This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json) Hash identifier: 70UUiuIG9JBOKbLI/diWlMuVaR2/KjQNSLZYcaMnSfo= Subject key identifier: EF:35:1D:20:D2:06:0E:3C:AC:DC:CE:DE:5A:D1:15:62:5A:6E:D8:F5 Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d Certificate serial: 019B390F46E322C0701CF23F3F2A15BE3082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft Manifest number: 04B5 Signing time: Sat 20 Dec 2025 00:01:01 +0000 Manifest this update: Sat 20 Dec 2025 00:01:01 +0000 Manifest next update: Sun 21 Dec 2025 00:01:01 +0000 Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=) 2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: w19sFmq9GIGKvjQjGDg7rQR1JAS8eH/O4qLcRfnHktQ=) 3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:46:e3:22:c0:70:1c:f2:3f:3f:2a:15:be:30:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d Validity Not Before: Dec 20 00:01:01 2025 GMT Not After : Dec 21 00:01:01 2025 GMT Subject: CN=ef351d20d2060e3cacdccede5ad115625a6ed8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:25:9a:db:09:aa:0f:c1:2b:9f:e5:99:8e: 08:cf:52:06:8f:e4:46:16:fc:f7:44:04:9d:c9:07: 58:f4:f6:0e:52:08:b4:48:cc:1b:57:1f:1e:d0:21: 17:b5:92:5e:b6:83:0b:39:86:55:c7:f0:b0:a7:f0: eb:ee:ce:2d:c4:73:0d:6a:1b:bf:27:e0:d2:01:97: 9c:06:3a:34:60:74:85:13:98:a4:96:9e:65:c7:18: 57:00:61:f7:d9:03:d8:87:5d:68:ee:a7:53:df:ac: 32:10:49:dd:61:28:3d:10:bb:19:30:72:92:8a:37: f3:3e:14:d7:f9:0b:25:c7:ce:1f:f1:aa:03:de:9e: 12:05:a7:c7:fe:90:c0:fb:e9:4f:66:42:4f:62:f6: 03:29:3d:86:eb:3c:86:60:e3:c7:e4:07:b4:b1:e7: df:e6:8a:f4:ae:4f:b5:ac:0c:75:b1:9e:fb:63:d7: 2d:80:16:3e:1a:0c:3e:7e:05:04:9d:3e:ec:96:fb: 50:14:15:54:a7:52:4e:45:e2:fa:fb:65:c3:8a:2a: c0:82:f1:97:30:2e:6a:60:fb:47:9f:73:8d:e0:b2: ed:a1:37:39:dd:36:74:9e:b3:52:f8:d9:cb:65:55: 3e:37:03:a8:0f:59:b1:bc:94:13:83:0b:ff:a0:8c: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:35:1D:20:D2:06:0E:3C:AC:DC:CE:DE:5A:D1:15:62:5A:6E:D8:F5 X509v3 Authority Key Identifier: keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:77:63:92:74:2c:74:03:04:ce:df:dd:4b:c8:ec:e2:e7:c7: 42:c2:0e:30:f0:42:b3:f2:bc:c0:bd:94:17:24:6d:f2:8f:b6: 95:a8:f3:a3:dd:db:3c:58:49:ad:6e:f8:0c:fa:c3:18:62:67: b5:d8:49:39:db:02:0b:dd:65:a2:7e:07:bd:fd:42:0a:64:fc: a2:ea:68:23:61:1c:07:9c:c1:3a:fd:3f:f6:43:92:2c:2a:81: 2e:5c:29:67:66:37:ea:04:07:fc:5c:b1:3d:8a:80:b5:1b:5b: ee:b9:01:98:40:03:7b:f3:83:17:ef:44:d8:3e:45:d7:16:28: a5:b1:8e:cf:65:d5:44:53:f6:cc:16:85:db:a3:05:67:82:3b: 4d:dc:32:a8:f6:42:bc:63:dc:c6:4b:e0:4f:eb:23:35:8b:98: fd:36:cd:ff:d8:8c:0e:cc:ae:55:49:c7:07:2d:1d:3a:e6:61: c8:10:80:60:80:fe:e5:97:24:2f:9a:9a:3b:c8:19:f6:cd:3d: a4:fb:fa:10:d5:a3:21:b4:1b:75:b7:a9:99:a4:03:df:e6:26: d0:55:9c:7a:2d:fe:bc:80:11:e4:61:e0:e0:98:6a:63:5c:09: 24:81:a2:52:44:38:69:89:07:3a:3f:b2:7a:22:70:f0:d6:1a: a0:1c:a1:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D0bjIsBwHPI/PyoVvjCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDVhY2QzMWJjY2JkMzQ1Zjk2NGFkOTA3Y2E3NzgzZDUw NDAyNmQwHhcNMjUxMjIwMDAwMTAxWhcNMjUxMjIxMDAwMTAxWjAzMTEwLwYDVQQD EyhlZjM1MWQyMGQyMDYwZTNjYWNkY2NlZGU1YWQxMTU2MjVhNmVkOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseclmtsJqg/BK5/lmY4Iz1IGj+RG Fvz3RASdyQdY9PYOUgi0SMwbVx8e0CEXtZJetoMLOYZVx/Cwp/Dr7s4txHMNahu/ J+DSAZecBjo0YHSFE5iklp5lxxhXAGH32QPYh11o7qdT36wyEEndYSg9ELsZMHKS ijfzPhTX+Qslx84f8aoD3p4SBafH/pDA++lPZkJPYvYDKT2G6zyGYOPH5Ae0seff 5or0rk+1rAx1sZ77Y9ctgBY+Ggw+fgUEnT7slvtQFBVUp1JOReL6+2XDiirAgvGX MC5qYPtHn3ON4LLtoTc53TZ0nrNS+NnLZVU+NwOoD1mxvJQTgwv/oIyIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO81HSDSBg48rNzO3lrRFWJabtj1MB8GA1UdIwQY MBaAFIRFrNMbzL00X5ZK2QfKd4PVBAJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3Nzgt MDczZTNiN2FkODUwLzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mY2I3YWYtNTZkMC00YzU1LWE3NzgtMDczZTNiN2FkODUw LzEvaEVXczB4dk12VFJmbGtyWkI4cDNnOVVFQW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADndjknQs dAMEzt/dS8js4ufHQsIOMPBCs/K8wL2UFyRt8o+2lajzo93bPFhJrW74DPrDGGJn tdhJOdsCC91lon4Hvf1CCmT8oupoI2EcB5zBOv0/9kOSLCqBLlwpZ2Y36gQH/Fyx PYqAtRtb7rkBmEADe/ODF+9E2D5F1xYopbGOz2XVRFP2zBaF26MFZ4I7TdwyqPZC vGPcxkvgT+sjNYuY/TbN/9iMDsyuVUnHBy0dOuZhyBCAYID+5ZckL5qaO8gZ9s09 pPv6ENWjIbQbdbepmaQD3+Ym0FWcei3+vIAR5GHg4JhqY1wJJIGiUkQ4aYkHOj+y eiJw8NYaoByhRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:10 2025 by rpki-client