This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json) Hash identifier: aWdv5iKJBo+3V8cDQrlSYWvro7FV3k4vYsjTO1Iubo8= Subject key identifier: 92:B8:4C:BD:7E:12:64:75:B0:0B:DE:FD:B9:CA:6C:ED:DA:5C:C3:1E Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e Certificate serial: 019AF12D810CA6231C160FFC6787172F8FA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: OaQbMFX3Ew+7itPzRDkhJ9V4i30+11pQ55vGcC8rQyI=) 2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=) 3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:81:0c:a6:23:1c:16:0f:fc:67:87:17:2f:8f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=92b84cbd7e126475b00bdefdb9ca6cedda5cc31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:93:bd:37:98:fd:e4:07:f2:3d:1f:c4:4c: f2:03:fe:72:08:70:72:28:3f:ad:aa:c9:02:0d:ad: a1:70:8a:fa:dc:0d:43:14:41:32:b3:8b:35:5d:27: 9c:62:a3:fe:26:39:4e:ef:cd:17:a1:2d:35:74:bf: 56:43:f1:ed:bf:ab:19:b1:cd:c9:0d:fc:0c:a2:2c: a3:21:26:37:ec:04:6c:98:ec:5a:9b:65:4f:7e:2a: 69:5b:8f:d8:02:7f:c5:0d:d2:f4:fb:e8:03:0a:1f: 68:4e:a1:e7:1a:b8:31:9c:2e:4a:05:48:22:9f:04: c7:63:00:19:25:fd:ab:63:c3:12:90:f6:f0:6d:32: 5c:07:49:25:f0:db:a2:4d:9e:da:16:eb:5a:21:c3: c6:34:07:80:97:da:d2:ff:45:6b:c7:4d:4b:ac:79: 5e:cb:6a:97:d8:f7:e6:20:b3:4b:a2:bc:b5:67:db: 16:2e:c2:af:42:21:76:1b:d5:95:c7:6c:6b:33:2e: b1:21:5e:80:e8:e7:ea:e1:aa:cb:91:dc:71:77:67: 73:63:f7:84:b4:00:b5:db:fc:31:26:6d:23:06:d4: 3f:69:c4:16:8e:b8:6f:de:6e:98:ca:d3:9f:f4:9d: 2b:8f:53:53:3d:97:bb:dc:87:d4:aa:67:be:3c:f9: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B8:4C:BD:7E:12:64:75:B0:0B:DE:FD:B9:CA:6C:ED:DA:5C:C3:1E X509v3 Authority Key Identifier: keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b0:e4:e1:e5:61:b6:3b:a3:05:4c:8c:ac:0b:c0:d0:d9:0b: 4f:42:e7:8a:2a:08:48:88:e5:07:7c:1d:26:b5:11:f4:c2:35: a4:41:86:10:af:0d:65:64:d9:f1:5f:1d:9f:43:1c:2d:ec:4b: 12:79:2c:30:57:98:5a:8c:dd:bc:28:b2:58:f9:df:9b:03:7d: 64:4d:ec:e8:04:cb:45:ca:91:ae:61:bf:ff:77:15:98:e7:50: eb:86:82:23:32:0b:d6:43:2f:8d:aa:f3:7f:4b:c1:06:3e:30: 6b:29:07:23:86:84:c4:41:1d:bf:e3:4f:e9:e8:ef:2a:e6:66: 1e:16:da:4f:1e:0f:06:02:9c:08:60:c1:b2:46:21:1e:8d:13: 17:26:32:60:8b:1f:c2:49:a5:70:ee:ad:e3:60:f7:cb:fe:95: 8a:96:b9:0b:76:7d:61:93:1e:6f:5e:39:19:d0:76:d0:c4:4c: 1b:b9:ef:67:7d:2e:76:83:d0:bc:e9:1f:7c:9f:cb:5f:9e:61: 83:78:bf:25:41:c3:d8:39:2a:4d:1e:a4:ac:77:27:de:74:87: 9e:1b:4c:60:15:77:e6:c9:73:de:47:2c:43:93:30:c7:a1:ab: 43:d3:35:03:ae:7a:17:22:03:1b:a0:c4:08:0d:42:96:9b:7c: 73:70:51:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYEMpiMcFg/8Z4cXL4+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTM5MTE3MDVhZTg2MGMyOTllNmExYTQxMmU1MGVkYTFj ODIyOGUwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD Eyg5MmI4NGNiZDdlMTI2NDc1YjAwYmRlZmRiOWNhNmNlZGRhNWNjMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfSTvTeY/eQH8j0fxEzyA/5yCHBy KD+tqskCDa2hcIr63A1DFEEys4s1XSecYqP+JjlO780XoS01dL9WQ/Htv6sZsc3J DfwMoiyjISY37ARsmOxam2VPfippW4/YAn/FDdL0++gDCh9oTqHnGrgxnC5KBUgi nwTHYwAZJf2rY8MSkPbwbTJcB0kl8NuiTZ7aFutaIcPGNAeAl9rS/0Vrx01LrHle y2qX2PfmILNLory1Z9sWLsKvQiF2G9WVx2xrMy6xIV6A6Ofq4arLkdxxd2dzY/eE tAC12/wxJm0jBtQ/acQWjrhv3m6YytOf9J0rj1NTPZe73IfUqme+PPkLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK4TL1+EmR1sAve/bnKbO3aXMMeMB8GA1UdIwQY MBaAFBxTkRcFroYMKZ5qGkEuUO2hyCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUt M2U3ZjgzMDhjYzU1LzEvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUtM2U3ZjgzMDhjYzU1 LzEvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrDk4eVh tjujBUyMrAvA0NkLT0LniioISIjlB3wdJrUR9MI1pEGGEK8NZWTZ8V8dn0McLexL EnksMFeYWozdvCiyWPnfmwN9ZE3s6ATLRcqRrmG//3cVmOdQ64aCIzIL1kMvjarz f0vBBj4waykHI4aExEEdv+NP6ejvKuZmHhbaTx4PBgKcCGDBskYhHo0TFyYyYIsf wkmlcO6t42D3y/6Vipa5C3Z9YZMeb145GdB20MRMG7nvZ30udoPQvOkffJ/LX55h g3i/JUHD2DkqTR6krHcn3nSHnhtMYBV35slz3kcsQ5Mwx6GrQ9M1A656FyIDG6DE CA1Clpt8c3BRZw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:34 2025 by rpki-client