This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json) Hash identifier: KHU0WMaZ+UYXPQydsAjM26x+51OrYjqKsOl2HST0egw= Subject key identifier: 82:93:54:E1:2F:4B:29:C3:AE:07:98:6A:A2:16:16:51:9B:AD:24:48 Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1 Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1 Certificate serial: 019AF42E3D04075AAC3E4106FCA86395B2E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 15:01:02 +0000 Manifest this update: Sat 06 Dec 2025 15:01:02 +0000 Manifest next update: Sun 07 Dec 2025 15:01:02 +0000 Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=) 2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: B6NEn3e/T/LzePYDWx2SSE6WzUMyWEo+HhcHUKnevsU=) 3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:3d:04:07:5a:ac:3e:41:06:fc:a8:63:95:b2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1 Validity Not Before: Dec 6 15:01:02 2025 GMT Not After : Dec 7 15:01:02 2025 GMT Subject: CN=829354e12f4b29c3ae07986aa21616519bad2448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:9b:b0:b7:9c:ed:01:ad:15:6f:6b:d0:25: 58:8d:ce:7f:32:60:fe:cb:7c:db:46:14:53:ec:08: a7:63:07:88:a9:4c:c6:51:33:14:ef:11:78:46:e9: 96:8a:3f:7f:48:2e:3f:c0:73:8f:ca:70:14:b8:3d: c8:5d:9f:8d:1a:74:6b:f9:4e:8e:71:07:e0:d3:4a: c8:8a:fd:3d:d8:16:6a:33:13:7c:23:80:1e:46:02: 28:32:0b:e4:61:ee:23:14:e6:d2:da:24:67:6e:b1: 20:41:c1:ba:c1:47:03:ec:d9:f1:6c:c3:e1:5f:1f: 38:82:d4:8d:b4:43:5a:9b:8a:d5:4d:92:e7:fa:b6: 7e:84:c7:8c:65:15:5b:2f:56:b4:e5:17:c2:59:cb: f1:cc:a4:1a:39:fe:ef:b5:51:34:f4:d0:ff:93:12: 99:2f:34:09:57:af:57:fc:9f:cb:5c:0d:f6:c7:d2: f8:c1:31:2f:62:ec:8e:90:e2:78:b6:9e:28:55:4d: a6:ad:d5:eb:4e:e8:83:a2:fa:cb:d6:de:17:e9:ab: 8f:ce:f2:6f:f5:b9:d8:5b:42:98:25:a8:8b:02:7f: 21:83:a0:16:01:f6:93:97:11:fb:e1:c4:ca:bb:d6: b9:bb:c2:98:fd:45:d6:17:b9:7a:3e:7b:c2:92:97: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:93:54:E1:2F:4B:29:C3:AE:07:98:6A:A2:16:16:51:9B:AD:24:48 X509v3 Authority Key Identifier: keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2e:ff:46:6f:c6:94:26:15:03:94:81:6f:a3:5b:b9:82:7d: 75:8b:16:46:aa:22:0e:34:5b:a4:46:e4:58:ac:ac:fd:ed:a3: 37:51:68:8d:95:f5:81:54:b2:90:4e:fd:05:b7:90:95:f7:c5: a0:6d:88:03:a5:df:2a:5f:ef:db:c1:ba:bd:f5:47:ac:e7:eb: 99:11:92:d5:5e:0c:97:c7:16:8f:ed:54:c5:ee:d0:18:c4:ec: f9:dd:07:7e:c1:ac:b1:cb:e4:eb:bb:d8:c7:5f:31:08:c8:a5: dc:f9:17:aa:97:49:19:7b:b3:59:72:06:21:28:5c:ba:3b:6a: 18:ff:84:e9:d3:18:95:53:e3:2b:63:45:7e:5e:eb:ff:9b:a3: 9a:e9:3d:f4:42:1e:50:bd:4e:0a:6b:6f:77:e8:ff:91:4c:f1: 8c:23:70:e5:40:76:de:c8:64:ac:a8:06:f3:6a:9e:1a:10:1d: e5:85:70:32:99:26:95:34:fa:36:6a:6d:74:5c:52:cc:44:7a: 4f:e9:62:55:4f:80:a5:5c:37:ec:9b:e4:36:5b:9d:bb:d2:88: 28:fe:af:b0:a8:88:22:63:ed:49:2c:62:55:2a:ec:c4:e9:29: 15:a6:37:58:52:d4:4e:f4:ff:58:52:80:2c:6c:c2:97:06:a0: 52:5e:51:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lj0EB1qsPkEG/KhjlbLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4 N2FiZjEwHhcNMjUxMjA2MTUwMTAyWhcNMjUxMjA3MTUwMTAyWjAzMTEwLwYDVQQD Eyg4MjkzNTRlMTJmNGIyOWMzYWUwNzk4NmFhMjE2MTY1MTliYWQyNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoqbsLec7QGtFW9r0CVYjc5/MmD+ y3zbRhRT7AinYweIqUzGUTMU7xF4RumWij9/SC4/wHOPynAUuD3IXZ+NGnRr+U6O cQfg00rIiv092BZqMxN8I4AeRgIoMgvkYe4jFObS2iRnbrEgQcG6wUcD7NnxbMPh Xx84gtSNtENam4rVTZLn+rZ+hMeMZRVbL1a05RfCWcvxzKQaOf7vtVE09ND/kxKZ LzQJV69X/J/LXA32x9L4wTEvYuyOkOJ4tp4oVU2mrdXrTuiDovrL1t4X6auPzvJv 9bnYW0KYJaiLAn8hg6AWAfaTlxH74cTKu9a5u8KY/UXWF7l6PnvCkpc6PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKTVOEvSynDrgeYaqIWFlGbrSRIMB8GA1UdIwQY MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt OTllZWExZjBhMzU0LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0 LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATy7/Rm/G lCYVA5SBb6NbuYJ9dYsWRqoiDjRbpEbkWKys/e2jN1FojZX1gVSykE79BbeQlffF oG2IA6XfKl/v28G6vfVHrOfrmRGS1V4Ml8cWj+1Uxe7QGMTs+d0HfsGsscvk67vY x18xCMil3PkXqpdJGXuzWXIGIShcujtqGP+E6dMYlVPjK2NFfl7r/5ujmuk99EIe UL1OCmtvd+j/kUzxjCNw5UB23shkrKgG82qeGhAd5YVwMpkmlTT6NmptdFxSzER6 T+liVU+ApVw37JvkNludu9KIKP6vsKiIImPtSSxiVSrsxOkpFaY3WFLUTvT/WFKA LGzClwagUl5R3A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:21 2025 by rpki-client