This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json) Hash identifier: kyekXY9QptiCFwMvwLWjh0oO3FY39MdCEbh8bTla5Rc= Subject key identifier: 6A:8D:C2:95:66:77:DA:82:FD:35:76:25:8E:29:F0:7A:D3:6C:88:37 Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c Certificate serial: 019B657A90582E95A9BCF4D729A42B4E3155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft Manifest number: 14C1 Signing time: Sun 28 Dec 2025 15:01:29 +0000 Manifest this update: Sun 28 Dec 2025 15:01:29 +0000 Manifest next update: Mon 29 Dec 2025 15:01:29 +0000 Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: GPPoWWi6kc4oQ3ZqJqTJzatrR0FF8lvfSAsS6y5XowA=) 2: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (hash: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:90:58:2e:95:a9:bc:f4:d7:29:a4:2b:4e:31:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c Validity Not Before: Dec 28 15:01:29 2025 GMT Not After : Dec 29 15:01:29 2025 GMT Subject: CN=6a8dc2956677da82fd3576258e29f07ad36c8837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:18:6a:7c:9a:d0:b6:75:d7:c9:3e:cb:37: e0:f5:13:cd:24:5b:5b:5a:a9:5d:1f:5f:8a:da:0b: 7c:e0:69:04:92:b6:d6:c9:43:cb:21:b3:bf:c2:ae: a1:0e:f4:fc:3b:3a:2a:f9:cf:a0:c0:b5:6c:6d:cd: 29:c6:8f:1d:02:6b:8b:bd:a1:f9:fe:1f:7d:eb:39: ec:9a:73:c3:09:30:7e:59:0f:af:d6:68:d9:4f:71: ab:55:54:cb:58:cb:7b:86:f9:99:c6:d3:ec:be:7b: 3f:7c:40:6b:0a:fc:77:e7:de:ea:5c:11:9b:82:d9: e6:8b:81:68:42:b9:f7:f1:99:dc:4a:3c:f8:e1:2b: 88:6e:63:55:d0:f4:83:54:66:43:bb:d7:7e:71:af: d1:b9:29:50:12:db:6a:51:0d:ee:4e:50:c0:c5:a7: 6a:4a:f2:a9:9f:10:7d:d9:12:b1:95:a8:9b:91:9f: aa:e7:8e:b1:ac:fd:c9:9b:4b:c0:41:c0:aa:18:75: f7:c2:f4:a0:52:36:2f:1e:c9:80:45:9e:44:cc:09: 85:51:ac:4c:5b:9b:4f:75:9c:62:ee:d9:a4:8d:6e: c0:87:4d:3f:29:23:bf:a3:ca:6a:c7:9f:c5:b1:81: c7:c0:16:d2:3a:1f:b7:fa:db:7c:84:b1:4d:df:28: 79:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:C2:95:66:77:DA:82:FD:35:76:25:8E:29:F0:7A:D3:6C:88:37 X509v3 Authority Key Identifier: keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:cf:84:7e:1b:39:32:f5:3b:1d:e2:0f:19:ff:71:4f:33: a0:d8:5e:d1:0e:68:96:d4:fe:73:e8:6a:bc:3f:4c:c1:c3:a4: 7a:02:7f:37:f9:8d:3d:c6:33:74:b1:b6:7c:46:e6:e8:62:14: 5f:2a:02:67:ce:10:22:bc:5d:b3:cc:0c:31:08:d6:52:00:51: c9:41:bc:5e:7e:c2:1a:cb:b4:76:a6:6c:34:ac:2c:1c:06:c1: 7c:9c:87:13:db:01:1d:88:97:89:d5:2f:9a:a9:ae:c8:df:6d: 7d:b7:65:2a:df:c3:ab:c7:5c:3f:de:d4:0e:84:a0:f0:33:d6: 09:58:8f:3b:6f:34:21:dc:41:f1:cc:22:a3:c7:0e:11:d6:8e: 65:ff:a1:fd:0e:b4:ef:b0:28:49:9d:d9:37:4a:35:ea:75:f7: 6a:91:17:d9:08:b0:62:93:55:ce:a1:2f:4b:87:03:fb:17:4b: 89:aa:2d:f0:c5:fd:c9:c5:90:c4:86:cc:45:01:58:3e:63:b9: c4:c4:9f:c7:cc:a4:17:60:fa:b5:3f:17:a2:91:ce:a8:60:81: bf:6e:f2:4d:94:da:00:ec:71:14:c8:01:28:a0:24:26:4b:54: 96:ae:3a:b8:3a:be:a8:5a:b9:b2:a6:ab:4c:04:70:18:67:fe: 94:c1:47:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlepBYLpWpvPTXKaQrTjFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDkzMDg0Y2VjNDQ5YmVkOGE2ZmMwMDhiYzdkZDk5NWVi MzczMWMwHhcNMjUxMjI4MTUwMTI5WhcNMjUxMjI5MTUwMTI5WjAzMTEwLwYDVQQD Eyg2YThkYzI5NTY2NzdkYTgyZmQzNTc2MjU4ZTI5ZjA3YWQzNmM4ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+sYanya0LZ118k+yzfg9RPNJFtb WqldH1+K2gt84GkEkrbWyUPLIbO/wq6hDvT8Ozoq+c+gwLVsbc0pxo8dAmuLvaH5 /h996znsmnPDCTB+WQ+v1mjZT3GrVVTLWMt7hvmZxtPsvns/fEBrCvx3597qXBGb gtnmi4FoQrn38ZncSjz44SuIbmNV0PSDVGZDu9d+ca/RuSlQEttqUQ3uTlDAxadq SvKpnxB92RKxlaibkZ+q546xrP3Jm0vAQcCqGHX3wvSgUjYvHsmARZ5EzAmFUaxM W5tPdZxi7tmkjW7Ah00/KSO/o8pqx5/FsYHHwBbSOh+3+tt8hLFN3yh5awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqNwpVmd9qC/TV2JY4p8HrTbIg3MB8GA1UdIwQY MBaAFB7ZMITOxEm+2Kb8AIvH3Zles3McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2Et N2M2NDY3OTUwOTBiLzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2EtN2M2NDY3OTUwOTBi LzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbDPhH4b OTL1Ox3iDxn/cU8zoNhe0Q5oltT+c+hqvD9MwcOkegJ/N/mNPcYzdLG2fEbm6GIU XyoCZ84QIrxds8wMMQjWUgBRyUG8Xn7CGsu0dqZsNKwsHAbBfJyHE9sBHYiXidUv mqmuyN9tfbdlKt/Dq8dcP97UDoSg8DPWCViPO280IdxB8cwio8cOEdaOZf+h/Q60 77AoSZ3ZN0o16nX3apEX2QiwYpNVzqEvS4cD+xdLiaot8MX9ycWQxIbMRQFYPmO5 xMSfx8ykF2D6tT8XopHOqGCBv27yTZTaAOxxFMgBKKAkJktUlq46uDq+qFq5sqar TARwGGf+lMFHTQ== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:02 2025 by rpki-client