This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json) Hash identifier: Mazigu6+xXpQa6NDpfCsLotj7t0zMk1IBMj/1bGEors= Subject key identifier: 39:F8:CC:3D:F6:52:D1:0F:F3:71:D2:C8:8D:74:7C:F3:47:EA:A8:3A Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Certificate serial: 019AF23FC7F5ED60CAE68CBDA4BD5DC34BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft Manifest number: 035D Signing time: Sat 06 Dec 2025 06:00:57 +0000 Manifest this update: Sat 06 Dec 2025 06:00:57 +0000 Manifest next update: Sun 07 Dec 2025 06:00:57 +0000 Files and hashes: 1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=) 2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: 69k3rHbPwxEqDPT43pxg0Jm8YFkSM6O1y1rh42t+H+M=) 3: kh3br9io16kmw-7oicNKEQZ-s1U.roa (hash: KMo3OoyX+kQWR2ToLgUVj9Uww/2q4pq0J+EYnmu4w/I=) 4: vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa (hash: EZ8noFz8pUG/Mp84LZG9CdH2CpZHNivjG9K+XxXNqrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c7:f5:ed:60:ca:e6:8c:bd:a4:bd:5d:c3:4b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Validity Not Before: Dec 6 06:00:57 2025 GMT Not After : Dec 7 06:00:57 2025 GMT Subject: CN=39f8cc3df652d10ff371d2c88d747cf347eaa83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:a8:7d:c0:b8:0f:b1:fd:45:be:76:ff:5e: 3e:fb:01:26:23:d3:35:fc:97:a5:87:50:ce:cf:55: 66:9f:db:08:fa:d3:0a:1d:4c:db:24:5e:74:cc:51: 65:44:4f:40:f3:ff:2c:88:a6:68:b1:cf:10:e7:46: 1b:c6:ec:23:10:62:14:43:2a:b3:33:98:5b:e6:5c: 06:0f:3f:bf:75:08:c1:9d:9b:3a:62:f0:16:b0:18: 7b:b7:1b:3f:c1:97:e7:d5:62:29:e5:51:04:01:f7: 40:11:4f:63:65:df:16:19:98:92:18:a4:b9:e7:ab: a4:90:a2:3d:6f:92:a4:74:29:b8:38:36:e7:79:7e: 54:a3:b4:b8:e2:73:26:af:78:c2:7a:17:6f:dd:05: 30:1c:78:9c:05:b0:90:02:30:e8:8c:f7:b3:cc:4d: 74:6f:f2:5a:94:16:1e:56:51:28:0f:8f:a2:4f:d3: ed:67:ef:4c:b8:53:a2:bc:f8:74:e0:7a:b6:09:52: 18:20:37:2c:0a:87:63:7e:c1:4c:88:26:7d:66:33: cc:13:17:b8:ef:88:51:90:aa:62:86:85:e6:a8:cb: 84:56:3a:2c:7a:fc:1b:f2:4b:82:67:97:dd:a7:24: 8d:f8:18:fb:fa:b3:5b:39:72:a0:02:e1:67:e4:95: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F8:CC:3D:F6:52:D1:0F:F3:71:D2:C8:8D:74:7C:F3:47:EA:A8:3A X509v3 Authority Key Identifier: keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:fc:22:e3:67:4e:17:2d:d0:a2:e6:79:da:64:b0:d1:f5: 1e:ed:7b:80:be:1b:5b:73:a1:49:c2:e7:1b:33:53:e4:25:3f: c9:1c:84:58:90:58:db:22:0a:50:02:f9:ee:76:36:72:5d:b9: 7c:64:9f:9b:91:2c:c1:91:a2:d5:74:ca:a8:0a:89:a0:ec:7d: f6:d5:ef:f1:b6:fc:a1:28:a3:56:c5:80:44:5c:cb:bd:76:2f: 04:82:32:11:48:26:f4:92:b0:62:70:9b:2c:89:8b:8b:0a:09: 76:af:66:09:13:f4:65:b3:5d:48:74:26:16:e8:d5:cb:96:19: e6:5b:67:7f:bf:f0:be:ec:c2:8f:73:cb:46:0b:bb:d9:6b:59: 9c:aa:50:79:f6:c4:47:63:87:32:a5:e8:ed:89:95:58:f7:7d: a7:58:c5:ab:1a:fa:ca:75:0d:af:27:9b:2e:99:09:ed:cf:c1: 69:0a:26:b8:b7:15:fd:59:56:0c:56:b7:e9:4e:eb:b3:67:11: b8:a4:c8:68:e8:77:25:9e:32:c5:8d:3e:02:3f:18:d8:fc:65: 55:24:fa:2a:65:c4:8e:ae:37:72:25:29:a3:d8:24:a1:d6:4c: b2:fb:78:35:0a:9b:20:76:4e:a5:0d:55:d2:5c:b3:50:7c:f4: a2:93:ca:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8f17WDK5oy9pL1dw0u1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5 MWQ3MzkwHhcNMjUxMjA2MDYwMDU3WhcNMjUxMjA3MDYwMDU3WjAzMTEwLwYDVQQD EygzOWY4Y2MzZGY2NTJkMTBmZjM3MWQyYzg4ZDc0N2NmMzQ3ZWFhODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3imofcC4D7H9Rb52/14++wEmI9M1 /Jelh1DOz1Vmn9sI+tMKHUzbJF50zFFlRE9A8/8siKZosc8Q50YbxuwjEGIUQyqz M5hb5lwGDz+/dQjBnZs6YvAWsBh7txs/wZfn1WIp5VEEAfdAEU9jZd8WGZiSGKS5 56ukkKI9b5KkdCm4ODbneX5Uo7S44nMmr3jCehdv3QUwHHicBbCQAjDojPezzE10 b/JalBYeVlEoD4+iT9PtZ+9MuFOivPh04Hq2CVIYIDcsCodjfsFMiCZ9ZjPMExe4 74hRkKpihoXmqMuEVjosevwb8kuCZ5fdpySN+Bj7+rNbOXKgAuFn5JUFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn4zD32UtEP83HSyI10fPNH6qg6MB8GA1UdIwQY MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1 LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuT8IuNn Thct0KLmedpksNH1Hu17gL4bW3OhScLnGzNT5CU/yRyEWJBY2yIKUAL57nY2cl25 fGSfm5EswZGi1XTKqAqJoOx99tXv8bb8oSijVsWARFzLvXYvBIIyEUgm9JKwYnCb LImLiwoJdq9mCRP0ZbNdSHQmFujVy5YZ5ltnf7/wvuzCj3PLRgu72WtZnKpQefbE R2OHMqXo7YmVWPd9p1jFqxr6ynUNryebLpkJ7c/BaQomuLcV/VlWDFa36U7rs2cR uKTIaOh3JZ4yxY0+Aj8Y2PxlVST6KmXEjq43ciUpo9gkodZMsvt4NQqbIHZOpQ1V 0lyzUHz0opPKDw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:10 2025 by rpki-client