This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft File: HtPY4p4GO50nQKs95sciVeyNBVc.mft (raw, json) Hash identifier: S1mpk84J35uRFSsq2ySItbu8fJOlyAtXhMfM6oaP8mc= Subject key identifier: D5:70:7E:F2:13:11:99:8B:FD:DF:DC:D8:DD:D3:B8:9B:D9:3F:34:21 Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Certificate serial: 019B10B80D3584B8D0502C2036ECDF318107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft Manifest number: 136D Signing time: Fri 12 Dec 2025 04:00:55 +0000 Manifest this update: Fri 12 Dec 2025 04:00:55 +0000 Manifest next update: Sat 13 Dec 2025 04:00:55 +0000 Files and hashes: 1: 2UbS1EAloXEyA0BxAmNaFARQcNQ.roa (hash: cZYI6Or2Jx26mD2t9A5DVd+NiBoz4kQO/JozvVMQ0oE=) 2: HtPY4p4GO50nQKs95sciVeyNBVc.crl (hash: ZZTuFSTIgAPFMzfRQM/doWWLiopLbhbhK6fGa0fTkEU=) 3: Kx_HhRKSclovibYPTKsUbvIcnP4.roa (hash: JQyTdc/rfi6m77h0pBZ1O2Zt7h/QM9DkjjB00attiWg=) 4: asHOk92nEQdrA8kG1RzUPuElHIs.roa (hash: Bdn7BKICOrC/wBSU74hIScdBDmMC3VmUhW1hWTywPms=) 5: dK8D14UQKbN9F_H7NixtSmYvgXY.roa (hash: mElKhPTPHO/f1skgAvtj0q6ACgI5om0hRS8bXYIUXN0=) 6: lLJ_L0PK663lLmvADNe5r45-IEc.roa (hash: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:0d:35:84:b8:d0:50:2c:20:36:ec:df:31:81:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557 Validity Not Before: Dec 12 04:00:55 2025 GMT Not After : Dec 13 04:00:55 2025 GMT Subject: CN=d5707ef21311998bfddfdcd8ddd3b89bd93f3421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:3c:4c:3d:01:19:e5:f3:41:31:73:43:76: 81:a6:0c:c3:b6:44:57:58:d2:ab:ef:f8:b8:3f:c6: 86:e3:a2:7b:a0:fd:08:1f:b3:cc:c5:dd:df:c7:40: 15:2d:e1:96:61:db:52:1a:be:e8:9d:36:04:ff:f6: 36:9c:cd:53:01:24:a6:c4:f4:de:59:b2:4f:ee:15: 9e:8a:5e:4b:92:66:0e:72:fa:23:34:f0:dd:62:a9: 2d:18:80:13:47:db:38:d5:c1:7a:68:21:f1:76:7d: f3:6e:5f:6a:d8:5f:06:35:05:3f:73:b4:52:7c:67: 29:ee:19:2f:dd:2d:87:28:e9:0b:40:1a:28:56:e3: 50:9a:95:f5:84:e4:db:68:5a:d1:33:19:87:b5:73: 28:f6:e2:5f:cd:86:de:f1:40:e9:b0:21:5d:91:3e: 8e:64:96:17:82:3a:a1:fb:e1:a9:b7:0f:c1:41:90: ee:1f:17:89:4d:39:aa:07:0b:d6:f1:29:71:27:50: f8:7e:87:e5:8b:4c:af:6e:ac:89:7c:2a:fc:9b:46: d2:85:a1:02:91:b0:7e:3e:c8:68:0d:2d:70:3a:d1: c7:5c:4c:a4:c5:09:32:83:f0:bf:30:eb:27:eb:95: e8:ba:75:63:f0:27:5b:d4:2d:ae:e5:91:1d:e1:de: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:70:7E:F2:13:11:99:8B:FD:DF:DC:D8:DD:D3:B8:9B:D9:3F:34:21 X509v3 Authority Key Identifier: keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2f:fb:b4:64:c0:6c:3c:ea:d8:c3:17:a2:6d:79:04:2a:10: 4c:72:28:11:82:a5:39:c2:35:39:44:52:3d:dc:5f:3b:60:c9: bd:08:d9:79:5f:1d:5f:47:d1:95:10:24:c4:a2:89:b1:bb:13: 02:44:97:b6:8c:ba:7e:4c:3d:18:ad:c7:80:30:b5:c8:d7:22: 7c:ec:7b:51:09:f7:63:eb:60:c4:49:ae:ed:f3:e9:c2:7c:57: 3f:3f:40:d4:16:3d:aa:65:44:37:f5:1d:33:a1:1f:60:71:00: ef:5e:6f:41:aa:f9:7a:19:0a:ae:2d:7d:5a:50:f3:83:dc:82: 0e:29:e7:96:9e:5c:43:d4:dc:fd:48:b5:c1:1f:6b:06:43:e3: 3e:02:ea:bd:ba:f3:ef:87:59:f8:2a:b1:3c:d7:64:9a:b9:0b: 57:b6:bf:40:5e:7d:b3:3e:5e:9a:81:4f:d7:95:a0:a6:fe:e7: 70:2a:b4:ab:88:28:35:3f:76:2c:eb:a0:ea:c2:81:7a:b8:f8: e5:58:b4:b8:51:12:0f:25:ab:ab:c3:f5:db:e0:e1:c8:f6:2f: 66:a6:72:d1:bf:db:8a:6d:15:82:79:53:08:b4:a4:cd:2c:53: 36:89:9a:bf:99:d9:08:7a:f9:2b:2f:3a:af:f1:9f:08:e8:43: 1a:0f:46:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuA01hLjQUCwgNuzfMYEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDNkOGUyOWUwNjNiOWQyNzQwYWIzZGU2YzcyMjU1ZWM4 ZDA1NTcwHhcNMjUxMjEyMDQwMDU1WhcNMjUxMjEzMDQwMDU1WjAzMTEwLwYDVQQD EyhkNTcwN2VmMjEzMTE5OThiZmRkZmRjZDhkZGQzYjg5YmQ5M2YzNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw308TD0BGeXzQTFzQ3aBpgzDtkRX WNKr7/i4P8aG46J7oP0IH7PMxd3fx0AVLeGWYdtSGr7onTYE//Y2nM1TASSmxPTe WbJP7hWeil5LkmYOcvojNPDdYqktGIATR9s41cF6aCHxdn3zbl9q2F8GNQU/c7RS fGcp7hkv3S2HKOkLQBooVuNQmpX1hOTbaFrRMxmHtXMo9uJfzYbe8UDpsCFdkT6O ZJYXgjqh++Gptw/BQZDuHxeJTTmqBwvW8SlxJ1D4fofli0yvbqyJfCr8m0bShaEC kbB+PshoDS1wOtHHXEykxQkyg/C/MOsn65XounVj8Cdb1C2u5ZEd4d60UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVwfvITEZmL/d/c2N3TuJvZPzQhMB8GA1UdIwQY MBaAFB7T2OKeBjudJ0CrPebHIlXsjQVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUt OWRjYTVjYzgwZGQ5LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80ZDljODMtZjk2MC00OGFjLWJiZjUtOWRjYTVjYzgwZGQ5 LzEvSHRQWTRwNEdPNTBuUUtzOTVzY2lWZXlOQlZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoC/7tGTA bDzq2MMXom15BCoQTHIoEYKlOcI1OURSPdxfO2DJvQjZeV8dX0fRlRAkxKKJsbsT AkSXtoy6fkw9GK3HgDC1yNcifOx7UQn3Y+tgxEmu7fPpwnxXPz9A1BY9qmVEN/Ud M6EfYHEA715vQar5ehkKri19WlDzg9yCDinnlp5cQ9Tc/Ui1wR9rBkPjPgLqvbrz 74dZ+CqxPNdkmrkLV7a/QF59sz5emoFP15Wgpv7ncCq0q4goNT92LOug6sKBerj4 5Vi0uFESDyWrq8P12+DhyPYvZqZy0b/bim0VgnlTCLSkzSxTNomav5nZCHr5Ky86 r/GfCOhDGg9GOg== -----END CERTIFICATE-----Generated at Fri Dec 12 13:11:22 2025 by rpki-client