This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json) Hash identifier: 1yF9vGr8YvoqREre8tjgf3cmS8miS2zIQOib8AOFRe4= Subject key identifier: D4:98:06:55:05:A8:A6:3F:D1:C8:74:F9:1E:3D:D3:3E:B7:CA:50:51 Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b Certificate serial: 019AF0BEEEA7013FF4F47083F91A7E2E0675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft Manifest number: 07E2 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: HYrkvDrpfrVGKAcaIbn8RvGgwng.roa (hash: kLdog1pfyl1ivWrdhRaD9T/MX0DUf8jLwgmi9P1eRT8=) 2: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (hash: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=) 3: bAtdqWOn7XIMZb40RJnvw-dOPu0.roa (hash: ajLP5I+MW9lN2Pm4hOADp3bTpGVbkghpKs5apJzZVDw=) 4: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: XOZnPbU/iBi9woZvCE/emebhyhYxknBRWH9a8vRgQCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ee:a7:01:3f:f4:f4:70:83:f9:1a:7e:2e:06:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=d498065505a8a63fd1c874f91e3dd33eb7ca5051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ff:b3:30:51:c5:25:01:71:ef:4b:5b:12:8d: 1b:6a:e7:32:07:3e:82:a4:9c:6f:27:8f:af:c6:52: 30:65:ca:bb:45:d3:08:af:03:88:c6:44:15:da:ce: 82:e9:87:5a:f1:f9:54:26:58:0b:e7:66:16:b8:46: 03:7f:b1:72:82:bf:3e:f8:7b:e9:4c:98:8f:32:b3: b9:13:2a:6e:62:89:22:50:c2:a8:b8:b9:bd:80:30: c9:85:36:f5:52:69:11:98:ea:6a:2e:3e:86:68:27: 36:4b:54:88:dd:d2:53:de:97:f0:b8:db:0f:4b:33: be:73:c3:02:75:40:5b:bf:40:44:32:20:fe:ab:9b: 84:bd:34:53:8d:2b:87:5c:61:28:4b:00:e8:44:a8: 42:49:5f:e8:e5:a0:ae:2b:40:4f:59:21:2a:7c:f9: a3:3a:de:48:51:19:7d:e6:65:de:12:37:13:2f:b8: 69:a7:70:71:97:4b:b1:f2:8c:01:aa:de:d2:14:c1: 01:fd:45:2e:bd:c6:c4:d9:ee:b3:f8:b0:8b:e0:06: 50:ef:cb:ae:bc:fb:22:57:26:ef:15:49:97:e6:c8: d9:6b:dc:71:fb:11:b0:e0:08:0d:bb:3d:8b:1f:19: 9c:48:9e:da:a1:af:56:b4:b9:b1:14:9d:d2:a8:d9: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:06:55:05:A8:A6:3F:D1:C8:74:F9:1E:3D:D3:3E:B7:CA:50:51 X509v3 Authority Key Identifier: keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:85:89:be:fd:75:71:e1:dd:f2:3b:77:93:91:b6:01:3b:9d: 0a:13:7c:01:b0:a1:ac:a5:0a:4f:ca:11:45:88:bb:66:88:cc: 0c:3b:3a:df:a3:a5:aa:72:51:ec:1f:9d:8a:a1:bc:0b:84:bb: c9:ea:b0:7f:bf:66:f0:8e:66:dd:d0:6c:09:07:9d:bb:5c:6f: f0:76:16:0a:9f:d5:fc:1d:ea:e8:2b:3a:8c:c7:91:e4:d5:88: c5:9d:f0:c1:48:86:de:6d:e9:4a:bd:11:ad:46:97:3d:5f:ea: 17:d7:60:63:2c:cb:f2:e8:e1:5a:cc:39:77:b0:32:fe:41:3b: 63:f8:7c:fb:e9:cb:27:ad:a2:6e:b0:4b:9f:fe:44:f6:5b:05: b3:0f:ca:5d:2a:4a:f0:e3:4a:68:30:50:b7:ee:ef:c4:81:5f: 67:a5:fa:15:ca:e3:70:03:b5:b3:51:27:cc:91:b2:3a:ee:89: 4f:bd:35:a9:9d:6c:51:dc:0d:75:e0:5a:56:16:1d:6a:59:e1: 10:88:b5:37:86:d8:ee:61:d3:23:d3:3c:c3:f3:3b:e4:47:d1: 45:c7:f7:3c:12:a1:d3:1f:d1:33:c9:cd:29:11:06:d7:e6:0e: 09:f5:53:ff:6c:4f:56:ef:5b:a8:e6:dd:c5:9f:74:3f:62:7c: 37:02:b0:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu6nAT/09HCD+Rp+LgZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NDQ5MmRiOWNiYjBhMGViNmJmNjljMjVjODY5NjFmNDkx ODNjOWIwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD EyhkNDk4MDY1NTA1YThhNjNmZDFjODc0ZjkxZTNkZDMzZWI3Y2E1MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f+zMFHFJQFx70tbEo0baucyBz6C pJxvJ4+vxlIwZcq7RdMIrwOIxkQV2s6C6Yda8flUJlgL52YWuEYDf7Fygr8++Hvp TJiPMrO5EypuYokiUMKouLm9gDDJhTb1UmkRmOpqLj6GaCc2S1SI3dJT3pfwuNsP SzO+c8MCdUBbv0BEMiD+q5uEvTRTjSuHXGEoSwDoRKhCSV/o5aCuK0BPWSEqfPmj Ot5IURl95mXeEjcTL7hpp3Bxl0ux8owBqt7SFMEB/UUuvcbE2e6z+LCL4AZQ78uu vPsiVybvFUmX5sjZa9xx+xGw4AgNuz2LHxmcSJ7aoa9WtLmxFJ3SqNm+ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSYBlUFqKY/0ch0+R490z63ylBRMB8GA1UdIwQY MBaAFIREktucuwoOtr9pwlyGlh9JGDybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTct YTFlMGRiMWExN2RmLzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zM2E4ODgtNGNmMy00YThjLTkyOTctYTFlMGRiMWExN2Rm LzEvaEVTUzI1eTdDZzYydjJuQ1hJYVdIMGtZUEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIWJvv11 ceHd8jt3k5G2ATudChN8AbChrKUKT8oRRYi7ZojMDDs636OlqnJR7B+diqG8C4S7 yeqwf79m8I5m3dBsCQedu1xv8HYWCp/V/B3q6Cs6jMeR5NWIxZ3wwUiG3m3pSr0R rUaXPV/qF9dgYyzL8ujhWsw5d7Ay/kE7Y/h8++nLJ62ibrBLn/5E9lsFsw/KXSpK 8ONKaDBQt+7vxIFfZ6X6FcrjcAO1s1EnzJGyOu6JT701qZ1sUdwNdeBaVhYdalnh EIi1N4bY7mHTI9M8w/M75EfRRcf3PBKh0x/RM8nNKREG1+YOCfVT/2xPVu9bqObd xZ90P2J8NwKw6A== -----END CERTIFICATE-----Generated at Sat Dec 6 02:25:32 2025 by rpki-client