This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json) Hash identifier: 60CP1jW9yij+j4SaRA1Y4KAbpooHYsEg2JH1Oti7Xd0= Subject key identifier: 86:61:36:CC:67:2D:16:3E:DD:70:2F:24:37:03:0A:04:CD:7B:CC:97 Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019AF3C041AA96CA0E03E0D15EA1ABA3F6BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft Manifest number: 135E Signing time: Sat 06 Dec 2025 13:00:54 +0000 Manifest this update: Sat 06 Dec 2025 13:00:54 +0000 Manifest next update: Sun 07 Dec 2025 13:00:54 +0000 Files and hashes: 1: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=) 2: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: LNbmDwcTb4ncqNK/rAST0lLMYHwaUEkPm7OKgi7syYs=) 3: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=) 4: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=) 5: dK8D14UQKbN9F_H7NixtSmYvgXY.roa (hash: mElKhPTPHO/f1skgAvtj0q6ACgI5om0hRS8bXYIUXN0=) 6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:41:aa:96:ca:0e:03:e0:d1:5e:a1:ab:a3:f6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Dec 6 13:00:54 2025 GMT Not After : Dec 7 13:00:54 2025 GMT Subject: CN=866136cc672d163edd702f2437030a04cd7bcc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:a2:be:20:5f:8c:7d:37:fb:e7:58:f2:0b: aa:1f:dd:a2:b8:5d:bc:c7:78:0c:8e:85:0d:63:51: a7:b3:8c:f7:23:63:16:3f:91:2e:80:a3:b6:8a:e2: 70:a1:7e:a6:9b:7a:dd:4e:41:4e:17:20:87:74:53: 6f:e6:31:04:ac:3f:63:10:3d:fa:ec:eb:15:4f:0c: 5f:c2:ce:49:50:02:3c:4f:63:df:38:64:a1:17:6f: 26:3f:b8:0f:40:30:b1:51:5a:d3:8e:99:4d:cd:4e: 6c:2e:3a:fb:3d:e5:da:6b:a7:e0:53:35:f3:b1:4b: 55:2f:6b:d8:e5:d5:d1:a4:b8:f4:29:7f:79:5f:fe: 84:b8:b1:b9:68:c1:f9:6c:7e:6f:c8:c7:ee:23:61: 4a:e0:6b:86:96:08:b2:21:fd:3e:cf:ae:e2:63:e9: f5:c7:20:81:db:dc:13:24:2a:95:7e:22:da:e4:8b: 74:af:be:ce:46:a7:6f:d1:0f:38:f5:22:27:e1:1e: 75:d5:67:38:0a:8d:e5:1e:03:95:4e:78:9a:05:d0: 28:94:03:9d:ce:60:6c:03:5d:c1:82:12:86:e2:b2: f6:5d:7a:2c:b9:b0:9a:31:d3:83:a7:5f:9f:c3:7d: b2:fa:d6:cc:c6:92:3a:f9:4d:7f:b6:63:bd:99:87: 34:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:61:36:CC:67:2D:16:3E:DD:70:2F:24:37:03:0A:04:CD:7B:CC:97 X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:94:a0:56:6a:96:25:ba:96:35:a3:4a:5e:94:4d:dd:90:2f: c3:6f:f5:97:c1:fe:5b:f4:07:bf:32:27:31:2f:cb:f8:61:0a: 12:93:8f:8c:43:32:c9:55:3f:c6:d7:91:72:4f:c0:e5:1e:b5: 16:0b:a9:82:e0:ce:14:0f:4f:05:33:b9:c3:37:77:b9:15:6a: 33:c3:3c:e8:b6:67:73:29:15:5c:32:a0:88:5f:f0:19:80:0e: 52:69:41:ac:2e:b9:1e:2b:04:74:52:be:be:49:36:3b:d6:58: e6:e2:af:0d:79:a5:d5:ac:81:2c:1b:c0:21:67:27:9e:21:2c: 15:bc:e0:99:27:13:f4:4f:b5:d2:b9:73:be:6b:1c:1a:2a:63: f9:63:96:19:63:44:26:6a:23:84:bd:6c:59:d1:8b:d8:f5:50: 53:b0:ef:52:bd:4f:a6:cb:c3:24:79:a0:b5:ee:7d:3f:dc:07: bc:24:eb:12:67:8e:d8:b6:7c:93:3d:c4:dd:67:5b:02:95:61: f1:f9:d6:4a:47:22:ef:bc:18:1c:b5:b7:0c:45:96:9b:38:b2: 38:85:ee:4a:09:e9:31:d4:e3:69:9a:ad:c7:50:69:64:7b:2c: b6:24:93:3c:10:c6:5d:f2:c6:5d:c1:ad:1b:0f:25:17:bd:89: ad:fa:ab:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEGqlsoOA+DRXqGro/a8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjUxMjA2MTMwMDU0WhcNMjUxMjA3MTMwMDU0WjAzMTEwLwYDVQQD Eyg4NjYxMzZjYzY3MmQxNjNlZGQ3MDJmMjQzNzAzMGEwNGNkN2JjYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ouiviBfjH03++dY8guqH92iuF28 x3gMjoUNY1Gns4z3I2MWP5EugKO2iuJwoX6mm3rdTkFOFyCHdFNv5jEErD9jED36 7OsVTwxfws5JUAI8T2PfOGShF28mP7gPQDCxUVrTjplNzU5sLjr7PeXaa6fgUzXz sUtVL2vY5dXRpLj0KX95X/6EuLG5aMH5bH5vyMfuI2FK4GuGlgiyIf0+z67iY+n1 xyCB29wTJCqVfiLa5It0r77ORqdv0Q849SIn4R511Wc4Co3lHgOVTniaBdAolAOd zmBsA13BghKG4rL2XXosubCaMdODp1+fw32y+tbMxpI6+U1/tmO9mYc0+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZhNsxnLRY+3XAvJDcDCgTNe8yXMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5SgVmqW JbqWNaNKXpRN3ZAvw2/1l8H+W/QHvzInMS/L+GEKEpOPjEMyyVU/xteRck/A5R61 FgupguDOFA9PBTO5wzd3uRVqM8M86LZncykVXDKgiF/wGYAOUmlBrC65HisEdFK+ vkk2O9ZY5uKvDXml1ayBLBvAIWcnniEsFbzgmScT9E+10rlzvmscGipj+WOWGWNE JmojhL1sWdGL2PVQU7DvUr1PpsvDJHmgte59P9wHvCTrEmeO2LZ8kz3E3WdbApVh 8fnWSkci77wYHLW3DEWWmziyOIXuSgnpMdTjaZqtx1BpZHsstiSTPBDGXfLGXcGt Gw8lF72JrfqrBg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:32 2025 by rpki-client