This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: TwLrj3VcrwirLkKkjxPib3lKZswnKkiwAt/0KGT/FaQ= Subject key identifier: BD:C3:76:87:77:F2:14:D2:3D:17:54:F1:6A:AC:5D:7C:EE:3D:15:47 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019B3A587F4FC0DC355432A4B776AF858312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 11E2 Signing time: Sat 20 Dec 2025 06:00:36 +0000 Manifest this update: Sat 20 Dec 2025 06:00:36 +0000 Manifest next update: Sun 21 Dec 2025 06:00:36 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: 6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa (hash: WiFLNJi8EFWrkwSxJcCvJRnRmfSBPW/TIg84s3LJWkY=) 3: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 4: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 5: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 6: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: Vo87kPt4vT+1RLd2lag0VeD55/FoAX3crOVzUvalfGs=) 7: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 8: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 9: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 10: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 11: SYk4GxliaZpJqTCuYoS1RlB42nQ.roa (hash: 9B1ID7kU7lydVLj0Bq4vSnoOl2X9alpr1jITqsrON4I=) 12: TvBd_TBobczJOG8QWKDSmcVHnII.roa (hash: SV6ijHb1FOcL82xPrijcBg+IdcxSfneZcM0YuAynCMs=) 13: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 14: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 15: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 16: bsGlZCjY2If1xF5r6Lh9aXftQxY.roa (hash: 4I+nRvBh4ozmeE6qARWVUjACm5WcVyPe6u5e5vaiYo4=) 17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:7f:4f:c0:dc:35:54:32:a4:b7:76:af:85:83:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Dec 20 06:00:36 2025 GMT Not After : Dec 21 06:00:36 2025 GMT Subject: CN=bdc3768777f214d23d1754f16aac5d7cee3d1547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:83:6f:e4:50:92:1d:54:4c:14:31:d3:2d: c7:9f:36:a8:4c:06:7e:c2:f2:37:cd:08:c4:f1:5d: f1:db:c5:44:bd:d4:88:5c:a1:d5:ff:bd:fb:78:ea: d6:68:dd:75:a7:a8:4e:d4:f1:f7:7d:60:5e:65:e2: 84:5f:d2:ce:12:e5:c2:50:e0:0f:ce:6b:ee:fe:ac: 86:1c:f3:e6:de:e7:b4:19:de:c0:3a:9c:67:ff:6b: 29:94:63:6b:7b:4f:28:45:04:a0:9d:6e:29:ce:66: 2e:bb:3f:ad:bc:fa:b7:13:13:1b:0e:3e:26:7d:2f: 12:6c:d1:53:d1:a6:0c:70:bb:60:67:c9:e3:cb:09: ad:d4:0e:c8:fd:3e:27:03:df:1b:88:e3:4b:3f:f9: ab:16:5a:4f:52:a4:80:d1:5b:3c:fd:0d:37:e9:30: 31:8a:54:71:65:6c:1b:72:73:e4:de:bd:bb:18:ae: 6d:82:e2:33:a3:cd:6f:60:d0:dc:35:d5:02:b6:81: aa:36:49:2f:42:a3:88:8f:30:85:f1:81:51:02:83: 40:ca:f8:d9:53:dc:d3:31:e4:fd:30:a2:03:a2:44: 8c:4a:45:58:a0:f8:9e:da:b8:a0:7a:ea:e5:90:a9: 05:fa:23:63:f5:08:51:14:5b:49:08:54:b2:00:5b: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:76:87:77:F2:14:D2:3D:17:54:F1:6A:AC:5D:7C:EE:3D:15:47 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e6:2d:95:68:0d:6e:e6:6c:f1:a0:6b:05:e1:85:4a:38:db: 15:01:7d:2c:1a:fc:67:de:aa:b0:a7:60:50:e1:8b:c6:11:e2: e7:fd:10:fb:3f:e8:49:8c:71:ee:61:0d:7b:a6:3e:37:ec:bf: 85:e6:5f:7d:d6:b4:2f:57:e3:50:a6:61:4f:9c:eb:b9:fe:26: 7d:9c:28:f9:69:3f:bd:d8:04:11:92:30:3d:ba:b2:38:79:2e: cc:ba:25:dd:8b:c9:a7:ee:8d:ba:89:71:05:73:f1:4e:fb:ef: 40:be:99:08:7e:3a:bc:be:6e:9c:a7:1f:63:94:7f:0f:c6:14: 89:b9:f0:39:f7:ae:81:4d:8e:90:36:fa:da:0a:76:77:67:10: 37:51:df:0b:5f:dd:cf:8c:ba:42:6f:fe:9d:13:dd:a3:aa:f5: ea:60:57:52:14:2b:f6:e5:75:9c:f0:c5:ca:3c:50:f5:8d:d5: cc:fe:a1:9b:7a:2d:07:b8:94:f0:00:d5:a3:94:c9:37:0e:ea: cd:8b:8c:84:28:9f:da:40:22:88:3e:20:37:66:eb:6a:7a:fc: 95:8d:28:98:19:98:f7:d4:23:bb:fa:fe:57:63:fe:c4:e0:d2: 1e:64:36:dd:6f:16:13:e7:c2:66:9a:af:59:4a:0b:34:16:0f: 18:b0:27:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WH9PwNw1VDKkt3avhYMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUxMjIwMDYwMDM2WhcNMjUxMjIxMDYwMDM2WjAzMTEwLwYDVQQD EyhiZGMzNzY4Nzc3ZjIxNGQyM2QxNzU0ZjE2YWFjNWQ3Y2VlM2QxNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaaDb+RQkh1UTBQx0y3HnzaoTAZ+ wvI3zQjE8V3x28VEvdSIXKHV/737eOrWaN11p6hO1PH3fWBeZeKEX9LOEuXCUOAP zmvu/qyGHPPm3ue0Gd7AOpxn/2splGNre08oRQSgnW4pzmYuuz+tvPq3ExMbDj4m fS8SbNFT0aYMcLtgZ8njywmt1A7I/T4nA98biONLP/mrFlpPUqSA0Vs8/Q036TAx ilRxZWwbcnPk3r27GK5tguIzo81vYNDcNdUCtoGqNkkvQqOIjzCF8YFRAoNAyvjZ U9zTMeT9MKIDokSMSkVYoPie2rigeurlkKkF+iNj9QhRFFtJCFSyAFveCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3Ddod38hTSPRdU8WqsXXzuPRVHMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+YtlWgN buZs8aBrBeGFSjjbFQF9LBr8Z96qsKdgUOGLxhHi5/0Q+z/oSYxx7mENe6Y+N+y/ heZffda0L1fjUKZhT5zruf4mfZwo+Wk/vdgEEZIwPbqyOHkuzLol3YvJp+6Nuolx BXPxTvvvQL6ZCH46vL5unKcfY5R/D8YUibnwOfeugU2OkDb62gp2d2cQN1HfC1/d z4y6Qm/+nRPdo6r16mBXUhQr9uV1nPDFyjxQ9Y3VzP6hm3otB7iU8ADVo5TJNw7q zYuMhCif2kAiiD4gN2branr8lY0omBmY99Qju/r+V2P+xODSHmQ23W8WE+fCZpqv WUoLNBYPGLAnYw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:24:45 2025 by rpki-client