This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json) Hash identifier: OcfrrkuDi10SdyaFCg36dRqfHCAnbkkpApKgHihkXPs= Subject key identifier: 04:F9:E3:EF:0D:4C:E2:8B:E5:3C:82:FD:B5:2B:F1:73:E6:E3:7A:3A Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Certificate serial: 019AF12E9441F261D1ABD1FA431097DBC7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 01:02:32 +0000 Manifest this update: Sat 06 Dec 2025 01:02:32 +0000 Manifest next update: Sun 07 Dec 2025 01:02:32 +0000 Files and hashes: 1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=) 2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: qeF1NShLoZqaK746yjwdb9o+X97tPpKYx8TrNhYe1jI=) 3: xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa (hash: 4iBkWP8qWume/2A2mXJkWl5EI5fYnKSC+vvo5StFXVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:94:41:f2:61:d1:ab:d1:fa:43:10:97:db:c7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Validity Not Before: Dec 6 01:02:32 2025 GMT Not After : Dec 7 01:02:32 2025 GMT Subject: CN=04f9e3ef0d4ce28be53c82fdb52bf173e6e37a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:49:4c:01:6c:0b:66:0b:08:79:2c:8f:6b:74: c4:76:ca:df:a3:64:bf:b5:8a:5c:0c:56:ba:2c:96: 27:62:e4:ed:f4:9a:cb:61:0b:e6:27:4e:e5:24:40: e0:00:72:88:d1:c0:82:3b:49:56:93:2d:5f:6d:ce: 5a:11:3f:47:be:09:0c:c0:b7:ed:f7:93:74:3d:2f: 24:46:62:e3:ef:72:bf:f2:b9:35:c5:b2:c1:ed:e3: 5d:44:f6:f4:cf:a8:b8:92:18:97:d8:33:48:b7:07: 44:9d:88:60:2b:35:64:98:0b:78:f5:f4:3e:bf:2b: 4b:5d:a5:02:03:36:48:05:31:48:ba:98:0b:6a:cc: 5f:d0:bc:f3:2e:6c:9a:29:31:4a:d3:49:80:83:88: 14:f2:b5:be:96:b6:50:40:ef:a9:10:0a:d2:67:8a: 54:2d:ee:fc:c3:74:1a:67:36:a5:da:af:8b:30:fe: 6e:7b:73:a2:4e:9f:04:44:fe:a1:03:1c:52:55:c3: 03:69:05:47:73:69:36:b2:fd:d0:79:58:88:a4:69: ae:7f:dc:8a:94:c7:b6:e2:a4:21:e3:89:58:d2:22: e5:f0:4b:a2:ec:7f:98:74:03:fc:01:58:97:33:1d: 2b:06:b9:4d:e6:f7:8f:91:8a:50:df:83:1c:60:c1: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F9:E3:EF:0D:4C:E2:8B:E5:3C:82:FD:B5:2B:F1:73:E6:E3:7A:3A X509v3 Authority Key Identifier: keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d0:53:15:48:ae:39:79:92:7a:6f:8f:03:2f:d9:af:36:e4: 96:52:04:89:8a:ec:36:f4:91:00:57:c9:67:17:0b:a0:c8:c8: e0:b4:13:24:8a:cf:d1:14:61:f9:ae:61:cf:c5:5c:a9:f8:45: 41:77:77:60:bb:31:1b:fb:e2:39:9d:e9:f5:48:8f:72:e7:3c: d7:cb:b5:1e:7a:08:bd:c6:b9:18:f8:9e:85:26:ad:31:c6:0d: 90:df:6c:81:1b:b9:f8:0f:d5:fa:97:95:43:b8:d2:52:17:a2: 7f:39:73:62:f8:b0:38:d4:57:43:2d:86:bf:8f:82:ed:c7:68: 57:e0:3b:67:1c:22:75:c3:a1:92:80:eb:3a:31:b8:d7:7c:6e: 4f:45:7e:a1:3b:2d:7a:3b:e7:94:68:f0:ea:3d:fb:67:e9:73: 67:d8:fd:34:7d:c4:5c:f4:ff:c4:ba:ee:22:19:a3:10:26:c0: da:1c:2b:c8:d8:4e:65:82:2b:01:03:e2:fc:46:26:cd:cf:f7: c8:97:f5:87:e0:ef:50:6c:92:d0:29:ef:97:e8:e5:7b:bf:40: 1a:6f:e9:49:bc:8a:16:9e:62:42:e2:cf:17:df:a3:98:a3:a6: e6:b8:66:e4:41:8d:bf:bd:f4:59:0b:2b:40:6d:c0:cd:a8:ae: 22:14:43:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpRB8mHRq9H6QxCX28ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDE5ODZlNjU1MWJiM2EwMTVhYzY0ZWQ2NzQ3YzIzNGIy YTc5ZTAwHhcNMjUxMjA2MDEwMjMyWhcNMjUxMjA3MDEwMjMyWjAzMTEwLwYDVQQD EygwNGY5ZTNlZjBkNGNlMjhiZTUzYzgyZmRiNTJiZjE3M2U2ZTM3YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00lMAWwLZgsIeSyPa3TEdsrfo2S/ tYpcDFa6LJYnYuTt9JrLYQvmJ07lJEDgAHKI0cCCO0lWky1fbc5aET9HvgkMwLft 95N0PS8kRmLj73K/8rk1xbLB7eNdRPb0z6i4khiX2DNItwdEnYhgKzVkmAt49fQ+ vytLXaUCAzZIBTFIupgLasxf0LzzLmyaKTFK00mAg4gU8rW+lrZQQO+pEArSZ4pU Le78w3QaZzal2q+LMP5ue3OiTp8ERP6hAxxSVcMDaQVHc2k2sv3QeViIpGmuf9yK lMe24qQh44lY0iLl8Eui7H+YdAP8AViXMx0rBrlN5vePkYpQ34McYMFD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT54+8NTOKL5TyC/bUr8XPm43o6MB8GA1UdIwQY MBaAFB4BmG5lUbs6AVrGTtZ0fCNLKnngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMt ZmY4ZjU1NDVlYmEyLzEvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMtZmY4ZjU1NDVlYmEy LzEvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9BTFUiu OXmSem+PAy/ZrzbkllIEiYrsNvSRAFfJZxcLoMjI4LQTJIrP0RRh+a5hz8VcqfhF QXd3YLsxG/viOZ3p9UiPcuc818u1HnoIvca5GPiehSatMcYNkN9sgRu5+A/V+peV Q7jSUheifzlzYviwONRXQy2Gv4+C7cdoV+A7ZxwidcOhkoDrOjG413xuT0V+oTst ejvnlGjw6j37Z+lzZ9j9NH3EXPT/xLruIhmjECbA2hwryNhOZYIrAQPi/EYmzc/3 yJf1h+DvUGyS0Cnvl+jle79AGm/pSbyKFp5iQuLPF9+jmKOm5rhm5EGNv730WQsr QG3AzaiuIhRDIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:02:41 2025 by rpki-client