This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json) Hash identifier: Rm6anZfPI5qC38tk32vxyDvApGhl+Ro7eG64HlfhRaQ= Subject key identifier: DB:FA:75:72:1A:E6:E2:3E:91:12:37:0C:67:75:08:56:7A:95:75:BC Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f Certificate serial: 019B59768852B414F4C0A09E45C051152273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft Manifest number: 08EA Signing time: Fri 26 Dec 2025 07:01:38 +0000 Manifest this update: Fri 26 Dec 2025 07:01:38 +0000 Manifest next update: Sat 27 Dec 2025 07:01:38 +0000 Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=) 2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: 6mIjTcEunVuLfuyWKN7COBse1072YinKPGrRhnMqCTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:88:52:b4:14:f4:c0:a0:9e:45:c0:51:15:22:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86623a8458eff347d424348588829ee137b45a3f Validity Not Before: Dec 26 07:01:38 2025 GMT Not After : Dec 27 07:01:38 2025 GMT Subject: CN=dbfa75721ae6e23e9112370c677508567a9575bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:02:9c:ef:ce:0f:80:67:4d:cd:38:2d:01:ac: af:77:4d:d8:04:8f:da:fd:30:5e:c6:29:2e:49:89: 8e:a0:55:7e:45:4c:8c:c7:76:11:b8:64:5e:32:83: 2e:08:ca:c6:e0:69:26:a2:39:c6:13:19:cb:ee:cb: ec:df:cc:89:b8:ac:5a:04:cd:04:9e:93:e2:1f:00: 39:55:14:d5:0f:d4:25:d3:d1:01:bf:bc:79:da:73: 22:d3:d1:f4:81:c8:a1:d7:8e:e7:34:af:2d:7f:73: 37:4f:d0:62:e2:d4:ee:47:06:ac:87:34:fa:8f:4e: 23:72:af:58:07:18:29:0d:18:cb:07:74:ed:0e:2c: f4:19:dd:31:50:e3:e3:4d:19:fe:fe:6b:bf:a8:d7: 9b:4b:c9:79:f4:07:c4:e8:90:a1:13:be:6e:7d:da: 20:96:30:93:b1:5a:e1:42:1e:45:29:94:81:36:9e: ae:57:5f:5f:30:0b:99:12:7a:83:37:34:a8:92:30: 30:57:04:b8:18:7e:05:76:23:65:7d:0a:e6:a2:98: b4:71:cc:0a:a6:4d:ac:61:0f:41:3a:bc:b0:34:0c: 60:9e:34:cb:cc:68:33:77:11:8b:ad:d1:2b:fe:4d: 6e:8f:c4:25:09:2e:ab:18:ea:86:2c:4a:18:30:df: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FA:75:72:1A:E6:E2:3E:91:12:37:0C:67:75:08:56:7A:95:75:BC X509v3 Authority Key Identifier: keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:01:b8:68:ae:61:7c:33:f0:cb:40:42:96:a1:91:f5:54:b4: ed:68:e4:f0:fd:7c:e1:78:12:3e:86:4e:12:51:2f:c7:91:64: 9a:28:78:b4:42:77:89:4c:02:9c:14:2c:52:6d:c8:e6:e9:31: 28:90:7a:5f:3d:6c:ec:7d:cd:8a:d8:a5:85:8f:f5:c1:e7:fb: 64:61:1f:43:65:f0:b1:9b:59:12:1b:cd:5e:02:6f:1e:e9:d7: e4:fc:41:29:e5:89:9b:3a:c9:84:12:d7:b6:c0:c4:61:fd:49: bb:dd:51:ca:ec:bf:37:68:68:be:88:e9:6a:b9:08:78:b9:da: 66:b5:6a:34:55:0b:e4:c1:42:93:11:b4:eb:f9:f8:f6:83:91: d1:76:af:63:58:fa:7f:4c:d9:47:e2:2f:fa:31:36:7b:9c:d9: 5e:b0:8e:32:46:73:8d:d4:a7:11:a5:0a:f8:aa:e6:28:7c:1e: 65:77:92:08:04:f4:84:1e:d9:6e:98:cd:d3:ba:a8:02:17:d5: d3:01:f5:da:78:82:f4:be:83:61:21:9b:2a:0b:0e:b4:8d:ab: bd:12:c6:de:a3:a2:70:f6:58:3d:34:ee:b4:7b:d1:f0:84:a5: c1:f9:c0:df:b2:b6:79:3f:f9:51:e6:6c:6e:3d:77:56:f0:64: 6f:2b:19:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdohStBT0wKCeRcBRFSJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi NDVhM2YwHhcNMjUxMjI2MDcwMTM4WhcNMjUxMjI3MDcwMTM4WjAzMTEwLwYDVQQD EyhkYmZhNzU3MjFhZTZlMjNlOTExMjM3MGM2Nzc1MDg1NjdhOTU3NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AKc784PgGdNzTgtAayvd03YBI/a /TBexikuSYmOoFV+RUyMx3YRuGReMoMuCMrG4GkmojnGExnL7svs38yJuKxaBM0E npPiHwA5VRTVD9Ql09EBv7x52nMi09H0gcih147nNK8tf3M3T9Bi4tTuRwashzT6 j04jcq9YBxgpDRjLB3TtDiz0Gd0xUOPjTRn+/mu/qNebS8l59AfE6JChE75ufdog ljCTsVrhQh5FKZSBNp6uV19fMAuZEnqDNzSokjAwVwS4GH4FdiNlfQrmopi0ccwK pk2sYQ9BOrywNAxgnjTLzGgzdxGLrdEr/k1uj8QlCS6rGOqGLEoYMN/UvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv6dXIa5uI+kRI3DGd1CFZ6lXW8MB8GA1UdIwQY MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt NmMyOGJiNDBkNTJlLzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQG4aK5h fDPwy0BClqGR9VS07Wjk8P184XgSPoZOElEvx5Fkmih4tEJ3iUwCnBQsUm3I5ukx KJB6Xz1s7H3NitilhY/1wef7ZGEfQ2XwsZtZEhvNXgJvHunX5PxBKeWJmzrJhBLX tsDEYf1Ju91Ryuy/N2hovojparkIeLnaZrVqNFUL5MFCkxG06/n49oOR0XavY1j6 f0zZR+Iv+jE2e5zZXrCOMkZzjdSnEaUK+KrmKHweZXeSCAT0hB7ZbpjN07qoAhfV 0wH12niC9L6DYSGbKgsOtI2rvRLG3qOicPZYPTTutHvR8ISlwfnA37K2eT/5UeZs bj13VvBkbysZFQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:46 2025 by rpki-client