This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json) Hash identifier: h/d/IzNhOslKK6skuN/GRQGM3PThjisg2lV+1Y1GSYE= Subject key identifier: D9:B7:45:5D:85:E2:30:75:7C:D2:A3:A0:26:9A:73:E0:51:43:33:9F Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0 Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0 Certificate serial: 019AF23F7C6663695DEEE815F51A662209A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=) 2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: GlVVlj3X6SyJsCUQ0G+7bKA8KG8n032wEMGRKEkrnok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7c:66:63:69:5d:ee:e8:15:f5:1a:66:22:09:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=d9b7455d85e230757cd2a3a0269a73e05143339f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:d4:a4:d1:a1:1c:5d:c5:7e:0f:01:85:b1: 24:b6:d9:4e:2d:c5:6c:49:bc:8f:ec:3f:39:d2:86: 1b:65:d8:0d:ca:d2:c4:8c:ae:64:2b:38:8c:99:7b: bc:e7:ea:a6:86:0b:c6:77:93:d7:75:97:5e:5c:e1: 9a:8d:93:67:d0:2c:fc:04:f5:8b:5c:d2:5e:34:bf: e1:d4:15:8b:d1:ee:7c:cc:64:3c:14:7b:3f:ba:f3: be:58:50:20:c3:2b:7f:4f:be:ab:92:66:e2:77:06: f2:c2:52:87:66:ab:68:10:5f:c4:27:e2:fc:25:a7: 94:44:b0:41:26:05:0d:d2:10:1d:df:bb:5a:13:60: 60:f0:48:c6:5e:48:b4:35:3f:0e:f3:48:68:48:18: 05:8b:ed:33:43:6a:dc:a6:79:24:20:94:61:58:66: c4:4a:35:c8:c0:c2:0e:18:e7:10:5a:11:18:c1:3a: eb:79:b5:5b:93:19:17:71:24:14:9d:45:00:70:c5: 56:41:74:76:29:6a:3a:66:8c:1f:d6:d0:c5:f5:e4: 2f:48:8e:59:95:a9:2b:a4:09:5e:22:0d:1a:2a:57: fd:fa:7d:11:33:d9:72:9d:b5:8b:4e:26:77:be:06: 19:ea:a9:be:fd:fe:62:62:9c:07:23:91:1f:9b:01: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:45:5D:85:E2:30:75:7C:D2:A3:A0:26:9A:73:E0:51:43:33:9F X509v3 Authority Key Identifier: keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:cf:bc:df:53:c3:01:c4:36:9e:3b:d1:65:eb:1c:9a:18: 03:3d:c0:7b:5f:1f:05:7c:d9:39:b2:54:80:c1:9d:24:cc:ad: b4:c6:48:25:2c:ca:e5:c1:d9:6f:8e:54:ca:94:a7:a0:92:2b: 0d:5b:b6:b2:67:a5:16:dd:ba:53:f2:f9:96:93:ec:8b:e0:f3: ad:9b:fb:d5:ca:3e:41:09:b6:10:7c:1b:37:0d:22:a9:cf:97: e1:18:8a:92:c3:6f:85:13:6b:6b:1d:d7:e3:66:cb:15:e5:88: 40:2a:a8:d5:3e:3e:5c:21:87:e3:09:e1:f0:68:a9:7e:29:ad: c2:14:50:da:4d:06:c4:f6:16:09:ea:a3:15:97:2c:0e:b5:0a: 33:f2:82:34:5b:55:1f:07:2e:20:27:14:7d:b8:1e:b0:34:e3: 70:37:a9:95:08:01:54:15:60:01:44:f0:6c:8a:0c:19:30:34: 46:88:8a:68:f2:72:f2:ee:aa:d3:1a:4e:bf:68:a6:2e:7c:2c: c5:ce:00:62:f6:7e:7a:92:89:a2:2f:f1:5b:6c:e5:28:13:a0: 4f:dc:83:38:bc:c7:c9:63:39:58:84:4b:8f:b1:f3:9b:d6:5d: 23:5e:01:29:bf:02:92:8d:a5:08:b8:6e:36:09:cb:a2:eb:71: db:0b:45:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3xmY2ld7ugV9RpmIgmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5 Yjc5ZjAwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EyhkOWI3NDU1ZDg1ZTIzMDc1N2NkMmEzYTAyNjlhNzNlMDUxNDMzMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1DUpNGhHF3Ffg8BhbEkttlOLcVs SbyP7D850oYbZdgNytLEjK5kKziMmXu85+qmhgvGd5PXdZdeXOGajZNn0Cz8BPWL XNJeNL/h1BWL0e58zGQ8FHs/uvO+WFAgwyt/T76rkmbidwbywlKHZqtoEF/EJ+L8 JaeURLBBJgUN0hAd37taE2Bg8EjGXki0NT8O80hoSBgFi+0zQ2rcpnkkIJRhWGbE SjXIwMIOGOcQWhEYwTrrebVbkxkXcSQUnUUAcMVWQXR2KWo6Zowf1tDF9eQvSI5Z lakrpAleIg0aKlf9+n0RM9lynbWLTiZ3vgYZ6qm+/f5iYpwHI5EfmwHHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm3RV2F4jB1fNKjoCaac+BRQzOfMB8GA1UdIwQY MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt MGI2ZjAwMmQxOTc4LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4 LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVfPvN9T wwHENp470WXrHJoYAz3Ae18fBXzZObJUgMGdJMyttMZIJSzK5cHZb45UypSnoJIr DVu2smelFt26U/L5lpPsi+DzrZv71co+QQm2EHwbNw0iqc+X4RiKksNvhRNrax3X 42bLFeWIQCqo1T4+XCGH4wnh8GipfimtwhRQ2k0GxPYWCeqjFZcsDrUKM/KCNFtV HwcuICcUfbgesDTjcDeplQgBVBVgAUTwbIoMGTA0RoiKaPJy8u6q0xpOv2imLnws xc4AYvZ+epKJoi/xW2zlKBOgT9yDOLzHyWM5WIRLj7Hzm9ZdI14BKb8Cko2lCLhu NgnLoutx2wtFYw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:17 2025 by rpki-client