This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json) Hash identifier: juA0rn7axKIifRE1EM9rMiH9QENmihXfmBoUg4QNsGo= Subject key identifier: 79:95:82:F7:C6:8E:9E:55:1C:56:F4:1A:86:AB:E8:61:95:53:44:D8 Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a Certificate serial: 019AF208D69C34AFB7119FCC11722A7D9EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft Manifest number: 10AC Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=) 2: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: APPXnnkMcL83TPTGRRwOyL2lJruh7hUAQXJoiSTGyBE=) 3: q2pIOgbHKqsp-vuIUpYVaJX6Ib0.roa (hash: Db8REEvZSQ5trpAzSV1gkLTz5aVmUoY2anxA/9+mQtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d6:9c:34:af:b7:11:9f:cc:11:72:2a:7d:9e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8536146119b044539082e326cca903200b8d4b1a Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=799582f7c68e9e551c56f41a86abe861955344d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:f5:93:81:25:ec:72:05:d1:d9:9d:0e:00: 47:28:50:df:bd:22:d2:aa:bf:9f:de:e9:3a:13:0e: 40:11:06:6c:00:a7:e6:ac:b0:43:62:0e:71:a8:8e: 9a:f4:21:8a:df:a1:8a:b8:57:b4:5a:e7:c3:e2:02: 77:36:cf:13:b0:1b:8a:48:2e:7b:4a:2f:89:b3:8e: f1:9a:55:1c:24:5f:e8:d8:f6:c8:5c:1b:7a:5e:21: 4a:95:a0:a7:a3:2c:ca:4d:39:4d:31:24:18:f9:84: bc:1d:ca:58:84:74:57:3a:19:c2:b0:2d:10:c8:cc: 80:c2:be:93:b3:6f:1b:8e:ca:15:54:96:fb:b3:0c: 6e:77:c7:7f:4a:54:58:8a:4e:b4:75:af:08:07:05: 30:69:cb:61:52:da:0a:8b:60:7c:2d:bc:9a:9d:b6: de:c9:f5:f0:8a:9b:fa:11:cc:48:d4:10:b8:a3:58: d9:1f:c6:4d:9b:28:7a:09:37:01:98:54:62:55:7a: 09:dd:7a:44:ea:22:a3:01:40:b0:4c:67:4a:bd:5d: 17:82:c6:68:f2:ef:eb:65:3f:19:1f:1c:30:44:2a: da:05:f2:88:68:34:af:45:f3:ec:87:0d:d0:7e:66: 3f:f6:bc:9b:d4:54:64:c0:09:23:52:fe:cf:de:62: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:95:82:F7:C6:8E:9E:55:1C:56:F4:1A:86:AB:E8:61:95:53:44:D8 X509v3 Authority Key Identifier: keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e9:58:25:24:88:31:a3:88:59:66:16:15:91:77:79:a3:d5: 76:51:bf:0a:fc:48:a8:75:25:cc:4b:4b:47:fd:84:82:14:08: e0:3b:6e:ea:c7:29:b6:61:36:01:4b:4a:ec:ee:68:c3:ae:1d: df:d0:79:e2:d3:11:0c:64:3c:18:0d:1d:d9:08:4c:16:0c:8b: 69:cf:5a:09:4b:3e:89:4f:d8:4b:a7:4e:0d:81:7d:b6:b2:69: f4:5d:b6:37:00:ca:9d:29:fe:68:1c:5c:68:40:39:01:ac:23: 9b:23:b0:93:a2:28:6a:94:39:8b:9a:bb:e4:f7:16:6d:b2:f2: 8d:f9:42:28:06:a4:5c:cc:0c:85:57:48:aa:d3:39:3b:52:fe: da:53:71:ae:8d:e5:08:63:4e:1b:f4:48:87:f8:ff:53:1c:f2: 85:e4:c6:51:ec:3d:75:9d:da:6c:88:0b:1f:71:e8:0e:bf:76: c4:fe:26:37:0a:18:18:90:3a:e0:4c:b9:82:f5:f1:09:94:5b: 77:ca:94:8f:f8:35:03:4d:d9:c9:75:6d:08:51:17:ad:c1:cc: 43:ae:a4:83:ac:b4:0f:a7:a2:d7:b5:c0:4d:5c:1f:9e:03:af: cd:30:28:76:fd:4f:33:3b:24:c9:16:76:f9:ac:cc:ec:d6:70: cd:d5:37:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNacNK+3EZ/MEXIqfZ7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4 ZDRiMWEwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg3OTk1ODJmN2M2OGU5ZTU1MWM1NmY0MWE4NmFiZTg2MTk1NTM0NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIv1k4El7HIF0dmdDgBHKFDfvSLS qr+f3uk6Ew5AEQZsAKfmrLBDYg5xqI6a9CGK36GKuFe0WufD4gJ3Ns8TsBuKSC57 Si+Js47xmlUcJF/o2PbIXBt6XiFKlaCnoyzKTTlNMSQY+YS8HcpYhHRXOhnCsC0Q yMyAwr6Ts28bjsoVVJb7swxud8d/SlRYik60da8IBwUwacthUtoKi2B8Lbyanbbe yfXwipv6EcxI1BC4o1jZH8ZNmyh6CTcBmFRiVXoJ3XpE6iKjAUCwTGdKvV0XgsZo 8u/rZT8ZHxwwRCraBfKIaDSvRfPshw3QfmY/9ryb1FRkwAkjUv7P3mKGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmVgvfGjp5VHFb0Goar6GGVU0TYMB8GA1UdIwQY MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt MGM2NzIxN2NjOTZiLzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOlYJSSI MaOIWWYWFZF3eaPVdlG/CvxIqHUlzEtLR/2EghQI4Dtu6scptmE2AUtK7O5ow64d 39B54tMRDGQ8GA0d2QhMFgyLac9aCUs+iU/YS6dODYF9trJp9F22NwDKnSn+aBxc aEA5AawjmyOwk6IoapQ5i5q75PcWbbLyjflCKAakXMwMhVdIqtM5O1L+2lNxro3l CGNOG/RIh/j/UxzyheTGUew9dZ3abIgLH3HoDr92xP4mNwoYGJA64Ey5gvXxCZRb d8qUj/g1A03ZyXVtCFEXrcHMQ66kg6y0D6ei17XATVwfngOvzTAodv1PMzskyRZ2 +azM7NZwzdU3qg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:10 2025 by rpki-client