This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json) Hash identifier: D8SHfsdHm/ydcH1hpi+/Zmmbfq/7XzHC4s7dX5SKGog= Subject key identifier: E2:59:15:DC:BC:70:A0:49:22:AD:2D:3C:F6:6F:84:5C:FB:83:A8:D5 Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51 Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51 Certificate serial: 019B23D107741EC6CB068D37E6686324AF35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft Manifest number: 0D84 Signing time: Mon 15 Dec 2025 21:01:00 +0000 Manifest this update: Mon 15 Dec 2025 21:01:00 +0000 Manifest next update: Tue 16 Dec 2025 21:01:00 +0000 Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=) 2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: 9sZUNiwCv3Wae4P1tE5Sy+Mpgg0BQvf+m/PQEAAEcJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:07:74:1e:c6:cb:06:8d:37:e6:68:63:24:af:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51 Validity Not Before: Dec 15 21:01:00 2025 GMT Not After : Dec 16 21:01:00 2025 GMT Subject: CN=e25915dcbc70a04922ad2d3cf66f845cfb83a8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:fa:6d:b6:91:4c:bc:42:e0:11:6a:5c:42: 97:a2:f2:ff:dc:13:bf:2c:28:b3:e7:d3:5c:fa:2d: 91:00:c3:34:9e:df:69:6d:dd:2c:a3:0f:37:d9:4e: 4e:69:63:7f:5b:a7:3f:ce:03:cd:69:62:2f:a7:72: 79:ff:ca:45:60:d1:e4:5a:a5:df:5a:63:70:29:8d: 4f:f7:0f:fc:bd:ac:49:40:4e:9a:14:7b:f7:49:f6: b2:cf:26:e9:f8:84:32:68:95:c1:02:47:00:3d:d8: 50:da:5b:0a:5f:60:ec:e0:17:36:0b:e6:8e:2f:ec: a6:32:84:43:4e:28:6a:e6:92:01:59:9c:a6:6f:31: 0f:9f:81:1f:e3:1d:a6:68:e5:86:31:6c:55:63:7b: a1:63:61:ea:c8:d9:86:19:6a:05:85:ab:68:5a:70: ef:cc:d8:04:93:7d:8c:da:c5:89:6b:84:b7:f7:ca: 36:43:b3:04:1b:a8:16:30:b6:e7:e3:1a:b3:37:95: 59:2e:e5:b1:ad:64:9a:96:7d:31:45:99:a4:51:54: a0:e6:83:b1:23:b1:0c:be:c2:ac:c0:7e:77:10:84: e6:c2:ff:6b:4c:fa:e3:06:67:36:e2:5a:6a:fb:b2: 2c:88:d1:31:6d:99:ad:a4:84:9c:84:e6:28:0b:6a: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:59:15:DC:BC:70:A0:49:22:AD:2D:3C:F6:6F:84:5C:FB:83:A8:D5 X509v3 Authority Key Identifier: keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:a5:a3:86:fc:b8:56:7c:44:03:3d:ac:ea:a7:ce:ef:fa:06: a4:2f:7b:03:f8:dd:7c:a8:b6:5b:8d:77:46:32:d9:69:ad:8f: eb:76:16:b4:33:22:9b:a9:d7:38:bb:4f:b1:fc:a3:ad:4f:2a: 2a:51:9e:45:11:3a:8c:e4:bc:9c:88:52:e8:fa:b0:4d:5b:1a: a9:97:48:e6:af:94:10:12:4e:7f:a8:69:de:92:2c:bc:05:a7: b5:27:fb:85:f2:59:cf:7a:9d:e1:57:2f:5c:31:80:42:61:20: 48:74:8a:01:c6:8f:ca:25:3c:8a:b3:b2:7c:38:2e:f3:34:9f: ae:b4:1c:a0:64:ca:22:d4:9e:d1:65:19:27:8a:3d:45:25:74: 09:61:d4:83:50:1c:90:aa:38:e6:fe:dd:7c:e5:f5:8d:59:dc: a6:38:6c:59:5d:9e:da:93:1a:f6:a4:fb:d5:d2:a9:e1:74:af: 8c:a8:96:ee:d3:2f:36:db:c8:0b:b4:78:37:89:2f:d9:f1:03: e7:d2:21:7c:e7:09:f1:94:31:24:3c:d1:0e:de:40:57:07:4b: 19:56:5b:1b:98:e9:49:d6:cd:d5:23:59:11:6b:c7:58:e2:4c: fb:29:60:d9:e6:26:91:d9:75:be:ab:67:97:f8:f1:60:0a:79: 7e:4f:17:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0Qd0HsbLBo035mhjJK81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Zjk4YmIxYThjN2YxZDY2NzQyNDhjNDdlMGYwNGFlMDQ5 YWZhNTEwHhcNMjUxMjE1MjEwMTAwWhcNMjUxMjE2MjEwMTAwWjAzMTEwLwYDVQQD EyhlMjU5MTVkY2JjNzBhMDQ5MjJhZDJkM2NmNjZmODQ1Y2ZiODNhOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq/6bbaRTLxC4BFqXEKXovL/3BO/ LCiz59Nc+i2RAMM0nt9pbd0sow832U5OaWN/W6c/zgPNaWIvp3J5/8pFYNHkWqXf WmNwKY1P9w/8vaxJQE6aFHv3Sfayzybp+IQyaJXBAkcAPdhQ2lsKX2Ds4Bc2C+aO L+ymMoRDTihq5pIBWZymbzEPn4Ef4x2maOWGMWxVY3uhY2HqyNmGGWoFhatoWnDv zNgEk32M2sWJa4S398o2Q7MEG6gWMLbn4xqzN5VZLuWxrWSaln0xRZmkUVSg5oOx I7EMvsKswH53EITmwv9rTPrjBmc24lpq+7IsiNExbZmtpISchOYoC2qMtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJZFdy8cKBJIq0tPPZvhFz7g6jVMB8GA1UdIwQY MBaAFIT5i7Gox/HWZ0JIxH4PBK4EmvpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jNjg1OWQtNmU0Ni00YTY2LWE3YjAt NGUzNTk0YjJkYTdmLzEvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jNjg1OWQtNmU0Ni00YTY2LWE3YjAtNGUzNTk0YjJkYTdm LzEvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaWjhvy4 VnxEAz2s6qfO7/oGpC97A/jdfKi2W413RjLZaa2P63YWtDMim6nXOLtPsfyjrU8q KlGeRRE6jOS8nIhS6PqwTVsaqZdI5q+UEBJOf6hp3pIsvAWntSf7hfJZz3qd4Vcv XDGAQmEgSHSKAcaPyiU8irOyfDgu8zSfrrQcoGTKItSe0WUZJ4o9RSV0CWHUg1Ac kKo45v7dfOX1jVncpjhsWV2e2pMa9qT71dKp4XSvjKiW7tMvNtvIC7R4N4kv2fED 59IhfOcJ8ZQxJDzRDt5AVwdLGVZbG5jpSdbN1SNZEWvHWOJM+ylg2eYmkdl1vqtn l/jxYAp5fk8XgQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:31:16 2025 by rpki-client