This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json) Hash identifier: 2/5/aUK+R9GStIAwCHZalV/eDf+nGa7gCrdjYByo2sI= Subject key identifier: A8:1F:9F:E3:04:6F:39:FC:C1:01:06:F2:87:0D:3F:F9:DF:A6:60:08 Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb Certificate serial: 019AF79D5F3E8415B0805CC445FB335DEAF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft Manifest number: 081A Signing time: Sun 07 Dec 2025 07:01:16 +0000 Manifest this update: Sun 07 Dec 2025 07:01:16 +0000 Manifest next update: Mon 08 Dec 2025 07:01:16 +0000 Files and hashes: 1: HlWQb2FJPJevQzdN-672g7_czRw.roa (hash: RXUVTX63EDXGPDEfUV3NoAdiOJHw8+fXf2xrTwsVvM0=) 2: Qw7YYmo8Mf_SYoj9xXYve2Po5mo.roa (hash: MFZ45SF5Rc4M+oQuJ6ydMNsNfmBIGzpqiYFUJ97A20U=) 3: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: TR8S/+wGZ+UlVEIYH1/K32pRmZmgvC+OTyJTtwRQM9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9d:5f:3e:84:15:b0:80:5c:c4:45:fb:33:5d:ea:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb Validity Not Before: Dec 7 07:01:16 2025 GMT Not After : Dec 8 07:01:16 2025 GMT Subject: CN=a81f9fe3046f39fcc10106f2870d3ff9dfa66008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:71:e6:b8:4f:94:eb:86:88:95:4c:60:75: bc:df:88:2a:8f:84:de:ab:da:aa:fc:d0:4b:bd:ad: 0e:1c:e0:a7:7b:b6:55:01:c0:8f:f5:42:ff:7a:e6: 64:61:ba:2a:41:3c:f1:ad:bb:2f:62:e8:ad:69:4f: 63:7b:17:b6:38:b8:88:b2:a9:75:ba:0a:ec:1e:9e: 5a:c4:23:18:29:3a:9f:d2:55:3d:f2:ea:b6:6a:e3: a7:f2:ee:11:96:3b:69:98:9f:50:5b:d5:c2:dc:65: b0:0f:d2:d3:48:60:63:33:13:f6:c9:84:ab:19:01: 26:fe:09:68:bd:46:4f:39:f2:bf:a4:fa:0d:f3:10: 3e:d4:7d:38:55:ed:91:67:32:7b:30:0d:86:c0:dc: 74:01:30:4c:d8:aa:dc:d8:1b:67:73:84:8a:0d:37: 42:0e:70:24:69:06:79:be:02:5c:94:a0:d6:e6:3d: c5:d6:8b:96:d4:65:5a:2a:18:d3:08:57:67:f8:29: ea:83:57:8b:ac:a1:14:af:cd:af:20:59:25:9b:bb: 4b:74:3a:67:86:eb:55:69:a5:5b:2a:02:2c:e1:8a: 52:19:90:f6:ea:4f:2a:89:b5:25:e2:f4:65:6a:31: 57:2c:76:9a:ac:9d:eb:09:d4:f0:87:53:a4:53:23: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1F:9F:E3:04:6F:39:FC:C1:01:06:F2:87:0D:3F:F9:DF:A6:60:08 X509v3 Authority Key Identifier: keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:88:dc:c4:53:50:cf:29:ba:b4:28:bc:ac:41:36:ef:12:9a: 28:41:9f:5d:45:04:74:5c:d5:12:9d:be:95:c7:77:e0:83:c6: 87:81:95:36:eb:a2:74:37:0c:ba:69:37:f3:2c:87:29:f1:57: 0b:12:ca:1c:c5:e6:ef:79:26:d1:7d:9a:d8:b7:07:60:9a:da: fe:48:db:48:4c:91:95:0c:1d:0b:60:90:fc:67:b5:a6:1f:9b: 2e:87:8a:59:70:d3:9a:70:ff:c9:28:af:76:44:9a:75:78:e9: f3:49:39:b4:c6:9b:3a:37:50:23:b1:a2:ed:9b:02:10:7c:ce: 82:12:65:01:ec:36:00:ac:69:f2:ca:be:41:01:87:26:15:b4: 57:30:fd:92:45:f9:4e:52:1a:2d:99:82:50:94:21:fc:0e:a8: 2e:36:ab:f9:ed:56:6f:8b:e6:3e:30:e8:36:0b:85:a1:73:c2: 25:63:93:c8:da:51:1b:d8:ee:ec:d0:f4:8d:10:ad:f5:31:21: 60:b8:a8:2b:10:1b:86:5b:36:19:13:cd:07:c2:dd:19:72:95: c3:7a:f8:23:af:15:3c:8c:92:06:93:9f:02:de:16:23:41:60: f9:fd:46:64:f2:b3:f9:2a:b6:4b:ae:f1:94:9f:be:c5:7d:43: 8d:68:53:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nV8+hBWwgFzERfszXer0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw YTdkZGIwHhcNMjUxMjA3MDcwMTE2WhcNMjUxMjA4MDcwMTE2WjAzMTEwLwYDVQQD EyhhODFmOWZlMzA0NmYzOWZjYzEwMTA2ZjI4NzBkM2ZmOWRmYTY2MDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Jx5rhPlOuGiJVMYHW834gqj4Te q9qq/NBLva0OHOCne7ZVAcCP9UL/euZkYboqQTzxrbsvYuitaU9jexe2OLiIsql1 ugrsHp5axCMYKTqf0lU98uq2auOn8u4RljtpmJ9QW9XC3GWwD9LTSGBjMxP2yYSr GQEm/glovUZPOfK/pPoN8xA+1H04Ve2RZzJ7MA2GwNx0ATBM2Krc2Btnc4SKDTdC DnAkaQZ5vgJclKDW5j3F1ouW1GVaKhjTCFdn+Cnqg1eLrKEUr82vIFklm7tLdDpn hutVaaVbKgIs4YpSGZD26k8qibUl4vRlajFXLHaarJ3rCdTwh1OkUyObsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgfn+MEbzn8wQEG8ocNP/nfpmAIMB8GA1UdIwQY MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5 LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaojcxFNQ zym6tCi8rEE27xKaKEGfXUUEdFzVEp2+lcd34IPGh4GVNuuidDcMumk38yyHKfFX CxLKHMXm73km0X2a2LcHYJra/kjbSEyRlQwdC2CQ/Ge1ph+bLoeKWXDTmnD/ySiv dkSadXjp80k5tMabOjdQI7Gi7ZsCEHzOghJlAew2AKxp8sq+QQGHJhW0VzD9kkX5 TlIaLZmCUJQh/A6oLjar+e1Wb4vmPjDoNguFoXPCJWOTyNpRG9ju7ND0jRCt9TEh YLioKxAbhls2GRPNB8LdGXKVw3r4I68VPIySBpOfAt4WI0Fg+f1GZPKz+Sq2S67x lJ++xX1DjWhTbg== -----END CERTIFICATE-----Generated at Sun Dec 7 14:32:02 2025 by rpki-client