This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json) Hash identifier: PN765n5FzAr/30KQrM2dIHl5rAITxjsa8b2ptBw9hO0= Subject key identifier: 28:53:03:0A:32:14:1F:7D:34:04:B2:0A:62:97:B2:97:D8:84:95:6D Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d Certificate serial: 019AF19B7749273686B29B5D1D76E80A3720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft Manifest number: 0490 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=) 2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: 02i7Fl8SMa57nJsXd0+fMQW/OpiYU6nNtQn2WivQ6Eg=) 3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:77:49:27:36:86:b2:9b:5d:1d:76:e8:0a:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=2853030a32141f7d3404b20a6297b297d884956d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:2d:43:30:f0:d2:4b:69:e7:fe:82:6b:91: 90:13:ec:0f:72:55:44:f3:c5:4a:bc:30:a1:4d:ab: 2f:60:37:c5:38:61:25:f5:97:c9:fc:a6:2b:38:fb: 53:7c:ef:df:b4:73:65:16:aa:c7:1f:12:0b:f5:7b: 69:9a:dc:70:76:36:89:55:cf:f5:d9:d0:02:de:f8: a9:3a:b7:9c:49:21:e8:23:65:bc:aa:ad:5a:0c:23: 0e:27:18:8b:63:da:63:73:48:ff:99:26:c1:dd:de: 4f:aa:db:38:18:4c:31:5a:c8:45:15:13:fe:a9:25: 0a:50:8c:60:d3:55:f1:eb:04:e4:e7:7b:5e:32:a7: a7:8e:ca:48:94:30:65:dd:e0:d5:a3:27:0d:55:f3: 35:61:e5:3d:d9:17:b2:20:37:a7:34:86:1c:7f:07: 07:54:63:18:82:91:17:98:4c:23:46:0b:dd:a0:be: 1e:7b:9e:c5:6d:f8:e8:50:87:ea:ad:76:e4:50:b3: 45:d0:dd:ee:1d:93:81:42:03:6c:00:95:34:b0:50: be:57:3f:a1:7a:d9:18:3c:90:79:9e:45:56:f8:d1: 48:9b:f7:e3:f6:6f:7f:b9:77:f8:89:c8:cf:55:60: cd:c8:48:58:b2:b8:f6:4c:e5:da:cf:f0:d8:22:38: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:03:0A:32:14:1F:7D:34:04:B2:0A:62:97:B2:97:D8:84:95:6D X509v3 Authority Key Identifier: keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b3:3e:cf:47:af:1f:6f:15:dc:59:c6:90:44:ec:e9:12:ac: 9e:fe:79:06:cd:69:14:84:19:42:ca:ee:9a:78:10:4d:af:ff: 1d:aa:0e:82:6a:ec:83:68:1e:8f:ef:17:0c:92:a9:83:ec:7c: 5f:a8:1f:89:10:40:3c:12:9c:59:73:ba:6f:87:14:9f:f6:35: 13:f2:a9:40:fe:aa:1b:b2:74:6e:d4:1d:15:4b:f7:29:ec:f0: 9e:4f:1f:48:15:e0:b6:b3:b2:51:d8:03:e5:d1:39:db:db:04: bf:a1:4c:d9:ca:0b:4f:62:a1:0d:37:e8:10:4e:2d:cb:3c:ce: b0:bd:75:96:03:dc:97:b2:af:27:09:69:46:14:3e:f5:6a:c0: 4c:fc:2c:5d:4c:05:e8:68:d3:34:06:64:f6:d5:5b:0e:2c:68: 5a:4e:60:ed:9c:25:fc:18:f5:56:44:f1:81:02:80:30:22:64: 10:a7:72:15:db:37:90:b1:a3:90:9b:e7:3e:6a:d1:14:c3:ab: fd:59:fb:0a:a9:cc:98:c9:f8:0e:59:83:42:54:de:04:31:b5: 61:e1:f7:f2:08:af:eb:cf:8a:76:1e:a8:ae:eb:d4:16:33:7b: 16:08:72:d6:75:15:c7:14:b8:61:86:9b:a7:5c:78:4a:06:3b: e8:27:01:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3dJJzaGsptdHXboCjcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDVhY2QzMWJjY2JkMzQ1Zjk2NGFkOTA3Y2E3NzgzZDUw NDAyNmQwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EygyODUzMDMwYTMyMTQxZjdkMzQwNGIyMGE2Mjk3YjI5N2Q4ODQ5NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LgtQzDw0ktp5/6Ca5GQE+wPclVE 88VKvDChTasvYDfFOGEl9ZfJ/KYrOPtTfO/ftHNlFqrHHxIL9XtpmtxwdjaJVc/1 2dAC3vipOrecSSHoI2W8qq1aDCMOJxiLY9pjc0j/mSbB3d5Pqts4GEwxWshFFRP+ qSUKUIxg01Xx6wTk53teMqenjspIlDBl3eDVoycNVfM1YeU92ReyIDenNIYcfwcH VGMYgpEXmEwjRgvdoL4ee57FbfjoUIfqrXbkULNF0N3uHZOBQgNsAJU0sFC+Vz+h etkYPJB5nkVW+NFIm/fj9m9/uXf4icjPVWDNyEhYsrj2TOXaz/DYIjirsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChTAwoyFB99NASyCmKXspfYhJVtMB8GA1UdIwQY MBaAFIRFrNMbzL00X5ZK2QfKd4PVBAJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3Nzgt MDczZTNiN2FkODUwLzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3NzgtMDczZTNiN2FkODUw LzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrM+z0ev H28V3FnGkETs6RKsnv55Bs1pFIQZQsrumngQTa//HaoOgmrsg2gej+8XDJKpg+x8 X6gfiRBAPBKcWXO6b4cUn/Y1E/KpQP6qG7J0btQdFUv3Kezwnk8fSBXgtrOyUdgD 5dE529sEv6FM2coLT2KhDTfoEE4tyzzOsL11lgPcl7KvJwlpRhQ+9WrATPwsXUwF 6GjTNAZk9tVbDixoWk5g7Zwl/Bj1VkTxgQKAMCJkEKdyFds3kLGjkJvnPmrRFMOr /Vn7CqnMmMn4DlmDQlTeBDG1YeH38giv68+Kdh6oruvUFjN7Fghy1nUVxxS4YYab p1x4SgY76CcB4A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:24:54 2025 by rpki-client