This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft File: hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json) Hash identifier: s1NMoEMnos03gJ0HOh3ER8ZgX1S5ENLuBvKZ9daRH04= Subject key identifier: DA:21:70:DC:8E:24:1E:83:82:5E:5A:C1:F3:9E:97:FB:C5:00:38:88 Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Certificate serial: 019AF72F0B2802FCC41A2680B5D70A6992D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft Manifest number: 13C4 Signing time: Sun 07 Dec 2025 05:00:46 +0000 Manifest this update: Sun 07 Dec 2025 05:00:46 +0000 Manifest next update: Mon 08 Dec 2025 05:00:46 +0000 Files and hashes: 1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=) 2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=) 3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=) 4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: 7dFtuUs/NVkYcpR7b55OybaCiPvwUYKIe5tNIhLk2mI=) 5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:0b:28:02:fc:c4:1a:26:80:b5:d7:0a:69:92:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Validity Not Before: Dec 7 05:00:46 2025 GMT Not After : Dec 8 05:00:46 2025 GMT Subject: CN=da2170dc8e241e83825e5ac1f39e97fbc5003888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:2c:3f:8b:f4:08:4a:94:4a:29:38:7b:45: c6:92:b4:a9:d6:e5:fd:e5:a6:72:6f:f6:de:9a:4b: 3d:cd:7b:ef:36:88:bc:8e:92:64:c8:c6:7f:87:f0: d3:02:36:15:2e:7d:24:e5:65:de:96:d0:8f:55:e5: 59:4c:08:08:93:16:30:80:f1:50:3b:d5:61:fb:cc: 28:80:0c:24:9d:26:0c:e0:55:ff:44:32:12:a8:f1: 1d:8d:f0:06:46:e7:8f:fa:0c:76:a2:28:74:1d:f0: 9d:a0:5d:b5:72:b0:ef:41:96:c9:71:24:da:67:a0: 94:02:9d:b8:fb:9d:b7:c2:18:07:3d:44:21:18:a6: 86:aa:0b:83:69:71:47:c7:c4:72:84:a2:b2:43:15: 71:ad:db:3d:08:90:4e:65:03:10:a7:0d:60:c9:7f: f6:2e:f5:85:eb:e0:86:85:eb:8b:8d:95:01:ae:d7: d2:da:0a:c6:94:a6:fe:da:2c:db:a7:08:51:70:ab: 27:90:b7:32:c3:c7:f2:81:8d:36:5c:83:5c:b0:3e: e0:e2:66:e0:e3:f1:37:06:d4:b3:92:75:81:66:62: 27:b9:78:d8:37:e2:e0:9c:e9:66:f5:2b:10:9b:b0: 07:d0:ff:90:63:ec:6a:da:3b:3e:58:7c:67:39:a8: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:21:70:DC:8E:24:1E:83:82:5E:5A:C1:F3:9E:97:FB:C5:00:38:88 X509v3 Authority Key Identifier: keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:75:6d:7d:75:f3:de:77:2b:a2:6c:6f:9d:9f:45:32:c1:39: 18:78:7b:5f:9c:26:66:51:6a:ef:72:0a:68:5e:09:89:9a:75: c0:91:4d:46:79:ea:ff:2f:88:8a:21:91:67:06:c1:a2:3f:ba: 0e:28:5e:e0:5c:09:4e:14:2f:ce:7a:ed:70:0d:42:da:e1:a4: 63:ba:81:81:12:f8:00:a9:61:46:32:24:b7:42:6b:5b:3e:13: 97:7e:be:d2:70:47:a5:3f:a9:8c:08:77:6b:71:03:96:7d:19: 4b:b2:45:1d:2e:ab:cd:5f:d7:95:64:c3:cd:af:b9:11:09:eb: 6c:38:83:4b:8e:ce:d9:c2:1f:73:80:37:a8:0e:cc:a6:c5:ae: ed:dd:33:3b:76:96:d8:45:d1:d4:9f:74:ef:78:ac:7e:60:a7: 29:75:dd:a1:28:84:6c:6e:36:13:28:d1:f5:f3:75:19:5c:a8: 4f:60:bb:d1:e9:55:14:98:ba:1c:5b:20:6a:87:e2:03:19:62: df:d2:25:7e:7d:be:e2:74:4e:3c:82:4d:49:2c:c1:77:5e:54: 45:91:aa:38:93:cc:0f:43:33:1c:d2:5b:96:a9:62:71:6f:19: 02:85:56:90:df:c6:1d:45:99:79:39:c8:51:7c:5b:8e:f4:c0: 44:43:6f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LwsoAvzEGiaAtdcKaZLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4 ZDBiNjgwHhcNMjUxMjA3MDUwMDQ2WhcNMjUxMjA4MDUwMDQ2WjAzMTEwLwYDVQQD EyhkYTIxNzBkYzhlMjQxZTgzODI1ZTVhYzFmMzllOTdmYmM1MDAzODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofosP4v0CEqUSik4e0XGkrSp1uX9 5aZyb/bemks9zXvvNoi8jpJkyMZ/h/DTAjYVLn0k5WXeltCPVeVZTAgIkxYwgPFQ O9Vh+8wogAwknSYM4FX/RDISqPEdjfAGRueP+gx2oih0HfCdoF21crDvQZbJcSTa Z6CUAp24+523whgHPUQhGKaGqguDaXFHx8RyhKKyQxVxrds9CJBOZQMQpw1gyX/2 LvWF6+CGheuLjZUBrtfS2grGlKb+2izbpwhRcKsnkLcyw8fygY02XINcsD7g4mbg 4/E3BtSzknWBZmInuXjYN+LgnOlm9SsQm7AH0P+QY+xq2js+WHxnOai06QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNohcNyOJB6Dgl5awfOel/vFADiIMB8GA1UdIwQY MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt ZDU4M2Y5YTY2ZTNiLzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3VtfXXz 3ncromxvnZ9FMsE5GHh7X5wmZlFq73IKaF4JiZp1wJFNRnnq/y+IiiGRZwbBoj+6 Dihe4FwJThQvznrtcA1C2uGkY7qBgRL4AKlhRjIkt0JrWz4Tl36+0nBHpT+pjAh3 a3EDln0ZS7JFHS6rzV/XlWTDza+5EQnrbDiDS47O2cIfc4A3qA7MpsWu7d0zO3aW 2EXR1J9073isfmCnKXXdoSiEbG42EyjR9fN1GVyoT2C70elVFJi6HFsgaofiAxli 39Ilfn2+4nROPIJNSSzBd15URZGqOJPMD0MzHNJblqlicW8ZAoVWkN/GHUWZeTnI UXxbjvTARENv6A== -----END CERTIFICATE-----Generated at Sun Dec 7 12:26:15 2025 by rpki-client