This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: H//dQlKs7wVp1qTugbuYjSneb78aANs+xzjE5kQ14gQ=
Subject key identifier: 80:B3:2E:FB:92:ED:67:6E:00:8F:46:E8:4F:6B:50:1B:61:69:86:04
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019AF2092BF7AAD40B798C8F9BFD884FC502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 16F3
Signing time: Sat 06 Dec 2025 05:01:18 +0000
Manifest this update: Sat 06 Dec 2025 05:01:18 +0000
Manifest next update: Sun 07 Dec 2025 05:01:18 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: xCez+V5e6/C/Uxj8qLC79Pk1Nqb3igdwguKcrpAaLHY=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:2b:f7:aa:d4:0b:79:8c:8f:9b:fd:88:4f:c5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Dec 6 05:01:18 2025 GMT
Not After : Dec 7 05:01:18 2025 GMT
Subject: CN=80b32efb92ed676e008f46e84f6b501b61698604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:a3:15:ce:92:03:91:9c:a9:3d:c6:07:25:
e4:ec:88:01:03:c2:7f:67:39:3e:2b:cc:d3:a4:8f:
69:9a:99:80:d4:cf:14:e4:6b:31:22:7f:be:4d:be:
ec:2c:19:e7:d4:c9:41:87:38:da:ee:4a:b6:37:96:
14:d7:db:54:bf:26:46:d1:67:27:f3:05:c4:38:67:
ba:eb:08:13:fe:12:58:0d:6b:46:5e:8d:23:9e:cf:
1c:ed:6a:49:d3:cd:0c:b0:32:0e:17:3b:87:7b:15:
ca:f3:ef:03:18:c2:83:e8:27:82:c7:72:67:64:59:
3a:af:f8:44:2e:59:9e:15:fe:07:ee:76:71:29:49:
b4:47:74:76:fe:c8:2e:78:f1:74:cf:24:84:84:45:
de:85:57:3e:72:98:44:3c:a3:63:0c:00:9c:9e:7c:
27:b1:42:3e:76:dc:c9:06:e7:52:cf:bd:13:bb:49:
64:f2:e7:c9:36:17:d4:79:37:7a:c5:df:17:7c:15:
1c:ec:c6:e0:4d:03:73:c7:34:e0:99:16:a5:77:db:
96:81:88:d3:c6:a9:51:45:de:71:64:b0:13:98:b8:
2c:6f:57:80:54:65:98:3b:a5:ee:c7:d6:a3:06:1c:
43:fa:92:6d:8e:3d:06:15:a7:b1:e6:d6:a8:16:f2:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:2E:FB:92:ED:67:6E:00:8F:46:E8:4F:6B:50:1B:61:69:86:04
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:01:78:b4:7f:13:26:37:7e:9c:fe:8b:7d:df:a3:5b:80:6c:
54:c9:1d:3a:a9:77:5d:2c:a7:16:1c:51:e8:63:c3:69:f7:00:
82:7b:c4:63:89:c8:7a:2b:4a:f4:0b:ca:d1:cd:e1:bd:be:91:
d0:88:b0:b9:c6:83:db:9d:09:b2:d6:bb:46:8a:6f:0f:a9:08:
21:ac:90:e1:55:81:45:90:da:f7:e1:22:b9:3f:8e:77:74:07:
0e:5e:5f:19:5b:47:d1:2d:25:4e:31:0f:9a:8d:7b:9a:07:d6:
a4:35:85:a0:1f:35:dc:e4:a3:ac:99:02:6a:5f:bf:18:4e:eb:
67:09:3e:7c:64:e4:45:2a:53:d1:67:9e:08:c2:f9:60:9f:2d:
04:17:60:5c:14:e9:88:8e:2e:87:b7:f6:8e:b1:cd:35:2d:d1:
33:d8:be:d0:2c:10:cb:af:95:68:67:f4:93:4f:08:5a:d0:cd:
c6:f6:d3:5f:db:28:b5:1c:24:f1:c8:46:44:b6:9c:81:35:75:
4b:65:1d:32:c7:4b:86:e1:e6:57:b5:c7:b7:fa:79:5d:b5:64:
cc:4b:53:bb:ce:6a:e4:3a:96:71:ca:34:46:e0:d1:a2:2d:7b:
5c:27:be:c1:76:eb:98:91:12:9f:b8:a7:4f:4d:da:5e:62:fb:
2a:f1:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:57:31 2025 by rpki-client