This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json) Hash identifier: WqoRVU+MtQv8fgPEZ/UQiTSiCXQn6vdE53w8DyyWrVk= Subject key identifier: A3:89:E0:06:5A:B1:62:6C:38:B9:D7:1B:E5:12:59:96:AC:58:7E:E4 Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Certificate serial: 019B484B4C877909B73C0B7D5BF0D164438F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft Manifest number: 0AD2 Signing time: Mon 22 Dec 2025 23:00:52 +0000 Manifest this update: Mon 22 Dec 2025 23:00:52 +0000 Manifest next update: Tue 23 Dec 2025 23:00:52 +0000 Files and hashes: 1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=) 2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=) 3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=) 4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: QRfUUy9+TipH1bH5V5vqS2UC8QlWHEOahmcZ4T94atQ=) 5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:4c:87:79:09:b7:3c:0b:7d:5b:f0:d1:64:43:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Validity Not Before: Dec 22 23:00:52 2025 GMT Not After : Dec 23 23:00:52 2025 GMT Subject: CN=a389e0065ab1626c38b9d71be5125996ac587ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:88:86:94:63:2b:1c:92:fe:9f:4b:24:0e: 92:e4:da:23:9f:43:10:bf:9f:73:36:c8:9e:77:7a: e6:0c:78:06:56:ce:f6:e2:5e:e2:c1:4a:96:b2:5a: a3:82:c5:37:cf:a1:15:ba:17:41:49:22:99:d1:ad: 53:54:a4:99:ea:f2:e3:f4:46:16:96:d8:60:bc:f5: de:ca:2f:49:93:29:71:1c:d0:89:a4:86:84:ff:6d: 03:33:68:49:35:12:a4:e3:d3:97:60:6d:08:40:e8: db:88:3b:2e:97:98:49:f1:7b:64:66:df:05:79:39: 30:6b:81:a3:da:eb:70:a0:52:1c:58:97:48:97:f1: f7:aa:34:5d:a4:59:2c:de:7f:66:de:63:1a:78:ab: d2:a4:6f:02:12:53:45:79:07:a9:54:25:bd:4c:4c: 4e:23:f8:a6:b7:40:a0:60:d6:30:e2:78:fb:33:0e: f3:4e:7e:65:27:6b:f6:36:57:09:ad:23:08:79:6a: f4:4f:06:13:67:99:ac:e9:9e:60:fa:e8:01:33:14: c0:90:1d:f8:cf:b1:10:c1:e5:7c:ac:a1:ad:d8:1d: af:16:2e:7e:a8:73:6a:58:ae:47:25:d1:e9:6b:ab: 25:f4:93:5c:52:62:5b:04:f9:a5:a9:24:0c:d8:38: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:E0:06:5A:B1:62:6C:38:B9:D7:1B:E5:12:59:96:AC:58:7E:E4 X509v3 Authority Key Identifier: keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:95:29:a4:51:4a:46:72:99:d2:e9:57:dd:a0:4c:3f:32:08: 3a:dd:a3:a0:94:61:94:ee:0e:01:c3:c8:d4:14:71:8c:f7:fb: 14:1c:ff:91:53:2b:b5:f1:aa:f1:72:21:f4:47:e5:85:da:06: 16:d4:19:ff:92:b7:c1:0d:7b:ec:22:76:67:8b:2a:8b:95:39: 29:0f:98:d3:51:84:4f:27:05:93:90:6f:95:67:40:6c:48:ed: 05:eb:83:e6:6d:2e:b1:c8:81:29:ce:a0:8d:f0:3b:05:13:21: b7:04:56:ec:56:d8:a2:14:b3:df:77:63:31:0e:8c:9b:cb:c0: fb:15:38:38:21:e3:6f:5e:ee:c8:90:e0:4b:8b:f7:b7:db:74: e6:4c:1f:12:e9:33:be:83:18:24:12:4b:d4:54:b3:3d:1c:21: ea:24:21:fb:26:11:f5:de:a3:82:18:6e:b0:e4:22:59:33:28: 97:fe:d4:b0:59:36:1f:d4:f5:ce:71:cc:ab:52:c7:26:ed:d5: ee:c3:5d:9b:98:49:1c:54:ae:37:be:99:7a:80:a2:cb:a8:f4: 67:ca:09:be:85:9e:dc:bb:48:3f:f8:a2:e1:90:42:ec:0e:f4: a3:54:47:10:52:57:d3:6f:f0:47:2f:98:db:88:32:ae:9e:1a: 72:85:c0:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS0yHeQm3PAt9W/DRZEOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk OGI4ZTUwHhcNMjUxMjIyMjMwMDUyWhcNMjUxMjIzMjMwMDUyWjAzMTEwLwYDVQQD EyhhMzg5ZTAwNjVhYjE2MjZjMzhiOWQ3MWJlNTEyNTk5NmFjNTg3ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5eIhpRjKxyS/p9LJA6S5Nojn0MQ v59zNsied3rmDHgGVs724l7iwUqWslqjgsU3z6EVuhdBSSKZ0a1TVKSZ6vLj9EYW lthgvPXeyi9JkylxHNCJpIaE/20DM2hJNRKk49OXYG0IQOjbiDsul5hJ8XtkZt8F eTkwa4Gj2utwoFIcWJdIl/H3qjRdpFks3n9m3mMaeKvSpG8CElNFeQepVCW9TExO I/imt0CgYNYw4nj7Mw7zTn5lJ2v2NlcJrSMIeWr0TwYTZ5ms6Z5g+ugBMxTAkB34 z7EQweV8rKGt2B2vFi5+qHNqWK5HJdHpa6sl9JNcUmJbBPmlqSQM2DhAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOJ4AZasWJsOLnXG+USWZasWH7kMB8GA1UdIwQY MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5UppFFK RnKZ0ulX3aBMPzIIOt2joJRhlO4OAcPI1BRxjPf7FBz/kVMrtfGq8XIh9EflhdoG FtQZ/5K3wQ177CJ2Z4sqi5U5KQ+Y01GETycFk5BvlWdAbEjtBeuD5m0usciBKc6g jfA7BRMhtwRW7FbYohSz33djMQ6Mm8vA+xU4OCHjb17uyJDgS4v3t9t05kwfEukz voMYJBJL1FSzPRwh6iQh+yYR9d6jghhusOQiWTMol/7UsFk2H9T1znHMq1LHJu3V 7sNdm5hJHFSuN76ZeoCiy6j0Z8oJvoWe3LtIP/ii4ZBC7A70o1RHEFJX02/wRy+Y 24gyrp4acoXA3g== -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:16 2025 by rpki-client