This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json) Hash identifier: olOm9ebThn/HnLmvRVkw2lUq6yEWHpsjexxnqXAsovk= Subject key identifier: 16:76:92:7D:F7:56:86:9E:69:62:10:6F:88:F6:EC:5B:2C:B3:BC:BA Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019AF0F5DA7D0C5FCDE00220DA2CAA7814B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft Manifest number: 05E4 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=) 2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: YXfmMPG60R+SMZDYXIDyXdB6Pk4iMUVWyJFRzTzYqfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:da:7d:0c:5f:cd:e0:02:20:da:2c:aa:78:14:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=1676927df756869e6962106f88f6ec5b2cb3bcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:f6:b0:04:bf:32:5d:97:6b:a3:38:8d:5a: c6:73:1c:94:8b:6c:41:6f:f3:e0:02:9f:35:da:00: 80:5e:a1:2d:12:3f:b8:a1:b6:08:72:32:20:42:99: 68:16:e1:2c:d8:43:99:8d:9a:86:53:19:c2:9e:f4: e8:58:c0:eb:ec:3f:55:2c:46:c2:40:c2:45:0d:ee: d3:a2:79:ee:b4:82:1c:cf:30:b6:e6:45:29:a9:a8: b5:33:a1:a5:47:e0:15:c3:8c:4d:76:9c:43:15:bb: f3:27:fa:bd:7a:cf:88:6a:16:4a:97:ef:d0:7b:16: 74:d6:37:98:41:be:5f:99:68:61:2f:d7:fb:0c:89: 13:f3:8a:7e:d4:7b:ca:3b:a4:ab:bf:0b:13:d5:dd: 96:2c:54:10:f3:b0:d5:c5:90:36:c9:fd:14:aa:be: 41:0b:79:86:7c:f3:3d:35:66:2c:24:40:c2:07:8b: 03:2a:95:29:82:d4:27:fa:01:cb:08:b5:ec:42:1d: ad:1b:ff:40:ff:6f:c7:9a:0f:c2:7a:d3:a7:b7:07: 84:ff:23:f9:dd:b2:50:44:4e:67:3c:3d:a1:26:c8: 5d:b6:7c:1d:63:b6:99:16:02:be:52:24:76:d1:b4: ad:5d:be:0f:4d:1b:10:22:39:3c:16:96:5b:d5:5b: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:76:92:7D:F7:56:86:9E:69:62:10:6F:88:F6:EC:5B:2C:B3:BC:BA X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9d:03:ef:99:ee:6f:19:36:18:e3:67:b5:0b:9f:51:05:eb: b1:34:ec:de:fc:f0:46:2f:5f:e5:8a:b1:0d:c5:2c:27:ff:c1: 15:09:68:a8:d8:1f:62:ff:20:72:de:fc:17:7e:cf:db:35:68: 57:c1:46:84:9f:97:cc:af:2e:19:31:64:04:9e:40:52:44:40: 37:33:a2:f5:41:2d:53:71:6c:69:52:e5:10:84:67:c7:74:c8: 72:37:f5:41:3a:10:40:e4:4f:62:84:96:72:85:6a:c9:0b:ec: a0:14:88:c0:33:06:05:2c:bb:8b:de:b8:06:c2:a5:61:3a:d6: d8:1c:21:a5:d2:28:7a:e6:a8:4c:59:c2:f1:a1:84:5d:5a:b4: f1:fd:b9:14:7c:d9:f3:29:6c:f6:69:c8:ab:9d:7d:69:9f:dc: 9a:83:0a:6d:f9:5a:7b:53:52:4d:f7:be:07:1d:20:9d:2a:82: 0f:0b:f8:1b:0a:7e:0e:f7:9b:4a:de:e3:8b:92:8c:55:da:f5: 54:d2:c2:cd:e6:ef:64:cb:fd:09:53:4a:9b:d0:fd:8d:62:98: 26:24:5b:b0:b9:df:fb:f9:ce:ae:89:2d:ca:fc:39:0c:33:26: 79:01:00:e4:7d:3e:b2:12:72:4e:b1:8e:2d:06:78:91:d7:90: 5f:f1:9b:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dp9DF/N4AIg2iyqeBS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD EygxNjc2OTI3ZGY3NTY4NjllNjk2MjEwNmY4OGY2ZWM1YjJjYjNiY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIT2sAS/Ml2Xa6M4jVrGcxyUi2xB b/PgAp812gCAXqEtEj+4obYIcjIgQploFuEs2EOZjZqGUxnCnvToWMDr7D9VLEbC QMJFDe7TonnutIIczzC25kUpqai1M6GlR+AVw4xNdpxDFbvzJ/q9es+IahZKl+/Q exZ01jeYQb5fmWhhL9f7DIkT84p+1HvKO6SrvwsT1d2WLFQQ87DVxZA2yf0Uqr5B C3mGfPM9NWYsJEDCB4sDKpUpgtQn+gHLCLXsQh2tG/9A/2/Hmg/CetOntweE/yP5 3bJQRE5nPD2hJshdtnwdY7aZFgK+UiR20bStXb4PTRsQIjk8FpZb1VtoiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ2kn33VoaeaWIQb4j27Fsss7y6MB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ0D75nu bxk2GONntQufUQXrsTTs3vzwRi9f5YqxDcUsJ//BFQloqNgfYv8gct78F37P2zVo V8FGhJ+XzK8uGTFkBJ5AUkRANzOi9UEtU3FsaVLlEIRnx3TIcjf1QToQQORPYoSW coVqyQvsoBSIwDMGBSy7i964BsKlYTrW2BwhpdIoeuaoTFnC8aGEXVq08f25FHzZ 8yls9mnIq519aZ/cmoMKbflae1NSTfe+Bx0gnSqCDwv4Gwp+DvebSt7ji5KMVdr1 VNLCzebvZMv9CVNKm9D9jWKYJiRbsLnf+/nOroktyvw5DDMmeQEA5H0+shJyTrGO LQZ4kdeQX/GbSg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:19 2025 by rpki-client