This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json) Hash identifier: iDe+EMD7LQfQoo3SAx03cCbiYJyRhEke0ZF0oOLmKvI= Subject key identifier: 8E:7E:53:00:DE:D9:20:82:4E:AC:42:87:72:C2:AA:0B:5F:A2:10:78 Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Certificate serial: 019AF3F728FA7A1EE4936FE0FC5EDF027A49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft Manifest number: 14A3 Signing time: Sat 06 Dec 2025 14:00:52 +0000 Manifest this update: Sat 06 Dec 2025 14:00:52 +0000 Manifest next update: Sun 07 Dec 2025 14:00:52 +0000 Files and hashes: 1: 1-pbn6Ub3y6IFfhatJXpFv2oIg4Y.roa (hash: otqMBUJ0t81q8O5ZwH5j1LnN11Nn61m+zKuZ8xsbQeQ=) 2: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=) 3: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=) 4: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: OD9am/4zBYxuvpuhESqkm4koD/sv5XGBMZbBxKGGOAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:28:fa:7a:1e:e4:93:6f:e0:fc:5e:df:02:7a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb Validity Not Before: Dec 6 14:00:52 2025 GMT Not After : Dec 7 14:00:52 2025 GMT Subject: CN=8e7e5300ded920824eac428772c2aa0b5fa21078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:d7:e3:77:35:31:62:88:08:09:62:4b:5a: ad:92:b6:c7:12:66:86:a6:51:1d:70:81:62:fd:db: b5:30:98:90:3c:61:91:af:6d:c1:b5:24:69:5a:da: 6d:da:4b:75:ee:e9:ab:2d:5f:b5:27:cc:96:74:25: 47:9b:b1:4a:e1:23:94:7d:dc:70:89:3d:cd:65:f0: cf:0f:f5:88:5a:25:4a:8f:a3:16:df:88:48:c3:f2: 32:b1:b3:c0:ef:84:0f:94:d4:52:b4:92:19:5c:81: ec:f2:20:66:31:72:7d:15:82:20:8f:19:0c:82:45: ad:db:ba:2a:00:3b:92:4a:46:97:af:75:f6:e5:e4: ae:7f:d3:8f:12:90:6b:9a:32:2b:04:d1:9d:89:f3: 25:77:75:8e:2d:de:31:22:66:08:f7:3a:fe:fe:8c: 2b:88:ba:33:1a:2d:17:9d:d0:d5:a7:86:f6:56:17: b1:98:cb:46:45:44:3e:2c:ad:55:1f:bf:51:b9:06: f2:87:0a:eb:ab:39:71:5c:76:98:b5:0d:fd:01:35: 0e:bb:73:5a:a3:0c:a3:a4:e0:ef:50:4f:49:c4:68: 4c:9a:e0:b2:23:2e:63:38:8f:03:bf:75:51:e4:53: af:f6:16:17:52:6d:bd:41:a9:0e:dd:91:64:0e:f1: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7E:53:00:DE:D9:20:82:4E:AC:42:87:72:C2:AA:0B:5F:A2:10:78 X509v3 Authority Key Identifier: keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:73:0e:3f:83:78:e5:cd:94:06:5e:ef:74:da:00:29:bf:9a: 29:e3:58:78:50:5d:c7:3e:e9:63:44:37:96:b9:1c:12:3a:e8: 63:a0:da:89:d9:26:70:06:4d:21:79:58:b8:7f:d3:ec:76:c1: 0a:f0:99:43:3e:5f:11:f2:a4:3d:bf:c3:95:4d:b6:67:17:85: b1:20:9b:45:fd:80:6f:41:48:cc:54:7b:af:d4:0d:1b:c9:75: 80:c5:65:e9:e8:f6:7e:89:03:14:89:62:2f:48:70:77:c5:62: c4:9f:2e:b3:68:89:e0:59:37:9b:d1:1e:38:ae:7d:b1:e7:39: 66:93:cc:fa:71:50:64:71:f2:41:18:31:bc:d6:e2:f3:7d:6e: b8:c8:83:39:3a:6f:54:74:52:d9:be:dd:fe:38:07:47:6a:a7: 23:52:07:c7:73:43:d0:03:a8:78:40:70:e4:e6:45:ee:04:34: 47:f7:49:68:30:79:b0:5d:54:fd:d2:77:af:43:f7:0a:4e:be: 89:45:3f:8b:31:32:64:d3:b2:17:d8:66:5d:13:69:8d:e0:ee: 57:e7:23:54:05:cc:86:a7:e5:b8:f5:26:f5:0e:25:ea:62:3d: 09:39:1a:33:76:e7:37:9a:92:20:0f:b8:22:c8:e5:2d:52:b1: 2a:e0:f1:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yj6eh7kk2/g/F7fAnpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZGI3NDdiMjg5NzE3YTA2ODRjZDZhYzgyMzA3YWE2N2Ji MmQ3YmIwHhcNMjUxMjA2MTQwMDUyWhcNMjUxMjA3MTQwMDUyWjAzMTEwLwYDVQQD Eyg4ZTdlNTMwMGRlZDkyMDgyNGVhYzQyODc3MmMyYWEwYjVmYTIxMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLjX43c1MWKICAliS1qtkrbHEmaG plEdcIFi/du1MJiQPGGRr23BtSRpWtpt2kt17umrLV+1J8yWdCVHm7FK4SOUfdxw iT3NZfDPD/WIWiVKj6MW34hIw/IysbPA74QPlNRStJIZXIHs8iBmMXJ9FYIgjxkM gkWt27oqADuSSkaXr3X25eSuf9OPEpBrmjIrBNGdifMld3WOLd4xImYI9zr+/owr iLozGi0XndDVp4b2VhexmMtGRUQ+LK1VH79RuQbyhwrrqzlxXHaYtQ39ATUOu3Na owyjpODvUE9JxGhMmuCyIy5jOI8Dv3VR5FOv9hYXUm29QakO3ZFkDvERUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5+UwDe2SCCTqxCh3LCqgtfohB4MB8GA1UdIwQY MBaAFITbdHsolxegaEzWrIIweqZ7ste7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQt OWZlN2VlOWMwMzY4LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQtOWZlN2VlOWMwMzY4 LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynMOP4N4 5c2UBl7vdNoAKb+aKeNYeFBdxz7pY0Q3lrkcEjroY6DaidkmcAZNIXlYuH/T7HbB CvCZQz5fEfKkPb/DlU22ZxeFsSCbRf2Ab0FIzFR7r9QNG8l1gMVl6ej2fokDFIli L0hwd8VixJ8us2iJ4Fk3m9EeOK59sec5ZpPM+nFQZHHyQRgxvNbi831uuMiDOTpv VHRS2b7d/jgHR2qnI1IHx3ND0AOoeEBw5OZF7gQ0R/dJaDB5sF1U/dJ3r0P3Ck6+ iUU/izEyZNOyF9hmXRNpjeDuV+cjVAXMhqfluPUm9Q4l6mI9CTkaM3bnN5qSIA+4 IsjlLVKxKuDxOg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:51 2025 by rpki-client