:46:3e:d7:48:01:22:e6:7c:a6:0e:4c: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A1:23:DC:3A:A6:D4:68:B5:9C:C2:F6:AB:17:18:73:85:DF:91:28 X509v3 Authority Key Identifier: keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b0:fd:70:c5:f6:60:0c:ee:34:06:c3:62:16:5a:cb:48:28: c8:ce:c9:c5:b6:73:fe:f6:08:c7:54:88:c3:46:62:30:49:14: fb:9b:39:75:37:06:2a:f9:f6:f4:3f:89:e2:f8:ab:73:7d:c4: b8:32:50:b6:7f:4a:32:68:05:6b:a5:a3:af:1d:c6:8a:d3:32: f7:44:4c:69:d4:97:60:57:2e:ba:c5:01:3e:c9:f4:2e:8a:2c: 08:b8:0e:c4:fb:a4:23:d1:68:20:6c:fd:95:13:cf:75:b6:f3: e2:a6:93:07:f6:fc:3a:36:18:68:70:c3:ca:fd:25:04:40:4c: dd:63:a3:fe:1b:e4:67:f2:ba:c5:31:fc:eb:f2:fd:3c:c2:16: 54:84:3f:54:bc:39:52:d9:a3:99:63:26:50:92:ec:52:b3:62: 74:05:2f:98:08:5a:a7:82:ba:93:0b:74:eb:8e:18:3b:2e:96: 08:6a:44:cb:7c:e9:17:78:cf:2c:29:ba:7f:8f:64:0d:14:d8: 8a:3c:0f:a3:fd:e9:11:32:db:82:b0:9c:53:38:f3:05:24:a5: df:64:33:4f:a2:a7:4d:58:e6:58:23:55:2c:e7:51:c8:e2:90: e0:8e:e7:c4:8e:2c:22:a2:b3:8b:46:3b:41:95:f1:16:b3:bc: 6f:d1:ea:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kcXs6MYsc8ab8WwEx/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjFjYWMwZGU4ZjY2YTcwNzZmMjgxMGYzZjM1MThhYTcw NjQzYmEwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg0OGExMjNkYzNhYTZkNDY4YjU5Y2MyZjZhYjE3MTg3Mzg1ZGY5MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwOGMIsBoLEEEaOIBlz6vdvcvCAb 7u3VqrXpQhw03r40Sg1ptrd2MoSIJU7C+YHslV+c0ybc9KMXH39r8FsQi0HPhXxy kC5Om/KUh1t85uTOPjVXf+5I9UK7xefetzihqTyviiwJIdC4Q8f5poMV7lk5dDPb 6yzwE2m4a8QFnIHvJtpfcdelwcYQs2ldvojYD/u2YKX8BD+oKHVitQXBCpTC4pUh qd8HiuWJF81hSx7LCeGGp9K0ygfBcIS7DeiK2YqYFvJyIeiIMyD6gmanuh7uH+MS aauTXCdqeK6MEr23tiURH/88q7vYnUiIQWLfl3zMRj7XSAEi5nymDkzQsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEihI9w6ptRotZzC9qsXGHOF35EoMB8GA1UdIwQY MBaAFIfxysDej2anB28oEPPzUYqnBkO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNmIxYjktOWVkNi00YWYyLWE3M2It Zjg4NzRhNmJhZDM4LzEvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mNmIxYjktOWVkNi00YWYyLWE3M2ItZjg4NzRhNmJhZDM4 LzEvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbD9cMX2 YAzuNAbDYhZay0goyM7JxbZz/vYIx1SIw0ZiMEkU+5s5dTcGKvn29D+J4virc33E uDJQtn9KMmgFa6Wjrx3GitMy90RMadSXYFcuusUBPsn0LoosCLgOxPukI9FoIGz9 lRPPdbbz4qaTB/b8OjYYaHDDyv0lBEBM3WOj/hvkZ/K6xTH86/L9PMIWVIQ/VLw5 UtmjmWMmUJLsUrNidAUvmAhap4K6kwt0644YOy6WCGpEy3zpF3jPLCm6f49kDRTY ijwPo/3pETLbgrCcUzjzBSSl32QzT6KnTVjmWCNVLOdRyOKQ4I7nxI4sIqKzi0Y7 QZXxFrO8b9HqFg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:10 2025 by rpki-client