This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
File: htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json)
Hash identifier: XqBbNzdhx+UqoGSsV46PN9B9iKIS0NtDDo3qI7qbUv0=
Subject key identifier: BE:7C:BA:DF:4E:E4:52:3A:32:8A:8A:51:15:30:7B:4E:8E:DB:4D:F8
Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1
Certificate serial: 019AF50A76EE84890AB1393F7875683BD06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
Manifest number: 8C
Signing time: Sat 06 Dec 2025 19:01:34 +0000
Manifest this update: Sat 06 Dec 2025 19:01:34 +0000
Manifest next update: Sun 07 Dec 2025 19:01:34 +0000
Files and hashes: 1: 8jP_y3ejZgoctYO3RIyWsm1WwTY.roa (hash: ecd4E/hh4r+6kZxHuFwVi+mLNAKKO0mfpn1+ByWy+90=)
2: V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa (hash: G4BvHWHZE9u8RSsaaH1AIK81oXqs5R5aGYeyG38uyOM=)
3: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: WI7RmG1orCOGpIVClCCsI0TIxMzGRg6dL4OWfKmaQ5A=)
4: kcL34WnZYMdN4SVhN2PeVdwWvgo.roa (hash: hEzKI9j+KADlA8KNZpHMbM3OEdQSPR+S9HcqTPPWTXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:76:ee:84:89:0a:b1:39:3f:78:75:68:3b:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d963844f8205d1369434531c998600c15781a1
Validity
Not Before: Dec 6 19:01:34 2025 GMT
Not After : Dec 7 19:01:34 2025 GMT
Subject: CN=be7cbadf4ee4523a328a8a5115307b4e8edb4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:ad:52:48:20:6c:a8:69:60:36:20:46:ec:
18:9e:07:e0:4d:32:97:17:e8:69:06:d4:de:06:a3:
91:65:f0:b9:2c:a2:d6:b2:9f:f7:22:de:d1:f9:a0:
3b:46:66:0e:e1:70:e1:7a:74:53:aa:fa:90:9e:f0:
e6:29:1f:45:ab:0e:37:b5:ec:6b:ee:89:72:1b:6a:
35:98:5d:06:5f:97:16:93:7a:27:ad:5b:86:f4:ab:
b7:cc:50:58:90:16:5a:41:8e:8b:a7:51:3a:c0:5f:
23:7f:98:ae:53:31:99:94:41:19:73:9c:84:85:78:
e5:2e:22:c2:e8:62:f3:98:44:15:bc:68:49:c8:e1:
dc:94:8b:73:e7:ef:ce:8b:b3:8e:65:85:6b:65:1a:
f4:0f:7c:3e:1f:ba:e4:bb:97:8a:0b:b9:a7:14:9b:
04:b5:69:b9:2e:ad:a6:42:05:61:12:3c:0e:10:5d:
7f:55:46:e3:1d:ad:ea:cb:e6:71:a3:b5:0b:c9:76:
05:be:f2:ba:f8:18:cd:bb:87:ac:fa:67:18:b0:e5:
e8:d1:85:1e:57:15:1f:50:31:34:1a:76:68:c0:ec:
f1:4d:cd:2b:83:55:59:d9:2b:5c:b8:3c:5d:f3:1a:
da:ca:e5:e3:40:65:a9:b8:6e:4b:2c:ff:cb:7b:75:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:BA:DF:4E:E4:52:3A:32:8A:8A:51:15:30:7B:4E:8E:DB:4D:F8
X509v3 Authority Key Identifier:
keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:52:18:f5:d6:3e:67:0a:c3:dc:80:8a:9c:cc:99:39:e8:ff:
fe:c2:13:7f:e7:d0:d6:bf:f5:73:49:60:c8:49:7b:75:65:02:
a5:76:54:d0:f1:e7:9b:73:db:07:43:8a:0c:18:2c:8e:b3:60:
ad:79:41:0f:19:14:52:4d:a6:78:bb:c5:c5:ea:c2:15:30:3c:
98:24:f1:2e:f0:61:10:f5:6f:af:0d:90:cc:7b:e4:15:5d:49:
d3:cd:2d:2a:ca:f8:94:c6:8c:88:89:1b:9f:62:eb:51:38:0a:
d9:37:b6:fe:40:7e:8b:23:02:0e:86:37:0d:92:a7:60:85:77:
43:d5:a6:06:d3:cb:3e:61:03:7b:38:73:64:15:3c:8b:58:00:
d0:df:95:02:36:04:b1:6d:39:16:7f:55:ad:3b:21:15:f5:ec:
e7:fd:9d:4f:8b:f1:be:20:ab:9e:20:ee:30:02:84:a9:08:b8:
cc:c5:8e:a3:67:33:a2:e2:e9:c9:0a:16:c4:0b:6b:0f:87:89:
67:c8:72:c7:ed:99:2a:20:1f:41:18:9e:f6:96:d2:40:66:74:
eb:99:ec:d2:1a:58:cf:3e:1f:62:5e:0f:51:2b:36:9d:1e:c2:
81:d2:9f:f5:f4:33:06:d7:3e:0b:c4:43:2f:6a:92:02:51:d8:
e6:9a:23:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1CnbuhIkKsTk/eHVoO9BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDk2Mzg0NGY4MjA1ZDEzNjk0MzQ1MzFjOTk4NjAwYzE1
NzgxYTEwHhcNMjUxMjA2MTkwMTM0WhcNMjUxMjA3MTkwMTM0WjAzMTEwLwYDVQQD
EyhiZTdjYmFkZjRlZTQ1MjNhMzI4YThhNTExNTMwN2I0ZThlZGI0ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDmtUkggbKhpYDYgRuwYngfgTTKX
F+hpBtTeBqORZfC5LKLWsp/3It7R+aA7RmYO4XDhenRTqvqQnvDmKR9Fqw43texr
7olyG2o1mF0GX5cWk3onrVuG9Ku3zFBYkBZaQY6Lp1E6wF8jf5iuUzGZlEEZc5yE
hXjlLiLC6GLzmEQVvGhJyOHclItz5+/Oi7OOZYVrZRr0D3w+H7rku5eKC7mnFJsE
tWm5Lq2mQgVhEjwOEF1/VUbjHa3qy+Zxo7ULyXYFvvK6+BjNu4es+mcYsOXo0YUe
VxUfUDE0GnZowOzxTc0rg1VZ2StcuDxd8xrayuXjQGWpuG5LLP/Le3XzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL58ut9O5FI6MoqKURUwe06O2034MB8GA1UdIwQY
MBaAFIbZY4RPggXRNpQ0UxyZhgDBV4GhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hMjg5ZWItNDVjZS00NjE4LTg1N2Yt
NzgxODlkMDE1Mjg2LzEvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hMjg5ZWItNDVjZS00NjE4LTg1N2YtNzgxODlkMDE1Mjg2
LzEvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFIY9dY+
ZwrD3ICKnMyZOej//sITf+fQ1r/1c0lgyEl7dWUCpXZU0PHnm3PbB0OKDBgsjrNg
rXlBDxkUUk2meLvFxerCFTA8mCTxLvBhEPVvrw2QzHvkFV1J080tKsr4lMaMiIkb
n2LrUTgK2Te2/kB+iyMCDoY3DZKnYIV3Q9WmBtPLPmEDezhzZBU8i1gA0N+VAjYE
sW05Fn9VrTshFfXs5/2dT4vxviCrniDuMAKEqQi4zMWOo2czouLpyQoWxAtrD4eJ
Z8hyx+2ZKiAfQRie9pbSQGZ065ns0hpYzz4fYl4PUSs2nR7CgdKf9fQzBtc+C8RD
L2qSAlHY5pojcw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:32 2025 by rpki-client