This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json) Hash identifier: NjxnsO8/KRnIVJZINkHJB/B8ijdNM4C0hUOcDcAO0XY= Subject key identifier: 1A:D9:DF:7F:E9:61:72:D6:94:18:EC:B6:EB:DA:72:B4:C8:56:11:5E Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a Certificate serial: 019B16BA5BC7035759890351FC830A16AD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft Manifest number: 10BF Signing time: Sat 13 Dec 2025 08:01:10 +0000 Manifest this update: Sat 13 Dec 2025 08:01:10 +0000 Manifest next update: Sun 14 Dec 2025 08:01:10 +0000 Files and hashes: 1: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=) 2: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: 3+Z8LEyN5UJktwWSZnRvl+cVWV6A4esfdW+TWMU3DSE=) 3: q2pIOgbHKqsp-vuIUpYVaJX6Ib0.roa (hash: Db8REEvZSQ5trpAzSV1gkLTz5aVmUoY2anxA/9+mQtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:ba:5b:c7:03:57:59:89:03:51:fc:83:0a:16:ad:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8536146119b044539082e326cca903200b8d4b1a Validity Not Before: Dec 13 08:01:10 2025 GMT Not After : Dec 14 08:01:10 2025 GMT Subject: CN=1ad9df7fe96172d69418ecb6ebda72b4c856115e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:02:0a:c5:e7:2a:d1:a7:d4:27:1d:5c:c4: 04:cc:c3:61:20:f5:16:b4:f7:8d:6f:a9:b6:06:20: 24:f3:ca:8c:f1:e8:c6:b4:3b:ae:e8:1a:42:ea:1f: 74:b8:68:7b:b0:36:a7:d9:76:bc:d0:eb:8b:71:6f: 71:9e:8b:de:f5:82:ba:08:41:87:a3:08:9d:81:bd: 58:33:4e:a6:62:26:cd:97:54:2d:5d:1b:39:2d:92: 7a:44:7b:5a:15:47:a6:a9:04:84:e5:bc:92:4e:f8: c3:7e:e9:f9:08:fd:bb:91:79:c7:04:7c:ac:26:d8: f9:bc:5f:1f:29:67:33:42:54:41:ff:d5:12:4a:f9: 32:7c:53:ee:67:d3:d3:f4:f9:7a:96:5b:03:cb:8d: 19:9b:ed:9f:96:7b:07:f8:be:67:43:e7:96:ea:13: aa:4b:9b:3b:ef:29:6e:be:65:d5:0b:51:e2:9a:20: 64:ed:db:26:4b:11:c9:9c:5f:52:3b:3b:11:de:9f: 90:3a:91:cf:a8:44:c2:04:b3:26:74:0e:53:65:11: 69:a9:91:12:bb:f5:3e:0c:bc:ed:e7:bb:f6:e1:72: 2e:ed:fb:93:11:c3:25:27:7d:a9:b4:ec:b2:4e:64: f7:d2:e5:14:40:ba:61:9a:a0:95:cb:28:a9:a9:f6: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D9:DF:7F:E9:61:72:D6:94:18:EC:B6:EB:DA:72:B4:C8:56:11:5E X509v3 Authority Key Identifier: keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:09:b9:91:62:b5:04:03:5c:b8:37:f4:67:3f:64:f2:f5:95: 3f:48:b0:40:fa:1c:56:6b:92:eb:ab:7d:6d:71:c6:ab:27:bb: 7e:f1:57:52:94:cb:84:62:f2:e5:c0:78:57:1c:67:e8:9f:b0: a0:5b:14:2e:3e:a3:db:d2:70:40:8f:94:a3:70:f0:28:cc:e3: 34:d3:8a:10:b8:f6:60:88:2f:46:ed:61:36:4d:21:61:b1:4c: 97:71:b4:fe:38:d6:ef:ab:f0:22:79:5a:2e:08:ab:6c:4a:96: e6:71:97:5f:a5:f6:f6:bc:5b:4f:e6:aa:a5:0b:c6:a2:89:92: 4c:5a:a0:d1:88:fc:09:04:ad:16:b6:73:47:9f:d8:74:a2:67: d4:37:9c:98:2e:15:08:d4:ff:fc:f3:dc:9a:2b:be:61:4d:15: 49:27:fc:c3:ad:f6:af:51:ad:9b:4c:0c:76:6e:ff:e9:1d:89: 25:bd:bb:e7:9d:c0:4c:b6:b4:89:8c:f8:d3:84:1c:8a:f6:09: 8f:1c:91:ad:e1:cf:73:81:76:25:9b:1b:99:a3:bf:0f:ba:1f: 2d:42:d5:de:a9:f9:3e:ad:d1:86:5d:7d:87:6d:0b:5f:89:28: 07:a3:ce:fe:27:19:e3:a8:96:86:d2:71:82:03:31:50:f5:60: 23:21:1a:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWulvHA1dZiQNR/IMKFq01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4 ZDRiMWEwHhcNMjUxMjEzMDgwMTEwWhcNMjUxMjE0MDgwMTEwWjAzMTEwLwYDVQQD EygxYWQ5ZGY3ZmU5NjE3MmQ2OTQxOGVjYjZlYmRhNzJiNGM4NTYxMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxMCCsXnKtGn1CcdXMQEzMNhIPUW tPeNb6m2BiAk88qM8ejGtDuu6BpC6h90uGh7sDan2Xa80OuLcW9xnove9YK6CEGH owidgb1YM06mYibNl1QtXRs5LZJ6RHtaFUemqQSE5bySTvjDfun5CP27kXnHBHys Jtj5vF8fKWczQlRB/9USSvkyfFPuZ9PT9Pl6llsDy40Zm+2flnsH+L5nQ+eW6hOq S5s77yluvmXVC1HimiBk7dsmSxHJnF9SOzsR3p+QOpHPqETCBLMmdA5TZRFpqZES u/U+DLzt57v24XIu7fuTEcMlJ32ptOyyTmT30uUUQLphmqCVyyipqfbc9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrZ33/pYXLWlBjstuvacrTIVhFeMB8GA1UdIwQY MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt MGM2NzIxN2NjOTZiLzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQm5kWK1 BANcuDf0Zz9k8vWVP0iwQPocVmuS66t9bXHGqye7fvFXUpTLhGLy5cB4Vxxn6J+w oFsULj6j29JwQI+Uo3DwKMzjNNOKELj2YIgvRu1hNk0hYbFMl3G0/jjW76vwInla LgirbEqW5nGXX6X29rxbT+aqpQvGoomSTFqg0Yj8CQStFrZzR5/YdKJn1DecmC4V CNT//PPcmiu+YU0VSSf8w632r1Gtm0wMdm7/6R2JJb27553ATLa0iYz404QcivYJ jxyRreHPc4F2JZsbmaO/D7ofLULV3qn5Pq3Rhl19h20LX4koB6PO/icZ46iWhtJx ggMxUPVgIyEaHQ== -----END CERTIFICATE-----Generated at Sat Dec 13 10:42:27 2025 by rpki-client