This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json) Hash identifier: gM3LyIHlFHSYGVh0XcYkdvxYucgwcK5ed90E4Tt9JzM= Subject key identifier: 16:14:CC:2E:8A:17:5D:E0:41:C9:1E:C1:55:18:B9:3F:08:97:D4:46 Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc Certificate serial: 019AF12D5E87571F41419188812F2DCC8E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft Manifest number: 0640 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: UOxyQl9kj5snEmjdk+C3kx396z2o6BRI0OjbK7s/6vY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5e:87:57:1f:41:41:91:88:81:2f:2d:cc:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=1614cc2e8a175de041c91ec15518b93f0897d446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:65:59:b3:ff:46:f6:65:89:bb:5a:6a:2a: 3e:87:c8:0f:ad:ab:e2:49:37:71:2d:c7:27:c4:dd: a5:31:2c:08:ac:f6:b7:ee:f0:a3:b5:23:d1:ac:a7: bb:2d:6f:5e:88:b1:f2:df:eb:f7:88:be:fb:59:29: ba:65:15:35:42:74:4e:0f:e7:83:ae:bd:1c:e9:f8: 75:b9:2c:62:0a:bc:0f:13:34:dc:94:68:9f:f7:dc: 88:dc:d3:80:ce:d6:a9:03:fe:d2:07:d7:7b:c9:c5: 48:0b:6f:99:de:10:be:8b:9f:34:a7:a2:4b:e0:d5: 86:0e:cb:56:47:0c:82:5c:4a:45:38:1d:1a:b5:23: 5b:5d:4b:7f:fa:fe:06:d8:27:8a:55:7b:3c:c2:20: 9c:15:3e:85:89:20:ec:9a:21:17:b7:c6:db:0a:10: d7:54:e2:ed:55:2e:74:ef:3d:cc:42:82:55:1b:26: ec:18:f0:1a:ad:14:cc:1e:65:17:e6:b5:cf:2c:c8: 82:ea:81:dc:d8:8c:24:e5:2d:3a:38:6f:de:ac:a6: fc:53:b2:4d:04:10:85:85:c2:11:b6:65:e6:21:ac: 9b:0b:b2:7b:8d:41:2d:07:0a:c2:55:6c:3c:45:fa: f8:58:04:f4:45:6f:61:a3:23:36:91:73:d3:5a:85: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:14:CC:2E:8A:17:5D:E0:41:C9:1E:C1:55:18:B9:3F:08:97:D4:46 X509v3 Authority Key Identifier: keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7d:7b:45:05:26:36:ec:1c:6d:74:84:c8:74:9a:3e:90:83: 3b:bb:bc:42:a7:06:65:73:cb:f0:7f:13:85:fc:db:84:19:f8: ad:15:fa:69:00:9a:9a:20:e4:d0:d3:ff:02:b2:2b:5d:c4:c0: 5a:d6:c4:df:c3:4a:9f:f0:5a:d0:27:3e:cb:c0:19:f0:88:f2: 2e:b8:8c:b2:e5:72:86:dd:4a:ea:30:54:1c:a5:9f:22:2a:22: 32:d6:e1:a5:d3:a5:fb:81:66:cd:ed:5f:ae:b8:1f:3a:0b:5c: 0f:b2:c8:d8:39:70:76:3c:00:89:aa:36:fa:e5:f0:c5:bd:c2: 54:5f:a8:ce:8f:32:54:9e:ba:5d:38:c6:35:24:bc:03:a8:14: 0b:8c:b9:9c:ed:c6:15:a7:94:eb:c7:47:0d:31:95:dd:99:04: 2a:48:77:52:7c:07:12:cc:7b:d2:d4:57:e7:ff:e4:78:ab:c0: 9f:a0:f3:65:1f:3f:9a:ab:fe:15:6f:ec:52:a2:a8:57:6d:ea: 82:f8:ef:b5:01:ff:df:17:3c:ed:49:36:db:69:35:cc:54:33: d8:db:a2:1d:6b:e0:ff:79:91:87:22:e0:23:3b:4e:97:e0:90: 23:2c:e8:ad:11:ac:24:b4:15:bd:12:fa:5f:25:f9:e7:bb:d8: b7:8b:41:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLV6HVx9BQZGIgS8tzI4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMzI1NTVjNjFkM2QyMjllMmM0YTIzMzdkNzVmYTUzZjZm MmIyYmMwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD EygxNjE0Y2MyZThhMTc1ZGUwNDFjOTFlYzE1NTE4YjkzZjA4OTdkNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqdlWbP/RvZlibtaaio+h8gPravi STdxLccnxN2lMSwIrPa37vCjtSPRrKe7LW9eiLHy3+v3iL77WSm6ZRU1QnROD+eD rr0c6fh1uSxiCrwPEzTclGif99yI3NOAztapA/7SB9d7ycVIC2+Z3hC+i580p6JL 4NWGDstWRwyCXEpFOB0atSNbXUt/+v4G2CeKVXs8wiCcFT6FiSDsmiEXt8bbChDX VOLtVS507z3MQoJVGybsGPAarRTMHmUX5rXPLMiC6oHc2Iwk5S06OG/erKb8U7JN BBCFhcIRtmXmIaybC7J7jUEtBwrCVWw8Rfr4WAT0RW9hoyM2kXPTWoX5qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYUzC6KF13gQckewVUYuT8Il9RGMB8GA1UdIwQY MBaAFB0yVVxh09Ip4sSiM311+lP28rK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAt YTc5ZjlmZWVmMDBhLzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NDYxZDItMzc2YS00NDIwLWE5MjAtYTc5ZjlmZWVmMDBh LzEvSFRKVlhHSFQwaW5peEtJemZYWDZVX2J5c3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUn17RQUm NuwcbXSEyHSaPpCDO7u8QqcGZXPL8H8ThfzbhBn4rRX6aQCamiDk0NP/ArIrXcTA WtbE38NKn/Ba0Cc+y8AZ8IjyLriMsuVyht1K6jBUHKWfIioiMtbhpdOl+4Fmze1f rrgfOgtcD7LI2DlwdjwAiao2+uXwxb3CVF+ozo8yVJ66XTjGNSS8A6gUC4y5nO3G FaeU68dHDTGV3ZkEKkh3UnwHEsx70tRX5//keKvAn6DzZR8/mqv+FW/sUqKoV23q gvjvtQH/3xc87Uk222k1zFQz2NuiHWvg/3mRhyLgIztOl+CQIyzorRGsJLQVvRL6 XyX557vYt4tBhw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:06 2025 by rpki-client