This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json) Hash identifier: tjZZQce91gLugyP0fKA4U8q7g/Oi7QSuljpuzXlAUEc= Subject key identifier: 09:D0:5A:68:FC:3D:43:8C:20:98:38:45:FA:06:84:B1:CC:BB:A9:4D Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3 Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3 Certificate serial: 019AF16464879F93523E506478D86D0DF7A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft Manifest number: 0847 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=) 2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: +xmGbkggtbCi4wvur3StwoU1hPEdyPheprSXnElIYww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:64:87:9f:93:52:3e:50:64:78:d8:6d:0d:f7:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3 Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=09d05a68fc3d438c20983845fa0684b1ccbba94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:35:ab:d5:f4:85:3a:0c:98:82:e3:62:67: c4:fb:fb:a6:2e:cf:7c:b2:bb:e1:3d:a1:b5:44:58: 66:aa:17:4b:e2:8b:17:af:96:3f:c5:dd:af:a9:12: 05:1b:49:5e:96:ee:51:63:0e:c2:10:aa:b2:b9:64: 1b:03:e6:9c:08:f5:f4:82:0a:bb:15:32:a0:87:76: cf:04:16:1d:14:ce:57:e0:ba:25:bb:2e:47:7f:37: df:f4:ec:38:f2:d9:96:55:94:d7:9a:80:5e:fc:e4: 48:6a:bb:6e:d5:fd:3b:2b:ec:0f:4a:d8:30:3a:24: 79:8c:83:3e:21:2c:97:af:85:64:96:bd:ab:eb:ff: b0:ba:09:13:7f:85:de:5c:23:ce:1d:14:33:c1:d3: c7:32:ca:5c:6a:97:93:2e:4a:47:e3:f3:ea:87:7f: 4a:96:1a:89:eb:51:a8:24:26:eb:70:23:07:9b:22: c1:f3:6f:39:fb:38:88:3b:3e:5a:5c:5b:02:ac:9b: 16:e7:70:ba:75:57:79:be:6a:70:d9:22:65:e9:23: 17:19:b7:e8:74:79:17:a3:36:0e:52:7e:78:52:9a: bb:a2:2a:5a:0b:d9:f7:34:66:a4:0a:e0:80:80:dc: a7:66:e8:0a:68:51:a3:1c:63:92:6f:60:5e:d6:8d: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D0:5A:68:FC:3D:43:8C:20:98:38:45:FA:06:84:B1:CC:BB:A9:4D X509v3 Authority Key Identifier: keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b5:52:4f:f4:04:e8:d4:f4:2d:0c:de:d7:60:78:6c:91:b0: ec:be:0e:8b:f1:31:32:a9:1a:0e:35:c3:9a:18:95:b6:74:c7: 6a:ec:a4:13:8e:d0:74:95:9f:e9:06:ad:60:8e:8b:4d:fb:25: 1e:33:4c:1b:31:e6:5c:28:50:b7:8d:d8:38:2b:6a:b6:1a:ea: 55:34:a4:76:97:1e:a2:11:3f:09:c9:87:95:1a:02:22:01:14: 69:e1:02:f5:c0:91:8c:71:2d:ac:02:b8:3b:1a:39:8e:40:16: bd:e1:ad:24:fc:d4:e2:44:13:80:29:14:93:24:34:ae:c8:23: 70:7a:3a:b1:70:eb:a9:ee:82:32:3c:0a:94:5d:4e:d4:d2:a3: 7e:a1:32:29:7c:10:fd:8a:31:7b:5c:26:a1:3b:92:bd:b6:b9: 00:23:68:ad:77:63:97:26:23:48:88:79:cc:47:0a:10:4b:89: 7e:cc:95:45:b9:96:f7:9a:2b:e3:d3:93:4d:84:9f:b0:35:37: 3d:f4:ce:96:92:a5:8c:b4:2b:52:43:e4:5f:d7:1b:4c:16:c0: b3:84:a5:47:b2:ae:c3:67:0b:35:b7:c5:50:00:d6:33:df:da: 4e:57:76:b5:34:2d:73:74:b1:34:e8:c6:22:c4:15:c9:de:fe: 44:4f:f3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGSHn5NSPlBkeNhtDfepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl ZTExZTMwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD EygwOWQwNWE2OGZjM2Q0MzhjMjA5ODM4NDVmYTA2ODRiMWNjYmJhOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilw1q9X0hToMmILjYmfE+/umLs98 srvhPaG1RFhmqhdL4osXr5Y/xd2vqRIFG0lelu5RYw7CEKqyuWQbA+acCPX0ggq7 FTKgh3bPBBYdFM5X4Loluy5Hfzff9Ow48tmWVZTXmoBe/ORIartu1f07K+wPStgw OiR5jIM+ISyXr4Vklr2r6/+wugkTf4XeXCPOHRQzwdPHMspcapeTLkpH4/Pqh39K lhqJ61GoJCbrcCMHmyLB8285+ziIOz5aXFsCrJsW53C6dVd5vmpw2SJl6SMXGbfo dHkXozYOUn54Upq7oipaC9n3NGakCuCAgNynZugKaFGjHGOSb2Be1o01lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnQWmj8PUOMIJg4RfoGhLHMu6lNMB8GA1UdIwQY MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1 LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7VST/QE 6NT0LQze12B4bJGw7L4Oi/ExMqkaDjXDmhiVtnTHauykE47QdJWf6QatYI6LTfsl HjNMGzHmXChQt43YOCtqthrqVTSkdpceohE/CcmHlRoCIgEUaeEC9cCRjHEtrAK4 Oxo5jkAWveGtJPzU4kQTgCkUkyQ0rsgjcHo6sXDrqe6CMjwKlF1O1NKjfqEyKXwQ /Yoxe1wmoTuSvba5ACNorXdjlyYjSIh5zEcKEEuJfsyVRbmW95or49OTTYSfsDU3 PfTOlpKljLQrUkPkX9cbTBbAs4SlR7Kuw2cLNbfFUADWM9/aTld2tTQtc3SxNOjG IsQVyd7+RE/z5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:19 2025 by rpki-client