This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json) Hash identifier: KahhyM343rZvnwk1CF8e3UbGxnnI6QVN3P4aVOujiN8= Subject key identifier: 9A:15:51:5B:AE:C1:BD:2C:0B:6D:1A:EA:85:DC:F4:90:EC:5F:5C:DF Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Certificate serial: 019AF051A3D54B84775EDD1C074215720866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft Manifest number: 13F4 Signing time: Fri 05 Dec 2025 21:01:13 +0000 Manifest this update: Fri 05 Dec 2025 21:01:13 +0000 Manifest next update: Sat 06 Dec 2025 21:01:13 +0000 Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=) 2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=) 3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: 7H5oyydxHqBdbbwVG0lbX8B2WzC1HgsDpz9DoggVyfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:a3:d5:4b:84:77:5e:dd:1c:07:42:15:72:08:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b Validity Not Before: Dec 5 21:01:13 2025 GMT Not After : Dec 6 21:01:13 2025 GMT Subject: CN=9a15515baec1bd2c0b6d1aea85dcf490ec5f5cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:bd:20:56:98:f1:2b:22:db:74:4e:6a:5b: a5:c2:af:3b:f4:9d:07:50:d0:95:7e:f5:6c:65:b1: 64:bf:79:c2:99:08:32:7e:05:66:57:28:05:b8:a0: d0:5e:96:69:1c:a6:8d:b5:20:9c:72:ce:5b:48:aa: ee:0d:cf:a4:e9:c3:07:f2:00:12:e5:bb:4e:bd:61: ba:e0:5d:4c:a8:91:6f:79:d7:83:38:1b:7c:12:c7: fd:7c:40:08:6f:93:59:db:1a:86:1d:4c:5e:56:3f: 3b:cf:0d:b7:2e:f2:25:b5:3b:56:af:40:86:25:6c: 6f:4d:1f:97:4a:2e:19:5c:17:aa:48:4e:aa:f2:a2: 92:cc:b5:ed:8b:4c:b5:26:f7:65:c4:d9:8c:24:f1: 7f:06:0a:70:58:f5:37:72:fb:d2:ca:7a:14:24:9c: a9:b0:b3:7d:15:4f:66:b8:7a:75:a9:4f:30:9d:68: 0f:3d:c4:31:18:ce:ba:ab:ec:29:52:b1:a3:a9:26: a5:89:9f:47:ab:5f:61:ca:16:5c:b1:f9:99:88:9a: 72:2d:cf:68:e5:42:b6:81:09:7c:b9:2d:6b:25:39: 11:de:84:72:15:26:ce:7d:c9:63:94:93:fa:d8:66: e4:f9:a0:11:d7:52:81:48:65:6c:30:6a:d0:29:80: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:15:51:5B:AE:C1:BD:2C:0B:6D:1A:EA:85:DC:F4:90:EC:5F:5C:DF X509v3 Authority Key Identifier: keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b6:e8:69:15:35:fd:60:68:b8:e7:19:70:6f:d2:05:20:4c: c9:8e:49:1c:e9:52:27:1b:72:86:9b:1e:8a:e7:00:55:16:29: 29:c3:86:85:ea:df:df:f5:0b:fe:41:c5:31:6a:34:40:32:bf: 54:96:9b:3c:1c:e0:39:2c:97:00:ef:5a:39:ed:6a:2a:08:c3: 4b:85:f7:d2:60:4b:41:8a:f6:2f:fd:38:d6:6e:a9:70:02:ba: 93:2c:77:71:a3:3f:97:56:40:14:1a:76:92:e4:7e:43:b0:8e: 78:f5:4d:6e:4e:11:bb:2a:7a:6e:53:98:2a:80:70:44:dc:10: 72:fd:5a:b4:ae:f5:fc:ea:ee:97:59:b4:d8:d6:e1:09:06:2a: bb:f0:d0:f5:0f:8a:bb:b8:e8:1e:ef:65:6e:5e:bc:20:71:bf: cb:4b:e2:05:28:05:7c:8c:e6:f9:e6:70:96:9a:a6:14:b3:dc: b9:d6:56:e9:dc:e6:72:e0:6f:76:45:5d:b4:cf:bb:9b:87:c1: 5d:fc:bb:13:fa:3d:ea:0b:35:2a:59:b3:81:af:eb:f4:bf:16: fd:11:03:0c:5c:67:a3:26:78:5d:8d:67:5a:91:ea:4f:9f:28: 9e:bc:7d:e1:39:e8:e6:bc:7a:11:de:be:52:6c:d6:fe:6d:4b: 57:90:cb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUaPVS4R3Xt0cB0IVcghmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0 ZjRkNGIwHhcNMjUxMjA1MjEwMTEzWhcNMjUxMjA2MjEwMTEzWjAzMTEwLwYDVQQD Eyg5YTE1NTE1YmFlYzFiZDJjMGI2ZDFhZWE4NWRjZjQ5MGVjNWY1Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzy9IFaY8Ssi23ROalulwq879J0H UNCVfvVsZbFkv3nCmQgyfgVmVygFuKDQXpZpHKaNtSCccs5bSKruDc+k6cMH8gAS 5btOvWG64F1MqJFvedeDOBt8Esf9fEAIb5NZ2xqGHUxeVj87zw23LvIltTtWr0CG JWxvTR+XSi4ZXBeqSE6q8qKSzLXti0y1JvdlxNmMJPF/BgpwWPU3cvvSynoUJJyp sLN9FU9muHp1qU8wnWgPPcQxGM66q+wpUrGjqSaliZ9Hq19hyhZcsfmZiJpyLc9o 5UK2gQl8uS1rJTkR3oRyFSbOfcljlJP62Gbk+aAR11KBSGVsMGrQKYCCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoVUVuuwb0sC20a6oXc9JDsX1zfMB8GA1UdIwQY MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrboaRU1 /WBouOcZcG/SBSBMyY5JHOlSJxtyhpseiucAVRYpKcOGherf3/UL/kHFMWo0QDK/ VJabPBzgOSyXAO9aOe1qKgjDS4X30mBLQYr2L/041m6pcAK6kyx3caM/l1ZAFBp2 kuR+Q7COePVNbk4Ruyp6blOYKoBwRNwQcv1atK71/Orul1m02NbhCQYqu/DQ9Q+K u7joHu9lbl68IHG/y0viBSgFfIzm+eZwlpqmFLPcudZW6dzmcuBvdkVdtM+7m4fB Xfy7E/o96gs1Klmzga/r9L8W/REDDFxnoyZ4XY1nWpHqT58onrx94Tno5rx6Ed6+ UmzW/m1LV5DLSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:52 2025 by rpki-client