This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft File: HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json) Hash identifier: wE94DfpJeFAcqDYasFwluoS/qIzMb0kM2GytVHcrf6U= Subject key identifier: 9C:44:54:44:CC:6A:8D:62:CA:3D:01:89:A4:0B:00:67:65:CD:B5:B2 Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54 Certificate issuer: /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54 Certificate serial: 019B710FDBC8B49542AD30E1017D83CF624E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft Manifest number: 03AC Signing time: Tue 30 Dec 2025 21:00:23 +0000 Manifest this update: Tue 30 Dec 2025 21:00:23 +0000 Manifest next update: Wed 31 Dec 2025 21:00:23 +0000 Files and hashes: 1: Dm5YScd3hN-X30vyWwpd9nEvmc4.roa (hash: vtcKOSOsC15effmA9O/KkJoHDTDi9oZ8YT35or202RY=) 2: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: DlMPnlQZGQraSQsfHMzpOGlCJsN4cgrnMCFhFlFUNx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:db:c8:b4:95:42:ad:30:e1:01:7d:83:cf:62:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54 Validity Not Before: Dec 30 21:00:23 2025 GMT Not After : Dec 31 21:00:23 2025 GMT Subject: CN=9c445444cc6a8d62ca3d0189a40b006765cdb5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:be:6f:c1:88:5d:5e:cc:53:75:3a:aa:73: fc:d1:a5:23:61:f4:cd:d0:02:59:d2:bb:c4:e8:fe: d3:d9:1f:37:b2:e5:2a:86:b8:e8:e0:57:05:6e:b6: b2:0d:af:76:e1:00:56:49:12:24:98:47:5f:2a:5b: 46:59:d5:91:85:4f:4b:96:33:01:37:26:88:20:93: 88:3c:3b:89:d4:51:02:29:d1:a1:47:dd:8a:8f:c5: 63:94:60:70:83:88:55:7d:8e:4e:3a:08:a4:c7:78: e7:53:a9:7e:45:15:f8:cf:b4:84:29:db:a9:fc:b3: c1:05:89:8a:b3:8c:4d:dc:ce:1d:7b:a9:40:0c:03: 2f:7d:30:63:e9:66:2f:11:d5:2c:5b:89:5b:a7:bb: bf:65:6c:7d:6b:03:13:0d:60:74:63:9d:90:ad:cd: f3:e3:3c:86:07:a7:59:a8:04:4e:e9:ed:fb:8d:82: ad:4b:42:ff:0d:1c:a9:d2:6a:ca:ef:44:6c:40:04: 34:24:f7:95:b2:ae:d2:20:40:e5:bf:fb:95:9e:b1: 79:ec:3c:df:a9:12:db:40:13:b4:fd:e1:de:7c:99: f2:df:8c:03:a8:3c:ea:e8:7b:8e:89:34:77:ca:8e: 1f:74:de:80:ee:2e:b0:c9:16:a3:5d:26:32:25:fa: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:44:54:44:CC:6A:8D:62:CA:3D:01:89:A4:0B:00:67:65:CD:B5:B2 X509v3 Authority Key Identifier: keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:45:18:36:6e:9f:3b:cb:a5:3f:19:de:9f:c1:28:99:56: 4f:b8:00:7a:cb:8f:c9:d9:31:5d:2d:5c:0d:c8:26:97:27:1b: e8:fe:3e:69:82:d9:31:35:4a:7d:33:e1:a5:d5:6d:df:08:fe: a8:ef:3f:b4:ca:7e:8e:bc:36:49:4f:57:21:1c:2b:23:97:17: 52:5a:3c:f5:3c:80:30:16:47:5a:5f:9c:2c:e9:b8:e0:da:1b: c8:8e:40:43:b9:39:70:31:19:4f:43:b3:f0:1a:bb:d3:e3:9d: af:03:55:f2:c4:17:ad:06:3a:66:03:bc:8d:64:ff:2e:8d:93: 1e:ef:08:3c:d2:95:bd:cb:fa:da:3f:e3:78:a7:c8:a9:56:80: 2d:78:5b:fd:f5:13:07:49:35:ac:1d:4f:da:2c:cd:e7:83:96: 3c:2d:d9:a0:e5:1a:25:28:9f:28:a6:2b:56:0f:05:8e:6b:d6: 25:e7:b4:b0:4a:55:4e:8f:96:e0:98:ac:c3:91:85:b9:8e:29: b6:04:5c:c3:fd:cd:6b:86:23:a3:ba:ca:1d:f9:bd:22:53:44: 04:51:81:1d:a7:f5:d8:85:b7:ae:47:9e:1c:2e:16:9d:e1:f8: 29:e7:61:4f:89:7f:f5:3b:c8:18:9e:4a:20:b9:f8:62:b3:4e: 7f:a9:79:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD9vItJVCrTDhAX2Dz2JOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZmI2ZGY5MzM3NWEwNmM1NjgyYzA1N2MwZmQyYTczMDYy MThhNTQwHhcNMjUxMjMwMjEwMDIzWhcNMjUxMjMxMjEwMDIzWjAzMTEwLwYDVQQD Eyg5YzQ0NTQ0NGNjNmE4ZDYyY2EzZDAxODlhNDBiMDA2NzY1Y2RiNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T6+b8GIXV7MU3U6qnP80aUjYfTN 0AJZ0rvE6P7T2R83suUqhrjo4FcFbrayDa924QBWSRIkmEdfKltGWdWRhU9LljMB NyaIIJOIPDuJ1FECKdGhR92Kj8VjlGBwg4hVfY5OOgikx3jnU6l+RRX4z7SEKdup /LPBBYmKs4xN3M4de6lADAMvfTBj6WYvEdUsW4lbp7u/ZWx9awMTDWB0Y52Qrc3z 4zyGB6dZqARO6e37jYKtS0L/DRyp0mrK70RsQAQ0JPeVsq7SIEDlv/uVnrF57Dzf qRLbQBO0/eHefJny34wDqDzq6HuOiTR3yo4fdN6A7i6wyRajXSYyJfqXxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxEVETMao1iyj0BiaQLAGdlzbWyMB8GA1UdIwQY MBaAFBz7bfkzdaBsVoLAV8D9KnMGIYpUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFB0dC1UTjFvR3hXZ3NCWHdQMHFjd1loaWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mYmFkZmYtNzVkNy00Y2JhLTk3MzUt NjZlYzJlYWY2NDZmLzEvSFB0dC1UTjFvR3hXZ3NCWHdQMHFjd1loaWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mYmFkZmYtNzVkNy00Y2JhLTk3MzUtNjZlYzJlYWY2NDZm LzEvSFB0dC1UTjFvR3hXZ3NCWHdQMHFjd1loaWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhVFGDZu nzvLpT8Z3p/BKJlWT7gAesuPydkxXS1cDcgmlycb6P4+aYLZMTVKfTPhpdVt3wj+ qO8/tMp+jrw2SU9XIRwrI5cXUlo89TyAMBZHWl+cLOm44NobyI5AQ7k5cDEZT0Oz 8Bq70+OdrwNV8sQXrQY6ZgO8jWT/Lo2THu8IPNKVvcv62j/jeKfIqVaALXhb/fUT B0k1rB1P2izN54OWPC3ZoOUaJSifKKYrVg8FjmvWJee0sEpVTo+W4Jisw5GFuY4p tgRcw/3Na4Yjo7rKHfm9IlNEBFGBHaf12IW3rkeeHC4WneH4KedhT4l/9TvIGJ5K ILn4YrNOf6l5PQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:38:04 2025 by rpki-client