This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json) Hash identifier: nPiuQ/6KUd1Pdgoz9lvDr4t8pke03x2APymgkHzTSxc= Subject key identifier: 13:E2:C3:7F:42:FC:42:75:E3:EB:26:2E:8F:D3:C6:5F:D8:DA:04:48 Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019AF163FA577278CB998AA8B6E39A1D30F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft Manifest number: 17A0 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa (hash: pokEhbaiyjz6akLSE/xe2fj33j12cTdNEBlSqEQjlSw=) 2: PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa (hash: A4kpvpFD1Ozda2IwrgnmAZURYP2sYoUji6fCdgNJDuU=) 3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: r811detSJg5wUvT0bOuUvH4l0TTeZ/5abgvSa2kSZNk=) 4: nPf6vPs81jX8tCyyvpUwSrOy0dE.roa (hash: y2CFPQ3qkO9mevFesEexkErie9IwGC/QLDLpCaVtX1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fa:57:72:78:cb:99:8a:a8:b6:e3:9a:1d:30:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=13e2c37f42fc4275e3eb262e8fd3c65fd8da0448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:81:d3:0b:e1:e8:7e:eb:37:90:74:0a:cb: 91:7b:b5:25:c2:de:75:25:d3:83:a0:b8:61:81:c6: 63:10:3b:35:17:b4:05:30:fe:73:04:1a:9b:41:d4: a4:1e:40:92:51:d5:65:4a:71:0c:3e:85:16:b2:a1: 6a:80:f4:1f:cd:a7:a7:78:41:2a:c0:45:9e:9f:bb: 9d:2c:a3:3f:8a:d0:09:a2:71:ff:e9:1b:98:87:03: c1:15:17:44:5e:a8:a0:d9:69:9d:a1:44:ed:09:02: bb:65:6c:47:18:e5:b1:65:64:da:5d:96:97:76:d9: 46:1e:e8:31:b8:e2:de:4a:3a:17:a7:ae:95:fc:8e: 05:0d:0e:0c:38:2b:1a:fa:04:77:fe:44:17:0b:dd: 4c:0f:ec:c6:7b:0c:30:c3:18:44:b7:d3:8d:bf:8d: 8d:27:5f:a6:c2:a6:78:23:8b:72:cf:92:e7:cf:e3: af:a8:5a:2a:44:cb:60:46:86:c8:f3:1b:aa:f2:40: 2b:6a:9b:cd:65:aa:f7:9e:c0:5f:41:3a:5c:a7:f8: 78:60:83:a4:d2:7b:ee:ee:44:3a:c6:5a:ba:98:bf: 50:39:68:58:bc:75:b6:1e:2f:0f:66:0c:80:48:55: c1:d6:06:65:a9:68:85:f0:a3:62:a0:e0:37:fc:3f: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E2:C3:7F:42:FC:42:75:E3:EB:26:2E:8F:D3:C6:5F:D8:DA:04:48 X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cd:ee:43:1f:68:69:7e:0a:c7:6a:93:c7:fb:21:72:ec:a4: f9:75:ee:9f:ec:ad:7c:e4:86:24:43:71:95:a6:dc:c1:9b:59: 7b:5a:01:14:f2:48:8e:51:83:5d:17:6b:94:f8:3b:02:a6:6a: 3d:93:71:6a:c1:50:01:27:97:76:6c:ad:ef:a4:db:c5:00:8e: b9:2f:86:3d:5b:01:6a:a9:ec:d4:21:cb:06:7e:bf:72:8c:55: f1:7f:76:11:29:d0:31:a0:cf:b9:30:b4:b9:06:4b:1d:96:02: cc:41:f0:69:84:73:5d:75:dc:c0:48:0c:c3:df:68:66:41:d1: 38:87:a6:54:34:f0:15:04:72:5d:2d:e9:45:b9:16:2b:0c:1a: 4b:14:8c:dc:da:72:f2:ee:d6:0a:83:59:b4:7e:22:7a:a6:aa: 0c:83:f7:a0:70:95:66:86:70:23:e4:b6:8e:f6:86:1c:c4:02: 24:b7:95:1a:d9:4b:a7:7f:f1:b9:16:5a:82:b9:c9:27:50:71: 6b:93:79:ca:d8:55:5e:51:ea:17:7c:c1:0e:67:0f:f6:bf:02: e0:5c:ba:76:79:61:b1:6f:e5:b4:66:b2:09:7b:24:a6:2c:ad: bf:82:e8:92:6b:5e:23:8e:f4:7f:74:20:2a:fe:4a:b1:e4:25: 5c:2f:ac:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/pXcnjLmYqotuOaHTD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EygxM2UyYzM3ZjQyZmM0Mjc1ZTNlYjI2MmU4ZmQzYzY1ZmQ4ZGEwNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA+B0wvh6H7rN5B0CsuRe7Ulwt51 JdODoLhhgcZjEDs1F7QFMP5zBBqbQdSkHkCSUdVlSnEMPoUWsqFqgPQfzaeneEEq wEWen7udLKM/itAJonH/6RuYhwPBFRdEXqig2WmdoUTtCQK7ZWxHGOWxZWTaXZaX dtlGHugxuOLeSjoXp66V/I4FDQ4MOCsa+gR3/kQXC91MD+zGewwwwxhEt9ONv42N J1+mwqZ4I4tyz5Lnz+OvqFoqRMtgRobI8xuq8kArapvNZar3nsBfQTpcp/h4YIOk 0nvu7kQ6xlq6mL9QOWhYvHW2Hi8PZgyASFXB1gZlqWiF8KNioOA3/D89FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPiw39C/EJ14+smLo/Txl/Y2gRIMB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH83uQx9o aX4Kx2qTx/shcuyk+XXun+ytfOSGJENxlabcwZtZe1oBFPJIjlGDXRdrlPg7AqZq PZNxasFQASeXdmyt76TbxQCOuS+GPVsBaqns1CHLBn6/coxV8X92ESnQMaDPuTC0 uQZLHZYCzEHwaYRzXXXcwEgMw99oZkHROIemVDTwFQRyXS3pRbkWKwwaSxSM3Npy 8u7WCoNZtH4ieqaqDIP3oHCVZoZwI+S2jvaGHMQCJLeVGtlLp3/xuRZagrnJJ1Bx a5N5ythVXlHqF3zBDmcP9r8C4Fy6dnlhsW/ltGayCXskpiytv4LokmteI470f3Qg Kv5KseQlXC+scA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:33 2025 by rpki-client