This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json) Hash identifier: DXSNj7cq4oV09jFK7+XnWFnONhxqTUsqn5AIJqTBeuQ= Subject key identifier: 78:75:8B:B2:12:B3:6F:27:4C:F6:EC:41:38:40:6F:1D:16:48:49:DF Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019B12384DC3FF4029CC34E0AD65EB516CDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft Manifest number: 17B1 Signing time: Fri 12 Dec 2025 11:00:38 +0000 Manifest this update: Fri 12 Dec 2025 11:00:38 +0000 Manifest next update: Sat 13 Dec 2025 11:00:38 +0000 Files and hashes: 1: BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa (hash: pokEhbaiyjz6akLSE/xe2fj33j12cTdNEBlSqEQjlSw=) 2: PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa (hash: A4kpvpFD1Ozda2IwrgnmAZURYP2sYoUji6fCdgNJDuU=) 3: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: LEALJDw9KbtQHt8zHNAP1TxtP6/CYDPby8jxavZWBm4=) 4: nPf6vPs81jX8tCyyvpUwSrOy0dE.roa (hash: y2CFPQ3qkO9mevFesEexkErie9IwGC/QLDLpCaVtX1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:4d:c3:ff:40:29:cc:34:e0:ad:65:eb:51:6c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Dec 12 11:00:38 2025 GMT Not After : Dec 13 11:00:38 2025 GMT Subject: CN=78758bb212b36f274cf6ec4138406f1d164849df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:0f:88:48:c0:91:e4:80:11:58:a1:33:67: b4:6b:cb:6e:94:55:c7:7b:8f:ff:d0:8a:72:ee:06: 0d:c8:c9:08:28:dd:f1:9a:d1:31:63:68:9a:eb:f4: 1c:1c:ac:a0:86:75:91:db:4b:cc:48:c4:bb:e2:2a: 95:e1:62:06:0e:b1:b8:03:a6:44:8f:a4:2f:6a:79: b2:85:09:6e:84:a5:f0:8e:65:53:d7:18:6a:be:39: 03:c9:79:95:a0:d6:79:49:93:4a:1f:33:61:c3:96: 23:a1:3b:d7:08:84:44:86:e7:c5:65:90:d0:d3:f5: 97:7b:2f:85:4f:04:59:b8:f5:9c:d8:f9:e0:6d:e3: d3:83:77:ea:90:41:f2:f9:21:08:fb:a3:5c:e8:87: 62:96:47:d4:e4:02:68:e0:51:94:b8:d0:38:7a:ab: 87:1d:4d:cd:37:0a:2e:57:43:9c:64:e6:6c:65:07: be:5b:01:50:72:d6:8a:6c:1c:09:4b:df:d1:f4:e2: 51:13:17:b8:6d:9b:5a:aa:37:ca:b8:ef:af:18:ee: 7d:aa:3f:58:56:f5:ac:fb:44:70:88:04:d9:8a:54: 7e:19:3d:9a:7c:c3:2b:c9:5d:16:b7:dd:b5:53:55: 03:b3:e7:3a:4b:6f:7d:2f:44:21:cb:bd:5d:57:7a: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:75:8B:B2:12:B3:6F:27:4C:F6:EC:41:38:40:6F:1D:16:48:49:DF X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6a:e1:e3:07:a9:3c:18:60:6e:62:95:60:fd:39:a6:c6:e5: e1:bd:a4:8f:3b:61:b7:a1:1a:bf:a8:cd:86:6e:00:57:28:b4: 08:bb:52:ce:2c:c8:16:f5:19:eb:1b:d1:ba:ca:41:c2:be:d3: 64:2b:cd:36:5f:59:6d:63:58:fc:92:97:f7:af:54:0c:b6:e5: 48:e9:5e:b7:64:ad:07:2b:3e:94:cd:24:f7:a1:b9:7b:ec:4b: db:d2:77:d7:28:97:6a:60:9a:68:8d:4f:18:83:fe:e0:93:e5: 01:fd:8b:f3:52:4b:2b:6a:82:9c:b8:49:b6:2d:32:16:57:d5: ef:47:c1:d4:12:bd:b2:33:0e:fd:b5:2d:40:61:d9:9e:12:25: 91:0f:92:02:1f:39:e7:96:35:03:97:b4:bc:44:8c:c7:d4:8c: 89:36:93:c0:3c:4d:0d:ed:df:d9:4f:4a:ba:a9:cb:e6:33:c2: 86:09:0d:45:03:de:04:35:68:89:b7:70:82:7e:0e:44:e1:f8: 2a:79:54:a7:2e:d1:e2:83:74:42:75:29:61:5f:f6:aa:20:9c: 5e:4d:12:ca:ff:28:42:88:2f:fc:ee:30:be:4e:cf:06:13:a2: 43:ed:b5:d5:a5:99:d1:85:fd:6d:69:11:95:0d:47:87:e7:f6: 8b:2d:43:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOE3D/0ApzDTgrWXrUWzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjUxMjEyMTEwMDM4WhcNMjUxMjEzMTEwMDM4WjAzMTEwLwYDVQQD Eyg3ODc1OGJiMjEyYjM2ZjI3NGNmNmVjNDEzODQwNmYxZDE2NDg0OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4kPiEjAkeSAEVihM2e0a8tulFXH e4//0Ipy7gYNyMkIKN3xmtExY2ia6/QcHKyghnWR20vMSMS74iqV4WIGDrG4A6ZE j6QvanmyhQluhKXwjmVT1xhqvjkDyXmVoNZ5SZNKHzNhw5YjoTvXCIREhufFZZDQ 0/WXey+FTwRZuPWc2PngbePTg3fqkEHy+SEI+6Nc6IdilkfU5AJo4FGUuNA4equH HU3NNwouV0OcZOZsZQe+WwFQctaKbBwJS9/R9OJRExe4bZtaqjfKuO+vGO59qj9Y VvWs+0RwiATZilR+GT2afMMryV0Wt921U1UDs+c6S299L0Qhy71dV3rrTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHh1i7ISs28nTPbsQThAbx0WSEnfMB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2rh4wep PBhgbmKVYP05psbl4b2kjztht6Eav6jNhm4AVyi0CLtSzizIFvUZ6xvRuspBwr7T ZCvNNl9ZbWNY/JKX969UDLblSOlet2StBys+lM0k96G5e+xL29J31yiXamCaaI1P GIP+4JPlAf2L81JLK2qCnLhJti0yFlfV70fB1BK9sjMO/bUtQGHZnhIlkQ+SAh85 55Y1A5e0vESMx9SMiTaTwDxNDe3f2U9KuqnL5jPChgkNRQPeBDVoibdwgn4OROH4 KnlUpy7R4oN0QnUpYV/2qiCcXk0Syv8oQogv/O4wvk7PBhOiQ+211aWZ0YX9bWkR lQ1Hh+f2iy1DUg== -----END CERTIFICATE-----Generated at Fri Dec 12 14:34:47 2025 by rpki-client