This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json) Hash identifier: O0MM8BCJ6jc7PTfLxterHhYWw+ZRuXqgLD/OJxQeFbY= Subject key identifier: 96:6A:43:11:92:CF:15:87:2C:AE:39:34:F2:FE:3D:18:CE:D3:3E:74 Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0 Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0 Certificate serial: 019AF42E17605B6DCA5309800C2ADCF04AF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: 3wQvW9FVzaL9hl2piU0CF4zF4ee0Mx6f337RhKiphfg=) 2: OqLUCxtgxChqlU1u5DSrV7o7hUE.roa (hash: 137N4QJ5LT3R5FaNUW+c79pvczICoEGACd1IGeCfKGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:17:60:5b:6d:ca:53:09:80:0c:2a:dc:f0:4a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=966a431192cf15872cae3934f2fe3d18ced33e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:67:b8:c5:95:1c:a6:09:af:44:0f:3c:22: 11:70:a5:9c:1e:73:14:80:01:43:2b:7f:36:1e:fc: 64:93:f8:42:e3:f1:a4:ec:1c:36:65:9c:4c:a4:ef: ab:86:5f:ff:9e:4f:df:44:6e:a4:67:76:ff:be:1f: d5:a2:65:ca:13:ae:81:ae:20:35:29:4a:9a:d5:91: a2:88:f1:b5:bc:ae:84:3f:14:80:25:88:b3:7f:32: f7:bd:1a:85:85:35:85:2f:5c:22:92:62:1a:61:d9: 73:22:a3:e9:39:84:50:65:13:a5:9f:15:e0:19:c1: 69:5e:54:fd:11:e6:68:46:60:a1:5a:81:f7:86:5e: f5:db:ca:2a:2c:76:16:75:ea:a9:19:9a:6a:37:10: e6:65:31:8f:fd:b0:ea:f5:ee:7b:37:e5:be:b3:0c: 00:c6:f3:c2:7b:ae:e5:97:14:7e:6e:77:eb:99:60: ec:de:28:6e:40:a0:9f:1c:33:a2:ab:db:c0:08:4f: 32:6c:03:b6:20:fa:59:ce:aa:af:ed:28:71:ce:54: 74:04:bd:f1:8f:ab:84:c4:a1:14:82:9a:3c:cb:37: 23:43:92:23:2e:37:5f:f8:ce:7e:ab:b5:ad:72:cd: 4e:12:02:9b:6b:f8:0d:80:09:94:f5:27:18:b7:c4: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:43:11:92:CF:15:87:2C:AE:39:34:F2:FE:3D:18:CE:D3:3E:74 X509v3 Authority Key Identifier: keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:00:a5:1b:38:57:c7:e4:0f:82:57:5e:62:e8:58:74:13:84: 5a:8e:15:ce:67:9b:05:94:08:54:4b:2e:14:ca:ce:74:c6:fb: 08:5a:39:a6:e5:6d:da:dc:3d:00:3f:8b:58:b8:13:c5:f7:da: 56:ac:58:f3:72:a1:03:5c:3e:df:bd:90:cf:52:00:f3:2c:dc: 39:88:10:e4:0d:f4:b1:c1:0f:05:8a:31:37:49:ca:04:87:f5: d5:2f:26:65:d2:74:f9:62:e9:05:21:31:b4:c3:89:3f:8e:d6: 2e:5e:62:17:21:37:32:29:f6:49:06:25:a0:f4:c2:55:72:96: a2:59:fc:5a:93:5b:be:e4:97:59:cf:dd:39:ec:1e:a4:c5:c0: b0:76:b4:9f:4d:37:ae:62:8e:56:3f:8b:7a:c7:b1:bd:2f:38: fa:3a:5c:ac:03:a7:82:3f:65:8f:c1:01:57:aa:0a:31:14:51: a8:e0:1c:83:8a:c6:b0:62:c6:2b:ab:84:2a:5f:5b:c8:9a:9d: 53:61:85:8a:3c:3e:15:5e:87:5d:7d:42:c7:b9:29:39:6a:c3: 44:34:8f:c7:06:96:86:6a:85:a5:43:ee:62:73:e3:a5:81:88: 9b:3b:05:b5:59:dc:57:4b:53:ee:f6:35:e7:8d:b5:b3:f9:d3: c3:4b:3a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhdgW23KUwmADCrc8ErxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMWM1MmYxNTUyZjZlYTBmMDY0ZDdhM2I3OWRiNWMxY2Yx NjZiZDAwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD Eyg5NjZhNDMxMTkyY2YxNTg3MmNhZTM5MzRmMmZlM2QxOGNlZDMzZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF1nuMWVHKYJr0QPPCIRcKWcHnMU gAFDK382Hvxkk/hC4/Gk7Bw2ZZxMpO+rhl//nk/fRG6kZ3b/vh/VomXKE66BriA1 KUqa1ZGiiPG1vK6EPxSAJYizfzL3vRqFhTWFL1wikmIaYdlzIqPpOYRQZROlnxXg GcFpXlT9EeZoRmChWoH3hl7128oqLHYWdeqpGZpqNxDmZTGP/bDq9e57N+W+swwA xvPCe67llxR+bnfrmWDs3ihuQKCfHDOiq9vACE8ybAO2IPpZzqqv7ShxzlR0BL3x j6uExKEUgpo8yzcjQ5IjLjdf+M5+q7Wtcs1OEgKba/gNgAmU9ScYt8QTqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZqQxGSzxWHLK45NPL+PRjO0z50MB8GA1UdIwQY MBaAFB0cUvFVL26g8GTXo7edtcHPFmvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjIt MjAxZDVhOWJiOGFhLzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjItMjAxZDVhOWJiOGFh LzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQClGzhX x+QPgldeYuhYdBOEWo4VzmebBZQIVEsuFMrOdMb7CFo5puVt2tw9AD+LWLgTxffa VqxY83KhA1w+372Qz1IA8yzcOYgQ5A30scEPBYoxN0nKBIf11S8mZdJ0+WLpBSEx tMOJP47WLl5iFyE3Min2SQYloPTCVXKWoln8WpNbvuSXWc/dOewepMXAsHa0n003 rmKOVj+LesexvS84+jpcrAOngj9lj8EBV6oKMRRRqOAcg4rGsGLGK6uEKl9byJqd U2GFijw+FV6HXX1Cx7kpOWrDRDSPxwaWhmqFpUPuYnPjpYGImzsFtVncV0tT7vY1 5421s/nTw0s6Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:47:22 2025 by rpki-client