This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft File: htljhE-CBdE2lDRTHJmGAMFXgaE.mft (raw, json) Hash identifier: cYDsMjVSD7eaeBoK4IGgus3G8fXcn8ngMI7gi6Q980w= Subject key identifier: 8A:6E:AF:44:4B:8F:F1:62:87:AB:05:A9:1A:FE:B6:01:C3:4B:42:21 Authority key identifier: 86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1 Certificate issuer: /CN=86d963844f8205d1369434531c998600c15781a1 Certificate serial: 019B3C7E131EA938D5B702EA842604819BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft Manifest number: B1 Signing time: Sat 20 Dec 2025 16:00:53 +0000 Manifest this update: Sat 20 Dec 2025 16:00:53 +0000 Manifest next update: Sun 21 Dec 2025 16:00:53 +0000 Files and hashes: 1: 8jP_y3ejZgoctYO3RIyWsm1WwTY.roa (hash: ecd4E/hh4r+6kZxHuFwVi+mLNAKKO0mfpn1+ByWy+90=) 2: V7CEZgNPEwBOCZ32WoYA0V3PrJU.roa (hash: G4BvHWHZE9u8RSsaaH1AIK81oXqs5R5aGYeyG38uyOM=) 3: htljhE-CBdE2lDRTHJmGAMFXgaE.crl (hash: z7bdKtj9BdnmFL5DN8XqNEPilo5ptIWutI4o2tQgm/4=) 4: kcL34WnZYMdN4SVhN2PeVdwWvgo.roa (hash: hEzKI9j+KADlA8KNZpHMbM3OEdQSPR+S9HcqTPPWTXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:13:1e:a9:38:d5:b7:02:ea:84:26:04:81:9b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d963844f8205d1369434531c998600c15781a1 Validity Not Before: Dec 20 16:00:53 2025 GMT Not After : Dec 21 16:00:53 2025 GMT Subject: CN=8a6eaf444b8ff16287ab05a91afeb601c34b4221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:bc:32:b4:c7:e3:87:83:48:e4:9f:c8:c7: 7a:8b:02:81:06:f9:3a:ca:ee:45:c4:a7:01:aa:3c: 14:39:78:20:63:ed:8d:8a:54:dc:9c:23:4c:47:65: db:ab:23:c0:49:73:22:7b:c3:b2:8f:70:e9:36:40: ee:94:cc:ba:3d:90:dd:ea:8f:73:ec:aa:b9:99:e9: 80:08:05:2b:10:1e:34:2d:18:64:19:95:20:4c:b1: e0:41:e1:8b:d4:5c:c0:ef:a2:c8:d5:6b:ca:27:9a: 42:14:d2:d8:62:8e:05:e0:6e:17:10:44:37:27:3b: 19:6c:38:9b:d5:39:2d:0b:e5:12:38:6c:bc:42:b3: 34:11:8e:56:a9:c5:39:60:f4:1c:a1:ff:74:e5:13: 6b:73:ce:bb:2b:0d:22:5e:b2:48:89:b3:e4:2f:5e: e1:79:a7:91:d0:df:e8:db:4b:87:42:c3:31:2a:7c: 15:9a:3b:53:ad:06:8a:58:87:88:b8:77:f0:48:3f: 25:5a:55:fe:13:51:9a:d5:2b:a9:e8:06:b6:51:fe: 8f:12:00:6b:c8:1a:60:88:79:d6:8d:19:fd:39:01: 7c:9c:c6:d0:39:f0:28:46:6b:74:2a:6d:6c:f3:77: 70:52:ab:8c:cf:3b:4b:d9:8b:a7:74:02:af:ab:59: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6E:AF:44:4B:8F:F1:62:87:AB:05:A9:1A:FE:B6:01:C3:4B:42:21 X509v3 Authority Key Identifier: keyid:86:D9:63:84:4F:82:05:D1:36:94:34:53:1C:99:86:00:C1:57:81:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htljhE-CBdE2lDRTHJmGAMFXgaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a289eb-45ce-4618-857f-78189d015286/1/htljhE-CBdE2lDRTHJmGAMFXgaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:f5:a9:4a:e7:25:b8:2f:82:9c:ea:49:3d:5c:ea:ef:bb: 35:bc:95:70:24:5f:ad:ad:ad:4f:ce:6a:c0:85:ce:d8:a8:6e: 62:63:a9:4d:bf:e5:22:7d:0e:07:d5:18:60:ec:b3:c9:7d:36: 70:cc:b4:ce:27:54:fc:e5:44:c7:8f:a4:2d:4e:50:70:8e:4a: b2:4d:42:e4:86:fd:9c:05:33:fe:4b:3e:8b:4c:17:c8:15:27: f6:38:e6:f9:9e:d9:f7:e6:70:ee:58:bd:3f:d6:c3:88:9e:ca: 87:b5:b4:39:1e:0e:92:d2:86:68:7f:57:44:65:94:6d:43:16: dc:a8:cb:55:c9:5e:18:9b:40:65:53:cc:4b:e0:ef:d9:dd:d6: 8b:bd:97:b0:58:f4:f0:d1:53:88:00:ab:e2:a7:1c:62:e9:22: 76:1a:18:08:f1:1c:db:9d:81:b8:28:a6:d5:d1:0e:72:1f:b3: ac:22:d1:c8:9e:fa:00:5b:da:6b:cd:fa:9b:bd:48:8c:c0:29: 59:c7:ad:ea:bd:a4:e0:dd:31:ce:e4:f6:92:8f:37:fc:bb:20: f3:4f:a6:62:e9:a7:db:40:83:58:97:e9:cb:a9:97:1b:f6:23: 17:1e:1d:b5:a6:1e:42:51:c9:07:c8:16:d5:b5:ad:5f:15:aa: 8f:b4:7c:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhMeqTjVtwLqhCYEgZu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDk2Mzg0NGY4MjA1ZDEzNjk0MzQ1MzFjOTk4NjAwYzE1 NzgxYTEwHhcNMjUxMjIwMTYwMDUzWhcNMjUxMjIxMTYwMDUzWjAzMTEwLwYDVQQD Eyg4YTZlYWY0NDRiOGZmMTYyODdhYjA1YTkxYWZlYjYwMWMzNGI0MjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D+8MrTH44eDSOSfyMd6iwKBBvk6 yu5FxKcBqjwUOXggY+2NilTcnCNMR2XbqyPASXMie8Oyj3DpNkDulMy6PZDd6o9z 7Kq5memACAUrEB40LRhkGZUgTLHgQeGL1FzA76LI1WvKJ5pCFNLYYo4F4G4XEEQ3 JzsZbDib1TktC+USOGy8QrM0EY5WqcU5YPQcof905RNrc867Kw0iXrJIibPkL17h eaeR0N/o20uHQsMxKnwVmjtTrQaKWIeIuHfwSD8lWlX+E1Ga1Sup6Aa2Uf6PEgBr yBpgiHnWjRn9OQF8nMbQOfAoRmt0Km1s83dwUquMzztL2YundAKvq1lclwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpur0RLj/Fih6sFqRr+tgHDS0IhMB8GA1UdIwQY MBaAFIbZY4RPggXRNpQ0UxyZhgDBV4GhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hMjg5ZWItNDVjZS00NjE4LTg1N2Yt NzgxODlkMDE1Mjg2LzEvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hMjg5ZWItNDVjZS00NjE4LTg1N2YtNzgxODlkMDE1Mjg2 LzEvaHRsamhFLUNCZEUybERSVEhKbUdBTUZYZ2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmL1qUrn JbgvgpzqST1c6u+7NbyVcCRfra2tT85qwIXO2KhuYmOpTb/lIn0OB9UYYOyzyX02 cMy0zidU/OVEx4+kLU5QcI5Ksk1C5Ib9nAUz/ks+i0wXyBUn9jjm+Z7Z9+Zw7li9 P9bDiJ7Kh7W0OR4OktKGaH9XRGWUbUMW3KjLVcleGJtAZVPMS+Dv2d3Wi72XsFj0 8NFTiACr4qccYukidhoYCPEc252BuCim1dEOch+zrCLRyJ76AFvaa836m71IjMAp Wcet6r2k4N0xzuT2ko83/Lsg80+mYumn20CDWJfpy6mXG/YjFx4dtaYeQlHJB8gW 1bWtXxWqj7R8qQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:30:54 2025 by rpki-client