This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft File: HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json) Hash identifier: yeKXwWndqtLYijg/gShjQCEx2q1tQ48jNSib96W8Bzs= Subject key identifier: 16:AB:11:21:1D:BD:9F:B0:F3:66:5B:77:8E:5F:8A:01:A8:F4:1F:42 Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75 Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175 Certificate serial: 019AF49B9CF23CCFE20A538FEDDD3C4B2E38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft Manifest number: 1477 Signing time: Sat 06 Dec 2025 17:00:30 +0000 Manifest this update: Sat 06 Dec 2025 17:00:30 +0000 Manifest next update: Sun 07 Dec 2025 17:00:30 +0000 Files and hashes: 1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=) 2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: T79Wvpgs2g8K1h1+uS3zS2QiwhckPvEl7j0skDd01SM=) 3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=) 4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=) 5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:9c:f2:3c:cf:e2:0a:53:8f:ed:dd:3c:4b:2e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175 Validity Not Before: Dec 6 17:00:30 2025 GMT Not After : Dec 7 17:00:30 2025 GMT Subject: CN=16ab11211dbd9fb0f3665b778e5f8a01a8f41f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:b5:42:72:b2:06:86:b0:bc:46:0e:da:77: a2:84:18:d4:0c:1d:68:fe:5b:57:0d:aa:74:f3:81: 5c:9a:fc:2c:10:55:45:96:98:fa:95:d7:27:62:8e: 2e:d0:bb:57:07:79:17:fc:f8:db:df:81:39:35:50: 7e:9b:b3:85:9a:b5:a0:19:5a:c6:4c:2f:54:3e:3f: f2:72:fb:5d:73:44:4a:8a:1d:29:37:70:b6:f1:30: 56:7a:79:55:31:d0:1a:49:32:ae:67:2a:48:fc:ee: d5:ec:f9:03:5d:7d:f4:0c:e0:0d:fe:b0:5f:7e:e0: 87:1e:a2:bf:9e:fd:7c:8b:fb:29:e4:73:ec:b3:95: 3d:39:97:5d:7b:5c:5a:7a:6e:e5:c4:43:ed:40:3e: 7e:ed:22:61:cc:f4:d0:42:45:30:08:12:6e:db:80: 0a:fc:5f:84:19:df:8b:71:d6:50:8a:81:93:3e:07: 5a:bf:c9:73:ed:a0:73:d4:ae:00:a1:b3:20:83:45: 8d:d3:cc:a2:eb:d4:2e:e8:20:b8:fe:51:24:01:1c: 20:4a:e4:49:fb:f7:0d:4b:6b:45:82:50:52:06:df: 90:08:dc:aa:83:a9:eb:5a:6d:b6:b0:c6:9c:22:61: 38:6f:8c:aa:d4:50:b2:27:4e:d2:95:07:c7:14:18: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AB:11:21:1D:BD:9F:B0:F3:66:5B:77:8E:5F:8A:01:A8:F4:1F:42 X509v3 Authority Key Identifier: keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:58:41:21:30:88:f0:44:69:d5:73:f2:d3:b8:3c:17:97:64: 0b:ff:87:5e:53:82:8d:82:56:c6:c1:45:5d:4a:da:3f:5f:21: 7d:28:4a:11:84:83:14:eb:85:32:19:8c:af:84:23:c9:8f:66: c6:1f:fa:4e:7f:db:5e:e7:64:b5:a8:c0:04:fb:b0:1b:32:a6: 73:a4:1f:62:f7:fc:dc:b3:f6:cd:30:4f:96:1c:13:b2:ee:24: 80:51:c8:ff:6d:ab:92:c7:d9:98:2d:d0:62:c6:d3:43:25:83: e1:47:06:3a:0e:51:d3:ab:4d:d2:4f:f9:79:21:e0:b7:03:fe: 38:c1:a1:11:60:32:ed:57:d1:72:70:74:2c:a3:1b:43:4c:48: 20:89:b6:80:dc:5c:04:c1:7e:c2:22:f1:1c:3c:af:c3:03:69: 93:f1:74:bb:ee:16:18:3e:50:98:82:56:9e:03:b0:fb:ed:3d: 23:2d:a8:9e:60:e0:94:6c:c3:d0:0a:94:97:d0:a9:4d:51:5e: e3:96:4b:4d:d5:a9:bb:5d:39:32:93:90:88:f3:6a:a0:95:3f: 0b:08:3b:e2:2a:24:6e:d4:e5:3c:99:6d:35:be:80:60:71:90: ee:c5:fe:40:4f:53:e3:96:a2:4a:b5:20:68:27:64:73:e2:c5: 24:ee:3b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m5zyPM/iClOP7d08Sy44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz MDUxNzUwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjA3MTcwMDMwWjAzMTEwLwYDVQQD EygxNmFiMTEyMTFkYmQ5ZmIwZjM2NjViNzc4ZTVmOGEwMWE4ZjQxZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HW1QnKyBoawvEYO2neihBjUDB1o /ltXDap084FcmvwsEFVFlpj6ldcnYo4u0LtXB3kX/Pjb34E5NVB+m7OFmrWgGVrG TC9UPj/ycvtdc0RKih0pN3C28TBWenlVMdAaSTKuZypI/O7V7PkDXX30DOAN/rBf fuCHHqK/nv18i/sp5HPss5U9OZdde1xaem7lxEPtQD5+7SJhzPTQQkUwCBJu24AK /F+EGd+LcdZQioGTPgdav8lz7aBz1K4AobMgg0WN08yi69Qu6CC4/lEkARwgSuRJ +/cNS2tFglBSBt+QCNyqg6nrWm22sMacImE4b4yq1FCyJ07SlQfHFBgAVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBarESEdvZ+w82Zbd45figGo9B9CMB8GA1UdIwQY MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt MTI3OGE0MmUwOTJhLzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0VhBITCI 8ERp1XPy07g8F5dkC/+HXlOCjYJWxsFFXUraP18hfShKEYSDFOuFMhmMr4QjyY9m xh/6Tn/bXudktajABPuwGzKmc6QfYvf83LP2zTBPlhwTsu4kgFHI/22rksfZmC3Q YsbTQyWD4UcGOg5R06tN0k/5eSHgtwP+OMGhEWAy7VfRcnB0LKMbQ0xIIIm2gNxc BMF+wiLxHDyvwwNpk/F0u+4WGD5QmIJWngOw++09Iy2onmDglGzD0AqUl9CpTVFe 45ZLTdWpu105MpOQiPNqoJU/Cwg74iokbtTlPJltNb6AYHGQ7sX+QE9T45aiSrUg aCdkc+LFJO47gQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:02 2025 by rpki-client