This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json) Hash identifier: ci3wmpqeaIePYM8gsCE1uoocGBH3nbJQa1hy10jGtxk= Subject key identifier: CE:87:54:16:A1:BB:4E:3E:87:1A:8C:5D:C2:8A:06:D8:A9:A2:7B:A9 Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019B2F9E5B815D985F77022D9AABFF85F758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft Manifest number: 137D Signing time: Thu 18 Dec 2025 04:01:05 +0000 Manifest this update: Thu 18 Dec 2025 04:01:05 +0000 Manifest next update: Fri 19 Dec 2025 04:01:05 +0000 Files and hashes: 1: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=) 2: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: dMUqsRiHyh85YGairRHzfUGAggCJioeQo1epe5sV1x4=) 3: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=) 4: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=) 5: dK8D14UQKbN9F_H7NixtSmYvgXY.roa (hash: mElKhPTPHO/f1skgAvtj0q6ACgI5om0hRS8bXYIUXN0=) 6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:5b:81:5d:98:5f:77:02:2d:9a:ab:ff:85:f7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Dec 18 04:01:05 2025 GMT Not After : Dec 19 04:01:05 2025 GMT Subject: CN=ce875416a1bb4e3e871a8c5dc28a06d8a9a27ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:bc:85:2f:71:8b:de:07:5f:ab:d8:0b:0e: 2f:b3:0e:b9:8a:65:c3:f4:07:73:4f:e9:1b:ff:82: 1a:d4:05:3e:f8:7c:88:09:1a:f6:65:8d:76:34:9c: 99:37:06:d5:7a:98:da:2a:fe:96:13:1a:77:84:a0: 6b:e0:b3:0e:30:df:9e:55:78:09:ad:9e:bf:cf:bc: 69:2f:5b:a7:e3:ff:23:03:a1:7a:77:a3:de:e8:23: bd:f3:07:e9:5d:78:9c:e9:ca:7a:53:66:e1:bf:c1: c0:da:7e:9d:40:4d:2c:48:e7:70:a1:c3:eb:e0:27: ce:88:18:79:0b:f7:86:df:8f:5f:07:db:be:33:96: 15:35:c1:ca:3a:d6:90:9b:40:fa:24:11:84:d4:7c: 63:39:91:b1:33:d7:79:7c:a2:4b:ff:91:60:da:0c: ad:8b:05:3d:b3:f6:69:34:44:74:c2:d6:45:e4:da: 63:d0:31:1b:7e:d6:6e:1d:ab:84:9d:04:98:dd:b8: ae:28:f3:46:53:b6:cb:20:16:4e:be:c1:26:e9:bf: 11:4d:8f:ca:cd:db:db:54:99:0a:47:25:1e:67:3e: 69:eb:74:31:7a:89:7f:9f:46:8e:5e:f4:22:c3:e9: ed:a4:d0:4a:54:78:60:0c:53:f6:a9:95:47:ff:e5: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:87:54:16:A1:BB:4E:3E:87:1A:8C:5D:C2:8A:06:D8:A9:A2:7B:A9 X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:31:7c:aa:3d:b2:d5:f4:37:30:5e:1e:e3:c1:aa:84:d6:a9: d9:65:26:b5:d6:40:ba:0b:1f:ec:ca:52:da:83:1d:17:af:75: 6c:03:13:db:c1:88:3b:d9:6f:35:b0:cd:53:3f:30:ee:9d:4e: 7d:69:f6:a1:d3:e5:d5:3a:89:e8:ab:4e:d0:e6:84:39:af:66: e3:11:14:47:6d:d6:ff:78:ff:7c:8a:14:74:b4:4b:59:16:d2: a3:31:fb:b7:98:9a:41:c1:fe:f8:65:26:08:d0:2a:ed:61:6d: 43:20:52:c3:9a:4d:25:a7:d3:09:6e:8a:e0:50:c5:0f:1e:4f: a4:18:79:34:c9:16:7e:85:c4:a0:ad:9e:30:f8:93:e9:86:48: c0:ff:52:fc:cf:e1:cc:9c:12:40:ea:f2:05:85:32:bd:3c:93: c0:56:02:6e:c1:13:8c:20:1a:22:a0:09:54:00:80:56:39:97: 47:47:b6:8a:f6:13:17:fe:8f:b1:44:a3:1b:d9:eb:f9:a6:b7: 65:61:bd:6c:9c:bb:2d:8e:03:7c:d1:2b:99:7a:bb:9c:75:8f: 05:06:ff:17:18:24:14:31:86:bb:69:6c:02:29:58:b0:2b:99: 23:fe:99:ec:c6:95:ac:2c:e0:aa:28:c6:bb:bd:9f:54:fb:66: 6b:0b:54:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnluBXZhfdwItmqv/hfdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjUxMjE4MDQwMTA1WhcNMjUxMjE5MDQwMTA1WjAzMTEwLwYDVQQD EyhjZTg3NTQxNmExYmI0ZTNlODcxYThjNWRjMjhhMDZkOGE5YTI3YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a28hS9xi94HX6vYCw4vsw65imXD 9AdzT+kb/4Ia1AU++HyICRr2ZY12NJyZNwbVepjaKv6WExp3hKBr4LMOMN+eVXgJ rZ6/z7xpL1un4/8jA6F6d6Pe6CO98wfpXXic6cp6U2bhv8HA2n6dQE0sSOdwocPr 4CfOiBh5C/eG349fB9u+M5YVNcHKOtaQm0D6JBGE1HxjOZGxM9d5fKJL/5Fg2gyt iwU9s/ZpNER0wtZF5Npj0DEbftZuHauEnQSY3biuKPNGU7bLIBZOvsEm6b8RTY/K zdvbVJkKRyUeZz5p63Qxeol/n0aOXvQiw+ntpNBKVHhgDFP2qZVH/+W9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6HVBahu04+hxqMXcKKBtiponupMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajF8qj2y 1fQ3MF4e48GqhNap2WUmtdZAugsf7MpS2oMdF691bAMT28GIO9lvNbDNUz8w7p1O fWn2odPl1TqJ6KtO0OaEOa9m4xEUR23W/3j/fIoUdLRLWRbSozH7t5iaQcH++GUm CNAq7WFtQyBSw5pNJafTCW6K4FDFDx5PpBh5NMkWfoXEoK2eMPiT6YZIwP9S/M/h zJwSQOryBYUyvTyTwFYCbsETjCAaIqAJVACAVjmXR0e2ivYTF/6PsUSjG9nr+aa3 ZWG9bJy7LY4DfNErmXq7nHWPBQb/FxgkFDGGu2lsAilYsCuZI/6Z7MaVrCzgqijG u72fVPtmawtUDw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:42 2025 by rpki-client