This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: fpw8YljnXqrAaMWhS8HjlgMxApB2wpVAMVkbCDo813I= Subject key identifier: 90:50:B2:21:D1:F9:17:FF:68:E2:6E:13:49:45:DD:D5:CF:86:A1:24 Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019B397D1632FDB10580AE01767DBDA3DC41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 16A0 Signing time: Sat 20 Dec 2025 02:00:57 +0000 Manifest this update: Sat 20 Dec 2025 02:00:57 +0000 Manifest next update: Sun 21 Dec 2025 02:00:57 +0000 Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=) 2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=) 3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: NuNM95QuqL/mO6T3wnDmG/s4JdqtJzWkfXnt5wy2caE=) 4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:16:32:fd:b1:05:80:ae:01:76:7d:bd:a3:dc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Dec 20 02:00:57 2025 GMT Not After : Dec 21 02:00:57 2025 GMT Subject: CN=9050b221d1f917ff68e26e134945ddd5cf86a124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:7c:0f:cb:7f:c4:9c:0d:62:e0:eb:b1:d9: b7:d9:64:9d:7e:40:7f:eb:e0:43:47:f6:37:14:32: 8e:09:35:e0:7e:8a:ef:57:95:06:c1:d4:5d:c0:8b: eb:fc:99:f3:5d:b5:f4:bd:56:29:b1:5d:cf:5c:d6: 1b:02:40:7d:3e:7f:c4:88:87:23:6d:9f:21:d4:03: 44:87:ed:85:d0:03:73:86:f3:17:96:0b:c8:e2:78: 6e:a0:e6:6f:69:01:9c:8d:fd:b6:09:a0:80:32:e2: 7f:e8:78:61:5a:c9:72:23:c8:3a:5a:28:49:4f:59: 7f:c0:6e:a3:81:aa:cc:6a:d6:58:9e:65:eb:d9:cb: b1:4d:0c:1e:39:13:f5:ff:04:7d:9a:48:e6:fb:3b: 2a:2a:5e:34:1d:3e:fd:a0:82:06:72:44:d8:f7:e8: 2f:55:46:0f:68:48:04:55:47:ae:01:89:f8:7a:13: d4:f8:a5:54:ef:f4:21:69:0e:8a:21:35:d0:a5:9a: e5:e4:f4:6c:64:67:aa:87:11:a0:ab:1c:a3:15:27: b5:b2:1a:99:4e:89:1d:fa:d7:3d:23:49:b8:0f:ab: de:0c:15:23:04:bb:12:e9:a8:7d:53:1b:80:e0:75: ae:01:1a:6b:59:09:fb:17:8e:b3:9a:df:1e:43:53: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:50:B2:21:D1:F9:17:FF:68:E2:6E:13:49:45:DD:D5:CF:86:A1:24 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:81:6b:02:41:a1:7c:f3:89:c6:39:2b:90:06:2b:41:b4:cf: 01:2e:89:86:bf:42:95:54:a6:03:df:13:cf:5c:f1:da:a1:08: 9c:33:b0:47:9e:53:8d:58:74:80:9d:4b:07:39:43:8a:6b:d9: 96:5d:be:76:7b:16:d2:cc:aa:82:fe:71:ef:e4:82:8f:2a:e0: b8:aa:2a:8c:da:53:05:56:fe:96:b7:0f:9f:e0:76:af:f2:8f: 54:36:6d:3b:9a:a2:4e:2e:8c:e4:81:fc:57:6a:fa:8e:82:99: 17:ff:64:f1:e4:c5:46:e7:d5:ec:b2:a8:6f:5b:a8:33:a6:9f: 50:57:59:38:06:a3:e0:c8:03:0c:a6:6f:ce:be:a9:9b:96:1b: 7f:db:f6:3e:dc:25:b3:4d:9f:03:41:0c:f9:c4:d6:6a:33:9f: eb:a2:0e:71:46:47:74:a2:b6:ba:95:f2:18:ac:50:2d:fb:3f: e6:12:68:13:43:3b:aa:39:c5:3b:69:5c:60:f1:c7:2f:33:ff: ad:0e:51:3f:89:1e:3c:14:d4:41:e8:fd:db:0c:c5:fb:11:63: 2d:b6:ec:fb:ce:1c:ec:ae:0c:0c:68:1e:b9:37:33:57:0d:95: 29:99:50:29:d8:b0:4a:3b:e2:ab:ca:cf:e1:30:1f:42:d6:50: 33:a7:f8:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fRYy/bEFgK4Bdn29o9xBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjUxMjIwMDIwMDU3WhcNMjUxMjIxMDIwMDU3WjAzMTEwLwYDVQQD Eyg5MDUwYjIyMWQxZjkxN2ZmNjhlMjZlMTM0OTQ1ZGRkNWNmODZhMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU18D8t/xJwNYuDrsdm32WSdfkB/ 6+BDR/Y3FDKOCTXgforvV5UGwdRdwIvr/JnzXbX0vVYpsV3PXNYbAkB9Pn/EiIcj bZ8h1ANEh+2F0ANzhvMXlgvI4nhuoOZvaQGcjf22CaCAMuJ/6HhhWslyI8g6WihJ T1l/wG6jgarMatZYnmXr2cuxTQweORP1/wR9mkjm+zsqKl40HT79oIIGckTY9+gv VUYPaEgEVUeuAYn4ehPU+KVU7/QhaQ6KITXQpZrl5PRsZGeqhxGgqxyjFSe1shqZ Tokd+tc9I0m4D6veDBUjBLsS6ah9UxuA4HWuARprWQn7F46zmt8eQ1OO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBQsiHR+Rf/aOJuE0lF3dXPhqEkMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoFrAkGh fPOJxjkrkAYrQbTPAS6Jhr9ClVSmA98Tz1zx2qEInDOwR55TjVh0gJ1LBzlDimvZ ll2+dnsW0syqgv5x7+SCjyrguKoqjNpTBVb+lrcPn+B2r/KPVDZtO5qiTi6M5IH8 V2r6joKZF/9k8eTFRufV7LKob1uoM6afUFdZOAaj4MgDDKZvzr6pm5Ybf9v2Ptwl s02fA0EM+cTWajOf66IOcUZHdKK2upXyGKxQLfs/5hJoE0M7qjnFO2lcYPHHLzP/ rQ5RP4kePBTUQej92wzF+xFjLbbs+84c7K4MDGgeuTczVw2VKZlQKdiwSjviq8rP 4TAfQtZQM6f4YQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:20:42 2025 by rpki-client