This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json) Hash identifier: L3Xd2oK+uMJXI0jFBEsFxmkhEtjLEzSoMDrhIJi5ZLo= Subject key identifier: FE:ED:22:75:54:83:3B:3E:60:9F:DD:7B:4D:62:E1:69:7C:FA:13:28 Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47 Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047 Certificate serial: 019AF509BF60BEA1B9C7B74D6848E10C3BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:00:47 +0000 Manifest this update: Sat 06 Dec 2025 19:00:47 +0000 Manifest next update: Sun 07 Dec 2025 19:00:47 +0000 Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=) 2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=) 3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: swgYxiBl8CtpHMclj1mMPsBlyUWvSdgCWFKV9ekeDw0=) 4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:bf:60:be:a1:b9:c7:b7:4d:68:48:e1:0c:3b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047 Validity Not Before: Dec 6 19:00:47 2025 GMT Not After : Dec 7 19:00:47 2025 GMT Subject: CN=feed227554833b3e609fdd7b4d62e1697cfa1328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:86:4e:c1:9f:71:26:74:e4:29:73:d6:2c: c1:47:dc:92:ac:62:b2:52:18:18:81:fe:d7:d9:45: 15:0a:1b:5f:34:c8:bf:7e:fb:ec:ca:c8:18:fc:82: 02:07:59:f8:9b:49:39:89:9e:3b:a5:64:57:3e:41: 49:5f:2a:da:06:cc:8f:b7:a8:f2:fe:62:b9:72:44: 75:3e:1a:d2:ea:c0:99:92:6e:35:d2:80:84:b9:a0: 1f:ca:68:b3:23:c8:03:a5:07:8f:90:5a:9c:80:47: ec:ad:b1:8f:71:72:92:3e:60:22:e7:6b:e2:c4:e7: e1:11:ee:b8:8e:fb:18:4f:5d:ae:00:fa:a1:e2:18: cc:8b:08:0f:4d:b7:de:4b:73:2b:9a:fc:e0:42:e1: 82:f0:36:86:39:80:a9:89:03:77:6e:3c:7d:18:af: b4:73:23:c6:4a:07:6c:be:3a:84:98:d9:68:2f:74: 17:b6:0f:00:ec:de:2c:9c:4d:9e:99:db:d2:bc:d1: 74:dc:2d:0b:6d:2f:45:db:f0:fe:b2:ed:98:03:3d: cf:66:bd:c5:7b:d6:56:1d:3b:fd:c2:20:fd:ba:fc: d2:e2:2d:4d:9c:3a:0a:c7:cb:08:7e:7e:f2:dd:ff: 32:bd:c3:08:41:45:1c:72:b2:d7:79:a6:87:be:a9: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:ED:22:75:54:83:3B:3E:60:9F:DD:7B:4D:62:E1:69:7C:FA:13:28 X509v3 Authority Key Identifier: keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:04:0d:7d:37:cd:f6:be:49:dc:e7:da:47:1a:6f:4c:51:7f: 7c:5e:a3:b1:12:63:ca:91:fb:e8:6c:7c:6c:39:38:47:2b:60: a6:d9:29:08:87:a2:22:d2:d4:43:40:77:74:8b:c4:e7:df:b2: a4:9f:a1:a1:eb:1e:da:96:38:20:8f:a6:1c:30:78:e6:dc:5c: d1:5c:81:34:79:5b:d5:65:52:6b:8d:ad:02:1a:7e:41:33:41: 8a:fa:f2:22:4a:d3:84:53:a7:16:9b:d2:d1:23:01:3d:9f:10: d2:5a:ae:d7:17:0f:1a:69:d8:51:61:42:ac:45:93:82:bc:e1: d7:8a:ec:ef:0e:74:06:c8:74:ee:4a:af:9f:d6:fd:e0:7b:43: 95:04:1b:cf:10:10:bc:47:b4:d9:79:3d:ad:8f:26:dd:02:51: fc:b8:ab:35:aa:d2:04:53:af:86:a8:9d:11:7e:62:ad:7f:f7: fe:07:b6:16:83:b0:49:73:dd:29:97:e4:67:89:75:91:d0:db: f7:f3:de:25:48:bc:a6:b7:f7:fd:47:f5:e8:11:f9:04:ae:cc: f0:ce:85:ab:7e:ad:76:b8:bf:3f:bd:9a:24:92:48:c3:f2:a0: a3:1b:da:ec:99:3e:bb:7c:ba:4a:5f:fd:97:1f:d3:1f:6f:51: 6c:0d:f9:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cb9gvqG5x7dNaEjhDDurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YWJmMGM5ODE3MDFhYmE5N2U0ZmNkMGJlZDRlNGNkYjg2 OTIwNDcwHhcNMjUxMjA2MTkwMDQ3WhcNMjUxMjA3MTkwMDQ3WjAzMTEwLwYDVQQD EyhmZWVkMjI3NTU0ODMzYjNlNjA5ZmRkN2I0ZDYyZTE2OTdjZmExMzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5iGTsGfcSZ05Clz1izBR9ySrGKy UhgYgf7X2UUVChtfNMi/fvvsysgY/IICB1n4m0k5iZ47pWRXPkFJXyraBsyPt6jy /mK5ckR1PhrS6sCZkm410oCEuaAfymizI8gDpQePkFqcgEfsrbGPcXKSPmAi52vi xOfhEe64jvsYT12uAPqh4hjMiwgPTbfeS3MrmvzgQuGC8DaGOYCpiQN3bjx9GK+0 cyPGSgdsvjqEmNloL3QXtg8A7N4snE2emdvSvNF03C0LbS9F2/D+su2YAz3PZr3F e9ZWHTv9wiD9uvzS4i1NnDoKx8sIfn7y3f8yvcMIQUUccrLXeaaHvqnVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7tInVUgzs+YJ/de01i4Wl8+hMoMB8GA1UdIwQY MBaAFISr8MmBcBq6l+T80L7U5M24aSBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAt NjFiYzdlY2M0ODVjLzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85OTUyYzgtMmQ0MC00MWUyLWJhNzAtNjFiYzdlY2M0ODVj LzEvaEt2d3lZRndHcnFYNVB6UXZ0VGt6YmhwSUVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAQNfTfN 9r5J3OfaRxpvTFF/fF6jsRJjypH76Gx8bDk4RytgptkpCIeiItLUQ0B3dIvE59+y pJ+hoese2pY4II+mHDB45txc0VyBNHlb1WVSa42tAhp+QTNBivryIkrThFOnFpvS 0SMBPZ8Q0lqu1xcPGmnYUWFCrEWTgrzh14rs7w50Bsh07kqvn9b94HtDlQQbzxAQ vEe02Xk9rY8m3QJR/LirNarSBFOvhqidEX5irX/3/ge2FoOwSXPdKZfkZ4l1kdDb 9/PeJUi8prf3/Uf16BH5BK7M8M6Fq36tdri/P72aJJJIw/Kgoxva7Jk+u3y6Sl/9 lx/TH29RbA35sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:34 2025 by rpki-client