This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json) Hash identifier: 40B2eUcK6xwvYng5g8Oj8pbyzgmL+YSxlJuZLEVpsFA= Subject key identifier: 18:BB:9B:B3:39:A1:03:10:E2:92:32:8F:CA:77:A1:7A:12:D5:7B:4E Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Certificate serial: 019B2B53DAF722B47A7D20C31C7B4296305B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft Manifest number: 0AC3 Signing time: Wed 17 Dec 2025 08:01:14 +0000 Manifest this update: Wed 17 Dec 2025 08:01:14 +0000 Manifest next update: Thu 18 Dec 2025 08:01:14 +0000 Files and hashes: 1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=) 2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=) 3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=) 4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: /tem2hIwASEWXwWAReif2TYzhvwYBB1eRZfeMR0qFs8=) 5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:da:f7:22:b4:7a:7d:20:c3:1c:7b:42:96:30:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Validity Not Before: Dec 17 08:01:14 2025 GMT Not After : Dec 18 08:01:14 2025 GMT Subject: CN=18bb9bb339a10310e292328fca77a17a12d57b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:21:9e:f3:6d:ff:d8:fd:d5:86:03:60:5c: 1a:e3:eb:11:a8:51:9c:0c:1f:e2:45:b9:27:19:75: e8:80:04:69:64:bb:0b:86:73:d2:56:47:f6:f6:e8: 83:52:2d:a9:e2:30:0c:a8:f4:de:8a:ce:ee:65:df: 24:b9:47:31:9b:e3:19:fb:81:34:ee:a8:1a:e0:45: ae:ca:29:ad:02:78:b9:8d:cc:a8:3c:8d:9e:62:4a: 8a:93:ef:c4:52:6e:0f:ad:82:32:12:76:c0:2d:35: 64:e7:c8:43:1c:90:4a:1f:82:13:40:67:11:f7:89: ba:63:9f:09:26:39:c7:a2:48:af:2e:f2:15:76:e2: 76:bc:d0:b5:dc:0a:d3:6e:92:6d:85:08:20:9e:f6: de:4f:ab:0f:3c:5a:f6:dd:65:df:d3:8a:57:11:3d: e6:30:2e:85:5a:1f:7a:58:20:a5:81:89:fc:80:63: 35:21:f7:5b:3b:b1:6d:4d:03:79:ae:87:9f:22:1b: e9:b3:01:80:dc:cc:87:c8:f1:38:a1:c0:6c:c1:e9: da:d9:00:be:8b:fc:6d:1f:aa:48:f0:a1:bc:8d:b2: 62:a7:7d:f7:2c:02:1a:a4:87:69:60:6d:c2:c2:39: 3d:97:e1:59:6e:2f:9f:6c:95:6f:20:58:42:72:79: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BB:9B:B3:39:A1:03:10:E2:92:32:8F:CA:77:A1:7A:12:D5:7B:4E X509v3 Authority Key Identifier: keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c6:2d:fc:ed:35:ce:91:70:cc:15:d3:8c:0a:5a:5e:58:e4: f2:5e:74:81:1c:73:9e:6f:e0:48:12:3b:28:91:00:23:04:04: d9:51:88:93:4e:5a:47:4b:1a:41:46:3c:4d:79:1f:da:a8:f0: e7:de:94:ea:a4:89:c4:4f:3f:5e:f9:7d:7c:b6:9a:cb:f3:6d: c5:df:8c:0e:6e:51:eb:e8:7a:18:22:54:d8:15:a1:53:80:2b: 8b:14:5c:5f:a9:c1:f9:cd:91:5a:21:29:e4:e6:2c:06:32:4a: 3c:6b:f2:88:07:b6:44:57:a8:74:42:ca:4a:85:9b:94:ed:3f: bb:90:a2:e3:3f:ba:e9:0c:ab:ee:63:b1:2f:5b:bd:d4:5d:1c: 7c:08:fb:fc:84:3c:8c:3b:70:86:f1:22:73:3a:86:81:51:6f: 58:8e:e0:ef:0f:c9:0c:f8:ba:11:9d:2c:d9:0a:dc:1f:aa:03: 93:9d:c6:74:14:52:00:78:30:b0:3b:10:63:de:f5:7d:6c:e0: f9:18:43:b3:fc:9c:28:cf:9c:9a:1b:eb:4d:f7:b3:fd:ee:13: ee:d4:7b:2b:04:75:26:07:1b:e6:62:bc:fb:6f:98:8f:c3:f6: be:22:dd:65:ef:36:7f:59:c0:c5:1a:bc:bc:51:10:0e:4a:e4: 8c:85:48:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU9r3IrR6fSDDHHtCljBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk OGI4ZTUwHhcNMjUxMjE3MDgwMTE0WhcNMjUxMjE4MDgwMTE0WjAzMTEwLwYDVQQD EygxOGJiOWJiMzM5YTEwMzEwZTI5MjMyOGZjYTc3YTE3YTEyZDU3YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBEhnvNt/9j91YYDYFwa4+sRqFGc DB/iRbknGXXogARpZLsLhnPSVkf29uiDUi2p4jAMqPTeis7uZd8kuUcxm+MZ+4E0 7qga4EWuyimtAni5jcyoPI2eYkqKk+/EUm4PrYIyEnbALTVk58hDHJBKH4ITQGcR 94m6Y58JJjnHokivLvIVduJ2vNC13ArTbpJthQggnvbeT6sPPFr23WXf04pXET3m MC6FWh96WCClgYn8gGM1IfdbO7FtTQN5roefIhvpswGA3MyHyPE4ocBswena2QC+ i/xtH6pI8KG8jbJip333LAIapIdpYG3Cwjk9l+FZbi+fbJVvIFhCcnn9uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi7m7M5oQMQ4pIyj8p3oXoS1XtOMB8GA1UdIwQY MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsYt/O01 zpFwzBXTjApaXljk8l50gRxznm/gSBI7KJEAIwQE2VGIk05aR0saQUY8TXkf2qjw 596U6qSJxE8/Xvl9fLaay/Ntxd+MDm5R6+h6GCJU2BWhU4ArixRcX6nB+c2RWiEp 5OYsBjJKPGvyiAe2RFeodELKSoWblO0/u5Ci4z+66Qyr7mOxL1u91F0cfAj7/IQ8 jDtwhvEiczqGgVFvWI7g7w/JDPi6EZ0s2QrcH6oDk53GdBRSAHgwsDsQY971fWzg +RhDs/ycKM+cmhvrTfez/e4T7tR7KwR1Jgcb5mK8+2+Yj8P2viLdZe82f1nAxRq8 vFEQDkrkjIVIHQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:03:49 2025 by rpki-client