This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json) Hash identifier: oXj0eRwPcGBD8sSDlPepdFCO/dKVRuY6sx9lOpr5d7U= Subject key identifier: 66:42:36:7D:CA:1C:95:D8:8B:30:17:DC:81:15:67:90:59:09:BD:1A Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db Certificate serial: 019AF3525BD2582C3FBB4F5C80E13FDF0606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft Manifest number: 10CE Signing time: Sat 06 Dec 2025 11:00:52 +0000 Manifest this update: Sat 06 Dec 2025 11:00:52 +0000 Manifest next update: Sun 07 Dec 2025 11:00:52 +0000 Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: tmZ3+gsAmZpOcwr5J17oFOkWZCQDlXYRPQdeFsIhJgE=) 2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=) 3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:5b:d2:58:2c:3f:bb:4f:5c:80:e1:3f:df:06:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db Validity Not Before: Dec 6 11:00:52 2025 GMT Not After : Dec 7 11:00:52 2025 GMT Subject: CN=6642367dca1c95d88b3017dc811567905909bd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:a0:f0:a2:9f:0c:e1:b5:ea:b5:f7:e0:12: 03:b2:dd:e1:47:c3:d2:38:d6:44:95:f2:e8:12:85: f4:a9:0d:db:34:f7:8e:36:e8:e0:ce:38:ba:e8:27: c3:33:a0:5c:a3:29:e0:b1:58:bc:2d:dc:22:91:76: 96:a7:e2:cc:86:36:0c:d8:e0:a1:c9:f9:c7:a7:38: cd:27:e4:f5:cb:1a:e8:16:15:9a:cc:d1:d5:73:0b: 06:f4:35:91:12:1f:ed:dd:90:1f:5a:89:22:53:21: c9:97:96:34:55:01:90:b4:ff:53:2b:45:13:bb:0b: 55:eb:fd:99:56:d3:79:2c:a3:97:77:5b:99:6d:35: 03:db:15:da:1a:35:c5:9d:82:67:a0:49:fe:a3:1f: e6:db:51:28:8e:d8:3c:19:58:22:b2:43:91:12:d4: 62:34:68:37:5b:53:9a:c4:69:92:46:eb:ca:63:ed: a5:b7:79:4e:c6:79:7c:82:92:78:f3:53:82:95:eb: 21:44:48:26:4f:be:20:84:64:59:21:fc:58:9b:b5: cf:27:61:0a:0c:fa:d4:1f:8e:2e:4b:f7:14:54:2e: 1b:e3:e2:04:c9:34:bc:a6:9c:d3:83:77:4d:a9:20: ee:48:16:fa:a1:60:f4:b2:b0:e6:8d:25:0d:61:08: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:42:36:7D:CA:1C:95:D8:8B:30:17:DC:81:15:67:90:59:09:BD:1A X509v3 Authority Key Identifier: keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d2:e2:8b:f3:80:64:64:fd:0c:69:5f:07:75:5a:a7:ef:36: 4f:9f:9d:ea:0f:a7:e4:39:00:d1:f9:ff:90:1b:d6:d5:e3:35: b6:d2:08:c1:fd:c7:15:12:1b:ca:7e:a4:b9:a0:f8:03:a4:22: 6e:9b:b6:de:ca:12:ab:56:3d:8e:a1:86:38:c7:d4:06:d9:8e: af:3a:0b:ac:e5:50:96:66:15:e8:8c:33:90:12:d1:fd:6b:90: 43:11:ab:06:22:8f:62:57:dc:1c:b7:93:31:08:91:2f:b8:51: e8:fa:a2:af:db:d1:de:0c:26:d8:ff:46:39:88:e5:23:d7:08: f3:da:5e:e5:54:50:0f:a6:86:14:dd:68:c5:0f:0f:c9:ca:43: ca:81:f6:ee:89:3d:8a:f9:15:b3:0c:95:94:2c:9e:dd:1f:49: 40:b4:31:11:4f:43:0f:97:97:7e:de:1f:af:45:cd:d6:f3:3f: 6d:84:d5:1d:b5:74:40:d6:25:7f:99:c6:a3:26:5a:7a:16:6e: 62:93:42:0e:a3:fb:75:9d:cb:12:83:61:07:31:2b:b9:64:76: 41:27:9c:0b:ef:e9:21:14:4e:27:cc:ef:12:f4:2d:d5:98:61: 9b:d8:ca:24:89:ba:37:e8:e5:88:90:06:d8:76:df:96:69:67: d5:46:fa:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlvSWCw/u09cgOE/3wYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0 NDQ4ZGIwHhcNMjUxMjA2MTEwMDUyWhcNMjUxMjA3MTEwMDUyWjAzMTEwLwYDVQQD Eyg2NjQyMzY3ZGNhMWM5NWQ4OGIzMDE3ZGM4MTE1Njc5MDU5MDliZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAig8KKfDOG16rX34BIDst3hR8PS ONZElfLoEoX0qQ3bNPeONujgzji66CfDM6BcoyngsVi8LdwikXaWp+LMhjYM2OCh yfnHpzjNJ+T1yxroFhWazNHVcwsG9DWREh/t3ZAfWokiUyHJl5Y0VQGQtP9TK0UT uwtV6/2ZVtN5LKOXd1uZbTUD2xXaGjXFnYJnoEn+ox/m21Eojtg8GVgiskOREtRi NGg3W1OaxGmSRuvKY+2lt3lOxnl8gpJ481OCleshREgmT74ghGRZIfxYm7XPJ2EK DPrUH44uS/cUVC4b4+IEyTS8ppzTg3dNqSDuSBb6oWD0srDmjSUNYQhtawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZCNn3KHJXYizAX3IEVZ5BZCb0aMB8GA1UdIwQY MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNLii/OA ZGT9DGlfB3Vap+82T5+d6g+n5DkA0fn/kBvW1eM1ttIIwf3HFRIbyn6kuaD4A6Qi bpu23soSq1Y9jqGGOMfUBtmOrzoLrOVQlmYV6IwzkBLR/WuQQxGrBiKPYlfcHLeT MQiRL7hR6Pqir9vR3gwm2P9GOYjlI9cI89pe5VRQD6aGFN1oxQ8PycpDyoH27ok9 ivkVswyVlCye3R9JQLQxEU9DD5eXft4fr0XN1vM/bYTVHbV0QNYlf5nGoyZaehZu YpNCDqP7dZ3LEoNhBzEruWR2QSecC+/pIRROJ8zvEvQt1Zhhm9jKJIm6N+jliJAG 2Hbflmln1Ub6vA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:17 2025 by rpki-client