This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json) Hash identifier: 2pEIhK+VGpCqhKAkudCkGzP3+xdTCj6RUtof0c6e9T0= Subject key identifier: DF:03:C3:79:D8:3D:43:56:18:A4:0F:38:0D:01:63:CC:2E:FA:19:7D Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e Certificate serial: 019B3A8FDE076467D2796569FDBC6261A536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 07:01:05 +0000 Manifest this update: Sat 20 Dec 2025 07:01:05 +0000 Manifest next update: Sun 21 Dec 2025 07:01:05 +0000 Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: VMDEG1nnc6DGCEdfxfXS5p54djH9pHv7WbpIKxEIiac=) 2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=) 3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:de:07:64:67:d2:79:65:69:fd:bc:62:61:a5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e Validity Not Before: Dec 20 07:01:05 2025 GMT Not After : Dec 21 07:01:05 2025 GMT Subject: CN=df03c379d83d435618a40f380d0163cc2efa197d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:f2:15:08:61:f4:b5:d3:28:4e:1f:36:e3: 66:48:ef:70:d2:64:51:cb:d5:89:f6:70:ef:8d:f5: 8e:e7:7d:ef:40:44:dc:9a:12:0a:25:51:c5:4e:2c: 7e:4c:f1:1a:94:47:d9:2d:74:fa:be:90:1d:af:12: c9:f1:09:b8:26:ca:bc:aa:82:a5:f4:62:a8:46:a7: b3:ef:e4:5d:a4:0f:6f:a7:5a:24:31:52:a9:58:f3: a7:39:a8:93:a6:ca:f8:d2:09:ee:b1:33:bc:c7:a2: f1:87:8e:ac:cf:be:87:31:9f:4e:7f:3c:59:95:da: 62:97:16:4e:47:04:63:66:6e:1f:7c:f1:a8:e9:e6: af:43:bd:4b:92:be:19:ef:95:10:4d:58:d3:b8:3a: 1e:79:c5:09:9e:4f:ea:85:da:63:cd:ac:89:80:46: 27:36:87:66:c0:fb:48:24:d9:bd:2d:65:bd:53:81: 41:12:37:8d:65:00:44:38:cc:84:88:1f:33:83:04: 6d:93:98:1e:94:eb:cb:d5:f3:93:87:1d:a4:8c:2f: 89:8f:ad:90:f1:81:3a:91:3f:0b:51:37:f8:d7:26: c7:8d:fe:78:79:60:bd:d9:01:6c:e5:35:d7:b5:f2: 02:9c:08:ce:11:1a:ef:71:51:be:ea:53:2f:a2:26: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:03:C3:79:D8:3D:43:56:18:A4:0F:38:0D:01:63:CC:2E:FA:19:7D X509v3 Authority Key Identifier: keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9c:f4:7a:64:37:96:78:c1:d0:cf:c9:e3:d4:34:69:92:57: 7f:d5:cb:c3:1e:2b:80:8b:cf:f7:03:86:43:62:f0:f8:f5:e3: ec:be:38:8f:cb:72:c9:ab:8a:87:11:60:0a:46:20:12:ee:12: 31:96:7b:86:11:3d:18:8b:5e:f6:ff:71:57:75:8e:50:f1:1b: 94:e9:7b:4e:8b:d5:2d:52:33:c4:b0:24:06:fc:d5:aa:33:3b: 28:90:28:9b:00:41:ec:a0:5f:0a:c2:dc:85:96:a8:6b:22:dc: 31:a0:44:69:a3:74:52:48:5e:2a:1c:22:d0:b4:d1:b0:49:16: 40:fc:5d:92:61:f2:76:74:f1:36:df:ba:f5:29:3d:1a:69:03: c7:37:83:a1:d4:45:c2:a0:17:60:2c:e0:c8:25:99:56:03:a9: 0a:6a:0b:fe:94:13:5b:24:2a:d8:73:4a:61:94:ea:c8:e5:72: 51:f1:55:74:45:61:8d:bd:79:f9:b4:77:4a:14:7b:23:e8:2b: 40:a9:ba:1b:0a:75:7d:c3:e1:d9:15:8b:a0:0d:58:c6:a5:5f: 45:d0:de:47:80:ac:bc:0b:7f:91:8e:22:fb:58:00:64:65:9f: 19:6f:99:36:44:8f:85:35:2d:a3:e7:42:8c:cb:2a:31:46:80: d7:cc:74:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j94HZGfSeWVp/bxiYaU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTM5MTE3MDVhZTg2MGMyOTllNmExYTQxMmU1MGVkYTFj ODIyOGUwHhcNMjUxMjIwMDcwMTA1WhcNMjUxMjIxMDcwMTA1WjAzMTEwLwYDVQQD EyhkZjAzYzM3OWQ4M2Q0MzU2MThhNDBmMzgwZDAxNjNjYzJlZmExOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz7yFQhh9LXTKE4fNuNmSO9w0mRR y9WJ9nDvjfWO533vQETcmhIKJVHFTix+TPEalEfZLXT6vpAdrxLJ8Qm4Jsq8qoKl 9GKoRqez7+RdpA9vp1okMVKpWPOnOaiTpsr40gnusTO8x6Lxh46sz76HMZ9OfzxZ ldpilxZORwRjZm4ffPGo6eavQ71Lkr4Z75UQTVjTuDoeecUJnk/qhdpjzayJgEYn NodmwPtIJNm9LWW9U4FBEjeNZQBEOMyEiB8zgwRtk5gelOvL1fOThx2kjC+Jj62Q 8YE6kT8LUTf41ybHjf54eWC92QFs5TXXtfICnAjOERrvcVG+6lMvoibvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8Dw3nYPUNWGKQPOA0BY8wu+hl9MB8GA1UdIwQY MBaAFBxTkRcFroYMKZ5qGkEuUO2hyCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUt M2U3ZjgzMDhjYzU1LzEvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hZDZlZjUtMzIxNi00NmNiLTk2NWUtM2U3ZjgzMDhjYzU1 LzEvSEZPUkZ3V3VoZ3dwbm1vYVFTNVE3YUhJSW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpz0emQ3 lnjB0M/J49Q0aZJXf9XLwx4rgIvP9wOGQ2Lw+PXj7L44j8tyyauKhxFgCkYgEu4S MZZ7hhE9GIte9v9xV3WOUPEblOl7TovVLVIzxLAkBvzVqjM7KJAomwBB7KBfCsLc hZaoayLcMaBEaaN0UkheKhwi0LTRsEkWQPxdkmHydnTxNt+69Sk9GmkDxzeDodRF wqAXYCzgyCWZVgOpCmoL/pQTWyQq2HNKYZTqyOVyUfFVdEVhjb15+bR3ShR7I+gr QKm6Gwp1fcPh2RWLoA1YxqVfRdDeR4CsvAt/kY4i+1gAZGWfGW+ZNkSPhTUto+dC jMsqMUaA18x05w== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:23 2025 by rpki-client