This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json) Hash identifier: nSlIeLKCBaECgDpcxJ93MJKqA/4OKxFo6S8/OCOxgto= Subject key identifier: 08:0E:85:69:8A:B8:AE:84:2E:C5:41:31:0A:A0:85:6D:18:8F:50:60 Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15 Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15 Certificate serial: 019AF0BF347481F0EF3A9896B0086CA625FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft Manifest number: 16F2 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: M2dxVl8+51usmt4LFqjwQWo63IJEcKRlaDU9U2eCkGk=) 2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:34:74:81:f0:ef:3a:98:96:b0:08:6c:a6:25:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15 Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=080e85698ab8ae842ec541310aa0856d188f5060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:4f:12:b1:36:fe:6f:95:16:07:63:31:f8: 22:f6:3f:18:ea:48:c8:35:3b:50:f0:16:61:7c:b4: 0f:45:74:e8:e9:8e:b6:f1:fe:93:9b:c1:2e:be:12: 67:7c:2f:e7:cd:3d:c5:8a:51:59:77:24:9c:66:b0: b8:23:9b:4c:05:af:15:5c:b4:79:3a:bb:2e:14:68: 25:43:a4:b1:8e:73:ac:a2:98:71:7a:92:84:c9:3f: 69:b9:79:34:95:c2:9a:6e:24:31:8a:3d:45:41:e9: f0:2b:b1:cb:c4:df:e8:61:4f:f2:48:58:38:f2:fa: 86:fc:16:40:e5:b3:91:eb:0e:0b:ae:3e:a2:d1:bb: 2d:85:3e:28:0b:d3:ee:0f:8b:9f:a9:e8:96:07:d9: c1:80:60:7a:96:cc:17:aa:ff:f0:98:50:b1:16:9d: df:9e:7f:d6:37:b3:b1:8e:da:73:29:d1:13:8f:af: 17:91:1e:3b:05:e4:c6:2f:84:8a:2f:4c:cd:eb:b1: e2:70:ed:3b:81:dc:82:40:8f:73:42:ce:ca:74:6f: be:64:fa:bf:7d:fd:ac:bd:94:86:c7:34:91:cd:55: a6:4c:e6:ba:af:0a:af:00:cf:6d:e2:f5:cd:95:6c: cf:26:fb:63:5f:27:e9:9d:08:c2:83:b2:51:89:9d: 74:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:85:69:8A:B8:AE:84:2E:C5:41:31:0A:A0:85:6D:18:8F:50:60 X509v3 Authority Key Identifier: keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b3:b9:49:01:95:9a:ea:f3:75:9c:06:a2:26:26:c1:45:cb: a5:ad:89:13:da:04:7f:81:ee:d9:c1:e6:05:70:e1:02:44:13: a8:be:3d:70:58:9c:be:b0:4c:b5:40:da:c0:bc:44:83:a6:60: dd:7f:6d:bb:c0:e2:51:fc:5c:8e:2f:62:68:03:ab:43:09:5b: 94:0b:ba:f8:27:8c:e5:c3:21:5e:37:eb:d9:2a:1b:d6:56:f2: 1e:88:2a:3f:be:03:1e:bd:e6:f4:68:a1:13:cf:8b:44:12:0f: d5:be:2f:4d:a8:68:fc:a6:70:cc:1f:12:b2:56:74:3a:73:cd: 1c:05:d4:07:ea:81:a3:1e:1c:b0:4e:df:df:6c:33:77:c6:48: 89:92:68:2a:68:94:fe:cf:88:7a:2a:0d:2b:2d:8e:d0:62:6c: ab:fa:7c:44:1e:89:cd:02:09:3f:b7:94:fe:94:f5:b5:e9:3f: ac:00:47:68:8c:24:f8:da:17:d8:4b:31:36:5a:3f:4a:1e:0c: 29:2b:2e:a7:7b:97:a2:f1:53:53:cc:77:a3:ea:57:65:c3:80: f3:2c:3d:a0:2c:dd:de:44:5b:41:43:f5:ed:6c:95:c0:70:90: cc:5a:5c:98:32:2d:44:4a:b1:89:99:50:af:5d:45:4f:cb:e1: 35:bb:57:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzR0gfDvOpiWsAhspiX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NDZhZjE4ZjcwNzhhYWMwMGMyZmNkMmNhNjdmOTMyODAy MTdlMTUwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD EygwODBlODU2OThhYjhhZTg0MmVjNTQxMzEwYWEwODU2ZDE4OGY1MDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHVPErE2/m+VFgdjMfgi9j8Y6kjI NTtQ8BZhfLQPRXTo6Y628f6Tm8EuvhJnfC/nzT3FilFZdyScZrC4I5tMBa8VXLR5 OrsuFGglQ6SxjnOsophxepKEyT9puXk0lcKabiQxij1FQenwK7HLxN/oYU/ySFg4 8vqG/BZA5bOR6w4Lrj6i0bsthT4oC9PuD4ufqeiWB9nBgGB6lswXqv/wmFCxFp3f nn/WN7OxjtpzKdETj68XkR47BeTGL4SKL0zN67HicO07gdyCQI9zQs7KdG++ZPq/ ff2svZSGxzSRzVWmTOa6rwqvAM9t4vXNlWzPJvtjXyfpnQjCg7JRiZ10fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgOhWmKuK6ELsVBMQqghW0Yj1BgMB8GA1UdIwQY MBaAFIVGrxj3B4qsAML80spn+TKAIX4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUt NmJlYWVlNWI1OGEzLzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYTY4ODgtYjlhZC00YjgxLWI5MzUtNmJlYWVlNWI1OGEz LzEvaFVhdkdQY0hpcXdBd3Z6U3ltZjVNb0FoZmhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbO5SQGV murzdZwGoiYmwUXLpa2JE9oEf4Hu2cHmBXDhAkQTqL49cFicvrBMtUDawLxEg6Zg 3X9tu8DiUfxcji9iaAOrQwlblAu6+CeM5cMhXjfr2Sob1lbyHogqP74DHr3m9Gih E8+LRBIP1b4vTaho/KZwzB8SslZ0OnPNHAXUB+qBox4csE7f32wzd8ZIiZJoKmiU /s+IeioNKy2O0GJsq/p8RB6JzQIJP7eU/pT1tek/rABHaIwk+NoX2EsxNlo/Sh4M KSsup3uXovFTU8x3o+pXZcOA8yw9oCzd3kRbQUP17WyVwHCQzFpcmDItREqxiZlQ r11FT8vhNbtXZg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:45 2025 by rpki-client