This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json) Hash identifier: 4sxQ+5S7WDVnOpeDGBZuinmzR8qD/ebO0Cf9NVhQKEE= Subject key identifier: 27:DA:F2:33:FC:5D:3A:71:98:A1:3B:77:80:81:21:B7:59:7A:62:A6 Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Certificate serial: 019B1BE07620D542CF99D2746CE73FF5EA62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft Manifest number: 0ABB Signing time: Sun 14 Dec 2025 08:00:53 +0000 Manifest this update: Sun 14 Dec 2025 08:00:53 +0000 Manifest next update: Mon 15 Dec 2025 08:00:53 +0000 Files and hashes: 1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=) 2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=) 3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=) 4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: 6kvTzs43XAhnf7Wn+rgRvsnIX17jFw0a5OF28aC9Z+w=) 5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:76:20:d5:42:cf:99:d2:74:6c:e7:3f:f5:ea:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5 Validity Not Before: Dec 14 08:00:53 2025 GMT Not After : Dec 15 08:00:53 2025 GMT Subject: CN=27daf233fc5d3a7198a13b77808121b7597a62a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:01:ba:76:51:4c:4c:d3:c3:ed:44:71:21: 96:c1:b0:85:3c:fb:07:c9:af:98:f5:6c:d2:c7:b1: a9:2a:45:ac:ec:da:22:b1:ad:6e:c2:45:91:01:bf: 27:c6:60:b0:3d:11:c8:63:e2:2a:ea:b2:a7:97:1b: 46:76:99:c6:61:f7:ad:97:b0:24:9a:fe:f7:21:b6: fe:85:62:78:7d:99:bc:61:57:c3:6d:37:92:16:72: 91:dd:b5:9f:45:a4:c4:fb:58:06:f7:db:ab:9f:43: f6:bb:ae:5e:8a:8b:36:c6:09:1c:66:a4:58:f4:02: f2:ab:06:ba:42:22:90:89:44:fd:de:a6:07:7b:30: bd:3c:bb:f0:80:05:9c:54:77:4c:e1:e4:66:46:a9: 73:10:9c:d0:19:4c:30:99:6e:83:6a:cb:30:02:57: 3b:6f:8c:8a:73:6a:ff:a6:01:a2:89:d1:ef:e0:15: e5:76:d0:2c:61:f4:70:bb:eb:82:75:7f:dd:8e:96: c6:c5:07:45:1f:ab:b5:c4:4b:68:ed:1c:ba:ba:85: 11:c8:ad:5f:e6:88:ad:9d:98:e8:4d:d3:3f:b1:52: 5d:62:f9:34:38:3b:95:d6:18:35:1b:db:56:4b:e9: 5b:96:4e:f2:fc:87:d4:50:76:06:7a:1a:61:32:04: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:F2:33:FC:5D:3A:71:98:A1:3B:77:80:81:21:B7:59:7A:62:A6 X509v3 Authority Key Identifier: keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5c:c7:96:3e:af:27:17:b2:0c:f9:60:70:08:ff:1c:1d:4b: 60:de:17:66:fa:e4:49:0d:48:86:f2:17:59:38:d4:af:ad:41: a3:6d:24:a1:d4:e5:1d:ae:e2:ca:da:1c:a0:97:67:bd:dd:91: 4a:9d:51:da:f0:8c:f0:2b:9d:1f:c8:4f:31:90:36:0a:43:c3: 41:c4:7d:0d:0d:3d:bd:68:e6:92:8a:44:4c:ed:3e:a1:a2:d5: 67:1d:e0:f8:3e:8a:51:84:37:40:a3:bd:cd:7c:31:ce:46:cf: 7b:38:bf:67:95:17:81:41:21:c2:f0:0f:b8:38:f7:74:e4:6c: 84:08:b4:a7:fd:24:c8:98:82:56:2c:53:c9:d9:be:a7:7d:00: d8:08:d6:22:a5:a7:01:ae:b3:87:a1:08:7a:f0:ae:7b:0f:d6: 6a:02:35:78:66:98:e7:a8:46:99:81:da:f8:1a:8c:2d:77:a2: 98:17:61:3b:e1:42:e5:34:dc:1c:cd:b7:be:f6:32:13:b9:56: 57:b5:84:85:71:31:94:51:19:5e:1b:72:88:40:4e:1f:86:85: 19:e5:12:0b:c9:f0:12:a7:3e:2b:9d:e6:85:19:07:a4:e6:b3: 34:49:0a:f4:cb:d1:4a:54:09:19:2d:b2:57:17:70:70:54:7c: 7f:05:7f:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4HYg1ULPmdJ0bOc/9epiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk OGI4ZTUwHhcNMjUxMjE0MDgwMDUzWhcNMjUxMjE1MDgwMDUzWjAzMTEwLwYDVQQD EygyN2RhZjIzM2ZjNWQzYTcxOThhMTNiNzc4MDgxMjFiNzU5N2E2MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPABunZRTEzTw+1EcSGWwbCFPPsH ya+Y9WzSx7GpKkWs7Noisa1uwkWRAb8nxmCwPRHIY+Iq6rKnlxtGdpnGYfetl7Ak mv73Ibb+hWJ4fZm8YVfDbTeSFnKR3bWfRaTE+1gG99urn0P2u65eios2xgkcZqRY 9ALyqwa6QiKQiUT93qYHezC9PLvwgAWcVHdM4eRmRqlzEJzQGUwwmW6DasswAlc7 b4yKc2r/pgGiidHv4BXldtAsYfRwu+uCdX/djpbGxQdFH6u1xEto7Ry6uoURyK1f 5oitnZjoTdM/sVJdYvk0ODuV1hg1G9tWS+lblk7y/IfUUHYGehphMgQJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfa8jP8XTpxmKE7d4CBIbdZemKmMB8GA1UdIwQY MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1zHlj6v JxeyDPlgcAj/HB1LYN4XZvrkSQ1IhvIXWTjUr61Bo20kodTlHa7iytocoJdnvd2R Sp1R2vCM8CudH8hPMZA2CkPDQcR9DQ09vWjmkopETO0+oaLVZx3g+D6KUYQ3QKO9 zXwxzkbPezi/Z5UXgUEhwvAPuDj3dORshAi0p/0kyJiCVixTydm+p30A2AjWIqWn Aa6zh6EIevCuew/WagI1eGaY56hGmYHa+BqMLXeimBdhO+FC5TTcHM23vvYyE7lW V7WEhXExlFEZXhtyiEBOH4aFGeUSC8nwEqc+K53mhRkHpOazNEkK9MvRSlQJGS2y VxdwcFR8fwV/2g== -----END CERTIFICATE-----Generated at Sun Dec 14 11:48:05 2025 by rpki-client