This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json) Hash identifier: OPPh3o+qCN0pGJz4Z85i8IkOnqZK2gQ9ZBVJHcOsG3A= Subject key identifier: 4D:27:80:FB:7E:31:3C:0A:91:40:3B:5A:B1:B3:29:A3:C2:E3:87:CB Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019B2BC212B965E9BF087BE9BF87BD999CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft Manifest number: 137B Signing time: Wed 17 Dec 2025 10:01:37 +0000 Manifest this update: Wed 17 Dec 2025 10:01:37 +0000 Manifest next update: Thu 18 Dec 2025 10:01:37 +0000 Files and hashes: 1: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=) 2: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: OFkUh+mMtrWCCIuALwrhV1/WmviEJRK+gOSKylgZcyc=) 3: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=) 4: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=) 5: dK8D14UQKbN9F_H7NixtSmYvgXY.roa (hash: mElKhPTPHO/f1skgAvtj0q6ACgI5om0hRS8bXYIUXN0=) 6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:12:b9:65:e9:bf:08:7b:e9:bf:87:bd:99:9c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Dec 17 10:01:37 2025 GMT Not After : Dec 18 10:01:37 2025 GMT Subject: CN=4d2780fb7e313c0a91403b5ab1b329a3c2e387cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:14:ff:51:fb:e3:b6:15:bc:67:07:54:8f: e9:b2:b7:29:40:14:76:f0:13:88:95:c7:0f:67:6c: e0:81:76:ae:b2:34:95:fb:f7:dd:5b:bb:a5:b2:98: e2:11:ca:3e:14:97:07:13:e0:c6:c5:e3:5e:25:1e: e9:ab:3a:02:d5:e1:4f:63:03:dc:6e:dd:aa:00:22: 16:6f:c3:55:f0:16:b2:71:34:ba:9e:32:e6:73:32: db:0b:93:86:8f:4b:bb:f6:c6:e0:b9:b7:d4:5f:d7: 06:49:e3:0f:f9:5e:c8:6a:8a:b4:ca:8c:85:43:b1: ae:b4:de:71:e6:bc:28:65:32:ba:c1:51:bf:35:96: 19:9b:06:79:86:0e:6f:26:68:3b:00:3a:a3:9f:69: 3a:23:41:6d:62:44:7a:d5:30:79:90:e7:c5:be:8a: 32:8b:06:69:cd:3b:3f:a4:02:22:1c:cf:26:70:24: 62:31:7b:e1:ba:cd:df:1a:dc:62:bb:3e:07:18:91: 24:0a:18:c4:03:74:ae:db:cc:73:2c:f6:9b:ce:e2: 3b:e2:af:f9:91:3c:19:fd:67:3c:55:19:c7:5f:01: 35:d7:e1:d0:08:51:61:e6:90:8e:aa:4e:f0:6e:ed: b3:0d:39:e0:0d:97:ac:13:fd:f6:f2:66:72:39:76: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:27:80:FB:7E:31:3C:0A:91:40:3B:5A:B1:B3:29:A3:C2:E3:87:CB X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:81:f4:18:a5:d9:33:b2:a6:7e:ab:5b:50:79:df:ad:e6:97: 90:db:a4:0b:51:1b:82:3f:2a:d4:ae:37:d4:e5:70:2c:57:ea: 3c:19:a8:42:30:37:99:59:cc:c1:58:d8:b2:b0:d5:a2:9c:17: f1:0c:eb:b3:c4:72:72:f9:9e:d9:8b:3b:65:61:83:de:a1:3f: 41:6b:b7:cd:3d:48:73:7c:b8:60:b5:87:9e:22:02:d4:7b:ff: 1f:27:f1:e2:20:36:1e:eb:0e:68:16:ab:79:26:ad:44:4d:c0: f3:ba:22:bd:3c:62:35:c7:ce:ff:85:bd:6e:c1:9d:2f:1e:ca: 8e:85:6e:b1:ac:4e:a4:26:14:6c:a0:4c:ee:39:a4:95:42:88: 4b:7d:78:a1:36:b8:e5:66:49:32:9b:6c:94:d3:37:aa:9f:f7: 1b:00:49:86:ed:a0:40:1f:f7:a5:f4:b0:6f:b2:17:c4:e1:77: d0:a0:38:f3:f6:cb:a3:5f:a1:4d:12:f6:04:25:10:1c:e8:49: 5b:eb:16:91:b0:a1:2b:8c:25:a9:46:61:96:e8:9b:23:44:65: c0:1d:a1:0f:3f:4e:86:a4:2e:67:d0:bc:93:d8:6f:89:83:32: b8:09:ad:f4:9d:a6:45:e6:0d:23:38:b5:6d:2c:f5:2c:1c:05: 88:b0:fa:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwhK5Zem/CHvpv4e9mZzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjUxMjE3MTAwMTM3WhcNMjUxMjE4MTAwMTM3WjAzMTEwLwYDVQQD Eyg0ZDI3ODBmYjdlMzEzYzBhOTE0MDNiNWFiMWIzMjlhM2MyZTM4N2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8U/1H747YVvGcHVI/psrcpQBR2 8BOIlccPZ2zggXausjSV+/fdW7ulspjiEco+FJcHE+DGxeNeJR7pqzoC1eFPYwPc bt2qACIWb8NV8BaycTS6njLmczLbC5OGj0u79sbgubfUX9cGSeMP+V7Iaoq0yoyF Q7GutN5x5rwoZTK6wVG/NZYZmwZ5hg5vJmg7ADqjn2k6I0FtYkR61TB5kOfFvooy iwZpzTs/pAIiHM8mcCRiMXvhus3fGtxiuz4HGJEkChjEA3Su28xzLPabzuI74q/5 kTwZ/Wc8VRnHXwE11+HQCFFh5pCOqk7wbu2zDTngDZesE/328mZyOXbqaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0ngPt+MTwKkUA7WrGzKaPC44fLMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoH0GKXZ M7KmfqtbUHnfreaXkNukC1Ebgj8q1K431OVwLFfqPBmoQjA3mVnMwVjYsrDVopwX 8Qzrs8Rycvme2Ys7ZWGD3qE/QWu3zT1Ic3y4YLWHniIC1Hv/Hyfx4iA2HusOaBar eSatRE3A87oivTxiNcfO/4W9bsGdLx7KjoVusaxOpCYUbKBM7jmklUKIS314oTa4 5WZJMptslNM3qp/3GwBJhu2gQB/3pfSwb7IXxOF30KA48/bLo1+hTRL2BCUQHOhJ W+sWkbChK4wlqUZhluibI0RlwB2hDz9OhqQuZ9C8k9hviYMyuAmt9J2mReYNIzi1 bSz1LBwFiLD6+A== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:46 2025 by rpki-client