This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json) Hash identifier: VLfOkUwWMrycWN8F5ORNV/o5ZYIFmPp25wPzh7ntaV4= Subject key identifier: 8B:92:64:3B:80:C5:AA:56:C9:7C:95:6A:F8:55:BB:4D:72:45:18:A9 Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93 Certificate serial: 019B21E35233394C41E1310AA23F8059D120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft Manifest number: 03DB Signing time: Mon 15 Dec 2025 12:01:44 +0000 Manifest this update: Mon 15 Dec 2025 12:01:44 +0000 Manifest next update: Tue 16 Dec 2025 12:01:44 +0000 Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=) 2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: z9ScPE0J2GGwXXVI42IhOPZUchyWnfQmUGQuAavgmc8=) 3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:52:33:39:4c:41:e1:31:0a:a2:3f:80:59:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93 Validity Not Before: Dec 15 12:01:44 2025 GMT Not After : Dec 16 12:01:44 2025 GMT Subject: CN=8b92643b80c5aa56c97c956af855bb4d724518a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:e5:7c:56:0b:5b:d7:b8:bf:51:b0:f9:50: 43:55:d6:ff:88:74:d9:41:95:3c:54:5e:9a:04:fc: dc:4a:80:5e:e3:77:fc:64:64:df:5e:5a:c5:09:39: b9:2c:40:1f:e3:48:74:98:7d:57:9a:6c:cd:d2:70: 76:74:72:22:41:fa:fa:16:17:f2:89:91:10:54:0a: ed:b7:fc:60:e4:ff:7a:77:37:7d:32:65:3a:1a:50: 83:bd:be:de:48:a0:eb:68:27:cc:75:a8:d8:8d:06: 69:74:cf:06:ec:ad:09:37:c5:d0:50:ae:b3:21:f5: 5b:2f:cc:d5:42:94:f2:3f:87:7b:b6:85:88:d5:01: 79:a8:3f:59:c1:cb:64:f8:92:04:45:5a:bd:ae:04: b9:fe:f2:e3:48:0e:c0:dd:44:38:3c:d6:ce:36:04: 9e:50:66:80:24:d8:b8:03:14:89:03:80:a4:b0:9a: 64:9e:46:74:f9:39:ce:ff:01:f6:61:f2:ae:00:8d: 11:df:26:d3:63:d7:e8:a6:81:1a:cb:9b:92:41:3e: ac:ca:fd:66:45:0d:13:7a:22:5b:4d:d8:45:08:36: 9d:7a:dc:14:03:af:6a:75:75:c5:88:85:cc:cd:d0: 02:4c:ec:61:14:31:2b:13:53:99:a3:82:92:1d:b3: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:92:64:3B:80:C5:AA:56:C9:7C:95:6A:F8:55:BB:4D:72:45:18:A9 X509v3 Authority Key Identifier: keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b5:24:82:e8:a9:84:e7:ff:21:bb:8d:5f:17:e5:7c:b3:f8: db:25:a7:4d:31:06:7e:cd:30:0b:6b:df:8c:7e:dc:a0:04:0e: 14:93:f5:ba:ee:bd:4b:d4:76:fd:36:9e:e7:21:b3:ff:c5:84: 25:e0:75:eb:03:65:ae:e6:84:9e:35:12:34:39:04:12:8a:cb: 15:42:57:15:18:c3:fc:bd:1e:92:4b:c8:de:9e:3d:04:f5:58: 51:38:0f:dc:43:cc:1d:3b:d8:e5:9c:61:e3:e6:9f:ca:60:97: f9:88:71:c3:2d:45:9d:af:46:e9:da:b1:b6:7a:e0:cd:44:a7: c2:bc:65:d5:b6:ca:de:d1:82:dd:44:92:c1:72:7b:68:dd:30: a7:f0:ca:ca:05:43:79:7c:db:2a:69:a0:c9:d6:a9:32:33:65: 79:08:81:97:8c:f8:b7:cf:4d:c0:33:2e:ef:1a:19:4f:05:54: 93:96:85:76:4c:72:3c:55:fe:59:e0:c4:e9:48:23:b8:75:4f: d5:c2:84:f2:62:07:27:d0:86:bf:46:27:f9:88:9c:f6:bf:9b: 8f:c2:b9:e5:26:9d:c1:b5:42:c8:4e:2a:38:3c:f2:b8:b5:f6: 1d:1c:3f:0e:02:7f:22:c9:bd:93:e3:c3:2e:05:09:09:09:40: 81:2e:64:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh41IzOUxB4TEKoj+AWdEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1 ODhiOTMwHhcNMjUxMjE1MTIwMTQ0WhcNMjUxMjE2MTIwMTQ0WjAzMTEwLwYDVQQD Eyg4YjkyNjQzYjgwYzVhYTU2Yzk3Yzk1NmFmODU1YmI0ZDcyNDUxOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3HlfFYLW9e4v1Gw+VBDVdb/iHTZ QZU8VF6aBPzcSoBe43f8ZGTfXlrFCTm5LEAf40h0mH1XmmzN0nB2dHIiQfr6Fhfy iZEQVArtt/xg5P96dzd9MmU6GlCDvb7eSKDraCfMdajYjQZpdM8G7K0JN8XQUK6z IfVbL8zVQpTyP4d7toWI1QF5qD9Zwctk+JIERVq9rgS5/vLjSA7A3UQ4PNbONgSe UGaAJNi4AxSJA4CksJpknkZ0+TnO/wH2YfKuAI0R3ybTY9fopoEay5uSQT6syv1m RQ0TeiJbTdhFCDadetwUA69qdXXFiIXMzdACTOxhFDErE1OZo4KSHbOGRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuSZDuAxapWyXyVavhVu01yRRipMB8GA1UdIwQY MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt MTI4ZTAwNTNkY2NmLzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLUkguip hOf/IbuNXxflfLP42yWnTTEGfs0wC2vfjH7coAQOFJP1uu69S9R2/Tae5yGz/8WE JeB16wNlruaEnjUSNDkEEorLFUJXFRjD/L0ekkvI3p49BPVYUTgP3EPMHTvY5Zxh 4+afymCX+Yhxwy1Fna9G6dqxtnrgzUSnwrxl1bbK3tGC3USSwXJ7aN0wp/DKygVD eXzbKmmgydapMjNleQiBl4z4t89NwDMu7xoZTwVUk5aFdkxyPFX+WeDE6UgjuHVP 1cKE8mIHJ9CGv0Yn+Yic9r+bj8K55SadwbVCyE4qODzyuLX2HRw/DgJ/Ism9k+PD LgUJCQlAgS5kwg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:04:01 2025 by rpki-client