This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json) Hash identifier: qfPwwteeIt9/OK/dbMiRf6dHVi28zbrxsEoekawBno4= Subject key identifier: 23:20:C5:7A:75:FF:96:CF:0C:71:EC:CE:35:96:45:CF:95:24:DE:2B Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Certificate serial: 019B0F6EB35251E4327E09938DB7C974686A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft Manifest number: 160E Signing time: Thu 11 Dec 2025 22:01:11 +0000 Manifest this update: Thu 11 Dec 2025 22:01:11 +0000 Manifest next update: Fri 12 Dec 2025 22:01:11 +0000 Files and hashes: 1: 2mTo8VIXIrlcxcC_U7fWi211rFM.roa (hash: dDQv+ftOv7QcdnymuU8CSIpInH2sN5DMq5+DCb2C/AM=) 2: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (hash: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=) 3: aMobsnKksVIngBq9PAQh6f0uc_s.roa (hash: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=) 4: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: 2xdNR7+w9j2gU6mFWQ3qmX5Q4F04InJtxe5XwrALiDo=) 5: kHRA5W2PIyWNg3uKfxQ9zz9ybRk.roa (hash: GyaDxHXnOVqYowVqNzWMXYXPUi79rWH8RSfCQGy6dbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:b3:52:51:e4:32:7e:09:93:8d:b7:c9:74:68:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135 Validity Not Before: Dec 11 22:01:11 2025 GMT Not After : Dec 12 22:01:11 2025 GMT Subject: CN=2320c57a75ff96cf0c71ecce359645cf9524de2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:2e:04:e5:9b:7d:97:4a:7c:d7:e5:17:38: ee:97:63:28:ef:ad:46:65:7d:93:f9:bf:94:fc:c4: 7d:41:e4:09:2a:93:f2:a4:1e:e3:e6:99:b2:6e:29: 7f:8a:e0:87:3a:6d:93:0c:0e:e3:bb:62:4a:a1:67: 4e:6b:78:27:8f:f5:ed:d7:4d:46:41:37:62:95:cf: 10:00:84:c8:ef:8b:99:11:3c:e8:d6:50:ae:38:6e: 82:06:bd:09:9a:75:a3:84:18:3d:c2:77:52:42:4d: 3c:03:f9:8c:66:5b:3a:27:5f:82:70:2c:ac:ac:57: e8:b0:74:24:00:83:42:61:65:d3:96:2d:3f:00:54: 3d:76:90:96:ee:10:e0:e4:73:81:62:98:3d:02:7d: bc:4e:d0:e5:ed:a6:7b:31:4b:0e:63:75:22:d9:0b: de:cd:9f:be:cb:e3:da:c4:fb:e6:29:f4:02:3d:86: b0:0b:0d:c1:36:98:f2:0d:59:e7:de:e3:a7:85:d8: d7:5f:24:de:12:34:ac:80:6c:d3:d3:b9:fd:d1:c4: 9f:a2:9b:85:b5:56:7d:1c:f3:95:b2:4c:71:81:b5: 9b:ef:f0:4c:0d:69:f0:16:6d:7f:4e:16:89:0f:5d: 0c:9c:b8:84:1a:38:77:db:64:cb:af:4e:fd:ba:72: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:C5:7A:75:FF:96:CF:0C:71:EC:CE:35:96:45:CF:95:24:DE:2B X509v3 Authority Key Identifier: keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:32:94:f1:f6:d0:b9:76:fa:0e:94:96:85:c0:14:5f:d5:08: ec:63:2f:79:63:73:ae:06:79:ce:80:18:aa:d0:ed:81:a2:81: a5:ad:1a:cd:91:c8:b4:9e:ff:9d:09:56:70:e5:fa:11:16:78: 39:10:70:53:2b:9b:67:54:e5:78:18:44:4c:67:82:d0:62:64: 08:0d:a1:a4:d4:de:1c:2e:a9:7b:b5:ac:b8:96:e0:81:28:7b: c2:5d:97:cf:6c:ed:24:ec:1b:92:b7:9f:b1:3a:af:bb:17:5a: 20:6e:f1:ad:ff:0f:d8:f4:f5:83:74:e9:c5:d9:e5:ec:ae:53: d0:49:1d:c5:a6:8d:82:41:a1:f8:cc:ae:cf:4d:9e:2c:b3:02: fa:5b:e3:c2:7d:4a:cf:29:89:6b:f0:e1:3b:bc:28:6b:36:d0: 70:71:d9:d9:c6:72:be:5a:80:bc:ea:54:31:eb:dc:53:ce:39: 65:2c:50:1a:a3:7c:4a:d0:62:9e:6b:8a:04:63:1d:d0:b2:b5: 1c:d0:cb:24:be:e4:01:aa:28:f5:61:17:f1:a9:a4:05:3f:22: a0:da:5d:3e:49:28:25:21:d2:2c:be:58:34:e4:4c:2a:16:5b: b5:ad:09:eb:a5:28:e7:b2:ea:48:67:d7:31:35:17:7e:43:1c: b6:af:78:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbrNSUeQyfgmTjbfJdGhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl MzcxMzUwHhcNMjUxMjExMjIwMTExWhcNMjUxMjEyMjIwMTExWjAzMTEwLwYDVQQD EygyMzIwYzU3YTc1ZmY5NmNmMGM3MWVjY2UzNTk2NDVjZjk1MjRkZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nsuBOWbfZdKfNflFzjul2Mo761G ZX2T+b+U/MR9QeQJKpPypB7j5pmybil/iuCHOm2TDA7ju2JKoWdOa3gnj/Xt101G QTdilc8QAITI74uZETzo1lCuOG6CBr0JmnWjhBg9wndSQk08A/mMZls6J1+CcCys rFfosHQkAINCYWXTli0/AFQ9dpCW7hDg5HOBYpg9An28TtDl7aZ7MUsOY3Ui2Qve zZ++y+PaxPvmKfQCPYawCw3BNpjyDVnn3uOnhdjXXyTeEjSsgGzT07n90cSfopuF tVZ9HPOVskxxgbWb7/BMDWnwFm1/ThaJD10MnLiEGjh322TLr079unKo5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMgxXp1/5bPDHHszjWWRc+VJN4rMB8GA1UdIwQY MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt YmZkOTVhOWE2ZTY0LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0 LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjKU8fbQ uXb6DpSWhcAUX9UI7GMveWNzrgZ5zoAYqtDtgaKBpa0azZHItJ7/nQlWcOX6ERZ4 ORBwUyubZ1TleBhETGeC0GJkCA2hpNTeHC6pe7WsuJbggSh7wl2Xz2ztJOwbkref sTqvuxdaIG7xrf8P2PT1g3Tpxdnl7K5T0EkdxaaNgkGh+Myuz02eLLMC+lvjwn1K zymJa/DhO7woazbQcHHZ2cZyvlqAvOpUMevcU845ZSxQGqN8StBinmuKBGMd0LK1 HNDLJL7kAaoo9WEX8amkBT8ioNpdPkkoJSHSLL5YNORMKhZbta0J66Uo57LqSGfX MTUXfkMctq947Q== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:53 2025 by rpki-client