This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json) Hash identifier: cFJ06ptY+uggCPk4vdkosI4d1ATACVvGscNXo5kw3cQ= Subject key identifier: 6F:7A:5F:71:8D:EC:63:E5:19:39:9A:87:20:5D:E1:99:11:AB:5E:31 Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f Certificate serial: 019B27ADEE0CEBFE0C991A86556AF1E13F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft Manifest number: 0812 Signing time: Tue 16 Dec 2025 15:01:08 +0000 Manifest this update: Tue 16 Dec 2025 15:01:08 +0000 Manifest next update: Wed 17 Dec 2025 15:01:08 +0000 Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: KkztV0fAN5HSKXEbZdHpGfqUkuPoupEc6ghvCHuWWKM=) 2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:ee:0c:eb:fe:0c:99:1a:86:55:6a:f1:e1:3f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f Validity Not Before: Dec 16 15:01:08 2025 GMT Not After : Dec 17 15:01:08 2025 GMT Subject: CN=6f7a5f718dec63e519399a87205de19911ab5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:eb:15:b6:4f:d6:4e:47:1e:47:12:57:fc: 8f:19:da:dd:ee:b7:39:ef:5a:93:92:b7:91:f2:69: 28:0d:78:07:a7:b2:a1:a7:56:8a:c6:37:f2:9d:d2: eb:58:62:5c:08:d9:8d:29:69:76:7f:54:5f:ea:3e: df:4c:b9:2f:cd:25:cb:88:6f:e6:ed:14:93:0e:be: c4:11:b9:89:6d:f9:03:3d:05:b2:98:6e:1c:44:70: 4d:c3:c5:94:01:db:4e:3f:51:27:3a:9a:91:76:a1: 89:4c:39:1c:37:46:0f:28:73:85:dd:4c:13:ef:7c: 86:8e:c1:f1:eb:88:77:c9:fc:97:a9:78:bf:57:bc: 34:59:f6:41:c4:14:d9:81:4f:4d:19:52:f1:27:bf: b5:8e:e0:74:85:70:16:03:44:56:3f:c9:4a:2e:12: a2:07:06:72:29:7b:2d:53:3f:d9:9a:04:63:ce:71: 24:b7:6f:89:57:80:72:55:ff:9a:8b:d0:5e:d7:9b: d8:d7:fa:20:cb:c7:0b:23:33:2f:8b:b2:fd:55:f8: 92:98:3e:a7:93:85:41:da:2d:92:89:ae:5a:a2:b0: 1b:fd:6a:31:47:8b:5b:8d:db:1a:c7:2a:70:c7:0f: 93:7a:95:5e:86:44:63:5d:7e:be:ff:6b:59:bf:96: 8f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7A:5F:71:8D:EC:63:E5:19:39:9A:87:20:5D:E1:99:11:AB:5E:31 X509v3 Authority Key Identifier: keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:00:b2:4b:6d:d4:22:2a:8f:1e:f0:08:22:f6:fc:79:a4:d7: c5:84:71:f7:b5:b5:d1:d4:ee:35:ea:47:10:28:b0:89:a7:23: 1d:1d:26:31:67:37:62:a4:74:0a:b3:a4:26:2d:56:f4:c6:62: c8:59:80:11:3c:01:e5:61:8a:4e:29:48:44:b1:02:82:bd:8b: 43:52:d0:17:82:a5:a6:10:d6:55:d7:34:f1:3d:52:32:6d:95: 37:b9:5e:05:bd:9f:5a:ac:6c:0e:30:17:28:ee:00:36:01:c2: b8:83:93:c8:88:e1:0c:16:dd:0f:e5:0b:bf:d7:38:74:9c:54: 2b:74:a9:95:46:51:1f:8e:05:4d:cc:d4:77:68:3a:6d:df:e6: f9:4d:4a:83:b7:59:7d:0f:2a:90:ca:b6:b9:65:63:26:a2:b0: 27:fb:20:18:cb:c8:39:ff:ba:29:66:34:d4:cc:e8:f4:7c:1d: 80:2f:cb:eb:9f:09:db:14:a0:e5:79:85:7c:e0:ac:5e:dc:2f: e1:25:a0:89:96:ca:99:85:88:be:f7:28:55:02:0c:35:ab:31: b4:7f:34:a4:fe:93:a6:73:9d:99:87:69:df:b4:f9:ce:f6:c4: fe:f4:c8:0b:e6:cc:53:b0:ca:9b:45:10:96:0f:19:7c:a6:d4: de:84:c2:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnre4M6/4MmRqGVWrx4T8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkM2QwNDRjMDkxZTg4YjgwYjRiMjY5ZWJiNzk2YjNmMjQ1 NDRiNWYwHhcNMjUxMjE2MTUwMTA4WhcNMjUxMjE3MTUwMTA4WjAzMTEwLwYDVQQD Eyg2ZjdhNWY3MThkZWM2M2U1MTkzOTlhODcyMDVkZTE5OTExYWI1ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ObrFbZP1k5HHkcSV/yPGdrd7rc5 71qTkreR8mkoDXgHp7Khp1aKxjfyndLrWGJcCNmNKWl2f1Rf6j7fTLkvzSXLiG/m 7RSTDr7EEbmJbfkDPQWymG4cRHBNw8WUAdtOP1EnOpqRdqGJTDkcN0YPKHOF3UwT 73yGjsHx64h3yfyXqXi/V7w0WfZBxBTZgU9NGVLxJ7+1juB0hXAWA0RWP8lKLhKi BwZyKXstUz/ZmgRjznEkt2+JV4ByVf+ai9Be15vY1/ogy8cLIzMvi7L9VfiSmD6n k4VB2i2Sia5aorAb/WoxR4tbjdsaxypwxw+TepVehkRjXX6+/2tZv5aPhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG96X3GN7GPlGTmahyBd4ZkRq14xMB8GA1UdIwQY MBaAFB09BEwJHoi4C0smnrt5az8kVEtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYt YzQxNzQ0MmVmZjkzLzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNDY0NjYtNjA3YS00NGRhLTljYmYtYzQxNzQ0MmVmZjkz LzEvSFQwRVRBa2VpTGdMU3lhZXUzbHJQeVJVUzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgCyS23U IiqPHvAIIvb8eaTXxYRx97W10dTuNepHECiwiacjHR0mMWc3YqR0CrOkJi1W9MZi yFmAETwB5WGKTilIRLECgr2LQ1LQF4KlphDWVdc08T1SMm2VN7leBb2fWqxsDjAX KO4ANgHCuIOTyIjhDBbdD+ULv9c4dJxUK3SplUZRH44FTczUd2g6bd/m+U1Kg7dZ fQ8qkMq2uWVjJqKwJ/sgGMvIOf+6KWY01Mzo9HwdgC/L658J2xSg5XmFfOCsXtwv 4SWgiZbKmYWIvvcoVQIMNasxtH80pP6TpnOdmYdp37T5zvbE/vTIC+bMU7DKm0UQ lg8ZfKbU3oTCNw== -----END CERTIFICATE-----Generated at Tue Dec 16 20:41:57 2025 by rpki-client