This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier: 3l2eo99UivHRKfBl7XN+9opqUd72u7XOkuKSKKG9jlg=
Subject key identifier: 83:AF:9E:D7:5F:26:2B:99:5B:BF:0C:4F:CB:AA:4D:EE:3F:71:B0:01
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019AF1D209397B48DFB1D5E30B2A1ABF965E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number: 0DB5
Signing time: Sat 06 Dec 2025 04:01:05 +0000
Manifest this update: Sat 06 Dec 2025 04:01:05 +0000
Manifest next update: Sun 07 Dec 2025 04:01:05 +0000
Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=)
2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=)
3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=)
4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=)
5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=)
6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: Dp2urM41V1hAkC1RfqtS4UlYyroShLdOLjg0FEWljxE=)
7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=)
8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=)
9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=)
10: LptFnQhd89NgUqkpLPTnBFknYAk.roa (hash: fqbnAAKHHgvyfy8CKEEzJ8XotikGsIfF53Y/L9F0Bc4=)
11: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=)
12: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=)
13: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=)
14: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=)
15: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=)
16: cHEcDX0McPp18OAbTp5Y95Csw7w.roa (hash: g/pWKJS7on51I83qoD+dJERwm0yZFbDiNUAwdftfVMQ=)
17: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=)
18: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=)
19: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=)
20: i-TboqvR4QwoJ4ln5MB6Q0lRrLg.roa (hash: t8GdeR+oskUDLv8QTLlQVLSxK4jgz1+No6165ZL4RhM=)
21: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=)
22: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=)
23: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=)
24: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=)
25: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=)
26: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:09:39:7b:48:df:b1:d5:e3:0b:2a:1a:bf:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Dec 6 04:01:05 2025 GMT
Not After : Dec 7 04:01:05 2025 GMT
Subject: CN=83af9ed75f262b995bbf0c4fcbaa4dee3f71b001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:99:e0:52:ad:92:aa:5c:d7:d0:e4:0f:71:
7c:3b:08:d2:d6:44:ce:94:15:0f:f1:20:1a:f6:7a:
b1:df:4c:74:85:d3:7a:40:5d:21:be:ba:a5:d9:e0:
0d:8f:9c:65:12:52:81:73:27:a1:01:53:6f:57:f4:
b5:83:67:19:68:8b:a6:0b:6d:f7:3b:5f:8c:da:c2:
2e:d4:4b:cb:58:af:d0:d7:17:ec:95:4a:e3:33:0f:
b8:f0:11:18:4c:95:9c:fd:8c:20:49:44:89:b0:4c:
6c:30:f0:cc:69:98:52:6b:39:76:22:d1:49:5a:b6:
7b:0b:48:ef:f9:f0:c5:0d:f6:3c:2e:3b:0e:e5:1a:
d0:80:d3:a7:00:35:05:f5:6f:80:61:43:2b:ed:8b:
cc:7d:03:35:06:12:17:75:07:b4:c5:02:9d:9c:7f:
9e:18:35:68:22:bb:13:b6:5f:bf:4b:ee:c7:e5:94:
fe:a6:45:29:88:bd:94:98:c3:68:40:05:a3:d2:74:
31:f1:94:44:8a:ad:27:97:e0:85:1b:5a:7a:1c:ca:
00:78:cd:38:42:5e:8b:48:9c:1a:4d:61:0a:17:fa:
db:3d:c4:72:3c:00:d9:f2:e4:ee:82:ca:7f:a3:2e:
ce:22:86:1e:72:d4:b9:42:a6:2e:67:04:73:f4:d5:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:9E:D7:5F:26:2B:99:5B:BF:0C:4F:CB:AA:4D:EE:3F:71:B0:01
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3b:00:18:4c:72:d8:18:da:f7:40:23:98:ba:5e:d4:07:b1:
f4:d1:78:8d:a6:af:b5:9a:27:a0:08:36:bf:af:9c:0b:9e:6b:
56:bd:10:96:f1:8d:37:54:b0:f7:37:82:0b:03:91:1a:33:fd:
65:5e:3a:e0:33:25:bb:6a:3a:15:c7:8f:bc:39:03:31:37:1e:
d8:88:e7:9a:70:a6:b5:ce:84:81:7f:e6:f5:ea:e3:df:b3:5e:
67:c9:39:2f:4c:8c:bf:34:f8:89:3b:dc:f7:02:14:1d:2d:e0:
ce:7c:4b:d4:92:a5:43:9f:bb:05:72:dc:af:5d:34:86:25:64:
f1:97:20:e1:cc:e5:6e:6c:23:a5:b9:41:26:cf:bf:e5:a0:20:
dd:24:60:df:58:c9:88:a4:3a:a3:28:33:17:d4:36:0d:d1:41:
8a:94:03:c1:db:16:3d:5c:d4:87:52:30:6d:fb:4e:1f:20:4c:
3c:68:01:f0:19:e5:79:ee:b6:0d:e1:b2:81:ae:c2:cb:c6:72:
61:31:ae:63:6f:c6:6b:34:0b:90:b1:ee:e3:c8:c7:e7:bd:d1:
04:be:67:9c:c0:32:62:2b:e7:f2:66:e9:80:c3:f3:25:72:e8:
ed:99:66:fc:7b:9a:17:28:c7:5e:02:45:d6:cf:69:e8:72:ec:
d1:c8:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:03 2025 by rpki-client