This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft File: HnTfStSP8hGgY1s38DeXeBnNQnY.mft (raw, json) Hash identifier: LD1rC8Ju1Z5aErF0HJfDOZep//grLNrDb7wbDQraxck= Subject key identifier: 5B:8A:9D:C8:8A:97:24:D9:FF:EF:B2:0C:15:48:CE:1D:6C:6C:1E:EB Authority key identifier: 1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76 Certificate issuer: /CN=1e74df4ad48ff211a0635b37f037977819cd4276 Certificate serial: 019AF23FD31A56896554F3207F5DFAC9E0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft Manifest number: 9C Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: 59VNL7dQbZFmm2AJXFZqzAtkfl8.roa (hash: p9FKGUjQIc96y5oPMqPml+M+S9V4gJIpDfcIYz2/WEw=) 2: HnTfStSP8hGgY1s38DeXeBnNQnY.crl (hash: l2lkJ2X7f65OTLqrezy5aoZAVowbdabxQaENrBpsWY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d3:1a:56:89:65:54:f3:20:7f:5d:fa:c9:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e74df4ad48ff211a0635b37f037977819cd4276 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=5b8a9dc88a9724d9ffefb20c1548ce1d6c6c1eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:e9:65:f4:31:1b:e6:6d:3b:8a:2b:a5:cc: fe:e8:0a:22:c6:e0:3f:73:f7:ab:f2:d1:c6:c4:f3: 09:4b:e2:f5:47:cd:20:1c:2c:3e:00:dd:dc:ae:eb: 19:6f:35:d3:23:36:0a:c3:56:ae:a7:c6:1f:43:09: 59:8e:9b:b9:d9:94:2d:92:8e:f5:a2:34:78:5f:30: cd:6c:eb:e8:9b:32:73:98:17:15:9b:13:ff:b6:43: 73:20:e2:33:db:9d:79:5c:94:81:8f:f9:3e:bb:60: 97:d3:95:08:88:4a:e8:0c:c8:ed:94:9e:a5:94:b8: 08:30:03:91:b3:f7:b8:13:2d:26:8f:ce:44:ef:52: c3:e8:35:31:22:32:2c:9d:c8:29:20:c1:8d:e3:ca: bf:e9:21:67:97:24:2b:b3:93:c2:47:1a:43:bd:af: c5:e0:30:91:d1:7d:38:f4:26:1c:1b:15:e4:19:e6: 81:4c:d7:76:73:d4:1a:e3:50:8c:26:ef:21:b0:d6: 93:04:f7:1c:fa:96:c1:ee:fd:53:9d:ee:db:6c:39: c0:b1:42:b3:89:1e:93:fa:80:cc:96:7d:af:f5:48: 84:d7:b1:ff:f6:69:83:47:79:92:1b:c9:19:18:dd: 96:1e:f2:54:cf:56:86:f5:ed:7e:9a:0e:ca:b5:d4: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:9D:C8:8A:97:24:D9:FF:EF:B2:0C:15:48:CE:1D:6C:6C:1E:EB X509v3 Authority Key Identifier: keyid:1E:74:DF:4A:D4:8F:F2:11:A0:63:5B:37:F0:37:97:78:19:CD:42:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnTfStSP8hGgY1s38DeXeBnNQnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/010e95-49b7-4edd-8d0d-395d4eec831e/1/HnTfStSP8hGgY1s38DeXeBnNQnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:eb:bd:eb:48:35:11:b2:db:96:7a:52:f0:55:fc:11:10:7b: 3b:99:99:4e:32:5f:a8:45:cf:16:38:c9:11:e0:80:54:39:49: 82:87:ca:24:60:b6:ad:f7:e9:3d:36:3c:6b:c9:a7:54:9a:91: 47:21:47:07:ca:d8:35:80:f3:0e:62:d8:df:04:a3:7f:18:f1: 5f:20:83:b1:a1:eb:48:62:98:d0:08:6e:ec:40:04:00:c5:96: 44:13:51:ab:40:95:7b:e0:a1:52:d7:00:04:29:95:3a:88:a6: 95:9e:18:2f:cc:a8:c6:02:36:bc:7a:b8:d9:91:60:89:6e:7c: 55:6c:e8:32:f5:69:b4:7c:ab:00:7b:c8:c0:1b:97:ff:36:94: 25:c2:0a:0f:d2:46:89:60:0f:2c:64:d2:b6:3e:dc:1f:f3:04: a2:f7:be:60:01:7e:fa:59:9c:da:7e:45:5c:62:5e:69:f1:1c: a3:c4:06:26:3c:30:d1:5b:6d:43:27:50:cb:cd:91:4f:71:c3: af:53:eb:0d:00:a7:16:e4:89:da:ef:9b:ff:5a:65:e0:1b:8f: 58:f6:5c:6c:0e:07:6c:28:a5:97:f6:f0:22:39:e7:e0:47:fc: af:bc:8d:1b:a4:65:bf:1d:f2:a3:ae:9e:2c:27:0c:e3:eb:66: b1:dd:3d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9MaVollVPMgf136yeDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzRkZjRhZDQ4ZmYyMTFhMDYzNWIzN2YwMzc5Nzc4MTlj ZDQyNzYwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD Eyg1YjhhOWRjODhhOTcyNGQ5ZmZlZmIyMGMxNTQ4Y2UxZDZjNmMxZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkATpZfQxG+ZtO4orpcz+6AoixuA/ c/er8tHGxPMJS+L1R80gHCw+AN3crusZbzXTIzYKw1aup8YfQwlZjpu52ZQtko71 ojR4XzDNbOvomzJzmBcVmxP/tkNzIOIz2515XJSBj/k+u2CX05UIiEroDMjtlJ6l lLgIMAORs/e4Ey0mj85E71LD6DUxIjIsncgpIMGN48q/6SFnlyQrs5PCRxpDva/F 4DCR0X049CYcGxXkGeaBTNd2c9Qa41CMJu8hsNaTBPcc+pbB7v1Tne7bbDnAsUKz iR6T+oDMln2v9UiE17H/9mmDR3mSG8kZGN2WHvJUz1aG9e1+mg7KtdRRVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuKnciKlyTZ/++yDBVIzh1sbB7rMB8GA1UdIwQY MBaAFB5030rUj/IRoGNbN/A3l3gZzUJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5UZlN0U1A4aEdnWTFzMzhEZVhlQm5OUW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wMTBlOTUtNDliNy00ZWRkLThkMGQt Mzk1ZDRlZWM4MzFlLzEvSG5UZlN0U1A4aEdnWTFzMzhEZVhlQm5OUW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8wMTBlOTUtNDliNy00ZWRkLThkMGQtMzk1ZDRlZWM4MzFl LzEvSG5UZlN0U1A4aEdnWTFzMzhEZVhlQm5OUW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOu960g1 EbLblnpS8FX8ERB7O5mZTjJfqEXPFjjJEeCAVDlJgofKJGC2rffpPTY8a8mnVJqR RyFHB8rYNYDzDmLY3wSjfxjxXyCDsaHrSGKY0Ahu7EAEAMWWRBNRq0CVe+ChUtcA BCmVOoimlZ4YL8yoxgI2vHq42ZFgiW58VWzoMvVptHyrAHvIwBuX/zaUJcIKD9JG iWAPLGTStj7cH/MEove+YAF++lmc2n5FXGJeafEco8QGJjww0VttQydQy82RT3HD r1PrDQCnFuSJ2u+b/1pl4BuPWPZcbA4HbCill/bwIjnn4Ef8r7yNG6Rlvx3yo66e LCcM4+tmsd09Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:55 2025 by rpki-client