This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft File: an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json) Hash identifier: xPmI2tgyJvPnZFqxbrZGKyBgBRkEIiruT8XsrSIqt6Y= Subject key identifier: 7E:10:9B:51:B5:C3:42:18:74:BC:B2:F5:2F:7D:40:1B:FE:30:6B:D8 Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C Certificate issuer: /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c Certificate serial: 019B42EEA9247C860E664D59AB94ADF251DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft Manifest number: 0A1A Signing time: Sun 21 Dec 2025 22:01:35 +0000 Manifest this update: Sun 21 Dec 2025 22:01:35 +0000 Manifest next update: Mon 22 Dec 2025 22:01:35 +0000 Files and hashes: 1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: Gi0RgXXDoM8Sui7NTcbTc+gsTDIeMoMZ6DCBqPN6Xyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:a9:24:7c:86:0e:66:4d:59:ab:94:ad:f2:51:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c Validity Not Before: Dec 21 22:01:35 2025 GMT Not After : Dec 22 22:01:35 2025 GMT Subject: CN=7e109b51b5c3421874bcb2f52f7d401bfe306bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:86:0c:e8:45:ef:60:67:79:72:d8:ed:07: 89:10:65:a7:56:8a:27:99:db:1b:68:0e:a4:48:03: 89:ca:24:22:4a:47:ad:26:4b:a3:76:86:35:5c:c9: 6d:5b:2a:1d:4d:9d:37:2a:54:96:ad:be:c3:89:c9: 13:30:db:c9:53:8b:06:71:00:ac:24:77:bd:4d:af: 38:80:12:6d:34:34:d2:0e:47:ee:6a:90:9d:8e:56: 36:51:79:56:1d:e9:d1:9e:2c:c7:47:cd:34:b5:49: e5:22:c9:84:f0:13:bc:2b:54:7c:e1:57:23:41:e4: ce:1b:a8:02:2b:6e:30:5b:0e:f9:f6:b0:f1:e6:90: ed:05:11:29:9a:f8:fb:85:42:12:56:3d:9c:db:fc: 55:88:14:56:80:0c:16:3c:e1:e4:f3:1f:7c:89:5f: f2:53:ef:04:a2:bb:2c:d5:ff:2a:4c:8a:6a:ef:88: 3d:f0:27:22:28:11:6a:2d:c7:83:03:12:5b:a8:ea: 2b:fa:23:f3:40:a6:57:f4:af:98:76:c9:14:10:29: 60:93:51:30:73:a3:39:c9:2c:56:4d:5d:1d:22:ac: 3d:d4:76:e6:9e:ba:c8:11:d6:c8:09:6a:2d:c6:cc: 5b:9d:a2:63:2f:05:16:f4:54:5e:67:15:17:15:4a: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:10:9B:51:B5:C3:42:18:74:BC:B2:F5:2F:7D:40:1B:FE:30:6B:D8 X509v3 Authority Key Identifier: keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9d:66:25:a2:4f:41:87:09:b1:b1:73:6b:49:31:5c:ae:e5: 8b:04:e1:ca:5a:70:b0:39:e8:a8:87:f2:9e:34:17:c1:6f:af: 72:ca:5e:b8:64:44:3d:ec:ca:06:2e:1d:1e:0a:ea:7f:1a:8a: 7c:b7:33:46:c0:7a:12:a9:24:b3:ac:f2:24:92:9a:ca:27:00: 05:6b:33:c2:dd:82:72:20:5a:d9:36:df:33:23:9a:0e:78:be: d9:9f:21:6c:3d:54:33:24:a9:9f:fd:06:bc:f8:7a:22:78:38: f3:aa:8c:20:57:55:78:9f:b6:ac:04:e2:a8:e1:a1:51:b1:2c: bb:e9:23:6e:58:1e:ae:95:f0:7f:7f:4f:f1:a2:b3:3c:1c:cc: de:4b:4d:11:53:3c:94:89:3b:20:e9:51:3a:a3:96:5a:c2:5d: a5:cc:ed:42:c8:ef:b2:e5:32:42:55:f0:88:51:b3:6e:06:34: e6:bd:24:11:27:56:1e:a0:91:ce:99:43:6f:bd:4f:97:a2:00: ec:88:1b:16:2e:63:ca:e3:d0:61:78:c9:9c:97:e7:fd:21:83: f7:81:57:de:2a:a4:ab:86:ee:56:f5:0e:5b:4f:71:35:24:ec: 6a:98:48:c1:29:39:0f:af:2b:c4:34:c4:53:64:91:1f:e8:98: a1:ed:0a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7qkkfIYOZk1Zq5St8lHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhN2QxNDIwN2Y3NWM4YjE1ODBkYjI3Zjc1ZTdjM2ZkYjFm Zjg2MGMwHhcNMjUxMjIxMjIwMTM1WhcNMjUxMjIyMjIwMTM1WjAzMTEwLwYDVQQD Eyg3ZTEwOWI1MWI1YzM0MjE4NzRiY2IyZjUyZjdkNDAxYmZlMzA2YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoOGDOhF72BneXLY7QeJEGWnVoon mdsbaA6kSAOJyiQiSketJkujdoY1XMltWyodTZ03KlSWrb7DickTMNvJU4sGcQCs JHe9Ta84gBJtNDTSDkfuapCdjlY2UXlWHenRnizHR800tUnlIsmE8BO8K1R84Vcj QeTOG6gCK24wWw759rDx5pDtBREpmvj7hUISVj2c2/xViBRWgAwWPOHk8x98iV/y U+8Eorss1f8qTIpq74g98CciKBFqLceDAxJbqOor+iPzQKZX9K+YdskUEClgk1Ew c6M5ySxWTV0dIqw91HbmnrrIEdbICWotxsxbnaJjLwUW9FReZxUXFUokjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4Qm1G1w0IYdLyy9S99QBv+MGvYMB8GA1UdIwQY MBaAFGp9FCB/dcixWA2yf3Xnw/2x/4YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80ZTZhM2ItZmYzMS00N2M5LTk3YjEt YmVhYTczNzEwYTY1LzEvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC80ZTZhM2ItZmYzMS00N2M5LTk3YjEtYmVhYTczNzEwYTY1 LzEvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ1mJaJP QYcJsbFza0kxXK7liwThylpwsDnoqIfynjQXwW+vcspeuGREPezKBi4dHgrqfxqK fLczRsB6Eqkks6zyJJKayicABWszwt2CciBa2TbfMyOaDni+2Z8hbD1UMySpn/0G vPh6Ing486qMIFdVeJ+2rATiqOGhUbEsu+kjblgerpXwf39P8aKzPBzM3ktNEVM8 lIk7IOlROqOWWsJdpcztQsjvsuUyQlXwiFGzbgY05r0kESdWHqCRzplDb71Pl6IA 7IgbFi5jyuPQYXjJnJfn/SGD94FX3iqkq4buVvUOW09xNSTsaphIwSk5D68rxDTE U2SRH+iYoe0KfA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:31 2025 by rpki-client