This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json) Hash identifier: CfSukjngIH0bimfge2Y8CaybB/LybxxGchqWJ7TfNjU= Subject key identifier: E3:1B:B0:8A:57:F9:5B:D8:D3:CD:B5:60:DA:66:CE:1D:F9:15:1B:58 Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1 Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1 Certificate serial: 019B2C66E054D5007C473D5C4CD5FFF29785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft Manifest number: 139A Signing time: Wed 17 Dec 2025 13:01:38 +0000 Manifest this update: Wed 17 Dec 2025 13:01:38 +0000 Manifest next update: Thu 18 Dec 2025 13:01:38 +0000 Files and hashes: 1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: sxbt+qNqvWy0LPnVvA1lpq+UPLl5tvgHfIeeCol9C1M=) 2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:e0:54:d5:00:7c:47:3d:5c:4c:d5:ff:f2:97:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1 Validity Not Before: Dec 17 13:01:38 2025 GMT Not After : Dec 18 13:01:38 2025 GMT Subject: CN=e31bb08a57f95bd8d3cdb560da66ce1df9151b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:ab:f7:0f:1f:e1:3b:7c:1e:d5:70:d3:2a: 9b:ab:4c:be:9e:71:01:50:20:d4:7c:f8:d0:6c:a3: 9a:65:d5:42:0e:f6:3e:ac:3a:79:26:a4:e4:ca:20: e9:7d:a9:de:9e:49:86:c6:16:89:07:74:f6:50:84: af:6f:26:8a:38:3f:86:f7:c4:bb:d3:58:54:69:fd: ad:3c:87:23:ff:29:32:65:65:0c:ca:48:8a:90:30: 67:6c:c6:28:3b:0a:d0:81:b4:2a:6d:61:58:95:13: 9c:e1:76:65:58:57:bc:3a:7c:5c:b9:3d:30:de:f9: 9b:22:8c:45:00:af:db:ea:11:3b:95:80:7f:91:1f: d9:f3:c9:b9:5f:91:51:be:52:36:7b:82:62:11:25: 3b:b2:14:87:8b:63:cc:15:4c:9f:52:8f:d5:5e:f3: 14:63:1e:c9:0d:a1:2e:c1:5e:a3:75:b9:41:11:68: 49:a8:bb:e4:f2:69:ab:1e:a3:e9:b6:df:1e:03:5b: 4d:4a:59:07:4d:f4:57:6c:36:5f:44:9a:1c:91:78: c4:37:0f:df:d0:52:5a:37:a3:e3:d1:99:b7:7e:97: cc:c0:34:57:28:ee:f1:ab:cd:24:38:0f:f7:a6:1e: 1a:71:32:b7:20:5d:85:75:cb:ec:9f:07:b9:de:80: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1B:B0:8A:57:F9:5B:D8:D3:CD:B5:60:DA:66:CE:1D:F9:15:1B:58 X509v3 Authority Key Identifier: keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:2d:21:86:c1:15:2a:9f:7d:1d:bb:f9:77:30:9a:e7:5f:82: 50:dd:03:fe:00:1c:94:4f:d4:fb:39:c0:6a:53:5b:86:17:5c: 9c:e2:17:ff:48:45:60:f9:18:b7:e0:9e:15:ca:80:16:5d:62: 88:13:6a:f3:84:3a:69:b2:c3:a3:db:4c:50:d8:3d:02:3a:99: d1:7a:0b:c9:01:ff:72:a1:86:c9:44:88:a3:ce:49:9b:f1:b2: af:57:87:0b:53:c2:a8:44:93:c6:23:92:f6:4d:19:84:38:dc: 23:aa:ae:bb:ce:54:34:db:c8:88:00:15:d5:47:7c:96:a6:c7: 37:26:01:58:43:31:8a:25:20:27:01:fb:51:9f:56:1c:eb:4f: f8:18:e1:c6:de:dc:8a:0b:0d:d1:db:cf:fc:4f:24:2e:ab:10: de:3f:59:38:7f:f6:10:93:02:bf:49:86:5b:58:d5:1a:fc:43: 2b:b8:36:b6:f0:0c:c0:96:d2:25:ae:a6:b8:44:13:00:1e:f3: 69:e3:98:40:6f:54:9c:77:5d:a8:e2:fd:9a:fa:7d:37:be:b3: e8:7a:bc:e9:6f:2e:f9:ea:c9:f5:24:1d:b8:9d:8e:2b:c3:6d: 4a:ed:d0:1e:c1:ef:4f:7b:8d:82:69:e9:6a:29:df:0d:70:5a: 35:d9:34:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZuBU1QB8Rz1cTNX/8peFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4 MzExYTEwHhcNMjUxMjE3MTMwMTM4WhcNMjUxMjE4MTMwMTM4WjAzMTEwLwYDVQQD EyhlMzFiYjA4YTU3Zjk1YmQ4ZDNjZGI1NjBkYTY2Y2UxZGY5MTUxYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNKr9w8f4Tt8HtVw0yqbq0y+nnEB UCDUfPjQbKOaZdVCDvY+rDp5JqTkyiDpfanenkmGxhaJB3T2UISvbyaKOD+G98S7 01hUaf2tPIcj/ykyZWUMykiKkDBnbMYoOwrQgbQqbWFYlROc4XZlWFe8OnxcuT0w 3vmbIoxFAK/b6hE7lYB/kR/Z88m5X5FRvlI2e4JiESU7shSHi2PMFUyfUo/VXvMU Yx7JDaEuwV6jdblBEWhJqLvk8mmrHqPptt8eA1tNSlkHTfRXbDZfRJockXjENw/f 0FJaN6Pj0Zm3fpfMwDRXKO7xq80kOA/3ph4acTK3IF2Fdcvsnwe53oC17wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMbsIpX+VvY0821YNpmzh35FRtYMB8GA1UdIwQY MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt YWE4OGE0YmE1OGVmLzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi0hhsEV Kp99Hbv5dzCa51+CUN0D/gAclE/U+znAalNbhhdcnOIX/0hFYPkYt+CeFcqAFl1i iBNq84Q6abLDo9tMUNg9AjqZ0XoLyQH/cqGGyUSIo85Jm/Gyr1eHC1PCqESTxiOS 9k0ZhDjcI6quu85UNNvIiAAV1Ud8lqbHNyYBWEMxiiUgJwH7UZ9WHOtP+Bjhxt7c igsN0dvP/E8kLqsQ3j9ZOH/2EJMCv0mGW1jVGvxDK7g2tvAMwJbSJa6muEQTAB7z aeOYQG9UnHddqOL9mvp9N76z6Hq86W8u+erJ9SQduJ2OK8NtSu3QHsHvT3uNgmnp ainfDXBaNdk0nQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:53 2025 by rpki-client