This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json) Hash identifier: ogqHovzs3tNlXB2eiR+zrIoHgGMk7xJLCDvI9zd122I= Subject key identifier: C7:83:1E:DC:E2:C1:3D:42:26:BC:4C:14:7A:DB:A4:F9:87:89:51:B5 Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31 Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431 Certificate serial: 019AF389796F8F8EFC0537DFB7419D665039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft Manifest number: 144F Signing time: Sat 06 Dec 2025 12:01:04 +0000 Manifest this update: Sat 06 Dec 2025 12:01:04 +0000 Manifest next update: Sun 07 Dec 2025 12:01:04 +0000 Files and hashes: 1: Biv2qTrQNJJYQlmIhX2GXCsPh8k.roa (hash: qgzc+HC1Pbq5Sym5wnfMxLGpd7cCm/TouNcPCVsFEcM=) 2: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: wE53dDB9O6sgMH604R5TRg5u9/tDd2+8rWO7JJTVH5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:79:6f:8f:8e:fc:05:37:df:b7:41:9d:66:50:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431 Validity Not Before: Dec 6 12:01:04 2025 GMT Not After : Dec 7 12:01:04 2025 GMT Subject: CN=c7831edce2c13d4226bc4c147adba4f9878951b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:e8:a1:3f:4b:1e:a6:32:72:70:80:e1:3b: 6a:7a:05:40:1b:95:e9:93:4b:0a:44:eb:ac:ea:4c: e3:39:d5:8c:59:37:a6:fd:55:51:c3:8e:a7:1b:7d: d8:2c:28:d3:00:bb:ac:3a:60:f8:a4:0e:58:5e:79: 00:14:ff:5f:8a:1b:ca:b3:f7:c9:db:7e:19:41:f4: db:ef:22:f4:40:fd:06:92:a7:d0:ab:be:ac:4a:76: f9:15:c9:79:97:33:c1:5d:72:a3:31:f0:4e:a2:95: a1:0e:f8:4e:33:0d:0e:e0:8a:df:f7:5e:1c:5a:63: 65:ee:26:eb:3b:9d:ac:6f:a4:70:8a:25:b9:a7:5e: d7:63:0d:90:4e:d3:1e:4f:17:32:69:1f:79:47:30: bf:42:0b:2c:33:71:c6:d6:09:c1:5e:44:6f:cb:61: 7e:72:a7:27:41:69:05:09:5f:46:d8:e9:4f:93:b8: 11:2f:8e:72:4f:b0:af:09:8d:c8:21:2a:a0:58:ac: 78:50:14:ab:03:e1:49:b5:cd:29:a9:0e:18:0c:2b: cf:60:83:81:7c:f7:85:7f:f2:c6:77:4b:4d:ec:54: 61:90:ce:76:6a:ce:75:9a:f8:09:9d:35:d7:90:fa: c6:ac:83:47:d6:ba:1c:29:b1:96:e7:63:c5:09:f8: 6a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:83:1E:DC:E2:C1:3D:42:26:BC:4C:14:7A:DB:A4:F9:87:89:51:B5 X509v3 Authority Key Identifier: keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:91:b9:be:fd:26:22:7a:1f:6b:a6:90:16:54:40:27:83:59: ce:2e:d1:5a:9f:c4:04:30:89:b6:68:9b:02:85:8d:d8:d1:dc: 0c:64:15:c8:f6:54:52:e5:e9:31:2f:c8:1d:33:b4:13:3e:a9: 89:dc:f8:f7:f4:d0:b5:11:22:f3:4a:fd:2f:f1:2a:49:91:66: 6f:0a:2f:49:aa:e7:98:a7:8f:c6:fe:6f:78:10:ee:27:f7:0f: 28:02:70:0e:2f:5b:a2:4a:cd:07:85:ef:b9:5f:54:aa:87:4c: 1e:15:21:de:73:79:a7:57:5a:3b:d3:67:19:64:fd:0d:8a:d3: 27:60:f0:e2:7e:e6:99:81:c4:ab:a5:b7:b3:84:3f:e7:ae:42: 9a:68:4d:2a:77:19:18:d3:d3:30:f4:ef:19:fa:ae:9b:eb:ef: f8:a1:b1:49:75:37:03:43:b7:1b:72:fb:b0:68:46:92:a3:1d: 42:d7:c5:30:18:8f:a6:0b:71:f5:62:32:f1:7c:8e:53:bd:2e: 15:22:0c:ad:40:d5:a4:8d:3e:6d:09:6c:70:63:82:dd:27:ff: 6f:65:da:e4:62:24:c4:b2:a0:96:24:10:75:cd:08:6b:48:7f: d4:13:7d:ee:4b:bf:fb:8a:2c:ca:22:21:68:e9:c9:34:d7:d0: f0:a0:82:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXlvj478BTfft0GdZlA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjljNzYzMzhhZmM5MDg1YjhmYmQ2NjliOGI3NGJkN2E5 MmQ0MzEwHhcNMjUxMjA2MTIwMTA0WhcNMjUxMjA3MTIwMTA0WjAzMTEwLwYDVQQD EyhjNzgzMWVkY2UyYzEzZDQyMjZiYzRjMTQ3YWRiYTRmOTg3ODk1MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvfooT9LHqYycnCA4TtqegVAG5Xp k0sKROus6kzjOdWMWTem/VVRw46nG33YLCjTALusOmD4pA5YXnkAFP9fihvKs/fJ 234ZQfTb7yL0QP0GkqfQq76sSnb5Fcl5lzPBXXKjMfBOopWhDvhOMw0O4Irf914c WmNl7ibrO52sb6RwiiW5p17XYw2QTtMeTxcyaR95RzC/QgssM3HG1gnBXkRvy2F+ cqcnQWkFCV9G2OlPk7gRL45yT7CvCY3IISqgWKx4UBSrA+FJtc0pqQ4YDCvPYIOB fPeFf/LGd0tN7FRhkM52as51mvgJnTXXkPrGrINH1rocKbGW52PFCfhqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeDHtziwT1CJrxMFHrbpPmHiVG1MB8GA1UdIwQY MBaAFBxpx2M4r8kIW4+9ZpuLdL16ktQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMt NTc1OWI0MjdmNGQxLzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMtNTc1OWI0MjdmNGQx LzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJG5vv0m Inofa6aQFlRAJ4NZzi7RWp/EBDCJtmibAoWN2NHcDGQVyPZUUuXpMS/IHTO0Ez6p idz49/TQtREi80r9L/EqSZFmbwovSarnmKePxv5veBDuJ/cPKAJwDi9bokrNB4Xv uV9UqodMHhUh3nN5p1daO9NnGWT9DYrTJ2Dw4n7mmYHEq6W3s4Q/565CmmhNKncZ GNPTMPTvGfqum+vv+KGxSXU3A0O3G3L7sGhGkqMdQtfFMBiPpgtx9WIy8XyOU70u FSIMrUDVpI0+bQlscGOC3Sf/b2Xa5GIkxLKgliQQdc0Ia0h/1BN97ku/+4osyiIh aOnJNNfQ8KCCAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:21 2025 by rpki-client