This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json) Hash identifier: lyNBJH7YJDekNJArGYxGowGvYaL73SPBTn27T5kuXBE= Subject key identifier: ED:42:46:A1:67:5E:A4:F6:B3:A8:BD:F3:AA:CA:32:8B:98:B6:4E:CC Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Certificate serial: 019AF31C672D33D7153D686C17D1B475B3E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: Bh5IC48JAR5FB63v2dnakNOTX34.roa (hash: FMLGNxpZDrf8rppZSMEnpJR9pt6oa5eJBxowJrkMq7o=) 2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: dveyTt3tXXt5Ec9ACy068aNuDrR4rjJVqGwRP5w2GK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:67:2d:33:d7:15:3d:68:6c:17:d1:b4:75:b3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326 Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=ed4246a1675ea4f6b3a8bdf3aaca328b98b64ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9a:4c:13:80:36:72:45:52:4d:fa:1e:1d:f4: e7:2b:51:0c:3c:39:a6:c8:a3:c2:4c:be:84:df:89: 58:5f:6c:c1:a2:21:20:8e:4a:19:15:58:33:f3:6f: 38:f5:da:ca:fa:e2:92:a0:d6:8f:dc:05:7f:83:97: f4:0f:8e:f6:26:48:a5:38:f2:cb:52:35:ef:26:33: 89:0b:70:be:6b:04:8e:4a:f1:3a:29:9f:ac:0a:7a: 7f:e6:e3:6e:60:80:a4:4d:72:68:0d:de:95:ea:ea: d0:44:65:36:cc:fd:e4:aa:20:1c:fd:a0:0d:6a:f9: f7:00:c6:96:98:be:68:68:03:ed:6a:e7:86:5e:91: 68:69:bd:58:b9:09:76:70:c5:26:ac:d5:9a:8e:fa: 82:16:56:05:71:e2:a4:9e:57:22:d1:12:fa:5a:6f: cb:1c:a9:72:8d:81:b7:9f:bf:4e:9a:9f:63:6c:c1: a5:e1:80:1e:0e:e4:bf:35:aa:1d:81:10:49:5a:c8: 0b:a9:35:21:02:8e:57:53:ff:bd:0a:03:5b:a4:34: 84:9c:82:a4:61:ab:22:24:ff:9f:ab:39:1e:a7:e5: 67:11:e5:a4:32:a5:5f:34:1a:f7:5f:13:73:b7:4b: 8d:f1:1c:14:15:0d:cc:a1:07:0f:6c:03:18:da:13: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:46:A1:67:5E:A4:F6:B3:A8:BD:F3:AA:CA:32:8B:98:B6:4E:CC X509v3 Authority Key Identifier: keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:41:4e:2f:4f:61:6f:8a:4a:ff:87:59:4d:92:30:30:0c:aa: aa:1c:ba:3b:ba:d9:c2:d5:7a:1c:cc:a4:84:4f:9c:bd:f0:7f: 3a:75:35:2f:b2:3f:78:d0:bb:57:fb:11:c6:fa:99:1d:a4:fc: d0:ff:ac:d1:08:6a:e9:f4:07:17:0e:d2:8c:40:2d:97:0c:4c: ff:a2:4a:fe:ab:28:ec:f8:3b:32:42:35:2b:c5:f1:82:0c:03: 02:7c:2b:95:45:9b:71:cc:e5:ea:cb:5f:50:8f:a2:a6:6c:01: 8f:59:cb:d6:b5:6c:4b:62:ff:df:cb:b1:83:e8:b0:b9:3a:41: 3d:1e:14:13:74:70:a1:39:d7:1a:c5:41:ff:12:1d:3a:a9:96: 4a:d2:06:0e:13:4c:96:f4:da:a1:cb:a5:08:da:57:7d:32:08: fa:4a:1a:51:31:5c:92:88:3c:42:3f:63:1e:59:90:b1:34:ad: 28:8a:a8:ab:89:83:bb:a1:af:a6:a1:d9:70:a7:b8:77:3e:93: 21:69:76:52:e9:15:d7:77:d0:6e:56:38:3c:c8:a2:5b:c5:35: 6c:85:47:c3:73:62:d1:50:09:0e:6d:dc:a8:64:d8:a4:81:75: 71:ff:8c:3c:79:82:43:e9:92:06:6e:6e:ae:65:d9:b2:78:82: ee:9f:50:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGctM9cVPWhsF9G0dbPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZTVkYmMwYjYxMDQ4NWQwZjdlMjE5NGQ4ZjgxNmQ2YzE0 NDUzMjYwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD EyhlZDQyNDZhMTY3NWVhNGY2YjNhOGJkZjNhYWNhMzI4Yjk4YjY0ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZpME4A2ckVSTfoeHfTnK1EMPDmm yKPCTL6E34lYX2zBoiEgjkoZFVgz82849drK+uKSoNaP3AV/g5f0D472JkilOPLL UjXvJjOJC3C+awSOSvE6KZ+sCnp/5uNuYICkTXJoDd6V6urQRGU2zP3kqiAc/aAN avn3AMaWmL5oaAPtaueGXpFoab1YuQl2cMUmrNWajvqCFlYFceKknlci0RL6Wm/L HKlyjYG3n79Omp9jbMGl4YAeDuS/NaodgRBJWsgLqTUhAo5XU/+9CgNbpDSEnIKk YasiJP+fqzkep+VnEeWkMqVfNBr3XxNzt0uN8RwUFQ3MoQcPbAMY2hPJWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1CRqFnXqT2s6i986rKMouYtk7MMB8GA1UdIwQY MBaAFB3l28C2EEhdD34hlNj4FtbBRFMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNzdiODMtYTIzYi00ODk3LWI0ZGQt NjhlZWRmNWY2NmJjLzEvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lNzdiODMtYTIzYi00ODk3LWI0ZGQtNjhlZWRmNWY2NmJj LzEvSGVYYndMWVFTRjBQZmlHVTJQZ1cxc0ZFVXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0FOL09h b4pK/4dZTZIwMAyqqhy6O7rZwtV6HMykhE+cvfB/OnU1L7I/eNC7V/sRxvqZHaT8 0P+s0Qhq6fQHFw7SjEAtlwxM/6JK/qso7Pg7MkI1K8XxggwDAnwrlUWbcczl6stf UI+ipmwBj1nL1rVsS2L/38uxg+iwuTpBPR4UE3RwoTnXGsVB/xIdOqmWStIGDhNM lvTaoculCNpXfTII+koaUTFckog8Qj9jHlmQsTStKIqoq4mDu6GvpqHZcKe4dz6T IWl2UukV13fQblY4PMiiW8U1bIVHw3Ni0VAJDm3cqGTYpIF1cf+MPHmCQ+mSBm5u rmXZsniC7p9QMA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:16:41 2025 by rpki-client