This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json) Hash identifier: vpf/9uPpvEIGA7FP9WKsSuNw20vTd4cZaOtUQj0v0Ho= Subject key identifier: 10:B9:92:79:23:91:E6:FE:21:A1:3F:C4:31:68:8B:E4:FB:13:00:26 Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91 Certificate serial: 019AF3522947FC429FCF825373F35FE484A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 11:00:39 +0000 Manifest this update: Sat 06 Dec 2025 11:00:39 +0000 Manifest next update: Sun 07 Dec 2025 11:00:39 +0000 Files and hashes: 1: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: kp4uBVi+iM1QGkYxBYgRoOTxeZHqIZ1SMpe3K6WTUjw=) 2: ZQ6sjy8La_IDIFosGkys-gjAGew.roa (hash: C7JF+gmCs+f4XDJ3+8WA8I9Otmb9ceFXsb6Dqw3hOq8=) 3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=) 4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:29:47:fc:42:9f:cf:82:53:73:f3:5f:e4:84:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91 Validity Not Before: Dec 6 11:00:39 2025 GMT Not After : Dec 7 11:00:39 2025 GMT Subject: CN=10b992792391e6fe21a13fc431688be4fb130026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:b2:68:39:4e:ef:ad:0d:3b:8b:d1:62:89: 9f:38:23:14:19:46:2a:17:be:79:d4:34:a6:fe:fc: 89:62:e1:12:d0:2e:78:7c:af:e1:64:33:31:cc:f9: 64:d8:e1:5b:b9:e1:0b:3f:68:5e:42:2d:4c:86:09: 96:99:23:a1:c2:4d:37:d2:3f:82:53:d9:d9:e8:d2: 4b:6c:5e:ed:91:8d:9c:79:7b:67:be:51:77:40:29: 20:58:c1:4f:59:ca:24:8b:d0:70:fd:c4:01:42:49: 86:83:2b:7b:af:c0:fa:91:3b:60:4f:22:53:75:d6: b5:77:b2:46:90:fe:0d:b4:85:0b:f2:29:52:30:7e: 7a:e5:07:61:e7:c4:86:53:55:b1:10:9c:80:72:d0: 73:3b:1f:a2:28:a5:97:fc:9a:98:4c:8f:b8:ab:88: b8:06:00:69:74:59:3e:8b:2d:c3:ac:95:92:f1:cb: fe:83:eb:c2:c8:75:a7:6f:dc:45:ca:d2:66:ad:33: 42:08:7e:8d:e5:66:49:ad:61:a9:f0:c2:b7:b7:f3: 5c:0b:94:22:8c:5a:a9:c9:d0:f9:82:4b:5e:57:1a: 47:86:23:a8:6d:6d:00:81:71:2c:f3:93:b9:11:b1: a7:f1:96:1d:28:0a:ce:3b:e8:f8:d9:85:54:9e:b4: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B9:92:79:23:91:E6:FE:21:A1:3F:C4:31:68:8B:E4:FB:13:00:26 X509v3 Authority Key Identifier: keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c0:9f:6b:28:e4:d8:ad:db:cd:a5:c3:93:06:9c:88:bd:db: 64:22:e6:bb:82:f6:14:cb:c5:7d:05:89:10:74:8c:79:26:8a: 53:6e:c5:db:cc:4e:d2:fa:d8:23:aa:c5:6d:fb:a8:c8:16:8b: b4:13:e5:3b:76:9f:06:f6:c8:f9:14:04:99:db:a1:f7:79:e1: a3:77:2d:8b:c8:b0:cd:9c:c9:7c:a9:70:57:11:3c:ea:e9:64: bc:d6:8f:52:19:d1:b5:73:cb:1f:0f:00:b2:ba:23:f7:1e:47: 18:65:7f:19:39:f8:30:2f:30:78:5c:cd:99:52:a2:1d:56:74: 28:f8:27:fa:65:91:50:ad:87:1a:d2:f7:5b:88:e3:d9:32:57: fa:ef:45:9e:4b:c9:3d:ba:03:9c:95:4c:78:e6:74:c7:2b:74: 78:28:14:23:90:4d:b6:c5:30:36:db:fc:ff:a6:18:cd:a8:63: 2e:00:46:46:77:b5:45:6f:03:12:29:37:8c:0d:95:33:8d:39: 61:87:da:5c:8b:fb:4b:c3:ac:02:cd:1e:8b:0a:36:b4:71:2a: 19:01:76:a4:b3:30:a1:87:2c:6c:1b:b6:5a:b2:66:e5:a5:5a: f9:a5:88:d9:e7:ad:3c:11:d8:4e:3d:e3:27:31:47:e0:57:7e: 92:01:90:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUilH/EKfz4JTc/Nf5ISlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNTE0MDk4YTVhOTczNmNkYTQzMDNlMDQ5NWU5NDY1MjM5 MGFhOTEwHhcNMjUxMjA2MTEwMDM5WhcNMjUxMjA3MTEwMDM5WjAzMTEwLwYDVQQD EygxMGI5OTI3OTIzOTFlNmZlMjFhMTNmYzQzMTY4OGJlNGZiMTMwMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbiyaDlO760NO4vRYomfOCMUGUYq F7551DSm/vyJYuES0C54fK/hZDMxzPlk2OFbueELP2heQi1MhgmWmSOhwk030j+C U9nZ6NJLbF7tkY2ceXtnvlF3QCkgWMFPWcoki9Bw/cQBQkmGgyt7r8D6kTtgTyJT dda1d7JGkP4NtIUL8ilSMH565Qdh58SGU1WxEJyActBzOx+iKKWX/JqYTI+4q4i4 BgBpdFk+iy3DrJWS8cv+g+vCyHWnb9xFytJmrTNCCH6N5WZJrWGp8MK3t/NcC5Qi jFqpydD5gkteVxpHhiOobW0AgXEs85O5EbGn8ZYdKArOO+j42YVUnrRDDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC5knkjkeb+IaE/xDFoi+T7EwAmMB8GA1UdIwQY MBaAFB5RQJilqXNs2kMD4ElelGUjkKqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQt ODU0MzgxNjg2YzdiLzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNWRmY2ItZDkyZC00OGZlLTlkYWQtODU0MzgxNjg2Yzdi LzEvSGxGQW1LV3BjMnphUXdQZ1NWNlVaU09RcXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcCfayjk 2K3bzaXDkwaciL3bZCLmu4L2FMvFfQWJEHSMeSaKU27F28xO0vrYI6rFbfuoyBaL tBPlO3afBvbI+RQEmduh93nho3cti8iwzZzJfKlwVxE86ulkvNaPUhnRtXPLHw8A sroj9x5HGGV/GTn4MC8weFzNmVKiHVZ0KPgn+mWRUK2HGtL3W4jj2TJX+u9FnkvJ PboDnJVMeOZ0xyt0eCgUI5BNtsUwNtv8/6YYzahjLgBGRne1RW8DEik3jA2VM405 YYfaXIv7S8OsAs0eiwo2tHEqGQF2pLMwoYcsbBu2WrJm5aVa+aWI2eetPBHYTj3j JzFH4Fd+kgGQuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:56 2025 by rpki-client