This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: ej5dpf1dAZoNutAK/I7nk/g6bd3mMTDJ6/fEzpgM2e4= Subject key identifier: 61:88:82:1A:1E:DB:70:13:D9:B4:FE:6E:D6:0E:BC:D9:A7:B6:87:D0 Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019B3B6BDF05740BD7F75299BFAA0468E6BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 16A1 Signing time: Sat 20 Dec 2025 11:01:23 +0000 Manifest this update: Sat 20 Dec 2025 11:01:23 +0000 Manifest next update: Sun 21 Dec 2025 11:01:23 +0000 Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=) 2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=) 3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: D/bsR7hWU/GbqG6W4cRBKULTLf9fP7ouFTjkozHD4kM=) 4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:df:05:74:0b:d7:f7:52:99:bf:aa:04:68:e6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Dec 20 11:01:23 2025 GMT Not After : Dec 21 11:01:23 2025 GMT Subject: CN=6188821a1edb7013d9b4fe6ed60ebcd9a7b687d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:ed:09:ca:ba:89:9e:de:fe:25:fc:fe:b4: ab:9b:39:1e:92:7b:c4:61:4c:e3:b4:7a:96:e5:5d: c7:22:e3:02:99:17:fe:b1:70:a9:d8:df:4c:2a:25: 69:d8:d7:61:0b:78:ff:c2:fc:80:fa:bb:3d:0d:5f: bc:dd:95:67:11:a6:23:84:0e:bb:68:9c:9a:b4:b2: 57:98:7c:dd:ee:f3:af:3e:5b:15:d2:9b:ee:22:42: b8:fa:ac:22:3f:d4:69:db:99:a4:87:9a:01:bd:9c: 88:ef:df:8d:27:b3:51:3c:1a:5a:76:bb:6d:62:00: b6:d1:02:09:a4:84:73:3d:09:42:b5:9a:b5:99:d9: 17:2b:22:bf:d7:49:e8:b5:16:77:38:41:c2:7a:46: 77:5d:92:e1:67:89:f0:4b:d7:f6:40:78:16:aa:59: c6:18:d8:1f:d4:d8:30:3c:fb:15:25:42:4b:d2:b4: 27:e4:29:98:16:b6:37:6e:2e:bc:27:68:50:55:88: 24:fc:f9:bf:a0:17:74:02:5c:2c:06:af:e5:7e:ee: 51:0e:0e:2f:bf:e8:1e:fd:17:1a:97:c4:0e:68:33: 2a:68:1a:91:20:47:9b:f1:5c:f7:8e:d6:e6:4d:21: 8d:54:fc:ff:d8:6a:c8:59:b4:eb:cb:8d:3e:1f:2c: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:88:82:1A:1E:DB:70:13:D9:B4:FE:6E:D6:0E:BC:D9:A7:B6:87:D0 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:9a:eb:91:43:41:b2:31:e4:76:8c:0c:bf:c8:99:ba:47:86: 3a:bc:11:9a:40:69:2c:fa:c6:69:01:e1:7d:aa:85:ad:29:61: 4a:06:fc:1a:b6:c3:79:e5:82:e4:59:59:ce:f7:7c:eb:6d:fa: e6:1a:e8:63:96:c6:a2:d1:2a:77:69:7a:d5:92:d5:20:55:2b: ea:e9:52:cf:75:63:75:92:f8:a8:e7:59:d1:a7:7c:cf:c4:2d: e5:d9:05:42:e0:98:cc:4b:57:1a:a3:44:64:2d:71:ef:8e:73: b8:33:ac:89:c1:87:86:4a:c7:6d:4e:86:6f:59:2d:59:cb:2b: 1a:41:6b:7d:df:20:eb:e7:2d:b5:1e:c6:9a:f3:d3:2a:4e:c9: 68:96:c2:37:2f:31:e1:46:0a:ea:06:3a:c8:2f:e3:f6:32:21: b3:fa:d2:69:57:31:50:a8:00:b5:14:64:24:df:34:08:e3:db: bd:a4:79:04:5b:af:fb:83:28:96:71:1d:84:54:71:ff:37:80: 6e:87:62:33:46:3f:2d:e2:32:9d:a5:d0:3d:61:4e:75:dc:84: d2:58:e4:d8:c8:7f:97:f2:f9:c4:0a:9c:46:57:30:0b:6c:c9: f7:03:22:f8:73:a3:46:ce:a9:91:a6:08:54:5e:03:47:b6:4a: 1e:01:a7:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a98FdAvX91KZv6oEaOa9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjUxMjIwMTEwMTIzWhcNMjUxMjIxMTEwMTIzWjAzMTEwLwYDVQQD Eyg2MTg4ODIxYTFlZGI3MDEzZDliNGZlNmVkNjBlYmNkOWE3YjY4N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q3tCcq6iZ7e/iX8/rSrmzkeknvE YUzjtHqW5V3HIuMCmRf+sXCp2N9MKiVp2NdhC3j/wvyA+rs9DV+83ZVnEaYjhA67 aJyatLJXmHzd7vOvPlsV0pvuIkK4+qwiP9Rp25mkh5oBvZyI79+NJ7NRPBpadrtt YgC20QIJpIRzPQlCtZq1mdkXKyK/10notRZ3OEHCekZ3XZLhZ4nwS9f2QHgWqlnG GNgf1NgwPPsVJUJL0rQn5CmYFrY3bi68J2hQVYgk/Pm/oBd0AlwsBq/lfu5RDg4v v+ge/Rcal8QOaDMqaBqRIEeb8Vz3jtbmTSGNVPz/2GrIWbTry40+HywRGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGIghoe23AT2bT+btYOvNmntofQMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5rrkUNB sjHkdowMv8iZukeGOrwRmkBpLPrGaQHhfaqFrSlhSgb8GrbDeeWC5FlZzvd86236 5hroY5bGotEqd2l61ZLVIFUr6ulSz3VjdZL4qOdZ0ad8z8Qt5dkFQuCYzEtXGqNE ZC1x745zuDOsicGHhkrHbU6Gb1ktWcsrGkFrfd8g6+cttR7GmvPTKk7JaJbCNy8x 4UYK6gY6yC/j9jIhs/rSaVcxUKgAtRRkJN80COPbvaR5BFuv+4MolnEdhFRx/zeA bodiM0Y/LeIynaXQPWFOddyE0ljk2Mh/l/L5xAqcRlcwC2zJ9wMi+HOjRs6pkaYI VF4DR7ZKHgGnkA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:32 2025 by rpki-client