This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json) Hash identifier: nBEq4zuywn/X2iguGEXcld47FikXO+EKj2QWm16V9+0= Subject key identifier: 7B:F4:41:4B:F9:F0:75:2B:43:F8:C5:4A:93:20:CE:0C:F0:BA:17:B7 Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93 Certificate serial: 019AF3893F19EC6F6BDFA182794C15EE46A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft Manifest number: 03C3 Signing time: Sat 06 Dec 2025 12:00:49 +0000 Manifest this update: Sat 06 Dec 2025 12:00:49 +0000 Manifest next update: Sun 07 Dec 2025 12:00:49 +0000 Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=) 2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: j35bP06eoxzVhnxjrgd5xKuU1hyUTj4OKgeDYkR/0xs=) 3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:3f:19:ec:6f:6b:df:a1:82:79:4c:15:ee:46:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93 Validity Not Before: Dec 6 12:00:49 2025 GMT Not After : Dec 7 12:00:49 2025 GMT Subject: CN=7bf4414bf9f0752b43f8c54a9320ce0cf0ba17b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:36:51:29:9f:d2:83:aa:00:18:f8:34:01: a4:de:5b:72:66:6f:ec:dc:14:b2:a1:4a:d2:13:9f: 10:69:6f:94:ae:fc:f4:1f:4a:68:00:95:f8:86:4b: a0:a7:1e:c4:d4:4f:d0:db:1d:e1:61:af:9a:be:17: ee:55:17:94:36:29:48:33:b3:b6:75:62:e4:98:82: 99:3c:fd:46:47:19:a6:2c:a6:95:be:09:cd:14:62: f7:be:87:28:17:54:37:f4:83:e9:9b:99:35:37:c5: 1d:e6:d3:94:13:34:54:78:4a:6d:11:60:82:af:47: 42:c3:0e:bc:15:eb:9c:87:6a:2d:d9:5b:35:d3:d1: 7e:8d:ab:c8:06:66:6a:d5:b0:aa:8b:5d:53:3b:3a: 3a:a5:33:33:31:10:7f:70:1f:59:7a:5c:60:9b:87: 7e:9c:12:98:87:93:13:de:62:32:2b:88:a5:1e:a8: d6:13:ed:b6:36:61:c1:9b:8b:4f:9b:c4:b9:ee:8c: fd:55:9b:05:28:87:85:ff:bd:38:f4:d7:c6:0d:17: bb:64:7c:5e:58:a7:83:34:e4:e5:98:8b:52:ea:ef: 34:65:c1:84:ec:05:25:8d:8a:20:3a:86:4e:5a:c8: d8:d4:a2:77:d6:19:38:22:cc:ab:d8:bb:23:94:82: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F4:41:4B:F9:F0:75:2B:43:F8:C5:4A:93:20:CE:0C:F0:BA:17:B7 X509v3 Authority Key Identifier: keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:15:0d:51:7c:51:e6:64:f6:5f:2e:ee:ef:41:9c:c3:c7:80: 4e:58:f6:16:27:4b:ae:95:24:7b:29:5e:5b:d0:78:6e:1d:12: a8:c6:43:f7:09:ae:ca:3f:10:fa:8e:b3:3f:5f:bb:e0:26:ab: 29:3f:88:bd:e2:4b:21:39:91:a1:29:30:d3:fa:32:60:44:cd: 02:e6:5e:46:78:a6:f2:98:30:dc:1f:9b:ee:37:40:34:f1:05: 64:5b:ae:63:62:01:e5:a4:ab:02:42:a3:0f:ce:ae:86:2b:ca: bd:08:48:5c:7e:d6:32:68:b3:0c:e3:ce:95:19:ff:16:45:bf: e8:59:7f:dc:07:15:fd:33:d6:3b:87:ff:90:e7:0b:01:88:d0: 73:43:8e:b3:95:9c:ea:e5:0e:a0:e1:2c:48:19:4d:44:16:ed: f6:ac:98:6f:81:96:54:f7:57:8e:fc:87:93:8e:3d:70:85:7d: 7a:db:d4:2c:85:89:cc:01:6c:ca:0c:ff:46:f0:20:e6:b7:3b: 30:2b:85:d4:26:6b:78:78:cb:fa:c4:70:6a:f0:8e:bf:2d:88: 4e:28:0b:ba:0b:28:b0:2b:42:e5:a3:59:03:96:99:ae:f2:f2: 4c:75:90:b3:fa:f6:57:15:0a:92:59:33:75:95:c1:10:40:4d: db:22:45:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziT8Z7G9r36GCeUwV7kakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1 ODhiOTMwHhcNMjUxMjA2MTIwMDQ5WhcNMjUxMjA3MTIwMDQ5WjAzMTEwLwYDVQQD Eyg3YmY0NDE0YmY5ZjA3NTJiNDNmOGM1NGE5MzIwY2UwY2YwYmExN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0c2USmf0oOqABj4NAGk3ltyZm/s 3BSyoUrSE58QaW+Urvz0H0poAJX4hkugpx7E1E/Q2x3hYa+avhfuVReUNilIM7O2 dWLkmIKZPP1GRxmmLKaVvgnNFGL3vocoF1Q39IPpm5k1N8Ud5tOUEzRUeEptEWCC r0dCww68Feuch2ot2Vs109F+javIBmZq1bCqi11TOzo6pTMzMRB/cB9Zelxgm4d+ nBKYh5MT3mIyK4ilHqjWE+22NmHBm4tPm8S57oz9VZsFKIeF/7049NfGDRe7ZHxe WKeDNOTlmItS6u80ZcGE7AUljYogOoZOWsjY1KJ31hk4Isyr2LsjlIKxhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv0QUv58HUrQ/jFSpMgzgzwuhe3MB8GA1UdIwQY MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRUNUXxR 5mT2Xy7u70Gcw8eATlj2FidLrpUkeyleW9B4bh0SqMZD9wmuyj8Q+o6zP1+74Car KT+IveJLITmRoSkw0/oyYETNAuZeRnim8pgw3B+b7jdANPEFZFuuY2IB5aSrAkKj D86uhivKvQhIXH7WMmizDOPOlRn/FkW/6Fl/3AcV/TPWO4f/kOcLAYjQc0OOs5Wc 6uUOoOEsSBlNRBbt9qyYb4GWVPdXjvyHk449cIV9etvULIWJzAFsygz/RvAg5rc7 MCuF1CZreHjL+sRwavCOvy2ITigLugsosCtC5aNZA5aZrvLyTHWQs/r2VxUKklkz dZXBEEBN2yJFJg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:03 2025 by rpki-client