This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json) Hash identifier: HV49wAnjEfcBuNz1Ycum259mtDyz/+Zmiz7HKI71BdU= Subject key identifier: 67:1B:3C:71:74:7A:5C:F6:70:06:EA:F7:94:58:A6:55:F3:3C:BB:B3 Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Certificate serial: 019AF12D3B79CCA582E76C04B1AA0F6926C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=) 2: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: JVNfhfjxJQ0OZ1tkVe6HgG34tl/aQqvEO/jM8/kO94U=) 3: rgiByjqFfwFN6OSc0cOgOEZW5sw.roa (hash: t5OL+2otELmhnTASFUwNxb+1yFe65JzVGd7hwNx0lx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3b:79:cc:a5:82:e7:6c:04:b1:aa:0f:69:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=671b3c71747a5cf67006eaf79458a655f33cbbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:f6:8f:a8:72:a8:8f:0c:2c:fa:a9:97:c7: 0e:5c:f5:98:b6:73:77:0c:ec:0b:25:b9:4d:d9:d1: 83:86:07:ad:69:0a:fc:fe:9b:1b:2b:4d:72:b9:fb: 1d:a9:19:c8:3a:15:ec:78:95:05:76:03:12:08:10: 80:88:91:2f:fc:b0:8d:93:83:3b:08:01:37:46:85: 73:dd:65:9f:3e:82:84:93:69:a1:7b:61:d4:66:af: 81:4a:df:a5:62:c9:b3:19:09:5f:db:e4:22:3d:2c: dc:a0:da:43:3e:1f:10:d5:94:d7:aa:df:f8:7f:0c: 05:54:31:25:04:85:aa:90:b8:23:84:5a:57:53:c3: 56:7d:fe:cf:1d:98:c6:bb:86:42:fc:6b:38:51:32: 67:fe:71:ed:2c:04:0f:74:7c:17:a0:3e:ab:24:b3: bc:5a:41:19:2a:7e:e1:d8:ba:45:db:ee:7c:44:75: f2:32:f9:95:b0:b7:fa:98:eb:a1:79:95:9c:3e:5e: 44:ac:9c:46:41:cc:de:c5:68:0f:3a:17:07:44:d7: 8f:e0:73:ab:35:4c:57:a0:a5:af:1b:39:2b:ef:c7: 4d:77:29:64:6b:6d:c2:38:b3:44:6e:7f:85:09:1e: 8c:27:f9:fa:96:5a:18:d8:8b:d8:65:59:61:76:ca: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1B:3C:71:74:7A:5C:F6:70:06:EA:F7:94:58:A6:55:F3:3C:BB:B3 X509v3 Authority Key Identifier: keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6b:b8:99:c3:d7:0d:e7:38:6a:41:e4:72:0c:2c:1b:93:e4: 82:4a:f9:13:2c:7b:14:e3:9a:5b:ec:51:6a:66:66:b5:24:9a: 55:3b:22:83:4a:ae:4d:9d:cc:b8:f9:0f:6d:64:84:b5:f2:37: 6d:aa:07:1f:7e:3b:3b:20:69:0e:a1:4b:1c:c2:c0:95:9b:aa: 35:df:47:98:ed:93:bd:f2:a9:71:94:79:55:96:1e:d1:a7:d1: 1c:b4:05:a3:0c:65:9c:f3:e8:1b:7a:1d:1b:67:66:3d:a5:00: 69:f9:0d:fe:d2:62:60:f8:1f:28:62:76:b7:56:21:ff:1a:c0: 96:1e:fd:fe:66:0e:ca:82:78:ad:f6:21:fc:76:5d:4f:35:21: eb:a9:46:98:15:78:7f:b2:a4:36:b5:c7:18:04:89:f3:00:ee: 98:6a:45:5f:5c:9f:0e:d4:5d:6b:e5:39:cc:1d:af:0c:65:2c: 44:0d:8e:6f:91:11:2e:37:e9:36:c0:b3:6b:69:67:fa:b2:f8: 2c:91:42:d9:18:d0:34:fd:4c:86:52:0b:27:74:04:10:48:ed: a7:e3:be:08:75:94:e7:f3:87:0a:b2:d3:92:47:90:01:e3:af: 1b:94:e8:70:8f:bf:71:32:44:14:94:e1:70:c5:a3:04:6c:f9: 2b:2f:75:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTt5zKWC52wEsaoPaSbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDU0MjMyM2MwZTMwNTFjOWM3YmI4ZWQxZDFlOGFjZmQz ZGI4MzQwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD Eyg2NzFiM2M3MTc0N2E1Y2Y2NzAwNmVhZjc5NDU4YTY1NWYzM2NiYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaH2j6hyqI8MLPqpl8cOXPWYtnN3 DOwLJblN2dGDhgetaQr8/psbK01yufsdqRnIOhXseJUFdgMSCBCAiJEv/LCNk4M7 CAE3RoVz3WWfPoKEk2mhe2HUZq+BSt+lYsmzGQlf2+QiPSzcoNpDPh8Q1ZTXqt/4 fwwFVDElBIWqkLgjhFpXU8NWff7PHZjGu4ZC/Gs4UTJn/nHtLAQPdHwXoD6rJLO8 WkEZKn7h2LpF2+58RHXyMvmVsLf6mOuheZWcPl5ErJxGQczexWgPOhcHRNeP4HOr NUxXoKWvGzkr78dNdylka23COLNEbn+FCR6MJ/n6lloY2IvYZVlhdsp9EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcbPHF0elz2cAbq95RYplXzPLuzMB8GA1UdIwQY MBaAFIbVQjI8DjBRyce7jtHR6Kz9Pbg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgt NzBkYWQ1MWU3M2ZiLzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hN2M3YzEtZmM0Mi00M2EzLTlhZDgtNzBkYWQ1MWU3M2Zi LzEvaHRWQ01qd09NRkhKeDd1TzBkSG9yUDA5dURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGu4mcPX Dec4akHkcgwsG5Pkgkr5Eyx7FOOaW+xRamZmtSSaVTsig0quTZ3MuPkPbWSEtfI3 baoHH347OyBpDqFLHMLAlZuqNd9HmO2TvfKpcZR5VZYe0afRHLQFowxlnPPoG3od G2dmPaUAafkN/tJiYPgfKGJ2t1Yh/xrAlh79/mYOyoJ4rfYh/HZdTzUh66lGmBV4 f7KkNrXHGASJ8wDumGpFX1yfDtRda+U5zB2vDGUsRA2Ob5ERLjfpNsCza2ln+rL4 LJFC2RjQNP1MhlILJ3QEEEjtp+O+CHWU5/OHCrLTkkeQAeOvG5TocI+/cTJEFJTh cMWjBGz5Ky91fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:31 2025 by rpki-client