This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft File: HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft (raw, json) Hash identifier: N2eE96z9sNsmSlZNu8aGxq4/ETHaPXNryFOSyl4VOFc= Subject key identifier: 2F:42:BD:B4:85:BD:B5:CB:3B:CC:F8:25:B1:3E:8A:80:66:0D:78:50 Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c Certificate serial: 019B4694527F012989883F07D3EB4862F187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft Manifest number: 14B1 Signing time: Mon 22 Dec 2025 15:01:23 +0000 Manifest this update: Mon 22 Dec 2025 15:01:23 +0000 Manifest next update: Tue 23 Dec 2025 15:01:23 +0000 Files and hashes: 1: HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl (hash: BqN/yJtO/lRMWA4u876JHP81fqngYItkjRMP0HwsEm8=) 2: Vu2y-aZXZUUf1w0WU_d1LDGMCjI.roa (hash: FtyHvpwzr+fctqlndkuiTxqEdI3uy3i+5i35b5nlvso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:52:7f:01:29:89:88:3f:07:d3:eb:48:62:f1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c Validity Not Before: Dec 22 15:01:23 2025 GMT Not After : Dec 23 15:01:23 2025 GMT Subject: CN=2f42bdb485bdb5cb3bccf825b13e8a80660d7850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:3e:bf:d8:8c:8b:c1:cb:49:fa:80:b4:f6: c4:fe:bc:2b:56:be:9c:87:95:11:d7:5e:46:62:c3: b3:d1:cb:28:83:dc:72:5f:85:5a:32:f5:29:a4:12: ef:8d:d5:29:a0:2a:bf:06:91:71:b9:cb:fd:76:05: b1:fa:10:3e:c5:fb:2c:9f:9a:fe:d5:9b:dd:47:38: 7d:7d:cb:14:74:a6:4a:25:f7:ee:7b:31:7f:8b:a8: 6f:da:7b:ba:df:5c:b5:e5:6b:fc:b6:32:55:95:63: 85:6e:d3:50:dc:e5:1f:1c:22:62:9b:30:51:5d:97: 1a:40:25:62:28:56:1b:8d:a9:3d:98:55:29:75:91: 00:59:1b:29:d4:aa:1b:07:b0:fd:87:ea:5e:eb:2e: b2:08:eb:56:46:70:d8:81:4b:a1:49:6f:97:63:68: 1c:c4:a0:2d:7f:0a:53:1b:0f:18:07:ed:92:da:c8: 6c:22:22:e6:f9:6a:60:a8:3a:3d:4d:48:7e:a0:1a: 96:b4:be:60:a6:80:50:06:8b:df:a1:b6:41:77:aa: 5f:23:50:2d:7e:fc:af:a4:3a:89:3b:db:80:ff:21: 7b:48:54:91:99:ce:2a:4c:b0:e3:7e:74:f6:48:5d: 59:cf:d7:8b:5b:01:1f:5b:c5:f8:97:54:78:f4:31: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:42:BD:B4:85:BD:B5:CB:3B:CC:F8:25:B1:3E:8A:80:66:0D:78:50 X509v3 Authority Key Identifier: keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d3:3b:c3:b8:06:02:30:f6:eb:3f:8f:34:d1:a1:c3:a9:13: 90:f0:bd:5b:21:ca:a2:aa:b8:f6:52:47:3f:59:56:c6:e0:60: 49:83:8b:9d:3b:7a:1a:07:ff:22:ef:3d:a6:17:54:9e:71:1c: 75:c2:8c:b5:34:6b:73:76:a4:a8:42:97:fd:8b:f8:38:69:fd: 66:bb:7e:76:74:1d:0a:f4:80:bd:b1:72:e6:86:c3:55:d2:7c: a3:7b:7a:5d:9c:11:37:4d:a4:56:24:78:e1:db:01:e0:a4:75: 28:f5:8e:4d:12:91:23:9e:5e:4f:f8:11:7d:31:7f:03:e4:e7: 0a:64:c4:a9:75:a7:46:3d:80:eb:1b:f4:e7:0a:63:3a:e4:89: 04:11:a3:e3:f4:aa:19:a4:a6:65:10:8c:39:22:53:44:b4:48: cf:0c:cc:d8:71:0c:ed:75:3d:4f:44:e1:09:11:40:db:5c:4c: e8:18:c4:c5:af:a7:1a:e7:5a:12:69:52:db:fe:9e:74:ff:ab: fd:cc:6a:53:28:73:51:19:12:63:29:64:dd:7c:b5:ee:1d:9a: a9:68:a7:df:35:0a:b1:cd:a8:41:1b:4c:22:1c:ea:59:f9:f8: 63:ae:89:c8:08:8a:14:fd:7c:c7:7a:5e:76:7f:07:22:de:3b: 16:1c:32:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlFJ/ASmJiD8H0+tIYvGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDkzMDg0Y2VjNDQ5YmVkOGE2ZmMwMDhiYzdkZDk5NWVi MzczMWMwHhcNMjUxMjIyMTUwMTIzWhcNMjUxMjIzMTUwMTIzWjAzMTEwLwYDVQQD EygyZjQyYmRiNDg1YmRiNWNiM2JjY2Y4MjViMTNlOGE4MDY2MGQ3ODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf0+v9iMi8HLSfqAtPbE/rwrVr6c h5UR115GYsOz0csog9xyX4VaMvUppBLvjdUpoCq/BpFxucv9dgWx+hA+xfssn5r+ 1ZvdRzh9fcsUdKZKJffuezF/i6hv2nu631y15Wv8tjJVlWOFbtNQ3OUfHCJimzBR XZcaQCViKFYbjak9mFUpdZEAWRsp1KobB7D9h+pe6y6yCOtWRnDYgUuhSW+XY2gc xKAtfwpTGw8YB+2S2shsIiLm+WpgqDo9TUh+oBqWtL5gpoBQBovfobZBd6pfI1At fvyvpDqJO9uA/yF7SFSRmc4qTLDjfnT2SF1Zz9eLWwEfW8X4l1R49DGAPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9CvbSFvbXLO8z4JbE+ioBmDXhQMB8GA1UdIwQY MBaAFB7ZMITOxEm+2Kb8AIvH3Zles3McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2Et N2M2NDY3OTUwOTBiLzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2EtN2M2NDY3OTUwOTBi LzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtM7w7gG AjD26z+PNNGhw6kTkPC9WyHKoqq49lJHP1lWxuBgSYOLnTt6Ggf/Iu89phdUnnEc dcKMtTRrc3akqEKX/Yv4OGn9Zrt+dnQdCvSAvbFy5obDVdJ8o3t6XZwRN02kViR4 4dsB4KR1KPWOTRKRI55eT/gRfTF/A+TnCmTEqXWnRj2A6xv05wpjOuSJBBGj4/Sq GaSmZRCMOSJTRLRIzwzM2HEM7XU9T0ThCRFA21xM6BjExa+nGudaEmlS2/6edP+r /cxqUyhzURkSYylk3Xy17h2aqWin3zUKsc2oQRtMIhzqWfn4Y66JyAiKFP18x3pe dn8HIt47FhwyJA== -----END CERTIFICATE-----Generated at Tue Dec 23 00:50:11 2025 by rpki-client