This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: mnih2eXsyQi+y7LJ0eUccUsF7P6F8BHmTP+UiJ+kODU= Subject key identifier: 36:FE:EF:76:7A:6A:90:6B:46:98:EC:CC:4F:F5:6B:8E:44:25:6A:F5 Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019B4136F2132DEE7D7A1CD0CB0F72E83C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 16A4 Signing time: Sun 21 Dec 2025 14:01:18 +0000 Manifest this update: Sun 21 Dec 2025 14:01:18 +0000 Manifest next update: Mon 22 Dec 2025 14:01:18 +0000 Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=) 2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=) 3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: YrJgoHthvx22obHG0zJ7meWuyRndf/rzlsa79enIBT0=) 4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:f2:13:2d:ee:7d:7a:1c:d0:cb:0f:72:e8:3c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Dec 21 14:01:18 2025 GMT Not After : Dec 22 14:01:18 2025 GMT Subject: CN=36feef767a6a906b4698eccc4ff56b8e44256af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:8f:3f:4e:be:0d:e0:a7:7e:15:85:f4:51: 3e:85:ed:0c:a9:6c:d6:cf:65:07:ea:3a:61:a4:c6: e2:11:93:7d:a0:07:9f:3b:a1:d2:ee:92:78:90:4d: 1f:97:e7:0a:63:76:a3:80:8f:19:a0:b5:fc:1d:54: c8:20:6e:0c:b9:bd:f1:b1:c5:6c:2b:40:77:13:74: 0b:5e:fd:a5:78:29:6c:74:ec:2f:38:b5:a7:f8:bd: 58:06:8d:7d:fd:4a:ba:88:94:23:92:a4:cb:b5:be: 82:e1:da:2f:31:69:5d:88:c6:92:68:95:c5:f5:c0: 56:2e:ab:01:e6:ce:a2:3a:71:d8:e4:16:fc:55:ec: ab:ed:25:a7:a4:13:2c:4a:b3:12:c6:ab:53:d0:8a: 29:8f:5d:65:89:7f:11:2e:17:e5:49:8d:f4:a7:80: 83:cf:77:68:83:47:21:44:cf:52:35:ba:bf:88:bd: 2e:1a:e2:f1:c7:bc:0d:1f:fa:5d:34:c1:5b:aa:c6: dd:84:51:ef:e2:58:55:e2:46:7e:7f:6c:fe:25:46: d1:a4:8f:04:a8:35:cc:4d:91:ec:33:58:a0:92:5d: 6e:f9:08:63:c0:d9:3f:98:67:2c:f9:53:c9:f7:2a: e8:b8:aa:0d:08:6d:f7:21:5e:9d:b1:b2:04:86:6e: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FE:EF:76:7A:6A:90:6B:46:98:EC:CC:4F:F5:6B:8E:44:25:6A:F5 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fc:ca:f3:3b:6d:86:cd:73:e8:84:c0:a7:eb:62:f0:b0:a5: 57:ac:b6:f2:ad:24:95:89:89:30:fe:a7:4a:39:91:07:5d:f3: db:2b:96:2f:39:6d:e5:c8:50:32:91:55:d5:0e:f5:57:a1:97: f1:33:13:4a:72:52:85:48:f8:b2:88:ec:5c:8d:41:12:96:1d: 4c:e0:9d:8e:a3:f3:47:c6:0d:d8:c2:ef:3b:ae:d7:15:ff:3d: 98:29:d4:17:0d:8a:47:c2:47:b1:b0:02:07:1e:b2:ef:fd:74: 21:50:00:9a:19:88:c2:c1:31:b5:3a:ec:cf:fa:cb:24:fa:80: 4f:94:79:91:e0:83:5d:61:51:2c:fd:3c:56:5d:ff:dd:fe:96: b5:90:d5:ec:b3:88:c2:30:50:6d:1b:32:03:f6:48:9d:0f:5b: 1e:5f:98:35:44:fe:58:33:90:52:62:0c:69:9e:55:a8:a5:a8: 47:5b:fb:7e:85:83:d5:61:de:41:a9:c9:d3:c6:eb:de:ba:17: c0:c1:7a:e9:24:1d:38:63:85:94:43:ad:f9:f8:d6:51:10:fb: 12:37:85:bf:17:30:77:cf:cb:a9:4b:51:49:10:b0:6c:3b:b3: b5:a2:ab:cb:88:5a:89:b2:95:65:84:10:63:53:c7:4e:64:1f: 53:ef:2c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvITLe59ehzQyw9y6DxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjUxMjIxMTQwMTE4WhcNMjUxMjIyMTQwMTE4WjAzMTEwLwYDVQQD EygzNmZlZWY3NjdhNmE5MDZiNDY5OGVjY2M0ZmY1NmI4ZTQ0MjU2YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6aPP06+DeCnfhWF9FE+he0MqWzW z2UH6jphpMbiEZN9oAefO6HS7pJ4kE0fl+cKY3ajgI8ZoLX8HVTIIG4Mub3xscVs K0B3E3QLXv2leClsdOwvOLWn+L1YBo19/Uq6iJQjkqTLtb6C4dovMWldiMaSaJXF 9cBWLqsB5s6iOnHY5Bb8Veyr7SWnpBMsSrMSxqtT0Iopj11liX8RLhflSY30p4CD z3dog0chRM9SNbq/iL0uGuLxx7wNH/pdNMFbqsbdhFHv4lhV4kZ+f2z+JUbRpI8E qDXMTZHsM1igkl1u+QhjwNk/mGcs+VPJ9yrouKoNCG33IV6dsbIEhm47TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb+73Z6apBrRpjszE/1a45EJWr1MB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfzK8ztt hs1z6ITAp+ti8LClV6y28q0klYmJMP6nSjmRB13z2yuWLzlt5chQMpFV1Q71V6GX 8TMTSnJShUj4sojsXI1BEpYdTOCdjqPzR8YN2MLvO67XFf89mCnUFw2KR8JHsbAC Bx6y7/10IVAAmhmIwsExtTrsz/rLJPqAT5R5keCDXWFRLP08Vl3/3f6WtZDV7LOI wjBQbRsyA/ZInQ9bHl+YNUT+WDOQUmIMaZ5VqKWoR1v7foWD1WHeQanJ08br3roX wMF66SQdOGOFlEOt+fjWURD7EjeFvxcwd8/LqUtRSRCwbDuztaKry4haibKVZYQQ Y1PHTmQfU+8srw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:18:58 2025 by rpki-client