This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json) Hash identifier: i565MfOf0DH4LHmlohTMaf8OfoOkqRCMrrcL0hfBWH4= Subject key identifier: 92:4E:03:F7:04:F8:8C:77:EE:6A:46:4F:30:C7:E1:B1:30:E4:2B:E6 Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50 Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050 Certificate serial: 019AF2AD6772E0605463AA1B1299CC6A66FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft Manifest number: 0194 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: qqK66j1R8pNa3OqznDPuMOfxl3lfqPjANCpgtEOE7Q8=) 2: fj04IAgRtLyt8FxauXRHzCCY2dM.roa (hash: RQPUjLROTiuPGUSBn8RZIchppB8l2w9Yk7LM8XCFoI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:67:72:e0:60:54:63:aa:1b:12:99:cc:6a:66:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050 Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=924e03f704f88c77ee6a464f30c7e1b130e42be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:9b:48:a1:de:b1:2a:30:a8:73:c7:e9:66: 09:fb:72:e6:1b:52:46:77:b5:c6:3c:16:d8:08:98: 23:15:9e:e0:af:4d:fc:7f:52:0b:13:3d:27:c2:4a: 39:09:f9:54:af:69:53:2c:87:af:50:14:3d:5c:c4: 11:f3:f5:98:33:10:41:6c:3b:28:55:b5:70:95:d8: 05:7e:9a:bc:14:92:73:fb:c5:47:e1:39:61:1f:35: 89:73:fa:bd:b9:97:ec:26:03:38:80:43:49:a8:c4: 17:17:72:04:1b:22:7a:ce:40:54:4e:ef:c4:50:94: 81:37:77:f0:3c:94:0a:c4:96:35:d1:07:bf:59:68: a0:46:52:93:ed:82:21:ea:e1:1d:b1:6e:11:a6:91: da:30:22:72:f6:64:2b:61:13:94:10:2a:7d:9a:e4: ef:a3:fe:87:af:b3:ca:69:58:f6:75:89:b5:14:c1: d5:b7:dd:04:bb:49:b1:5b:d4:0a:fe:f6:ee:83:35: 2f:97:71:f3:62:d9:12:58:e5:b3:a0:fa:40:5e:b9: 17:ab:b0:86:9d:cd:66:eb:a9:3a:ea:1b:1d:9c:8b: 87:f0:d1:19:10:5c:f2:49:cc:09:ff:08:80:57:f3: a7:e5:f6:2b:0b:a3:4d:73:2e:51:43:f6:26:7a:22: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4E:03:F7:04:F8:8C:77:EE:6A:46:4F:30:C7:E1:B1:30:E4:2B:E6 X509v3 Authority Key Identifier: keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:0c:44:4d:27:ab:80:e5:f5:8e:56:f6:f1:49:15:91:10: 5c:a1:46:c1:5a:4d:a4:01:78:2f:2d:f2:04:0d:f2:cd:f0:b8: f9:bc:4d:87:f3:eb:4f:fa:b9:83:a4:fa:2f:91:40:63:73:7a: 2e:f4:0d:1d:36:33:d1:9f:df:dd:b2:ec:dc:69:27:08:c7:62: 63:f3:bf:d0:07:ff:47:6c:4d:ec:88:aa:6c:97:8f:c4:57:ce: 25:90:5a:1c:2c:c4:79:f7:83:55:75:ca:cd:41:04:ef:82:24: be:7d:d3:c6:7a:ea:1a:1a:ce:04:02:0d:1e:ad:a3:3e:48:d1: 07:db:01:12:75:11:3c:f7:56:e4:55:6a:28:96:5b:48:ad:7d: 6c:4e:e2:10:3f:e0:fb:28:98:14:49:cf:0d:31:d8:70:b4:ff: cc:1d:65:f4:7a:e6:e6:c7:d9:8c:df:5b:c7:e4:ef:b7:44:53: 9f:37:c2:8f:7d:1c:c8:8c:2b:7b:f5:6b:dd:e4:ea:88:5a:1c: 24:ca:35:0f:e0:d4:6b:66:58:39:3d:97:1c:89:9f:93:8d:e7: f3:17:ca:9c:c4:6e:4e:38:e3:14:b3:9c:45:66:a0:56:9c:39: 57:1a:bc:3e:9f:c2:d9:40:36:4b:40:43:47:71:d4:de:48:cf: d4:7b:95:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWdy4GBUY6obEpnMamb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNzI0NzFlMDI1ZGUzYTgyYThkZjU4YWFlNmUxMmUzMWQ2 Y2QwNTAwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD Eyg5MjRlMDNmNzA0Zjg4Yzc3ZWU2YTQ2NGYzMGM3ZTFiMTMwZTQyYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW+bSKHesSowqHPH6WYJ+3LmG1JG d7XGPBbYCJgjFZ7gr038f1ILEz0nwko5CflUr2lTLIevUBQ9XMQR8/WYMxBBbDso VbVwldgFfpq8FJJz+8VH4TlhHzWJc/q9uZfsJgM4gENJqMQXF3IEGyJ6zkBUTu/E UJSBN3fwPJQKxJY10Qe/WWigRlKT7YIh6uEdsW4RppHaMCJy9mQrYROUECp9muTv o/6Hr7PKaVj2dYm1FMHVt90Eu0mxW9QK/vbugzUvl3HzYtkSWOWzoPpAXrkXq7CG nc1m66k66hsdnIuH8NEZEFzyScwJ/wiAV/On5fYrC6NNcy5RQ/YmeiL8hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJOA/cE+Ix37mpGTzDH4bEw5CvmMB8GA1UdIwQY MBaAFB1yRx4CXeOoKo31iq5uEuMdbNBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ZmY3ZDctMWVkZC00M2MyLTg2Y2Yt YmU0YjA2YzVjNDJmLzEvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82ZmY3ZDctMWVkZC00M2MyLTg2Y2YtYmU0YjA2YzVjNDJm LzEvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwkMRE0n q4Dl9Y5W9vFJFZEQXKFGwVpNpAF4Ly3yBA3yzfC4+bxNh/PrT/q5g6T6L5FAY3N6 LvQNHTYz0Z/f3bLs3GknCMdiY/O/0Af/R2xN7IiqbJePxFfOJZBaHCzEefeDVXXK zUEE74Ikvn3TxnrqGhrOBAINHq2jPkjRB9sBEnURPPdW5FVqKJZbSK19bE7iED/g +yiYFEnPDTHYcLT/zB1l9Hrm5sfZjN9bx+Tvt0RTnzfCj30cyIwre/Vr3eTqiFoc JMo1D+DUa2ZYOT2XHImfk43n8xfKnMRuTjjjFLOcRWagVpw5Vxq8Pp/C2UA2S0BD R3HU3kjP1HuV8g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:41 2025 by rpki-client