This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json) Hash identifier: yulxCZx9i/InAsQwHhnv/4IO3fISnMGyygXPglhILuE= Subject key identifier: 37:5A:47:7A:6C:BB:FF:14:AD:59:FA:5E:9A:E1:4E:83:49:4D:7F:CE Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f Certificate serial: 019B3C7FE0057878EE7B9C43BFF9E662E874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft Manifest number: 08DB Signing time: Sat 20 Dec 2025 16:02:51 +0000 Manifest this update: Sat 20 Dec 2025 16:02:51 +0000 Manifest next update: Sun 21 Dec 2025 16:02:51 +0000 Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=) 2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: Tmu7RlAjJ5a45ZapF0cQak7GRsVUjNWLSAvUWNjSmKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:e0:05:78:78:ee:7b:9c:43:bf:f9:e6:62:e8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86623a8458eff347d424348588829ee137b45a3f Validity Not Before: Dec 20 16:02:51 2025 GMT Not After : Dec 21 16:02:51 2025 GMT Subject: CN=375a477a6cbbff14ad59fa5e9ae14e83494d7fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:33:9d:bb:a8:51:5f:6f:f7:e6:27:a4:ae: 9a:8b:1a:a4:b2:a0:c9:09:36:75:14:c0:03:4f:94: a1:7b:fd:dd:62:3f:29:07:8e:02:bd:74:df:5c:97: 1d:a9:54:bb:09:76:ce:41:aa:c4:ca:57:87:88:8e: c8:2e:ea:17:e2:cc:ad:24:98:3d:fa:ba:a5:30:1e: c9:72:7d:33:b7:9b:ba:bb:d6:85:bf:99:c1:de:d7: 55:c6:b4:6e:98:c4:76:c7:8e:25:ad:c8:0b:cb:b9: 38:15:1b:85:c6:e1:ca:19:a1:03:e7:24:c8:88:93: a9:cc:43:ff:61:7e:34:11:29:59:f2:07:3d:64:9d: 5f:9f:60:c1:44:da:e6:90:ef:e0:65:0b:57:12:fa: 05:1f:e2:de:49:97:f7:68:00:1c:11:97:e1:b6:0e: 35:c0:10:29:d3:fd:82:16:73:20:c0:1d:2c:a8:d6: dd:0e:a3:2d:1f:59:66:32:bf:4c:46:cb:ff:d5:5c: c2:c3:68:6a:77:e2:0c:c5:be:79:96:0c:aa:e1:6a: bb:e6:49:17:f1:0f:2b:3c:53:91:88:62:d2:6c:db: 25:d8:44:22:b0:87:30:25:c2:c3:d9:3a:33:94:79: 9a:52:b5:a3:3c:f3:61:35:19:5e:4d:c8:57:f1:1d: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5A:47:7A:6C:BB:FF:14:AD:59:FA:5E:9A:E1:4E:83:49:4D:7F:CE X509v3 Authority Key Identifier: keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1a:51:04:c6:26:a6:0d:d0:75:ae:f6:db:0a:dc:93:52:00: 51:b6:ed:53:8f:2e:e0:bf:71:cc:a3:a1:f9:0c:06:2f:7f:ed: 03:76:9f:4e:a6:10:fc:c2:7f:bc:31:63:86:67:80:63:8c:95: c3:bc:84:36:b5:bf:1e:3e:58:96:04:70:da:5b:b8:29:a9:14: c9:6f:9e:8f:85:d9:da:81:fa:bb:e7:24:cf:8f:87:2d:81:89: bc:f2:39:f6:b1:2f:71:35:4e:3f:db:2a:36:3a:39:9c:36:e4: cd:f4:86:bc:0d:38:a2:e9:1b:4c:3f:8b:19:3f:6b:a2:e5:ff: 54:c9:77:04:86:d8:d9:25:db:06:0d:8e:63:09:eb:99:7d:49: f4:73:d4:12:20:cc:90:06:9d:a1:9c:93:6a:ef:d1:cf:2b:e6: bd:d0:9c:02:5e:7e:60:11:97:fc:63:32:fc:96:66:4f:c3:be: 66:08:32:37:c9:49:6c:bc:4f:08:09:fb:e7:ac:8c:bc:09:b1: a6:b4:4a:5f:64:4d:72:09:3d:42:7a:04:b5:dc:f4:9a:2f:f3: 97:16:b7:b0:6a:46:d9:ae:12:01:88:31:46:3c:30:6d:28:0d: 38:93:16:dc:7f:e6:60:10:0a:70:c6:95:99:0f:3e:6d:1a:0b: 3d:d9:91:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f+AFeHjue5xDv/nmYuh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi NDVhM2YwHhcNMjUxMjIwMTYwMjUxWhcNMjUxMjIxMTYwMjUxWjAzMTEwLwYDVQQD EygzNzVhNDc3YTZjYmJmZjE0YWQ1OWZhNWU5YWUxNGU4MzQ5NGQ3ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQznbuoUV9v9+YnpK6aixqksqDJ CTZ1FMADT5She/3dYj8pB44CvXTfXJcdqVS7CXbOQarEyleHiI7ILuoX4sytJJg9 +rqlMB7Jcn0zt5u6u9aFv5nB3tdVxrRumMR2x44lrcgLy7k4FRuFxuHKGaED5yTI iJOpzEP/YX40ESlZ8gc9ZJ1fn2DBRNrmkO/gZQtXEvoFH+LeSZf3aAAcEZfhtg41 wBAp0/2CFnMgwB0sqNbdDqMtH1lmMr9MRsv/1VzCw2hqd+IMxb55lgyq4Wq75kkX 8Q8rPFORiGLSbNsl2EQisIcwJcLD2TozlHmaUrWjPPNhNRleTchX8R2hoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdaR3psu/8UrVn6XprhToNJTX/OMB8GA1UdIwQY MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt NmMyOGJiNDBkNTJlLzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBpRBMYm pg3Qda722wrck1IAUbbtU48u4L9xzKOh+QwGL3/tA3afTqYQ/MJ/vDFjhmeAY4yV w7yENrW/Hj5YlgRw2lu4KakUyW+ej4XZ2oH6u+ckz4+HLYGJvPI59rEvcTVOP9sq Njo5nDbkzfSGvA04oukbTD+LGT9rouX/VMl3BIbY2SXbBg2OYwnrmX1J9HPUEiDM kAadoZyTau/RzyvmvdCcAl5+YBGX/GMy/JZmT8O+ZggyN8lJbLxPCAn756yMvAmx prRKX2RNcgk9QnoEtdz0mi/zlxa3sGpG2a4SAYgxRjwwbSgNOJMW3H/mYBAKcMaV mQ8+bRoLPdmRTA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:41:55 2025 by rpki-client