This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json) Hash identifier: ubqRFbyvZzV8LJ67XaePqPFxIB785xjg1Sjq/pj+rMs= Subject key identifier: 2B:6D:2F:8A:C3:30:B1:82:09:F4:24:B8:73:82:DC:8D:69:1F:63:86 Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb Certificate serial: 019B50735922FB4EDD4D610ECC648DCEAC25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft Manifest number: 0848 Signing time: Wed 24 Dec 2025 13:01:35 +0000 Manifest this update: Wed 24 Dec 2025 13:01:35 +0000 Manifest next update: Thu 25 Dec 2025 13:01:35 +0000 Files and hashes: 1: HlWQb2FJPJevQzdN-672g7_czRw.roa (hash: RXUVTX63EDXGPDEfUV3NoAdiOJHw8+fXf2xrTwsVvM0=) 2: Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa (hash: MFZ45SF5Rc4M+oQuJ6ydMNsNfmBIGzpqiYFUJ97A20U=) 3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: 6oana5Krr/QoDvoJBhVWf3FFjV0O7lphRkPKr5Krgv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:59:22:fb:4e:dd:4d:61:0e:cc:64:8d:ce:ac:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb Validity Not Before: Dec 24 13:01:35 2025 GMT Not After : Dec 25 13:01:35 2025 GMT Subject: CN=2b6d2f8ac330b18209f424b87382dc8d691f6386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:bf:9c:b3:39:44:07:4a:d0:69:49:8f:28: 62:da:47:26:05:12:e3:b6:8e:d3:ca:48:7f:db:73: d6:7b:9f:83:02:aa:39:ae:48:64:fc:b7:fd:51:4d: f1:05:29:0d:03:87:2e:25:61:f6:d3:48:27:bc:df: 21:d6:20:06:a5:49:49:47:34:4c:66:33:a9:6c:10: f9:c8:8f:34:38:24:96:63:4c:95:f7:79:83:36:75: 37:98:85:3e:b2:98:d2:37:59:c0:dc:d7:0c:9a:ef: d2:fa:17:94:6a:84:af:4e:3d:e8:9a:1f:e4:6f:e6: 3d:9d:bf:b8:35:f1:7f:70:99:4f:66:ec:e1:4a:54: f4:d7:6d:eb:32:4e:35:11:ec:5f:70:ba:ed:18:18: d1:11:05:5d:07:f2:3f:76:31:6f:6b:7a:05:0f:18: 02:5c:b9:a2:6e:cf:64:5e:8e:bd:1a:0f:9d:37:a0: a9:66:52:10:11:e4:16:be:5d:ae:8f:c5:1c:b3:50: 42:b3:78:cd:bc:5e:81:96:7b:fc:d7:4b:9f:93:7e: cc:63:d9:76:19:04:1e:e4:27:b9:0e:ae:42:f3:18: 24:b3:f4:8f:29:71:cf:17:d6:53:a3:58:01:45:f9: c9:46:e3:1b:77:0a:a4:13:b2:e5:95:60:72:f1:fa: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6D:2F:8A:C3:30:B1:82:09:F4:24:B8:73:82:DC:8D:69:1F:63:86 X509v3 Authority Key Identifier: keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:41:87:10:50:4d:11:30:b4:67:fc:50:9a:92:f4:1e:28:39: 61:04:08:54:98:a4:63:0f:cb:88:9d:85:ee:d3:20:4e:a6:c7: 21:8c:52:4d:a5:fc:ce:e7:05:f1:c1:1f:72:40:ca:4d:57:4b: 8b:14:34:e7:f4:ee:72:4d:df:0a:48:66:3f:96:cd:22:26:8e: 13:c1:97:17:d5:7b:c7:b2:87:d6:50:8f:5b:15:ab:91:40:c5: ef:80:7c:35:5d:f9:b9:34:34:ae:1c:d5:54:f0:1d:af:79:4c: ad:10:50:f3:2a:69:a4:7a:50:fb:fd:3b:22:26:60:e1:bd:ed: 9f:51:e7:63:bd:d4:2a:5a:de:0d:9a:68:b4:04:49:c5:bf:d4: c4:05:ae:96:fa:70:48:d7:83:c5:16:92:b9:79:95:80:ac:69: 09:e0:2b:a6:a1:70:06:36:1a:46:6a:03:96:8d:0d:59:fd:28: 35:c3:7a:05:68:ab:9b:06:fa:de:8a:ab:2e:64:bb:9c:ac:be: ce:11:fd:20:7c:6c:21:61:f9:17:0a:75:f2:86:e2:e4:d2:d4: 5e:6e:a2:72:d3:69:0d:cb:93:7f:75:c3:ad:fa:5d:3b:bb:79: 45:60:e7:a0:fe:dd:fc:cc:ea:e9:4a:84:f9:af:b4:76:2e:a0: 84:a2:97:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQc1ki+07dTWEOzGSNzqwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw YTdkZGIwHhcNMjUxMjI0MTMwMTM1WhcNMjUxMjI1MTMwMTM1WjAzMTEwLwYDVQQD EygyYjZkMmY4YWMzMzBiMTgyMDlmNDI0Yjg3MzgyZGM4ZDY5MWY2Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz6/nLM5RAdK0GlJjyhi2kcmBRLj to7Tykh/23PWe5+DAqo5rkhk/Lf9UU3xBSkNA4cuJWH200gnvN8h1iAGpUlJRzRM ZjOpbBD5yI80OCSWY0yV93mDNnU3mIU+spjSN1nA3NcMmu/S+heUaoSvTj3omh/k b+Y9nb+4NfF/cJlPZuzhSlT0123rMk41EexfcLrtGBjREQVdB/I/djFva3oFDxgC XLmibs9kXo69Gg+dN6CpZlIQEeQWvl2uj8Ucs1BCs3jNvF6Blnv810ufk37MY9l2 GQQe5Ce5Dq5C8xgks/SPKXHPF9ZTo1gBRfnJRuMbdwqkE7LllWBy8fr7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCttL4rDMLGCCfQkuHOC3I1pH2OGMB8GA1UdIwQY MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5 LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEGHEFBN ETC0Z/xQmpL0Hig5YQQIVJikYw/LiJ2F7tMgTqbHIYxSTaX8zucF8cEfckDKTVdL ixQ05/Tuck3fCkhmP5bNIiaOE8GXF9V7x7KH1lCPWxWrkUDF74B8NV35uTQ0rhzV VPAdr3lMrRBQ8ypppHpQ+/07IiZg4b3tn1HnY73UKlreDZpotARJxb/UxAWulvpw SNeDxRaSuXmVgKxpCeArpqFwBjYaRmoDlo0NWf0oNcN6BWirmwb63oqrLmS7nKy+ zhH9IHxsIWH5Fwp18obi5NLUXm6ictNpDcuTf3XDrfpdO7t5RWDnoP7d/Mzq6UqE +a+0di6ghKKXuA== -----END CERTIFICATE-----Generated at Wed Dec 24 16:41:47 2025 by rpki-client