This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json) Hash identifier: VzaoaI0UuAPHstviO+IesXhHBUtkL56o0POt+BeFgD0= Subject key identifier: 2F:D4:E9:3D:72:6B:00:4C:0D:54:BB:21:EF:9F:2E:7A:C8:7D:3B:1B Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Certificate serial: 019AF2769FADA5A1FA98F859BD87C9DB677D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft Manifest number: 0FAB Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=) 2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: 9mrEOIu/LnIe3uof8iFDg8p1wnla8kAY9QqPsr88wG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9f:ad:a5:a1:fa:98:f8:59:bd:87:c9:db:67:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=2fd4e93d726b004c0d54bb21ef9f2e7ac87d3b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:46:41:de:c7:d8:86:b5:c4:4b:9d:b4:3a: 23:a8:10:14:c7:47:7a:79:41:66:11:a6:7f:c9:ad: 6e:2b:c0:df:f7:d5:10:55:4e:d0:94:38:39:7e:6a: 25:64:2e:33:a5:23:d8:2e:93:1d:fe:75:f2:2f:fa: 0e:ea:4e:e3:0a:16:2b:18:a1:8a:d6:dc:af:21:cf: 69:1c:3f:b7:b6:b0:46:0b:41:84:c8:3b:1c:29:da: 1b:e7:bc:45:dd:cd:03:17:93:41:38:1c:8b:b7:34: 0b:36:94:f8:75:db:6f:20:67:e7:7a:3e:2c:9c:c1: cb:dc:9d:26:bc:41:9d:f1:52:c0:c9:f8:82:92:df: e5:3f:0e:58:83:70:51:71:04:76:e8:58:ba:b0:3a: a2:04:a3:80:38:79:e9:0b:2a:cf:f8:93:27:24:05: b9:85:6a:ba:1b:6d:09:ee:51:d6:91:56:c4:98:a0: c6:86:03:62:27:00:a3:2e:f3:a4:c0:cb:0d:fe:6c: ce:42:74:8b:f2:77:f8:78:ca:7a:63:f8:fa:a8:fb: 91:02:fb:36:7e:de:fa:d8:83:23:4d:84:ef:ca:40: 99:c5:a1:95:6a:98:00:b8:2f:34:a2:01:12:47:d0: a9:22:02:c3:1c:bc:0d:76:5d:13:e7:43:bf:17:fb: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D4:E9:3D:72:6B:00:4C:0D:54:BB:21:EF:9F:2E:7A:C8:7D:3B:1B X509v3 Authority Key Identifier: keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:26:5d:2d:7e:2b:09:c1:a6:98:86:32:49:c3:6f:88:8e:75: a1:91:04:9e:6d:88:74:5f:75:18:51:17:54:b9:62:92:ba:2f: a8:d5:04:ed:40:dc:dc:d1:1e:65:62:43:5a:08:9b:44:36:88: 1a:7e:d0:8e:2b:8d:76:74:b4:e5:bf:fa:c1:f9:c1:d1:74:3e: 3a:f2:08:1d:69:12:d0:32:ca:dd:c3:de:ff:fb:68:fe:f3:3f: cb:26:4f:4b:2a:93:39:c0:0d:98:82:db:0c:19:03:d3:1f:98: 76:65:d1:b7:64:61:17:30:46:46:8f:fa:2a:71:fa:7d:3b:a9: 17:dc:b5:dd:ca:57:b9:53:79:a9:9c:8d:6f:93:11:d7:83:e3: f5:e6:bf:19:e5:14:59:bb:91:82:be:13:a1:4d:fd:4f:c7:89: 75:12:42:5a:5f:a7:57:7a:28:73:70:36:9d:3d:c6:40:5f:ce: 62:ca:87:40:06:90:f7:da:fd:3d:36:a9:6a:40:82:8b:a6:f1: 93:cd:76:36:7b:10:4d:af:50:4b:86:75:c4:b5:a6:2c:2b:12: ed:95:74:54:08:e2:3d:ae:c6:25:01:2c:e4:e7:f6:54:15:eb: db:cd:e5:f2:a3:a5:11:f1:fa:95:bb:e2:a9:fb:a0:08:a4:c5: 68:57:f4:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp+tpaH6mPhZvYfJ22d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWRlOTM2ZmYxNzg0Yjc4Mjk2YjhiYzRiNGIwMzgxYjI5 M2VkMTAwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygyZmQ0ZTkzZDcyNmIwMDRjMGQ1NGJiMjFlZjlmMmU3YWM4N2QzYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/hGQd7H2Ia1xEudtDojqBAUx0d6 eUFmEaZ/ya1uK8Df99UQVU7QlDg5fmolZC4zpSPYLpMd/nXyL/oO6k7jChYrGKGK 1tyvIc9pHD+3trBGC0GEyDscKdob57xF3c0DF5NBOByLtzQLNpT4ddtvIGfnej4s nMHL3J0mvEGd8VLAyfiCkt/lPw5Yg3BRcQR26Fi6sDqiBKOAOHnpCyrP+JMnJAW5 hWq6G20J7lHWkVbEmKDGhgNiJwCjLvOkwMsN/mzOQnSL8nf4eMp6Y/j6qPuRAvs2 ft762IMjTYTvykCZxaGVapgAuC80ogESR9CpIgLDHLwNdl0T50O/F/tADQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/U6T1yawBMDVS7Ie+fLnrIfTsbMB8GA1UdIwQY MBaAFB8d6Tb/F4S3gpa4vEtLA4Gyk+0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMt OTI3Yjg2MzU2ZmE3LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80NDlhZTYtNTk0My00NmQwLWIwMGMtOTI3Yjg2MzU2ZmE3 LzEvSHgzcE52OFhoTGVDbHJpOFMwc0RnYktUN1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSZdLX4r CcGmmIYyScNviI51oZEEnm2IdF91GFEXVLlikrovqNUE7UDc3NEeZWJDWgibRDaI Gn7QjiuNdnS05b/6wfnB0XQ+OvIIHWkS0DLK3cPe//to/vM/yyZPSyqTOcANmILb DBkD0x+YdmXRt2RhFzBGRo/6KnH6fTupF9y13cpXuVN5qZyNb5MR14Pj9ea/GeUU WbuRgr4ToU39T8eJdRJCWl+nV3ooc3A2nT3GQF/OYsqHQAaQ99r9PTapakCCi6bx k812NnsQTa9QS4Z1xLWmLCsS7ZV0VAjiPa7GJQEs5Of2VBXr283l8qOlEfH6lbvi qfugCKTFaFf0CA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:17 2025 by rpki-client