This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json) Hash identifier: hlKyCezUf20FIspZgYFBibea0C7H3nEIXdDTmNbHhvg= Subject key identifier: 73:0E:43:7A:95:89:67:31:21:60:9B:A3:8C:01:E1:07:D9:F7:60:8C Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Certificate serial: 019AF20984DFABAE07EECA2BE3BC3198AA07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft Manifest number: 0138 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: hspXcYFdzEu8yBshzMsQN3jK1/mRgEtq7R6Vea7fKOY=) 2: MGpHtWVdW5Y-8RK5w9fcR92UfAM.roa (hash: 4BcRsyKmJhYcEjJZ21p241hnTRNkRNMWSpWu1LX5P3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:84:df:ab:ae:07:ee:ca:2b:e3:bc:31:98:aa:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=730e437a9589673121609ba38c01e107d9f7608c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:88:1f:81:3d:88:a5:14:d7:fe:33:ac:80: 7f:79:35:8e:16:62:75:1c:28:80:8f:cb:ed:dc:a4: 65:f2:d3:0f:0e:34:1f:1c:a5:ec:be:01:4c:44:ac: e9:e4:2a:b6:39:e9:c7:42:c6:18:81:fa:27:a0:7b: 2e:2d:59:92:9f:61:a1:a6:20:50:0f:fa:00:07:94: 4b:78:ac:a4:34:86:7c:e4:c0:aa:9e:dd:e8:3c:aa: 59:a5:25:12:52:d7:d9:8c:be:78:d1:34:2c:39:b1: d5:81:67:9f:4b:8e:d1:72:dc:31:e2:23:16:80:ba: 2b:49:8e:8a:7f:d7:3f:df:1f:6c:18:f7:e1:58:22: a3:be:d2:02:b3:66:0e:2b:ec:d0:d9:95:80:b9:7e: d2:36:99:e9:8f:fb:5a:8a:fe:90:26:63:34:7c:86: e1:ff:a3:35:dc:9d:84:ff:58:1c:c3:cd:71:b1:dd: f4:63:da:f3:3a:93:07:d5:15:0d:97:e1:a0:ad:e8: c4:16:cd:28:8b:c3:17:a9:1c:76:57:24:c8:83:a7: 88:47:12:48:26:17:52:5f:23:65:64:0b:40:93:20: b1:bc:2a:02:ac:e5:e3:a2:6e:b8:60:cc:dd:25:06: 11:d1:38:ac:b5:67:0a:dd:15:71:ec:2f:f5:c7:ad: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:43:7A:95:89:67:31:21:60:9B:A3:8C:01:E1:07:D9:F7:60:8C X509v3 Authority Key Identifier: keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cd:50:d4:c1:72:51:18:55:ad:f3:cb:66:3d:db:cb:34:1e: 8c:d2:8f:2f:93:94:b5:d6:08:68:7f:3d:c1:d8:09:01:92:94: 92:66:18:78:b8:9e:e5:66:61:cf:0e:46:5d:15:d1:de:1b:98: f4:38:a7:c8:5d:f9:be:8f:88:7c:61:76:0a:5b:e7:52:ad:49: 3e:b3:3f:e9:4e:40:11:45:3b:1c:57:1d:b2:cf:24:96:42:b7: c6:78:51:dd:de:eb:58:8e:7a:b2:82:c8:7e:04:6e:1e:15:bc: cd:64:8f:45:5f:9f:86:b0:fb:77:99:6b:46:8b:9c:44:c0:8f: 14:70:0d:26:5a:68:7f:62:8e:f9:38:9e:be:29:ed:61:7e:8d: 4f:86:e3:fc:94:f2:7b:ee:df:6a:05:2b:32:bf:72:a3:7c:13: 06:1e:ff:c3:3b:57:e1:c4:1c:52:1c:d2:b1:24:80:96:a1:05: cb:57:70:0a:dd:e1:0f:31:5e:a8:06:c4:a8:b8:08:a4:8b:f5: d8:52:f5:18:6f:e0:db:c2:95:8b:aa:d7:a2:49:a7:b7:ac:a0: c9:d6:c5:63:5d:5b:31:ab:d3:1e:87:58:85:aa:df:84:16:36: b0:4c:dd:5c:e9:e3:7f:79:16:c4:82:4a:ac:a6:ec:4b:8e:e2: 66:e4:98:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYTfq64H7sor47wxmKoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5 ZDI5MTYwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD Eyg3MzBlNDM3YTk1ODk2NzMxMjE2MDliYTM4YzAxZTEwN2Q5Zjc2MDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGWIH4E9iKUU1/4zrIB/eTWOFmJ1 HCiAj8vt3KRl8tMPDjQfHKXsvgFMRKzp5Cq2OenHQsYYgfonoHsuLVmSn2GhpiBQ D/oAB5RLeKykNIZ85MCqnt3oPKpZpSUSUtfZjL540TQsObHVgWefS47Rctwx4iMW gLorSY6Kf9c/3x9sGPfhWCKjvtICs2YOK+zQ2ZWAuX7SNpnpj/taiv6QJmM0fIbh /6M13J2E/1gcw81xsd30Y9rzOpMH1RUNl+GgrejEFs0oi8MXqRx2VyTIg6eIRxJI JhdSXyNlZAtAkyCxvCoCrOXjom64YMzdJQYR0TistWcK3RVx7C/1x634wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMOQ3qViWcxIWCbo4wB4QfZ92CMMB8GA1UdIwQY MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt MWE0MmY2MzJjMzA3LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3 LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg81Q1MFy URhVrfPLZj3byzQejNKPL5OUtdYIaH89wdgJAZKUkmYYeLie5WZhzw5GXRXR3huY 9DinyF35vo+IfGF2ClvnUq1JPrM/6U5AEUU7HFcdss8klkK3xnhR3d7rWI56soLI fgRuHhW8zWSPRV+fhrD7d5lrRoucRMCPFHANJlpof2KO+TievintYX6NT4bj/JTy e+7fagUrMr9yo3wTBh7/wztX4cQcUhzSsSSAlqEFy1dwCt3hDzFeqAbEqLgIpIv1 2FL1GG/g28KVi6rXokmnt6ygydbFY11bMavTHodYharfhBY2sEzdXOnjf3kWxIJK rKbsS47iZuSYfw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:43 2025 by rpki-client