This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json)
Hash identifier: x7d/KoRTcN7jFANApakWVU8HeVzo1xHeC4Xrad2yAjI=
Subject key identifier: A4:A4:4D:1D:1D:1F:92:8A:7F:E6:98:B6:62:9B:66:EF:47:C1:78:8E
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019AF31B58FFC8155D7B86B7DCFDE3A6CE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
Manifest number: 1789
Signing time: Sat 06 Dec 2025 10:00:47 +0000
Manifest this update: Sat 06 Dec 2025 10:00:47 +0000
Manifest next update: Sun 07 Dec 2025 10:00:47 +0000
Files and hashes: 1: 1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa (hash: 9REY9ixrC0cn2b75D6q+Nm3sD55qb7ERu5o3EziHF5s=)
2: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=)
3: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=)
4: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=)
5: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=)
6: E_z1rRm2dPIkXYCFMVviLLfSyVg.roa (hash: VusW0dej7Bb9Ooea4R8NVWxaK/HakKSdSQk63k3jQc4=)
7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: /uyoJ7uENYLg+jg3NyN+gczcheU+eszQyNhxpnsp1I0=)
8: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=)
9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=)
10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=)
11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=)
12: eloma6ROlb3WGecKiAOHrBMJSNc.roa (hash: xqij8ENzmH6IHFmng7nPcmW1+/+AD15DS99+RfR6qA4=)
13: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=)
14: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=)
15: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=)
16: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=)
17: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=)
18: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:58:ff:c8:15:5d:7b:86:b7:dc:fd:e3:a6:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Dec 6 10:00:47 2025 GMT
Not After : Dec 7 10:00:47 2025 GMT
Subject: CN=a4a44d1d1d1f928a7fe698b6629b66ef47c1788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:0b:ae:a0:00:4c:5d:31:89:ae:5f:3d:94:
f7:fc:c4:16:42:64:f5:66:63:74:a2:fd:aa:b7:e5:
c6:c4:71:da:0f:b5:ad:ac:31:f4:11:93:01:bd:42:
04:d2:fb:50:0b:bb:af:66:49:83:e2:da:3f:cf:8d:
c6:4f:c4:95:05:e5:07:f9:4d:0c:bc:90:22:73:90:
52:76:49:94:26:f0:6c:97:82:a1:67:4b:50:fb:ed:
cb:01:cb:a5:f0:43:64:d1:eb:0c:60:6c:f8:9c:b4:
7f:72:62:2e:36:b9:ea:a6:c7:2f:16:a6:46:68:cb:
7c:3d:2c:27:c8:f6:41:84:b3:39:6a:aa:86:26:79:
e7:8a:73:84:05:ce:e4:d4:99:a0:2c:fc:13:7f:38:
11:f0:f4:81:63:d5:76:11:a8:e4:c0:9f:6a:37:1e:
20:f5:aa:f5:ec:cd:4f:d2:5d:9b:cd:b4:94:16:c0:
19:f6:37:19:09:41:55:c7:04:72:dc:fe:fa:ba:99:
4b:d1:6f:89:10:3e:81:6e:d1:25:9e:4d:af:78:81:
97:1b:d6:65:e3:c2:43:91:d4:72:2e:56:95:de:f5:
a2:8f:2a:46:31:5d:49:3f:4c:72:6a:c8:e2:ef:59:
be:40:a3:9e:7d:f8:36:44:b1:ff:ef:62:d5:6f:ee:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:4D:1D:1D:1F:92:8A:7F:E6:98:B6:62:9B:66:EF:47:C1:78:8E
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:ea:59:78:72:83:ef:ed:04:af:e5:ed:86:30:1a:4c:05:
f5:0a:0e:95:d1:62:7d:fa:65:06:8c:e6:c3:d8:80:6b:27:dc:
c2:9c:40:be:90:43:94:a0:2d:ea:2d:65:4c:2b:36:5c:1a:2a:
5c:b6:2f:f4:ef:d4:e9:d5:b3:71:a1:e3:7c:a8:ce:d1:3e:0c:
d9:c5:80:10:ab:5d:e0:0b:41:d9:ec:18:ae:95:cb:a5:9b:7b:
1e:97:56:e1:59:f4:18:fe:42:df:c2:40:20:e3:4b:d1:d3:0b:
fa:c6:97:64:d4:63:ba:0e:00:86:b5:25:13:ca:8e:83:ca:90:
a7:50:26:b2:aa:b9:b1:47:23:25:7e:f5:e7:0a:b4:0d:60:c3:
ab:88:d5:f3:80:c9:15:e7:45:86:fe:54:20:8a:8a:f5:4e:d8:
75:1d:39:c4:36:17:68:65:74:b2:87:ee:02:2e:5e:b9:e0:4d:
2c:ac:f7:57:d5:81:d7:5a:02:d4:f7:4e:f9:ca:33:bf:9c:4e:
8f:a0:60:1b:51:5b:da:09:82:bb:c9:8e:f2:6f:27:85:fc:43:
3b:8e:90:13:10:9c:e0:ff:a8:10:fb:61:c2:3e:a9:ea:20:49:
2c:47:13:ae:6d:75:6b:bb:a4:34:f5:0c:98:47:99:68:1b:6d:
57:ec:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:06 2025 by rpki-client