This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json) Hash identifier: O90LWEhWm9Fq/IInMh1bsJTvXAgO5TvzKp/GGDv/NPM= Subject key identifier: 66:BF:4A:44:CA:A1:D6:F1:00:18:6F:DB:BA:DE:2D:B9:34:D3:92:2A Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Certificate serial: 019AF276EAEF13EF09661D19819A714A95C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft Manifest number: 15FF Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=) 2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=) 3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=) 4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: ZAQG+sUmDA7NwE6NIdaQszl2h+JtHHe+llIhm5DU6oU=) 5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ea:ef:13:ef:09:66:1d:19:81:9a:71:4a:95:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=66bf4a44caa1d6f100186fdbbade2db934d3922a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d9:94:65:11:73:f1:49:e9:af:2b:d0:c9:10: ca:99:a3:ce:12:a2:a3:b5:15:7b:94:51:6d:37:3d: e0:64:e4:23:3a:df:cf:1d:85:ca:b2:97:91:f6:6c: 31:9b:57:b8:9e:7a:ce:19:b6:22:00:b1:3c:e8:0f: 59:24:7a:4d:09:7a:51:d0:9f:8f:b4:c3:19:af:a8: 52:7b:23:65:81:33:fa:e1:f0:e0:72:87:f8:f0:78: 0a:ab:10:e1:52:4c:45:d9:5a:b2:18:39:15:5a:4c: 18:e7:89:1a:b0:3e:6c:60:37:d4:86:c3:19:03:f8: 37:f8:43:b5:f7:05:d6:98:d7:30:7f:e6:e7:4c:1c: 4f:b1:ba:87:75:a6:17:25:20:2b:12:d8:f4:ae:64: 22:b4:ac:d6:b5:ea:75:a5:cb:3b:27:a2:69:10:3e: a4:28:75:3c:45:4d:a4:e9:89:bc:43:ac:48:f5:64: b3:91:ae:e7:e3:48:69:07:10:02:de:26:c6:aa:26: ae:9f:8b:12:58:c8:5e:cc:30:d6:ec:79:5f:4b:13: 84:da:9e:a1:6c:6e:ba:83:20:e2:5b:6a:ec:dc:ce: b8:ed:a0:ba:f6:47:c4:40:cf:88:8e:b9:b8:ab:89: 5f:5f:b0:a9:00:e7:19:d0:80:0b:b9:c1:c1:7d:e2: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BF:4A:44:CA:A1:D6:F1:00:18:6F:DB:BA:DE:2D:B9:34:D3:92:2A X509v3 Authority Key Identifier: keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:b8:38:fc:1f:bc:21:77:bf:ed:54:61:a3:d7:04:0a:62: 41:ed:4a:a0:d5:00:ff:4c:90:d3:1c:f8:f8:a5:54:f3:91:13: c2:6a:b2:3a:e6:2f:16:c2:ff:37:59:ac:fe:62:d6:59:7b:54: d8:f5:12:8c:83:13:27:06:7c:33:fb:be:79:e7:82:37:71:88: df:e4:2d:e7:7d:4b:2c:cc:4a:d2:46:9f:7c:f7:ef:86:0b:83: e9:d2:1e:58:05:1f:5e:5c:67:f7:9c:9d:12:86:9b:29:e7:d8: e8:3a:81:ba:83:0d:a7:0f:b3:d3:65:54:1a:4d:ca:10:4a:9b: 49:ee:7d:01:ad:fa:81:63:bb:01:0c:94:c1:cc:2d:4e:44:84: 1c:aa:50:c7:fc:10:43:3d:55:7a:30:c3:5f:69:20:c6:3e:38: 0c:82:70:a5:9f:7b:aa:8d:b4:2d:66:d5:9b:22:4e:fc:4f:f1: da:36:34:b6:b6:61:b4:ed:43:31:82:f0:58:ad:b4:fc:f9:95: fb:78:df:de:b0:09:35:6e:c0:32:9a:08:70:68:a1:7c:3a:4a: 15:ff:75:94:a9:0d:fa:1e:f6:78:d7:ee:a2:9a:89:f6:c1:10: da:32:c8:de:bf:3f:78:03:90:9d:79:f5:70:34:ef:af:9c:72: 68:95:0d:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydurvE+8JZh0ZgZpxSpXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl MzcxMzUwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD Eyg2NmJmNGE0NGNhYTFkNmYxMDAxODZmZGJiYWRlMmRiOTM0ZDM5MjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tmUZRFz8UnpryvQyRDKmaPOEqKj tRV7lFFtNz3gZOQjOt/PHYXKspeR9mwxm1e4nnrOGbYiALE86A9ZJHpNCXpR0J+P tMMZr6hSeyNlgTP64fDgcof48HgKqxDhUkxF2VqyGDkVWkwY54kasD5sYDfUhsMZ A/g3+EO19wXWmNcwf+bnTBxPsbqHdaYXJSArEtj0rmQitKzWtep1pcs7J6JpED6k KHU8RU2k6Ym8Q6xI9WSzka7n40hpBxAC3ibGqiaun4sSWMhezDDW7HlfSxOE2p6h bG66gyDiW2rs3M647aC69kfEQM+Ijrm4q4lfX7CpAOcZ0IALucHBfeICbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGa/SkTKodbxABhv27reLbk005IqMB8GA1UdIwQY MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt YmZkOTVhOWE2ZTY0LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0 LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxi4OPwf vCF3v+1UYaPXBApiQe1KoNUA/0yQ0xz4+KVU85ETwmqyOuYvFsL/N1ms/mLWWXtU 2PUSjIMTJwZ8M/u+eeeCN3GI3+Qt531LLMxK0kaffPfvhguD6dIeWAUfXlxn95yd EoabKefY6DqBuoMNpw+z02VUGk3KEEqbSe59Aa36gWO7AQyUwcwtTkSEHKpQx/wQ Qz1VejDDX2kgxj44DIJwpZ97qo20LWbVmyJO/E/x2jY0trZhtO1DMYLwWK20/PmV +3jf3rAJNW7AMpoIcGihfDpKFf91lKkN+h72eNfuopqJ9sEQ2jLI3r8/eAOQnXn1 cDTvr5xyaJUNiw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:28 2025 by rpki-client