This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json) Hash identifier: CyKtBm34NW2QWe62Wwywj5ZA166iLX3Q/PIECtDzP0s= Subject key identifier: CA:1A:D1:6D:5B:36:FF:20:A9:3D:35:8B:E8:2D:18:E9:42:21:8A:F7 Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019B38D80AB2BE5FA17C7CE045DFA579BC86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft Manifest number: 17C5 Signing time: Fri 19 Dec 2025 23:00:41 +0000 Manifest this update: Fri 19 Dec 2025 23:00:41 +0000 Manifest next update: Sat 20 Dec 2025 23:00:41 +0000 Files and hashes: 1: BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa (hash: pokEhbaiyjz6akLSE/xe2fj33j12cTdNEBlSqEQjlSw=) 2: PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa (hash: A4kpvpFD1Ozda2IwrgnmAZURYP2sYoUji6fCdgNJDuU=) 3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: TduCUqwIZgSLaRawTCxES+HSK/iTezLkK0hmoTs6QP0=) 4: nPf6vPs81jX8tCyyvpUwSrOy0dE.roa (hash: y2CFPQ3qkO9mevFesEexkErie9IwGC/QLDLpCaVtX1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:0a:b2:be:5f:a1:7c:7c:e0:45:df:a5:79:bc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Dec 19 23:00:41 2025 GMT Not After : Dec 20 23:00:41 2025 GMT Subject: CN=ca1ad16d5b36ff20a93d358be82d18e942218af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:d0:d2:f9:a2:bf:28:9a:a9:fd:c5:6a:a4: 91:9a:b6:00:69:05:fa:c3:8a:46:18:8b:7a:0d:36: 48:3a:d4:0b:66:dd:65:0b:59:cb:5e:f9:ad:af:d7: f2:f3:21:da:b2:c9:1e:70:80:30:03:e9:f5:4e:df: cb:f6:64:00:56:52:65:84:48:bc:7c:97:3d:46:b1: 3b:85:cd:75:c1:b9:9c:b9:c6:d3:a1:1a:60:19:03: f1:2c:ad:07:a1:4b:22:0c:b5:20:1b:a2:c5:f6:6d: 60:bc:54:d4:b2:9b:07:83:51:3a:9c:91:36:6a:6b: 31:94:1f:ec:22:fe:78:1b:1f:35:93:32:59:3c:9d: 0c:67:fc:b8:06:27:97:e8:21:aa:41:ff:a1:1a:b5: 39:48:d6:ab:94:d1:e9:f4:b5:fb:fa:29:c5:83:79: be:bb:e5:d8:f3:18:d4:dc:a7:b0:27:ce:cb:f2:e9: d9:ed:21:13:27:42:1f:9d:8e:f0:44:05:dd:34:96: 11:fa:3f:dc:2d:70:6b:8b:14:de:8d:d5:4f:28:58: 42:90:5f:1e:8d:a5:9d:94:b3:42:45:c5:30:47:d1: 34:f3:ee:b3:60:dd:ce:51:fb:bc:10:ce:9a:54:31: 8e:d7:8f:95:e4:40:eb:ef:a0:8d:19:9e:7d:2c:36: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1A:D1:6D:5B:36:FF:20:A9:3D:35:8B:E8:2D:18:E9:42:21:8A:F7 X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:50:7e:5e:2d:f0:3a:0d:1d:a8:cb:9e:a4:d4:ff:b2:24:ad: fa:f5:97:70:e9:f0:8b:af:fa:a7:2f:89:ec:5f:f9:2b:91:70: ae:a4:b9:8b:ca:1b:01:69:bd:71:46:89:44:32:0f:7d:5d:96: b8:8e:07:3a:22:6a:f3:83:0b:db:e2:fa:b0:f8:73:52:7f:b1: 87:f1:2c:62:0e:c3:36:8d:17:b1:66:4b:d3:61:a3:6f:97:28: 3f:cd:2a:c0:c5:ac:da:40:85:6c:b6:cb:24:37:88:c8:8f:10: 38:8c:d2:ca:4c:65:1b:99:ab:5f:44:3f:e1:92:e0:76:0d:5c: 0d:d7:8c:63:5b:49:13:88:9f:dd:d0:68:86:24:1b:18:8d:93: 97:62:70:43:3f:cd:c8:46:b4:67:fb:74:e1:49:3d:93:7b:26: fc:65:3f:0b:58:6c:ed:8f:45:bd:51:e3:87:fa:4a:8b:21:75: 06:0b:0e:74:f0:ef:47:b8:09:41:70:cb:05:22:3d:59:5d:34: 9f:3d:c1:f2:96:fa:91:6b:3b:2b:47:66:a1:2f:07:ed:b0:de: ae:d9:a4:c8:aa:91:fc:b4:cc:77:e2:6d:57:da:7b:a7:90:3f: 2c:64:21:32:be:f0:d8:bc:dd:2e:56:21:7d:c9:91:fb:bf:1f: 65:32:35:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Aqyvl+hfHzgRd+lebyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjUxMjE5MjMwMDQxWhcNMjUxMjIwMjMwMDQxWjAzMTEwLwYDVQQD EyhjYTFhZDE2ZDViMzZmZjIwYTkzZDM1OGJlODJkMThlOTQyMjE4YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt7Q0vmivyiaqf3FaqSRmrYAaQX6 w4pGGIt6DTZIOtQLZt1lC1nLXvmtr9fy8yHasskecIAwA+n1Tt/L9mQAVlJlhEi8 fJc9RrE7hc11wbmcucbToRpgGQPxLK0HoUsiDLUgG6LF9m1gvFTUspsHg1E6nJE2 amsxlB/sIv54Gx81kzJZPJ0MZ/y4BieX6CGqQf+hGrU5SNarlNHp9LX7+inFg3m+ u+XY8xjU3KewJ87L8unZ7SETJ0IfnY7wRAXdNJYR+j/cLXBrixTejdVPKFhCkF8e jaWdlLNCRcUwR9E08+6zYN3OUfu8EM6aVDGO14+V5EDr76CNGZ59LDZW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoa0W1bNv8gqT01i+gtGOlCIYr3MB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlB+Xi3w Og0dqMuepNT/siSt+vWXcOnwi6/6py+J7F/5K5FwrqS5i8obAWm9cUaJRDIPfV2W uI4HOiJq84ML2+L6sPhzUn+xh/EsYg7DNo0XsWZL02Gjb5coP80qwMWs2kCFbLbL JDeIyI8QOIzSykxlG5mrX0Q/4ZLgdg1cDdeMY1tJE4if3dBohiQbGI2Tl2JwQz/N yEa0Z/t04Uk9k3sm/GU/C1hs7Y9FvVHjh/pKiyF1BgsOdPDvR7gJQXDLBSI9WV00 nz3B8pb6kWs7K0dmoS8H7bDertmkyKqR/LTMd+JtV9p7p5A/LGQhMr7w2LzdLlYh fcmR+78fZTI1XA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:34 2025 by rpki-client