This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: T5QYZiUm5usENrdEGxNKWgNUc/5MdcMmcKnbKQI46wg= Subject key identifier: 91:B6:F4:D0:48:76:B0:74:40:06:24:7A:B1:EE:D2:CA:DD:FF:F4:6A Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019B4B4CE53156A47A2140470A5910A03B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 14A4 Signing time: Tue 23 Dec 2025 13:01:29 +0000 Manifest this update: Tue 23 Dec 2025 13:01:29 +0000 Manifest next update: Wed 24 Dec 2025 13:01:29 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 1-fD0_gyy16CbQhND5Cq9_D_TVJM.roa (hash: 1YUT/oHeu46DAHuJD9uNps9J96AG+60Vn+GnT3asOpo=) 3: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 4: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: D50SnN1+eP+G+swypHuNKbVyKiaL3FuFj16aYOJaOAk=) 6: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 7: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 8: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 9: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 10: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:e5:31:56:a4:7a:21:40:47:0a:59:10:a0:3b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Dec 23 13:01:29 2025 GMT Not After : Dec 24 13:01:29 2025 GMT Subject: CN=91b6f4d04876b0744006247ab1eed2caddfff46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:df:58:b6:9b:f6:f8:e9:9f:15:42:e6:d9: 7b:0b:3a:c8:c9:95:ff:40:d2:b1:98:1a:76:f2:42: cd:10:82:e0:4a:cd:f5:f3:a9:ea:62:60:f4:b9:48: b2:a3:a8:27:d8:99:d6:84:a5:6b:64:0f:bc:65:c2: 95:50:af:be:5c:03:1e:14:4c:2b:f8:b1:20:50:20: 64:10:00:5a:38:3f:ef:78:81:3c:4f:1c:05:0e:cf: 5e:0e:82:e8:14:13:00:12:ea:2d:0b:af:6f:e1:5a: 52:38:88:ab:f1:d1:dc:3d:d9:97:ea:ae:1f:bc:d2: 5b:7b:b0:63:f2:21:a7:fe:4f:56:ce:67:e7:44:df: f5:5d:e9:7a:10:fa:23:a0:23:e1:3c:51:36:2c:67: 45:dd:7e:64:ed:f6:a6:fa:9b:56:37:1a:0b:8d:c3: 8c:a1:07:90:39:7b:fc:28:5c:78:1f:95:c9:d0:b9: 49:38:9c:d8:ab:89:eb:e6:5c:fc:df:52:24:4c:89: a7:4c:e9:a7:2d:29:dd:92:95:7f:97:c6:8b:31:3f: e1:70:e8:36:33:42:58:fd:d9:d9:41:c1:0a:da:da: a5:9f:29:13:88:5b:63:d0:70:f3:9e:1f:ad:8e:78: 1b:3d:77:3c:65:e7:42:4f:79:77:3a:80:8e:68:68: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:F4:D0:48:76:B0:74:40:06:24:7A:B1:EE:D2:CA:DD:FF:F4:6A X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:41:01:c4:06:12:46:9c:38:c7:0c:71:6f:16:27:b4:a4:28: 94:dc:16:a9:e4:69:86:81:9a:ff:63:e1:17:e6:7b:90:75:46: fa:b5:92:17:f0:e7:bc:ad:e8:e9:21:69:a7:ce:c9:e9:94:68: be:55:d4:85:ff:20:f5:1d:f8:28:47:02:dd:4d:3f:32:f3:bd: e2:bc:bf:8c:b1:41:25:98:a0:d2:33:bc:46:00:08:a2:11:f4: 06:51:89:65:60:1b:b5:4b:bb:73:a4:01:ac:76:98:72:02:3d: de:18:74:35:0d:ca:17:7e:20:8a:bf:ef:09:b3:74:35:41:b9: 32:3d:0a:16:a5:34:05:9c:52:7d:ce:3f:2c:19:98:b6:af:eb: 53:8c:b9:37:0d:34:1c:41:1c:91:ec:dd:46:52:0c:77:8e:bb: d9:98:e6:fc:6f:fe:ba:e8:31:16:2a:1f:7f:71:a7:ee:ea:b4: c3:8a:ed:a4:65:21:90:b3:26:84:92:d6:c6:08:19:f3:d9:3b: 2c:4f:d9:10:2d:64:c7:cb:29:0c:fe:a9:00:e0:fe:b4:22:89: e8:4c:f7:05:de:45:b3:3d:4d:86:5b:56:b9:62:bc:8b:f2:fa: 5a:c3:9a:d2:02:ea:22:95:16:22:6e:c4:04:8a:b6:d8:27:91: 1d:d2:c2:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTOUxVqR6IUBHClkQoDt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUxMjIzMTMwMTI5WhcNMjUxMjI0MTMwMTI5WjAzMTEwLwYDVQQD Eyg5MWI2ZjRkMDQ4NzZiMDc0NDAwNjI0N2FiMWVlZDJjYWRkZmZmNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF/fWLab9vjpnxVC5tl7CzrIyZX/ QNKxmBp28kLNEILgSs3186nqYmD0uUiyo6gn2JnWhKVrZA+8ZcKVUK++XAMeFEwr +LEgUCBkEABaOD/veIE8TxwFDs9eDoLoFBMAEuotC69v4VpSOIir8dHcPdmX6q4f vNJbe7Bj8iGn/k9WzmfnRN/1Xel6EPojoCPhPFE2LGdF3X5k7fam+ptWNxoLjcOM oQeQOXv8KFx4H5XJ0LlJOJzYq4nr5lz831IkTImnTOmnLSndkpV/l8aLMT/hcOg2 M0JY/dnZQcEK2tqlnykTiFtj0HDznh+tjngbPXc8ZedCT3l3OoCOaGhqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG29NBIdrB0QAYkerHu0srd//RqMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEEBxAYS Rpw4xwxxbxYntKQolNwWqeRphoGa/2PhF+Z7kHVG+rWSF/DnvK3o6SFpp87J6ZRo vlXUhf8g9R34KEcC3U0/MvO94ry/jLFBJZig0jO8RgAIohH0BlGJZWAbtUu7c6QB rHaYcgI93hh0NQ3KF34gir/vCbN0NUG5Mj0KFqU0BZxSfc4/LBmYtq/rU4y5Nw00 HEEckezdRlIMd4672Zjm/G/+uugxFioff3Gn7uq0w4rtpGUhkLMmhJLWxggZ89k7 LE/ZEC1kx8spDP6pAOD+tCKJ6Ez3Bd5Fsz1NhltWuWK8i/L6WsOa0gLqIpUWIm7E BIq22CeRHdLCGQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:24 2025 by rpki-client