This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json) Hash identifier: KCbesRx/B1SFu9naxKhKElj1YemM2ShiZ5XZVoQpADg= Subject key identifier: 5B:06:DA:A1:1C:F5:55:2A:78:CB:CD:3C:AA:41:90:06:7D:B9:96:0F Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb Certificate serial: 019AF3C0360DD074EEB21BBB5E4E1278B4F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft Manifest number: 1628 Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: KntY924djWUw2E5_6Dutq_ZZ4Zc.roa (hash: KalXmSDxooKoko/REjizBaBBm53fPU+cB759UZj4dk0=) 2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=) 3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 3Dw1Xn1RYINNhDbFkG26giVSBLr7V73b3mfVMROFayY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:36:0d:d0:74:ee:b2:1b:bb:5e:4e:12:78:b4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=5b06daa11cf5552a78cbcd3caa4190067db9960f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:11:0a:5d:e6:08:94:f2:7a:c0:8c:00:a7: b6:2d:06:5b:aa:de:d8:32:17:55:77:24:07:82:19: ff:cf:f8:b4:a3:c0:8d:5f:58:53:ec:36:1c:45:55: bf:05:a9:a7:18:67:47:a5:8d:50:ed:5c:e2:46:9a: 43:99:56:e1:50:f4:40:bb:0c:a1:13:75:c1:3d:b9: 56:ab:5e:ea:00:b5:73:38:5a:28:80:4a:db:55:c0: 13:bb:26:83:3c:87:16:09:79:43:59:65:bb:5c:42: d7:a7:c9:ab:7e:c8:43:40:61:52:0e:06:39:5e:9a: 33:f6:bc:65:c0:a3:e3:4f:75:82:16:7b:c4:4a:1f: 4a:30:1b:be:20:54:6d:05:cc:6f:9d:cc:d4:99:bc: af:1d:5d:34:2c:21:19:b7:e2:c5:cb:e7:94:52:44: 8b:e3:06:5b:a2:33:47:9e:3a:36:ab:19:ab:c6:47: f2:c6:8c:e8:cf:f5:70:33:c8:e2:8b:24:d9:dc:a8: e1:cf:da:44:8d:7b:b6:97:58:9d:ee:b2:0b:2a:1f: 35:87:66:3a:06:f8:18:14:d3:6c:2d:fd:82:d4:c6: 36:01:d4:4a:c3:8d:7e:4d:c5:36:d7:1d:23:7a:20: 64:36:47:02:4e:38:5b:e5:2f:8f:e2:9f:77:47:eb: 32:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:06:DA:A1:1C:F5:55:2A:78:CB:CD:3C:AA:41:90:06:7D:B9:96:0F X509v3 Authority Key Identifier: keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:66:2c:12:db:a0:79:b0:3a:0d:69:c0:ba:f2:72:97:28:99: ac:87:70:69:58:40:62:33:19:1c:d5:3c:49:33:3f:78:4d:34: d2:ca:fb:08:67:e0:41:13:46:2f:c3:88:02:18:a7:f6:33:36: ac:f0:d0:4a:a7:d1:5c:66:19:b0:4a:8a:e3:42:01:0c:2a:6a: 5f:98:0f:b9:7f:6a:c8:12:65:df:b2:67:50:45:7a:08:4f:b1: 41:20:8c:b0:09:a8:d3:41:eb:79:33:d5:ad:a3:8e:ce:5d:eb: b1:54:a3:59:02:7b:3f:08:d5:9f:11:64:f7:4c:77:93:b8:e6: bd:27:99:3f:17:77:1f:24:fb:4c:d8:59:8e:f5:c8:08:7e:f1: e8:f1:c2:2a:71:15:3e:66:6d:45:1e:a6:34:8f:a8:d4:08:83: 29:54:59:97:5a:f0:6f:a7:cc:c9:f1:2a:82:ee:d2:d8:33:e0: d0:a8:1c:c4:b1:7b:62:cf:5b:f6:96:c6:d6:7c:91:ad:12:b7: bf:df:6c:b2:50:13:9f:09:25:08:5c:46:ef:d4:cf:ef:4f:a0: 03:b6:bd:fe:20:c8:48:40:8b:33:58:99:03:b4:b1:2f:8f:25: 86:dc:5a:f3:2b:6a:7d:97:4b:04:12:8c:3f:0b:d0:dd:6c:7d: 85:1d:21:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDYN0HTushu7Xk4SeLT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk MTg1Y2IwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD Eyg1YjA2ZGFhMTFjZjU1NTJhNzhjYmNkM2NhYTQxOTAwNjdkYjk5NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP4RCl3mCJTyesCMAKe2LQZbqt7Y MhdVdyQHghn/z/i0o8CNX1hT7DYcRVW/BamnGGdHpY1Q7VziRppDmVbhUPRAuwyh E3XBPblWq17qALVzOFoogErbVcATuyaDPIcWCXlDWWW7XELXp8mrfshDQGFSDgY5 Xpoz9rxlwKPjT3WCFnvESh9KMBu+IFRtBcxvnczUmbyvHV00LCEZt+LFy+eUUkSL 4wZbojNHnjo2qxmrxkfyxozoz/VwM8jiiyTZ3Kjhz9pEjXu2l1id7rILKh81h2Y6 BvgYFNNsLf2C1MY2AdRKw41+TcU21x0jeiBkNkcCTjhb5S+P4p93R+syNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsG2qEc9VUqeMvNPKpBkAZ9uZYPMB8GA1UdIwQY MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1GYsEtug ebA6DWnAuvJylyiZrIdwaVhAYjMZHNU8STM/eE000sr7CGfgQRNGL8OIAhin9jM2 rPDQSqfRXGYZsEqK40IBDCpqX5gPuX9qyBJl37JnUEV6CE+xQSCMsAmo00HreTPV raOOzl3rsVSjWQJ7PwjVnxFk90x3k7jmvSeZPxd3HyT7TNhZjvXICH7x6PHCKnEV PmZtRR6mNI+o1AiDKVRZl1rwb6fMyfEqgu7S2DPg0KgcxLF7Ys9b9pbG1nyRrRK3 v99sslATnwklCFxG79TP70+gA7a9/iDISECLM1iZA7SxL48lhtxa8ytqfZdLBBKM PwvQ3Wx9hR0hFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:17 2025 by rpki-client