This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft File: hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json) Hash identifier: 0IQCGU8/q+oi5Uk3L2oP/ouze4LZn3Mgc6bZgqLyjlg= Subject key identifier: C6:57:0B:2A:B3:93:A0:0B:2A:69:C6:BE:6F:47:A4:8E:46:F9:D4:62 Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62 Certificate issuer: /CN=865122c0e562e407976823d94e19e2a794f8cb62 Certificate serial: 019AF2ADEA650B28127E883135F4076504FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: W+NG2LALXH3doCzp9FuMGcpJdi8ezLWqVXM7VKBDM5o=) 2: w-uN_1VCR8_SOj5bY-QHNqktijQ.roa (hash: 0MkMfXtYvuQQQ2rI12rE9KqS+DI9qKcacxegwXpKbvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ea:65:0b:28:12:7e:88:31:35:f4:07:65:04:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62 Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=c6570b2ab393a00b2a69c6be6f47a48e46f9d462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:a9:13:22:0e:47:32:75:a8:0c:1b:48:96: 60:b5:91:d0:98:23:25:7e:b2:82:fd:b6:04:f1:17: 2c:29:bb:2b:af:1c:88:f3:3c:0b:fa:c2:6f:1e:ae: 41:48:e2:7c:72:eb:0c:bb:b6:84:5a:fc:1c:ef:c3: b1:4f:6c:8f:57:7e:5b:74:a3:36:72:31:ef:07:34: 04:4c:b9:3d:43:3a:3c:59:95:3f:57:2f:f7:51:38: ac:0d:1e:41:cb:98:fd:10:f5:c0:fc:a2:f8:91:01: 8c:f0:4e:d4:6b:e4:4b:79:2b:fe:06:cd:a5:bd:9e: 37:63:73:22:eb:5b:4f:c6:10:43:71:9d:e0:c7:78: 01:86:9b:b0:a8:d3:59:67:a5:e4:df:6f:bc:57:26: 7e:a8:d5:f3:ed:f8:bd:1c:22:50:7e:81:3d:7d:5f: 1e:8a:61:8e:58:77:ee:7b:b6:42:12:39:26:e6:12: 7f:64:0b:b4:b6:06:2f:f1:25:bd:0f:5f:b8:0e:3f: 87:a4:2d:11:b4:02:42:e8:d0:a3:47:f9:84:91:43: ff:20:5a:cb:eb:48:b6:27:af:e7:4f:08:a9:d5:a7: 7a:47:d2:70:55:d2:a3:2c:65:7d:53:d9:c4:77:41: 81:7c:5b:43:f2:3a:91:da:31:f0:e1:b4:01:5c:f7: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:0B:2A:B3:93:A0:0B:2A:69:C6:BE:6F:47:A4:8E:46:F9:D4:62 X509v3 Authority Key Identifier: keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bf:6b:ff:10:0a:f6:f0:90:cf:01:3b:33:84:c6:ef:52:74: 97:c9:e6:3b:be:20:20:b3:55:8b:8d:e7:3b:d4:fa:ca:2e:87: 23:68:15:9c:a5:c8:9a:d7:a1:cd:54:52:48:fe:e2:de:a7:a9: ff:c8:ab:9a:e4:40:42:0d:b9:48:61:23:d2:20:cf:5f:39:02: bb:e7:3d:11:26:51:9d:ea:36:13:18:ce:04:db:03:3d:54:d7: 6b:5f:44:18:4b:2b:bb:d7:28:96:3c:ff:ab:6f:5b:0b:e4:19: 6a:27:16:88:1e:35:ae:94:c0:f6:fd:f1:dc:b9:30:d4:1a:43: 01:a3:df:b7:1a:2c:59:b2:7d:7c:a9:58:37:bd:0e:7e:07:97: 70:a0:5f:ca:48:a1:10:06:ec:61:ad:eb:31:85:01:35:81:c3: e9:54:0d:bf:13:f6:7e:4b:e8:63:d3:1e:52:32:f7:d8:f1:d8: ec:76:86:51:9a:c3:1b:05:34:32:48:ab:fc:74:9d:e2:55:9f: d4:f5:48:79:55:c6:55:7c:18:cb:2a:21:cc:55:42:58:2f:c0: bd:b0:32:57:37:37:7e:00:4f:23:e2:5b:c0:3f:82:cb:de:55: 65:10:f7:b3:5b:80:f7:c2:41:0a:6b:b2:2e:fa:75:e5:e5:cc: 0f:d8:9f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreplCygSfogxNfQHZQT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NTEyMmMwZTU2MmU0MDc5NzY4MjNkOTRlMTllMmE3OTRm OGNiNjIwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD EyhjNjU3MGIyYWIzOTNhMDBiMmE2OWM2YmU2ZjQ3YTQ4ZTQ2ZjlkNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L+pEyIORzJ1qAwbSJZgtZHQmCMl frKC/bYE8RcsKbsrrxyI8zwL+sJvHq5BSOJ8cusMu7aEWvwc78OxT2yPV35bdKM2 cjHvBzQETLk9Qzo8WZU/Vy/3UTisDR5By5j9EPXA/KL4kQGM8E7Ua+RLeSv+Bs2l vZ43Y3Mi61tPxhBDcZ3gx3gBhpuwqNNZZ6Xk32+8VyZ+qNXz7fi9HCJQfoE9fV8e imGOWHfue7ZCEjkm5hJ/ZAu0tgYv8SW9D1+4Dj+HpC0RtAJC6NCjR/mEkUP/IFrL 60i2J6/nTwip1ad6R9JwVdKjLGV9U9nEd0GBfFtD8jqR2jHw4bQBXPf8gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZXCyqzk6ALKmnGvm9HpI5G+dRiMB8GA1UdIwQY MBaAFIZRIsDlYuQHl2gj2U4Z4qeU+MtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMjhiODItZmUwMy00MDI1LTk3NjUt YjhkZDE4ZTQ4ZTg2LzEvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wMjhiODItZmUwMy00MDI1LTk3NjUtYjhkZDE4ZTQ4ZTg2 LzEvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcL9r/xAK 9vCQzwE7M4TG71J0l8nmO74gILNVi43nO9T6yi6HI2gVnKXImtehzVRSSP7i3qep /8irmuRAQg25SGEj0iDPXzkCu+c9ESZRneo2ExjOBNsDPVTXa19EGEsru9coljz/ q29bC+QZaicWiB41rpTA9v3x3Lkw1BpDAaPftxosWbJ9fKlYN70OfgeXcKBfykih EAbsYa3rMYUBNYHD6VQNvxP2fkvoY9MeUjL32PHY7HaGUZrDGwU0Mkir/HSd4lWf 1PVIeVXGVXwYyyohzFVCWC/AvbAyVzc3fgBPI+JbwD+Cy95VZRD3s1uA98JBCmuy Lvp15eXMD9ifpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:24 2025 by rpki-client