This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft File: hMFxArbpLikuyKyvZZ48KQqNC2g.mft (raw, json) Hash identifier: P+sTS72fpwPm3A6Z34qTHckQdfHzjXLR2wLxtWRgXn8= Subject key identifier: 36:05:4A:5A:D2:82:34:22:BA:1F:D1:43:C8:1A:D7:F7:64:E4:15:31 Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Certificate serial: 019B258898F06AAD71E92718B5EA22B7F4C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft Manifest number: 13DC Signing time: Tue 16 Dec 2025 05:01:07 +0000 Manifest this update: Tue 16 Dec 2025 05:01:07 +0000 Manifest next update: Wed 17 Dec 2025 05:01:07 +0000 Files and hashes: 1: JnBeNm2rTKYmdlnV7LD4ratnhIY.roa (hash: 7sx6YVexwt/Dz3KSILgflEf6IXU43pKeioOkcXpsk1E=) 2: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (hash: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=) 3: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (hash: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=) 4: hMFxArbpLikuyKyvZZ48KQqNC2g.crl (hash: P7GCgr5+hqsjUPxoAFnM90x4Ym4jYeP0sL/6q0QHGI0=) 5: nIfzUJtgT3TC148NhCHT3nc3TU0.roa (hash: k8UMtfG8SYavn2YwaHNZ1aeJ1v6JZQQf4ItuUMWhh4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:98:f0:6a:ad:71:e9:27:18:b5:ea:22:b7:f4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68 Validity Not Before: Dec 16 05:01:07 2025 GMT Not After : Dec 17 05:01:07 2025 GMT Subject: CN=36054a5ad2823422ba1fd143c81ad7f764e41531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:f8:dc:3b:7d:31:11:82:5e:c0:01:1d:eb: 8b:b3:3b:40:80:94:e6:17:92:a6:aa:09:59:ed:95: 62:da:f6:f1:df:23:e3:78:77:ec:6d:8c:22:82:be: 5c:f3:ea:c8:62:c6:99:da:78:4a:0c:a7:b5:5f:65: 45:48:71:52:d0:04:8d:d3:b0:c2:ba:34:1c:ad:03: 85:4f:a0:e9:1a:6b:98:90:ba:b1:51:b1:3b:c0:2c: 65:2c:73:54:aa:2e:10:8f:43:92:2e:d8:a1:87:5a: 57:1d:d2:a6:5e:d3:f1:59:4b:33:c8:1e:e7:f6:49: 1a:39:0e:bb:29:90:01:b6:ef:aa:41:9b:20:bc:97: 41:5c:90:8b:65:24:63:70:31:d0:90:a4:49:5d:7a: 83:65:56:a6:21:ab:74:39:eb:af:de:5f:54:c8:20: e4:4f:5d:f6:e6:ab:42:f6:3a:5e:8b:e0:41:ee:0c: 3f:45:a4:1f:0c:0e:3a:fc:8b:4c:03:55:eb:99:a6: 1e:ca:97:08:ed:06:ca:bd:85:04:1a:48:3e:81:4f: da:27:12:0d:c2:4c:99:09:c2:21:80:18:45:4c:f8: ee:e0:45:39:62:7f:79:a9:b4:b1:76:7d:8d:a2:ec: a8:ef:65:9d:f1:09:1c:05:20:bb:f6:ed:eb:c0:02: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:4A:5A:D2:82:34:22:BA:1F:D1:43:C8:1A:D7:F7:64:E4:15:31 X509v3 Authority Key Identifier: keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c2:56:28:4c:78:d0:ca:4a:5a:88:30:48:df:fe:a5:b7:ab: eb:81:c8:1e:4f:f8:0b:b7:61:2c:bb:65:c4:a3:d1:91:5a:3e: 29:fc:6d:dd:46:94:da:61:49:e1:b6:2e:10:4d:e3:1a:74:77: a6:aa:78:8c:5d:26:26:bb:bd:1f:e8:b3:40:9c:70:7f:ae:dd: 1f:b2:72:ba:a1:7e:30:db:1f:45:ed:1f:a0:d6:82:44:c4:c9: 7f:1a:db:b7:d7:91:e6:15:02:25:16:94:c7:e9:01:af:40:24: 72:1d:b6:41:b8:f7:fe:46:ad:c5:b2:c1:ca:0e:71:83:01:77: c1:54:18:5f:96:65:e1:72:37:7c:f2:a7:b2:eb:7e:0a:d4:f0: 6b:ad:5e:92:a3:4c:6b:7b:41:a7:9b:9d:4a:58:8e:0c:f1:3d: c0:67:0f:4c:5d:12:a5:67:a9:e0:19:5a:64:4b:fd:9d:cd:09: 41:e9:78:fb:4e:de:a9:8b:65:2b:fa:1f:08:0a:33:2b:51:8c: 38:54:e8:ac:31:3b:63:4e:66:cf:61:19:7e:a0:d8:38:b5:df: 4b:9c:c8:d0:c5:61:79:d1:58:67:c6:fc:ce:01:68:dc:fd:7d: 4e:17:42:b0:db:e0:6c:5d:b7:2a:1f:b1:fc:8c:be:36:23:48: 96:64:28:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliJjwaq1x6ScYteoit/TDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4 ZDBiNjgwHhcNMjUxMjE2MDUwMTA3WhcNMjUxMjE3MDUwMTA3WjAzMTEwLwYDVQQD EygzNjA1NGE1YWQyODIzNDIyYmExZmQxNDNjODFhZDdmNzY0ZTQxNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYP43Dt9MRGCXsABHeuLsztAgJTm F5KmqglZ7ZVi2vbx3yPjeHfsbYwigr5c8+rIYsaZ2nhKDKe1X2VFSHFS0ASN07DC ujQcrQOFT6DpGmuYkLqxUbE7wCxlLHNUqi4Qj0OSLtihh1pXHdKmXtPxWUszyB7n 9kkaOQ67KZABtu+qQZsgvJdBXJCLZSRjcDHQkKRJXXqDZVamIat0Oeuv3l9UyCDk T1325qtC9jpei+BB7gw/RaQfDA46/ItMA1XrmaYeypcI7QbKvYUEGkg+gU/aJxIN wkyZCcIhgBhFTPju4EU5Yn95qbSxdn2Nouyo72Wd8QkcBSC79u3rwAId7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYFSlrSgjQiuh/RQ8ga1/dk5BUxMB8GA1UdIwQY MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt ZDU4M2Y5YTY2ZTNiLzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8JWKEx4 0MpKWogwSN/+pber64HIHk/4C7dhLLtlxKPRkVo+Kfxt3UaU2mFJ4bYuEE3jGnR3 pqp4jF0mJru9H+izQJxwf67dH7JyuqF+MNsfRe0foNaCRMTJfxrbt9eR5hUCJRaU x+kBr0Akch22Qbj3/katxbLByg5xgwF3wVQYX5Zl4XI3fPKnsut+CtTwa61ekqNM a3tBp5udSliODPE9wGcPTF0SpWep4BlaZEv9nc0JQel4+07eqYtlK/ofCAozK1GM OFTorDE7Y05mz2EZfqDYOLXfS5zI0MVhedFYZ8b8zgFo3P19ThdCsNvgbF23Kh+x /Iy+NiNIlmQoGQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:31:44 2025 by rpki-client