This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json) Hash identifier: i9FLBiwqGYN5MewuiS7gYdM48UFP+4PWKn2rjmg//iE= Subject key identifier: 09:BF:79:C5:7D:A4:4C:CA:F9:97:F8:F5:32:A1:DC:38:8D:39:B6:F7 Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb Certificate serial: 019B4AA7E5F29F36A1ECFFAEBC1048460DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft Manifest number: 1655 Signing time: Tue 23 Dec 2025 10:01:15 +0000 Manifest this update: Tue 23 Dec 2025 10:01:15 +0000 Manifest next update: Wed 24 Dec 2025 10:01:15 +0000 Files and hashes: 1: KntY924djWUw2E5_6Dutq_ZZ4Zc.roa (hash: KalXmSDxooKoko/REjizBaBBm53fPU+cB759UZj4dk0=) 2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=) 3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 80VSU/lKqCBH5OBlK23Enj5rMdQ/yV/DGhIKWXIqEuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:e5:f2:9f:36:a1:ec:ff:ae:bc:10:48:46:0d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb Validity Not Before: Dec 23 10:01:15 2025 GMT Not After : Dec 24 10:01:15 2025 GMT Subject: CN=09bf79c57da44ccaf997f8f532a1dc388d39b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:a9:9b:63:62:9b:97:ad:55:74:c7:a4:1d: 23:06:94:1d:1b:a1:5a:05:a3:76:32:dd:86:67:09: 53:b9:b9:63:e0:26:d3:2a:d1:a0:2c:1b:29:a0:4e: 41:a5:f1:8a:10:db:35:40:0b:0c:c4:ed:58:99:9f: 04:97:0e:ac:da:a6:a2:ec:97:cd:b0:ac:18:f6:b2: dc:1a:cb:d9:7c:21:7c:8c:97:8c:1e:b1:75:c5:c0: 8e:44:1f:ce:c4:43:5a:9b:3d:52:2d:fa:92:a7:03: 8c:57:3a:a5:78:8e:eb:0b:57:bb:f8:63:8d:a1:b1: 32:33:94:a0:2c:b7:eb:87:42:e9:2e:ea:ce:df:af: 34:9b:14:df:2d:e6:43:d2:c1:c8:c8:f1:af:8f:59: 37:7e:d7:d1:c4:e6:d4:7f:fa:63:38:7e:d5:87:f0: e0:0d:44:e3:7e:b3:fd:4f:6a:ff:f6:c1:98:ba:3c: ee:7b:93:3e:2d:05:8a:b8:be:d2:bd:70:3a:25:14: 48:84:6e:9e:66:9b:20:70:dd:a9:a4:b1:0b:19:ea: 2b:e0:4d:c0:d7:35:ee:f2:58:35:bd:57:79:93:2c: d6:77:45:45:9a:da:57:ec:f6:8a:9c:93:eb:17:14: cb:ae:b3:2f:86:dd:23:93:2d:e0:09:92:ba:25:3a: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BF:79:C5:7D:A4:4C:CA:F9:97:F8:F5:32:A1:DC:38:8D:39:B6:F7 X509v3 Authority Key Identifier: keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:18:07:98:2c:dd:9f:15:6d:6f:e6:b9:9b:54:1e:25:ee:61: 15:f4:b9:6e:7b:5b:80:4d:38:18:12:77:75:3e:79:e2:37:38: a0:83:29:5a:8d:cc:42:93:48:96:62:1f:8f:be:de:93:66:a3: ce:81:ae:90:92:7d:cc:6d:4a:04:e9:ab:d5:d4:e2:d1:37:6d: f9:55:c0:b8:eb:67:24:9b:a4:8b:0a:62:ed:84:c4:25:c5:db: 33:98:2d:f7:27:26:78:b8:2f:cd:e4:c5:96:29:bf:23:20:e9: 26:24:11:c1:77:c6:1e:3d:13:e0:be:75:11:0d:17:d5:10:d1: 6d:16:72:1e:60:cf:06:e4:c2:12:96:ef:ec:5f:a6:b1:f1:a7: 49:0a:b7:e7:c4:c7:b1:b2:51:2f:91:12:bc:14:5c:30:4a:29: b7:e1:c1:9b:e4:9c:b9:8b:79:a2:44:66:f4:76:7e:b3:f7:83: 96:11:25:22:13:18:30:73:39:f9:60:6d:c8:08:1a:90:18:54: 2e:40:f1:6c:35:ad:4b:22:4d:db:86:45:02:48:f6:bf:c7:f9: eb:5b:8e:fe:02:af:8a:4b:97:36:e5:94:30:4b:ad:7c:43:9e: 01:97:0e:75:d3:8b:2f:a7:f1:57:7d:c7:65:77:0f:02:b1:eb: 3e:19:32:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp+Xynzah7P+uvBBIRg23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGYxMjU5YjNhYTFkZTM0ZDEzZDFkODYzMTc4ODY0ZDlk MTg1Y2IwHhcNMjUxMjIzMTAwMTE1WhcNMjUxMjI0MTAwMTE1WjAzMTEwLwYDVQQD EygwOWJmNzljNTdkYTQ0Y2NhZjk5N2Y4ZjUzMmExZGMzODhkMzliNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouapm2Nim5etVXTHpB0jBpQdG6Fa BaN2Mt2GZwlTublj4CbTKtGgLBspoE5BpfGKENs1QAsMxO1YmZ8Elw6s2qai7JfN sKwY9rLcGsvZfCF8jJeMHrF1xcCORB/OxENamz1SLfqSpwOMVzqleI7rC1e7+GON obEyM5SgLLfrh0LpLurO3680mxTfLeZD0sHIyPGvj1k3ftfRxObUf/pjOH7Vh/Dg DUTjfrP9T2r/9sGYujzue5M+LQWKuL7SvXA6JRRIhG6eZpsgcN2ppLELGeor4E3A 1zXu8lg1vVd5kyzWd0VFmtpX7PaKnJPrFxTLrrMvht0jky3gCZK6JTqdowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm/ecV9pEzK+Zf49TKh3DiNObb3MB8GA1UdIwQY MBaAFIbfElmzqh3jTRPR2GMXiGTZ0YXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQt YTUxYWEyM2E4ZmRkLzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kMDFhOTEtYTNhYi00ZTA4LTk1NjQtYTUxYWEyM2E4ZmRk LzEvaHQ4U1diT3FIZU5ORTlIWVl4ZUlaTm5SaGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABgHmCzd nxVtb+a5m1QeJe5hFfS5bntbgE04GBJ3dT554jc4oIMpWo3MQpNIlmIfj77ek2aj zoGukJJ9zG1KBOmr1dTi0Tdt+VXAuOtnJJukiwpi7YTEJcXbM5gt9ycmeLgvzeTF lim/IyDpJiQRwXfGHj0T4L51EQ0X1RDRbRZyHmDPBuTCEpbv7F+msfGnSQq358TH sbJRL5ESvBRcMEopt+HBm+ScuYt5okRm9HZ+s/eDlhElIhMYMHM5+WBtyAgakBhU LkDxbDWtSyJN24ZFAkj2v8f561uO/gKvikuXNuWUMEutfEOeAZcOddOLL6fxV33H ZXcPArHrPhky7A== -----END CERTIFICATE-----Generated at Tue Dec 23 16:47:08 2025 by rpki-client