This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json) Hash identifier: XTogDYF5RVdjtHCnlQIBjFqkUNb5hDzHU+dbIsq+3aM= Subject key identifier: D6:BC:81:E5:B6:A5:1D:43:59:E8:E0:A5:D0:32:2B:85:7A:59:7C:31 Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f Certificate serial: 019AF19B5EE6AC61429ED64C67897740E583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft Manifest number: 07F6 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: +amOq5EBOJlMHQmw1E7qJxsdQ57ZmGtsvkuaqbiBhIg=) 2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5e:e6:ac:61:42:9e:d6:4c:67:89:77:40:e5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=d6bc81e5b6a51d4359e8e0a5d0322b857a597c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:10:8b:5e:b8:ea:ec:08:90:0e:be:3b:0d: c4:1c:6e:87:d7:87:aa:35:15:df:52:69:86:3f:a2: 47:4c:4c:eb:b2:2f:57:42:d4:14:42:6b:0c:85:29: c2:aa:4d:0d:01:50:ed:69:44:c1:15:53:a7:c7:d1: 97:ca:eb:a8:ce:78:d3:50:63:58:7a:e2:44:43:49: ff:a8:e7:78:01:e0:6f:a2:23:f8:bc:d8:f9:88:9a: c3:46:6d:08:f2:08:14:ad:2f:e9:7c:8f:66:12:76: de:7d:cd:8b:cd:da:60:58:de:de:af:47:4c:e5:17: 18:fe:4d:be:85:15:2f:6d:c7:72:de:c9:0b:a5:79: 99:3d:87:c2:43:2d:29:3d:14:39:9e:72:7e:5a:f5: 65:3d:56:89:7b:dd:e5:31:cc:c0:c0:5c:4d:12:7e: d2:57:f9:51:b8:ea:b9:ea:df:0d:ca:bb:41:46:4c: bb:11:60:df:62:ba:b7:4b:60:48:40:8b:3c:19:f9: 45:85:f0:d8:8e:c7:c4:35:a7:05:a3:3b:6c:9e:ca: b2:0c:4f:8c:ee:ef:e9:28:30:e1:b4:69:e9:a0:1c: 46:37:fa:a7:59:3e:c4:a3:26:4f:d6:58:0d:04:9e: 4c:b3:a6:5e:b1:ca:21:68:16:b2:73:7c:ab:08:cb: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:81:E5:B6:A5:1D:43:59:E8:E0:A5:D0:32:2B:85:7A:59:7C:31 X509v3 Authority Key Identifier: keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1c:5d:98:5e:0d:be:54:4d:ba:d7:13:2f:98:1d:46:c7:07: 8a:cb:65:91:8e:a6:8f:7d:d5:50:d1:29:1e:34:b7:3d:50:79: cc:12:d3:0c:8f:ea:d5:fe:50:4a:e3:ed:c9:5c:79:bf:45:d4: 58:a5:da:c4:ff:ad:b8:81:c0:b3:f7:59:6a:90:d1:b9:0e:b4: 56:da:0f:6a:71:b6:cd:3f:95:1c:05:6d:de:09:4a:22:f6:f6: b4:57:2f:ca:cb:64:bf:04:2b:8a:9b:fa:25:ae:64:7b:16:38: 51:e4:d0:06:5c:34:e9:cb:6c:5d:9a:ac:b4:6c:79:0b:0b:b6: 50:24:a3:65:d8:4b:b4:5a:04:f5:49:44:8d:f4:1a:ae:ac:53: 75:73:6c:a5:80:bb:d6:fe:fe:60:e9:7b:30:2c:ef:64:a9:56: e4:b8:43:2e:ed:da:eb:2d:ca:14:d5:48:78:a0:ed:12:ee:c4: d4:fd:21:44:b1:12:18:37:77:80:8f:c4:41:65:83:7b:29:05: 84:04:18:94:6a:80:6c:43:2f:78:51:80:40:16:1e:a2:03:66: e9:59:86:44:2a:ce:88:14:00:c3:ee:47:7f:e1:c6:62:7b:6b: d3:85:d5:6f:d1:25:37:ba:e8:f3:50:65:98:0f:64:92:69:4b: 8d:bb:e0:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm17mrGFCntZMZ4l3QOWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkM2QwNDRjMDkxZTg4YjgwYjRiMjY5ZWJiNzk2YjNmMjQ1 NDRiNWYwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhkNmJjODFlNWI2YTUxZDQzNTllOGUwYTVkMDMyMmI4NTdhNTk3YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eIQi1646uwIkA6+Ow3EHG6H14eq NRXfUmmGP6JHTEzrsi9XQtQUQmsMhSnCqk0NAVDtaUTBFVOnx9GXyuuoznjTUGNY euJEQ0n/qOd4AeBvoiP4vNj5iJrDRm0I8ggUrS/pfI9mEnbefc2LzdpgWN7er0dM 5RcY/k2+hRUvbcdy3skLpXmZPYfCQy0pPRQ5nnJ+WvVlPVaJe93lMczAwFxNEn7S V/lRuOq56t8NyrtBRky7EWDfYrq3S2BIQIs8GflFhfDYjsfENacFoztsnsqyDE+M 7u/pKDDhtGnpoBxGN/qnWT7EoyZP1lgNBJ5Ms6ZescohaBayc3yrCMsv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa8geW2pR1DWejgpdAyK4V6WXwxMB8GA1UdIwQY MBaAFB09BEwJHoi4C0smnrt5az8kVEtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYt YzQxNzQ0MmVmZjkzLzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYtYzQxNzQ0MmVmZjkz LzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhxdmF4N vlRNutcTL5gdRscHistlkY6mj33VUNEpHjS3PVB5zBLTDI/q1f5QSuPtyVx5v0XU WKXaxP+tuIHAs/dZapDRuQ60VtoPanG2zT+VHAVt3glKIvb2tFcvystkvwQripv6 Ja5kexY4UeTQBlw06ctsXZqstGx5Cwu2UCSjZdhLtFoE9UlEjfQarqxTdXNspYC7 1v7+YOl7MCzvZKlW5LhDLu3a6y3KFNVIeKDtEu7E1P0hRLESGDd3gI/EQWWDeykF hAQYlGqAbEMveFGAQBYeogNm6VmGRCrOiBQAw+5Hf+HGYntr04XVb9ElN7ro81Bl mA9kkmlLjbvgBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:18 2025 by rpki-client