This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json) Hash identifier: DkFkXDMv6bmBLlsNGz+Y21zUKhMTzur4fSVOPbMVUcs= Subject key identifier: 7F:51:65:4D:C7:65:D0:F4:81:50:24:3A:F3:FE:B8:3C:2D:9E:E3:27 Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Certificate serial: 019AF12D95D1A33440949B6E419B710E071C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft Manifest number: 10EF Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: ZSxXdcLZRrT/QqyUZsx+tITDYPxlLtAxMls+JOjvZVs=) 2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:95:d1:a3:34:40:94:9b:6e:41:9b:71:0e:07:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=7f51654dc765d0f48150243af3feb83c2d9ee327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:10:93:c9:60:1f:f9:39:e7:e8:2f:14:ee: 66:24:c5:c2:87:69:73:1a:61:6c:02:62:0e:9d:07: 9a:18:2e:88:c0:12:6e:82:3b:e8:16:e3:71:21:ae: ac:1e:37:2b:47:5d:0c:a7:2e:91:ff:1d:c6:4b:9a: 0c:bf:a6:a5:c3:f8:d7:00:e1:33:69:9c:6a:4a:8c: ed:00:26:ee:53:0d:cc:8d:c3:9f:65:65:34:fb:35: 63:df:46:ec:bc:10:bf:49:ed:a3:db:94:dc:30:09: 00:4f:e8:50:01:58:62:19:29:43:27:84:ae:83:b7: fc:52:e6:d8:74:e1:0d:68:99:ee:21:87:52:06:71: 79:f3:7f:58:58:da:cf:11:eb:b1:b1:ab:28:d1:b1: d0:68:8f:17:f9:3a:8a:bf:49:0d:60:3c:45:a8:70: 96:76:55:4f:5d:e3:10:28:0e:0f:4d:22:b3:ff:55: 1e:2a:ab:91:1e:f4:1e:50:6a:37:85:4f:2f:5f:30: 61:22:4f:a5:d8:d3:0a:6d:5a:db:05:8e:b2:a1:34: 94:4b:b0:74:b7:48:3d:07:74:f0:0b:66:fc:ee:79: 81:93:7c:0e:64:b0:3c:65:6b:46:4b:89:1d:1f:40: 01:3b:67:5f:81:a9:40:06:57:6a:3a:79:47:43:95: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:51:65:4D:C7:65:D0:F4:81:50:24:3A:F3:FE:B8:3C:2D:9E:E3:27 X509v3 Authority Key Identifier: keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b2:d1:21:37:00:a0:31:3c:2b:64:ad:f5:f4:04:63:cb:08: fb:bf:d9:54:d3:86:3b:8f:d6:ec:bc:d4:60:54:43:c9:8a:ad: f5:6f:b3:cc:ce:07:00:9b:cb:28:41:ae:ca:36:43:b0:4a:6f: ba:5d:4d:12:0e:57:b6:b9:16:f8:d5:2e:65:c8:47:4a:e9:af: b6:4e:09:6b:52:f4:c6:de:00:74:3b:ac:07:3e:14:45:49:3a: 5b:c6:32:ff:c2:c6:ff:df:f5:1d:a9:8f:a2:5c:0b:d0:f2:c6: 30:bd:78:33:f8:47:e3:b5:47:d3:26:5b:61:1c:78:93:bc:49: 94:b3:88:8a:d0:03:d2:3c:35:eb:d0:a6:57:ed:7d:da:db:22: 58:81:d9:ad:8f:70:f7:53:f6:34:52:06:73:48:d9:30:66:dd: 47:df:42:98:41:49:ca:d5:a4:cf:e1:a3:5d:9b:56:8f:1d:76: df:b9:e8:c2:0a:3d:ff:38:57:fd:28:f1:ce:60:8c:a9:ae:b1: 02:02:b0:ba:35:f3:19:99:77:55:64:58:24:8b:64:16:7d:76: e8:48:3b:a7:a8:7b:58:3a:23:bf:02:e7:30:c3:31:b8:2b:fb: 12:0c:2e:70:fe:e4:de:ee:80:24:52:54:21:1c:63:15:34:85: d0:d1:44:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZXRozRAlJtuQZtxDgccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2 YTE4YTMwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD Eyg3ZjUxNjU0ZGM3NjVkMGY0ODE1MDI0M2FmM2ZlYjgzYzJkOWVlMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJoQk8lgH/k55+gvFO5mJMXCh2lz GmFsAmIOnQeaGC6IwBJugjvoFuNxIa6sHjcrR10Mpy6R/x3GS5oMv6alw/jXAOEz aZxqSoztACbuUw3MjcOfZWU0+zVj30bsvBC/Se2j25TcMAkAT+hQAVhiGSlDJ4Su g7f8UubYdOENaJnuIYdSBnF5839YWNrPEeuxsaso0bHQaI8X+TqKv0kNYDxFqHCW dlVPXeMQKA4PTSKz/1UeKquRHvQeUGo3hU8vXzBhIk+l2NMKbVrbBY6yoTSUS7B0 t0g9B3TwC2b87nmBk3wOZLA8ZWtGS4kdH0ABO2dfgalABldqOnlHQ5VhSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9RZU3HZdD0gVAkOvP+uDwtnuMnMB8GA1UdIwQY MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt NTI0MWUzMWNkOGRhLzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7LRITcA oDE8K2St9fQEY8sI+7/ZVNOGO4/W7LzUYFRDyYqt9W+zzM4HAJvLKEGuyjZDsEpv ul1NEg5XtrkW+NUuZchHSumvtk4Ja1L0xt4AdDusBz4URUk6W8Yy/8LG/9/1HamP olwL0PLGML14M/hH47VH0yZbYRx4k7xJlLOIitAD0jw169CmV+192tsiWIHZrY9w 91P2NFIGc0jZMGbdR99CmEFJytWkz+GjXZtWjx1237nowgo9/zhX/SjxzmCMqa6x AgKwujXzGZl3VWRYJItkFn126Eg7p6h7WDojvwLnMMMxuCv7EgwucP7k3u6AJFJU IRxjFTSF0NFE4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:41 2025 by rpki-client