This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json) Hash identifier: L9mwGDv83AehgK68fT4GEtTFItQ68SG6I7Msjsan194= Subject key identifier: CC:5F:64:D2:E3:B5:75:64:D5:B0:E9:00:5A:DE:FA:EF:58:10:19:84 Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Certificate serial: 019B2251009841470220819A1EE83C7D5D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft Manifest number: 1694 Signing time: Mon 15 Dec 2025 14:01:32 +0000 Manifest this update: Mon 15 Dec 2025 14:01:32 +0000 Manifest next update: Tue 16 Dec 2025 14:01:32 +0000 Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=) 2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=) 3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: 3CFhdN7XaL2oDooQXD+kJVqi+Nif0+10UTyZuD6wX7k=) 4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:00:98:41:47:02:20:81:9a:1e:e8:3c:7d:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b Validity Not Before: Dec 15 14:01:32 2025 GMT Not After : Dec 16 14:01:32 2025 GMT Subject: CN=cc5f64d2e3b57564d5b0e9005adefaef58101984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:ab:a4:64:7e:b0:23:32:bf:56:30:5e:48: f1:6a:09:91:be:df:8a:f1:c1:e9:1b:6b:24:e3:99: 03:66:c1:7c:4c:0e:b2:70:15:81:0b:78:27:4c:f0: 01:3b:71:1b:b0:2b:8d:8f:36:df:7a:09:20:4e:8d: 35:6f:3e:85:7a:d8:80:eb:70:b5:b1:39:57:a5:73: 19:d1:11:c1:9c:6f:d0:2f:e6:c1:ef:b9:e9:3b:43: 1d:d2:6f:25:81:c9:d0:fe:e9:fc:7a:c6:c2:41:de: 10:e0:ff:4c:49:5c:3f:11:d1:db:e0:fe:21:14:ee: b9:a8:cc:11:b9:c9:bd:b6:fe:2d:71:1c:c6:8c:a0: 8f:82:ef:41:0d:4e:c8:d3:dd:70:ba:23:30:4a:c4: 0f:c5:52:d2:5a:fa:10:4e:59:09:2c:85:cd:ea:5b: bb:ce:79:a0:07:3d:31:22:0b:07:d4:83:b4:c7:84: e4:ef:a4:79:e2:84:7d:68:13:81:fd:8b:8d:94:20: 2b:03:fb:de:19:1f:31:71:2c:4a:32:02:22:cb:98: 6b:71:de:31:e6:34:28:ba:15:49:fb:fd:2c:bc:e2: 75:df:9a:0a:9d:15:9d:64:80:20:30:22:69:bf:9a: 18:b0:64:78:11:0a:da:69:f2:54:34:11:b9:08:ed: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5F:64:D2:E3:B5:75:64:D5:B0:E9:00:5A:DE:FA:EF:58:10:19:84 X509v3 Authority Key Identifier: keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3e:37:20:d3:32:7a:00:3e:35:60:e5:7d:c1:43:0a:1b:9c: 0e:8d:75:40:a6:41:e5:76:32:2a:39:1c:fe:01:06:f4:67:a0: e4:5a:e5:b6:1f:70:27:00:aa:37:c4:74:43:95:bb:c8:6c:4a: b2:e2:93:48:b7:10:f4:50:e5:34:8f:ef:01:0b:3d:28:2c:d0: 26:0b:65:68:3d:2e:46:4f:2c:c1:2b:a7:39:96:26:93:fc:1c: ef:04:fe:35:9c:77:ad:ff:92:9f:52:7b:04:30:84:63:85:1a: 80:e6:d1:f1:5c:a2:db:ef:fa:05:99:42:f8:5d:16:24:3e:e0: d3:d4:12:82:2f:b9:80:29:98:b3:85:73:9e:cc:b1:78:9a:03: 50:e4:b1:6a:1c:ed:09:84:54:f0:d9:b4:39:21:2d:59:31:e5: f3:9f:2c:a4:cc:f3:ff:e8:45:23:6d:60:44:60:a6:26:a1:2d: 9a:1e:8e:d6:0d:86:a4:a7:69:de:dd:1d:d2:0c:a3:75:fb:4e: 4c:6d:5e:bb:b3:25:a7:40:bc:2d:db:b8:ed:77:70:2e:e6:c3: 5c:5b:82:a0:e5:e4:d8:90:72:83:26:97:c1:ec:47:d5:14:9c: c7:5f:ee:ae:8c:ef:e6:95:38:7c:ef:c3:c9:d4:77:16:31:b1: 1a:00:9d:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUQCYQUcCIIGaHug8fV1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy YjA3N2IwHhcNMjUxMjE1MTQwMTMyWhcNMjUxMjE2MTQwMTMyWjAzMTEwLwYDVQQD EyhjYzVmNjRkMmUzYjU3NTY0ZDViMGU5MDA1YWRlZmFlZjU4MTAxOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCrpGR+sCMyv1YwXkjxagmRvt+K 8cHpG2sk45kDZsF8TA6ycBWBC3gnTPABO3EbsCuNjzbfegkgTo01bz6FetiA63C1 sTlXpXMZ0RHBnG/QL+bB77npO0Md0m8lgcnQ/un8esbCQd4Q4P9MSVw/EdHb4P4h FO65qMwRucm9tv4tcRzGjKCPgu9BDU7I091wuiMwSsQPxVLSWvoQTlkJLIXN6lu7 znmgBz0xIgsH1IO0x4Tk76R54oR9aBOB/YuNlCArA/veGR8xcSxKMgIiy5hrcd4x 5jQouhVJ+/0svOJ135oKnRWdZIAgMCJpv5oYsGR4EQraafJUNBG5CO08MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxfZNLjtXVk1bDpAFre+u9YEBmEMB8GA1UdIwQY MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5 LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT43INMy egA+NWDlfcFDChucDo11QKZB5XYyKjkc/gEG9Geg5Frlth9wJwCqN8R0Q5W7yGxK suKTSLcQ9FDlNI/vAQs9KCzQJgtlaD0uRk8swSunOZYmk/wc7wT+NZx3rf+Sn1J7 BDCEY4UagObR8Vyi2+/6BZlC+F0WJD7g09QSgi+5gCmYs4VznsyxeJoDUOSxahzt CYRU8Nm0OSEtWTHl858spMzz/+hFI21gRGCmJqEtmh6O1g2GpKdp3t0d0gyjdftO TG1eu7Mlp0C8Ldu47XdwLubDXFuCoOXk2JBygyaXwexH1RScx1/urozv5pU4fO/D ydR3FjGxGgCdIw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:45:30 2025 by rpki-client