This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json) Hash identifier: s32dZnR2+03KTIqqd94Y35YTG6OI9OxclMHNCc5zG3I= Subject key identifier: FE:72:B2:B2:28:2E:71:42:CB:A1:95:F3:D2:51:AB:45:07:02:A7:AF Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27 Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927 Certificate serial: 019AF276839F58B6F4D4B36E3DB234703EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=) 2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=) 3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: NaSZvSm6oDhO79JoW1Cilv4W79z8Dz1phghiO+o7k6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:83:9f:58:b6:f4:d4:b3:6e:3d:b2:34:70:3e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927 Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=fe72b2b2282e7142cba195f3d251ab450702a7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:e4:9e:a3:9b:69:f8:7f:85:b2:d7:b9:ec: 0a:e6:9d:77:24:36:c0:ed:1d:d6:b9:c9:5d:f0:6e: ff:77:ac:a2:5f:c4:b8:43:95:f4:99:60:0a:41:bb: bd:2e:1d:9a:5d:e6:cb:43:6a:34:9f:17:cb:ea:28: 36:e0:24:55:a9:89:6c:f9:48:bd:1c:9d:56:79:98: de:f5:c8:4c:6d:09:e6:b2:41:33:b0:42:fa:9b:26: a1:b5:b8:88:b5:79:fd:aa:7b:5f:42:2e:30:53:53: 48:29:83:ad:01:03:27:51:cf:32:bb:70:57:7b:2b: 2b:e4:d5:7b:16:5d:5d:94:c7:c6:e4:86:81:76:21: 16:50:0d:3c:29:ed:1b:40:9d:e9:82:7b:14:b4:07: 1b:e4:4a:64:b1:78:b3:c1:27:8f:6c:9b:e4:59:26: 19:f5:b6:19:aa:c9:39:8a:71:34:6b:72:0d:de:d6: 58:32:af:42:56:59:93:fa:bf:b4:e7:b3:5e:02:2d: 0b:09:b3:d5:b5:7a:22:b7:93:7b:08:13:85:69:eb: 7a:94:ee:94:c5:d3:da:d9:ae:72:1e:49:1c:f1:dc: ca:7d:05:6a:42:4a:a9:b2:14:a9:c4:fb:cb:ac:69: ec:3f:7d:15:83:f2:9b:d8:be:cb:7a:a1:4e:4b:05: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:72:B2:B2:28:2E:71:42:CB:A1:95:F3:D2:51:AB:45:07:02:A7:AF X509v3 Authority Key Identifier: keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:f9:ac:11:06:c1:4b:21:a4:dd:87:81:06:07:f8:b5:67: 5e:01:10:2c:21:f6:27:5e:2c:a4:d1:29:6e:54:23:e9:70:db: d5:e6:d6:eb:cb:b8:54:2c:88:72:35:d0:59:bf:db:18:5a:6f: 93:a1:65:f9:45:20:90:e4:40:f4:9d:7d:56:28:e1:e3:f3:47: 22:45:7c:76:59:dc:06:3f:12:a6:fb:91:9b:a2:67:7e:66:4e: 92:fa:68:26:5c:43:00:a6:d3:80:a8:04:0b:fb:8c:84:ba:ea: 9a:a9:c4:20:6e:d5:eb:5c:52:db:1f:53:40:b5:91:9b:80:a5: d3:f7:9c:8d:a3:50:88:8d:2b:bd:23:0c:e9:5d:cc:ef:ad:f2: dc:aa:a3:36:79:ed:97:a1:48:49:5c:ce:10:1b:f8:b4:f0:20: 45:86:3c:93:b3:c1:1f:0c:80:5b:73:de:44:da:c7:30:38:00: e4:76:71:d4:22:3d:ef:ed:0e:1e:35:27:6c:52:87:ee:2c:26: 2a:72:61:20:e0:92:fa:c4:e0:70:72:ef:09:61:5b:69:bf:7f: a5:09:d1:d7:ba:ce:f7:31:74:c6:9d:17:cb:d3:9f:b3:b2:52: 0d:55:54:36:b1:4f:19:53:aa:fe:01:56:07:24:36:38:7e:f5: de:7e:2b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoOfWLb01LNuPbI0cD7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNGMyNjI3M2RhMjgyMWZjZTI2MDc1YWEwYTZlMjMwMWVj ODQ5MjcwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhmZTcyYjJiMjI4MmU3MTQyY2JhMTk1ZjNkMjUxYWI0NTA3MDJhN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0rknqObafh/hbLXuewK5p13JDbA 7R3Wucld8G7/d6yiX8S4Q5X0mWAKQbu9Lh2aXebLQ2o0nxfL6ig24CRVqYls+Ui9 HJ1WeZje9chMbQnmskEzsEL6myahtbiItXn9qntfQi4wU1NIKYOtAQMnUc8yu3BX eysr5NV7Fl1dlMfG5IaBdiEWUA08Ke0bQJ3pgnsUtAcb5EpksXizwSePbJvkWSYZ 9bYZqsk5inE0a3IN3tZYMq9CVlmT+r+057NeAi0LCbPVtXoit5N7CBOFaet6lO6U xdPa2a5yHkkc8dzKfQVqQkqpshSpxPvLrGnsP30Vg/Kb2L7LeqFOSwUgNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5ysrIoLnFCy6GV89JRq0UHAqevMB8GA1UdIwQY MBaAFBxMJic9ooIfziYHWqCm4jAeyEknMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQt ZDM1YjQzMGFmMjZkLzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81NDVjY2UtYWYxMS00ZWY3LTlhNWQtZDM1YjQzMGFmMjZk LzEvSEV3bUp6MmlnaF9PSmdkYW9LYmlNQjdJU1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRr5rBEG wUshpN2HgQYH+LVnXgEQLCH2J14spNEpblQj6XDb1ebW68u4VCyIcjXQWb/bGFpv k6Fl+UUgkORA9J19Vijh4/NHIkV8dlncBj8SpvuRm6JnfmZOkvpoJlxDAKbTgKgE C/uMhLrqmqnEIG7V61xS2x9TQLWRm4Cl0/ecjaNQiI0rvSMM6V3M763y3KqjNnnt l6FISVzOEBv4tPAgRYY8k7PBHwyAW3PeRNrHMDgA5HZx1CI97+0OHjUnbFKH7iwm KnJhIOCS+sTgcHLvCWFbab9/pQnR17rO9zF0xp0Xy9Ofs7JSDVVUNrFPGVOq/gFW ByQ2OH713n4rTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:14 2025 by rpki-client