This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json) Hash identifier: ZJf60GQMv/GWUlYJfSP+1RduwL3Gf2V+bejWNGu+rmM= Subject key identifier: 5F:4C:06:AB:40:2B:29:35:2E:C1:FA:5D:52:D8:FF:A1:63:82:D0:55 Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f Certificate serial: 019AF31BA41E1088F8EB5E76A6C70A4AD63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft Manifest number: 08B5 Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=) 2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: HFopjqnKjHxlWCtBD3y95yT1l4N85/+ozSMFohDj5t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a4:1e:10:88:f8:eb:5e:76:a6:c7:0a:4a:d6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86623a8458eff347d424348588829ee137b45a3f Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=5f4c06ab402b29352ec1fa5d52d8ffa16382d055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:64:69:86:70:49:a1:f4:6f:7c:23:cd:64: 58:9c:70:86:dd:ba:8e:be:e8:b0:87:ba:4b:8b:f5: ae:e8:d2:2f:e2:57:fc:55:29:f8:3d:46:9a:5e:e5: ee:4a:84:13:9c:a2:08:38:68:fc:b9:ca:3c:a2:29: 88:65:1e:88:83:51:cd:a5:a3:aa:97:56:28:08:8e: 25:0d:90:26:41:e4:c1:65:47:1c:65:da:ca:a0:e9: 22:92:0a:67:3f:6c:15:34:3f:62:17:b7:83:5a:d1: 2d:b3:e3:3e:b4:03:b4:a3:b0:0a:a2:a6:96:59:50: 2b:b1:fe:3a:80:c5:7d:b3:21:90:de:a4:d6:2c:10: c1:2f:6d:ac:b6:82:d1:e0:1e:03:4a:65:fd:ac:5a: c1:ab:b8:e3:13:be:6f:19:b5:8d:40:f4:a7:91:99: 79:50:74:ae:0f:24:9e:79:92:8b:eb:b5:dd:55:d0: a5:cc:21:5c:94:e7:38:b4:d4:fc:b0:8c:13:b7:3d: 3c:e5:33:93:58:94:32:07:dd:43:ff:bc:be:df:a9: 36:99:8e:ec:19:a8:9b:45:89:2d:61:f1:2a:be:15: d1:ca:fe:14:21:46:45:23:37:50:62:a8:42:81:d4: 90:ba:a0:ff:a4:11:8e:df:11:93:b5:01:53:18:53: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:06:AB:40:2B:29:35:2E:C1:FA:5D:52:D8:FF:A1:63:82:D0:55 X509v3 Authority Key Identifier: keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:10:77:74:80:b2:4f:8d:f0:05:04:37:4f:5f:b2:24:57:02: 36:ef:4e:6f:4c:34:e9:15:5d:b9:6b:98:46:0a:81:e1:33:b1: c3:eb:9f:e8:93:7a:10:53:84:2c:4e:47:ad:ca:46:1a:f6:12: 2c:e4:08:01:db:26:5e:80:45:f8:51:54:7e:ad:0b:88:a8:2a: e4:4a:be:a8:77:ca:e6:a2:96:4c:1c:03:2b:0b:6d:eb:92:f8: f2:e0:c7:33:49:1a:8d:4d:36:8d:11:37:4c:8a:e5:ef:23:37: 32:90:9b:1c:fc:16:10:0a:2a:68:18:8a:86:30:4d:20:e5:6a: a6:a0:70:55:96:eb:05:85:5c:d0:d1:af:4b:83:9e:ca:84:71: 94:00:41:d1:fe:87:95:8b:b3:d3:a7:2c:3f:49:30:fe:71:26: 80:6a:07:e8:c1:80:3e:02:f0:bf:fc:c6:2b:40:5d:32:39:d3: ad:d2:f8:3b:a8:9b:fd:71:c1:22:41:10:f9:0b:9a:6d:cd:02: 5c:ba:68:36:15:80:cf:1f:5b:9a:89:21:46:55:a3:34:e4:41: c1:c4:4e:fe:07:39:b1:e4:a8:cc:eb:f5:2d:6b:3d:0d:00:6c: 0b:95:c7:db:5d:93:c8:aa:b9:ff:ff:e4:9b:d9:49:76:26:99: e8:ce:ae:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6QeEIj46152pscKStY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi NDVhM2YwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD Eyg1ZjRjMDZhYjQwMmIyOTM1MmVjMWZhNWQ1MmQ4ZmZhMTYzODJkMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK9kaYZwSaH0b3wjzWRYnHCG3bqO vuiwh7pLi/Wu6NIv4lf8VSn4PUaaXuXuSoQTnKIIOGj8uco8oimIZR6Ig1HNpaOq l1YoCI4lDZAmQeTBZUccZdrKoOkikgpnP2wVND9iF7eDWtEts+M+tAO0o7AKoqaW WVArsf46gMV9syGQ3qTWLBDBL22stoLR4B4DSmX9rFrBq7jjE75vGbWNQPSnkZl5 UHSuDySeeZKL67XdVdClzCFclOc4tNT8sIwTtz085TOTWJQyB91D/7y+36k2mY7s GaibRYktYfEqvhXRyv4UIUZFIzdQYqhCgdSQuqD/pBGO3xGTtQFTGFPDHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9MBqtAKyk1LsH6XVLY/6FjgtBVMB8GA1UdIwQY MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt NmMyOGJiNDBkNTJlLzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRB3dICy T43wBQQ3T1+yJFcCNu9Ob0w06RVduWuYRgqB4TOxw+uf6JN6EFOELE5HrcpGGvYS LOQIAdsmXoBF+FFUfq0LiKgq5Eq+qHfK5qKWTBwDKwtt65L48uDHM0kajU02jRE3 TIrl7yM3MpCbHPwWEAoqaBiKhjBNIOVqpqBwVZbrBYVc0NGvS4OeyoRxlABB0f6H lYuz06csP0kw/nEmgGoH6MGAPgLwv/zGK0BdMjnTrdL4O6ib/XHBIkEQ+Quabc0C XLpoNhWAzx9bmokhRlWjNORBwcRO/gc5seSozOv1LWs9DQBsC5XH212TyKq5///k m9lJdiaZ6M6uxA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:39 2025 by rpki-client