This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json) Hash identifier: 8qraKLe/wmzKGt9MoUCTiXk57W0jwEQXzUFux2avbKk= Subject key identifier: FF:97:B8:8E:93:06:E4:98:D9:6A:7D:34:D2:25:E6:95:39:6E:75:CE Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec Certificate serial: 019B52984CA985DF25519B3E42FFCCB3D2F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft Manifest number: 0617 Signing time: Wed 24 Dec 2025 23:01:11 +0000 Manifest this update: Wed 24 Dec 2025 23:01:11 +0000 Manifest next update: Thu 25 Dec 2025 23:01:11 +0000 Files and hashes: 1: LZPxEvf3B7ZL8s3KaSnv9hEbQ-Y.roa (hash: uiZ9h9q7jdppXh4u03y4EH+WHn+K+FQFpio48xqokyk=) 2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: 0Nwew/X3Q4FGf/TVb6HpZ2LWkQkUYPi3mjl5WzpmO4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:4c:a9:85:df:25:51:9b:3e:42:ff:cc:b3:d2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec Validity Not Before: Dec 24 23:01:11 2025 GMT Not After : Dec 25 23:01:11 2025 GMT Subject: CN=ff97b88e9306e498d96a7d34d225e695396e75ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:bd:09:a6:7f:b8:77:f5:b5:7c:97:dc:bc: b4:e7:8d:ac:01:54:ae:a8:d1:fa:82:ea:e9:c5:f6: ec:ba:41:7e:1b:95:f1:38:9f:c7:9a:c9:73:71:8f: a4:c7:be:1f:60:0c:df:df:ae:66:cc:3b:21:26:aa: 9c:81:ee:30:29:fe:0f:ec:05:bf:60:d4:1c:33:4c: 7d:2d:65:ca:78:f5:4d:b5:41:1a:f3:84:ea:44:23: 11:e9:a4:6b:ca:62:92:a2:cc:a9:f5:3c:6f:7f:c7: 51:b7:b3:18:0a:dd:b8:f2:14:03:56:c2:fc:e0:a7: 78:59:bc:ab:67:9f:f9:7d:fb:89:14:35:38:79:0f: 11:b5:72:2f:51:40:2c:42:70:fc:70:7f:f0:4a:42: 1f:b6:6e:6e:ae:ab:f7:92:88:3d:50:b9:05:d0:71: 07:3c:e4:2b:32:49:cf:2a:51:01:83:82:e0:2b:e1: 54:db:86:8f:75:c3:24:85:c0:89:82:76:8e:f4:fd: 74:0d:0d:6d:cb:bf:c4:14:d7:5d:48:96:0e:e8:a7: df:cc:0e:be:6f:0b:c7:03:39:39:19:ef:9f:ad:dd: 16:f2:9a:78:52:50:96:d7:4e:c3:f6:f7:2c:ad:5b: fb:63:aa:c1:94:a1:43:aa:74:c5:a0:83:f3:66:41: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:97:B8:8E:93:06:E4:98:D9:6A:7D:34:D2:25:E6:95:39:6E:75:CE X509v3 Authority Key Identifier: keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:a7:fd:fa:a0:0d:5b:01:dc:44:57:da:5d:e7:56:fb:3a: 33:c1:92:73:2f:3b:a2:14:a6:a1:de:55:a8:51:f6:6c:c9:c0: 2d:db:94:e1:87:8a:73:03:c2:87:a5:11:80:aa:9c:fe:6e:24: 61:d4:fe:22:34:79:13:d0:ea:a2:74:e7:d2:5f:13:15:99:2c: be:89:8f:0b:c6:f2:3f:86:28:42:57:16:74:9f:01:23:64:c6: d0:76:6b:af:d0:1b:c0:5f:d7:f7:20:e9:26:a5:66:28:41:c3: 28:d0:67:f5:1a:62:43:1f:31:87:97:e3:c1:8a:26:8e:46:6a: 37:36:45:d2:39:58:87:57:58:be:e7:a0:8f:9f:52:38:41:23: 08:15:72:35:cc:ba:67:89:5c:40:19:06:84:2d:7e:5a:96:89: ff:b3:3f:79:2e:8e:20:69:7d:e6:8a:6e:b8:e7:9b:d3:3e:c4: 16:27:5d:c8:70:be:06:80:be:28:99:f8:cf:ec:66:0f:8d:a3: 1b:ed:cb:52:f9:14:42:08:26:9a:32:55:d5:2a:2b:28:54:1b: c0:07:40:81:a2:60:51:ca:ff:60:06:cc:d5:21:3e:0b:2c:77: f6:88:16:af:e9:76:a7:18:b9:67:49:bc:e3:58:a6:f0:11:c4: 01:c2:3f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEyphd8lUZs+Qv/Ms9L1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5 NTI4ZWMwHhcNMjUxMjI0MjMwMTExWhcNMjUxMjI1MjMwMTExWjAzMTEwLwYDVQQD EyhmZjk3Yjg4ZTkzMDZlNDk4ZDk2YTdkMzRkMjI1ZTY5NTM5NmU3NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY29CaZ/uHf1tXyX3Ly0542sAVSu qNH6gurpxfbsukF+G5XxOJ/HmslzcY+kx74fYAzf365mzDshJqqcge4wKf4P7AW/ YNQcM0x9LWXKePVNtUEa84TqRCMR6aRrymKSosyp9Txvf8dRt7MYCt248hQDVsL8 4Kd4WbyrZ5/5ffuJFDU4eQ8RtXIvUUAsQnD8cH/wSkIftm5urqv3kog9ULkF0HEH POQrMknPKlEBg4LgK+FU24aPdcMkhcCJgnaO9P10DQ1ty7/EFNddSJYO6KffzA6+ bwvHAzk5Ge+frd0W8pp4UlCW107D9vcsrVv7Y6rBlKFDqnTFoIPzZkFuyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+XuI6TBuSY2Wp9NNIl5pU5bnXOMB8GA1UdIwQY MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrin/fqg DVsB3ERX2l3nVvs6M8GScy87ohSmod5VqFH2bMnALduU4YeKcwPCh6URgKqc/m4k YdT+IjR5E9DqonTn0l8TFZksvomPC8byP4YoQlcWdJ8BI2TG0HZrr9AbwF/X9yDp JqVmKEHDKNBn9RpiQx8xh5fjwYomjkZqNzZF0jlYh1dYvuegj59SOEEjCBVyNcy6 Z4lcQBkGhC1+WpaJ/7M/eS6OIGl95opuuOeb0z7EFiddyHC+BoC+KJn4z+xmD42j G+3LUvkUQggmmjJV1SorKFQbwAdAgaJgUcr/YAbM1SE+Cyx39ogWr+l2pxi5Z0m8 41im8BHEAcI/0g== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:33 2025 by rpki-client