This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json) Hash identifier: 4nvIWZnz5OZYe6YHoFG7f7oNA4RLGeJjG6f/aoTEOcc= Subject key identifier: 26:35:AF:81:19:F4:08:91:7D:5C:C1:42:CD:22:1A:49:D2:DE:C5:CD Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52 Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552 Certificate serial: 019AF46515B44F93A3CF3ADD1F0D3EFFC8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft Manifest number: 16C8 Signing time: Sat 06 Dec 2025 16:00:56 +0000 Manifest this update: Sat 06 Dec 2025 16:00:56 +0000 Manifest next update: Sun 07 Dec 2025 16:00:56 +0000 Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: LJvrzYIX/WDC1odf4ezPpZ3i1/y3oL9XqaVRlUCkw70=) 2: fPSZP8slBnM3nSGAFaRQqfblguQ.roa (hash: blLgu2v1K5L5bFcrSgTETqeQaxD8GwJMq27CaonXujI=) 3: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:15:b4:4f:93:a3:cf:3a:dd:1f:0d:3e:ff:c8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552 Validity Not Before: Dec 6 16:00:56 2025 GMT Not After : Dec 7 16:00:56 2025 GMT Subject: CN=2635af8119f408917d5cc142cd221a49d2dec5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:40:fa:68:eb:72:04:e7:2b:6f:1d:66:28: 89:d2:5c:0e:14:d3:b9:24:c0:84:6a:e4:e9:53:57: fc:fe:fb:1d:97:17:b9:c3:f7:28:71:6a:5c:69:99: 8f:b5:47:32:ab:0d:5d:ec:09:ff:5c:24:83:1b:a7: 3f:ec:42:a7:31:67:cc:62:e0:c9:c3:30:08:10:04: 96:22:76:ac:14:89:6d:f9:46:dc:ce:8b:fb:b5:10: 45:9d:9a:75:76:64:de:0f:b6:28:9c:81:49:89:22: f8:fb:af:c3:fb:7f:64:44:ea:6c:a5:cd:54:a0:2a: 54:70:42:3a:68:e5:5a:9b:fd:61:8f:48:c4:32:38: 56:7f:6a:a0:ad:ab:44:e7:46:f4:b6:9e:d9:34:42: 59:e6:af:02:f9:10:53:f3:36:4c:20:b8:5f:d9:a1: d6:93:48:1f:5d:7e:da:b3:15:b1:bf:b1:7d:bf:49: eb:2b:65:c0:89:f6:a4:0c:5b:03:66:95:d1:03:1d: 23:d5:4a:58:81:8f:74:99:ae:b2:f3:84:9e:55:1c: 22:e4:d2:25:f8:4d:41:e4:d2:8e:c8:35:a3:9a:24: 12:e4:a3:f6:b0:5b:43:b2:96:b7:cd:1f:60:52:ca: e9:50:f8:34:71:50:44:01:99:2f:8f:a7:85:98:66: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:35:AF:81:19:F4:08:91:7D:5C:C1:42:CD:22:1A:49:D2:DE:C5:CD X509v3 Authority Key Identifier: keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4b:fe:ff:2a:c5:19:4e:95:2f:a5:55:e4:7f:53:21:d8:b8: 54:ad:88:21:30:08:63:d0:a0:1b:d2:51:ae:9f:81:5f:11:41: c5:1d:13:9b:72:76:08:2f:57:80:ca:b6:e8:e6:27:fa:3b:5e: 50:4a:c5:c3:6a:db:1b:2e:6b:c3:19:0d:1c:0f:be:96:5d:7d: 2f:86:89:9b:b2:5f:ba:d8:cb:eb:85:a3:0c:34:6d:a2:a7:3d: 84:32:de:31:9b:40:31:31:45:7d:1e:53:3b:6c:88:e6:19:39: a3:55:3f:3e:2c:a9:22:6c:3e:a7:90:2d:75:88:de:26:c5:0b: af:44:12:36:9d:d1:8c:5f:15:6b:14:62:2b:0a:08:b2:82:7a: d3:27:4e:51:22:89:19:62:4a:0a:51:f3:11:7d:38:41:1f:f6: fa:fb:c3:07:7d:2f:ea:c6:ba:f2:7b:f6:52:ad:89:c1:de:75: d4:f0:5a:0a:d9:3f:63:61:75:cf:0d:58:46:7e:2c:08:92:2e: b3:10:6d:5c:0e:4e:31:b0:e4:aa:31:06:05:a1:09:7d:53:2b: c7:40:c6:ce:23:de:e6:ef:25:f5:48:f8:50:48:02:60:e1:95: 66:57:6b:57:56:7d:4f:e9:1b:28:5b:22:f3:54:17:db:60:3c: 18:24:6f:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRW0T5OjzzrdHw0+/8i6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYmUzZTUyMTQwN2Y1OTdmMjU1ZjNmYjRlMGI1NjljMzIw ODM1NTIwHhcNMjUxMjA2MTYwMDU2WhcNMjUxMjA3MTYwMDU2WjAzMTEwLwYDVQQD EygyNjM1YWY4MTE5ZjQwODkxN2Q1Y2MxNDJjZDIyMWE0OWQyZGVjNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP5A+mjrcgTnK28dZiiJ0lwOFNO5 JMCEauTpU1f8/vsdlxe5w/cocWpcaZmPtUcyqw1d7An/XCSDG6c/7EKnMWfMYuDJ wzAIEASWInasFIlt+Ubczov7tRBFnZp1dmTeD7YonIFJiSL4+6/D+39kROpspc1U oCpUcEI6aOVam/1hj0jEMjhWf2qgratE50b0tp7ZNEJZ5q8C+RBT8zZMILhf2aHW k0gfXX7asxWxv7F9v0nrK2XAifakDFsDZpXRAx0j1UpYgY90ma6y84SeVRwi5NIl +E1B5NKOyDWjmiQS5KP2sFtDspa3zR9gUsrpUPg0cVBEAZkvj6eFmGZ5qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY1r4EZ9AiRfVzBQs0iGknS3sXNMB8GA1UdIwQY MBaAFB6+PlIUB/WX8lXz+04LVpwyCDVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjIt NWI0YWZmN2E2Mzk4LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjItNWI0YWZmN2E2Mzk4 LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEv+/yrF GU6VL6VV5H9TIdi4VK2IITAIY9CgG9JRrp+BXxFBxR0Tm3J2CC9XgMq26OYn+jte UErFw2rbGy5rwxkNHA++ll19L4aJm7JfutjL64WjDDRtoqc9hDLeMZtAMTFFfR5T O2yI5hk5o1U/PiypImw+p5AtdYjeJsULr0QSNp3RjF8VaxRiKwoIsoJ60ydOUSKJ GWJKClHzEX04QR/2+vvDB30v6sa68nv2Uq2Jwd511PBaCtk/Y2F1zw1YRn4sCJIu sxBtXA5OMbDkqjEGBaEJfVMrx0DGziPe5u8l9Uj4UEgCYOGVZldrV1Z9T+kbKFsi 81QX22A8GCRvGw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:26 2025 by rpki-client