This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json) Hash identifier: UZMC6xrJRscEaK+pD1qagTfkn+Ezz1jeHtyWuV6l4gs= Subject key identifier: 38:AF:5A:C5:01:56:ED:B1:24:99:EA:9A:8C:83:6D:B7:0E:0B:03:A5 Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c Certificate serial: 019B22199663F7406DDD4031C1A108B9D3B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft Manifest number: 044E Signing time: Mon 15 Dec 2025 13:01:00 +0000 Manifest this update: Mon 15 Dec 2025 13:01:00 +0000 Manifest next update: Tue 16 Dec 2025 13:01:00 +0000 Files and hashes: 1: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (hash: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=) 2: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: d0xcMm7g15s41wbE4T60tq/WvSNxjB/inzJU3ptwq+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:96:63:f7:40:6d:dd:40:31:c1:a1:08:b9:d3:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c Validity Not Before: Dec 15 13:01:00 2025 GMT Not After : Dec 16 13:01:00 2025 GMT Subject: CN=38af5ac50156edb12499ea9a8c836db70e0b03a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:ea:63:ef:2b:2f:e5:2a:4f:15:46:ff:0e: e5:58:2e:98:06:82:59:34:58:e3:cc:c0:35:88:31: 47:72:a4:9d:46:2e:25:5e:27:da:a6:fa:7b:09:b4: a2:37:94:2b:d6:4b:28:fc:eb:3e:f2:3a:17:f6:ef: 9c:59:86:43:75:39:3b:b7:87:fc:ec:c1:89:9f:ad: 1b:ac:06:a9:e1:1a:57:53:2e:12:7f:8a:7a:de:54: 2e:c2:81:4d:8e:62:f5:fc:6b:29:12:bf:81:cb:50: fd:4e:8b:97:24:25:1d:37:45:75:e8:d2:2e:7f:29: 73:18:18:e9:f1:5e:69:68:89:22:c1:80:0e:3b:78: a6:56:60:33:70:ee:db:9b:71:32:58:c8:6e:b2:e7: c7:ca:fb:37:06:5f:27:2d:a0:2a:d7:f0:f2:e3:30: eb:c6:18:be:4b:ab:92:95:bd:75:da:df:16:c9:82: 82:09:27:84:ea:3a:98:73:98:ba:b4:7c:84:71:6e: 53:c9:a5:17:cc:00:c4:9a:e8:18:c1:1c:2d:04:fd: 20:7f:32:b5:17:3a:c2:6e:c0:54:b3:0d:24:38:0d: e4:ca:76:40:b0:aa:1b:0d:79:03:e3:3f:6c:b0:29: d0:cf:10:d0:1d:82:5b:0d:be:1b:52:26:c9:c2:51: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:5A:C5:01:56:ED:B1:24:99:EA:9A:8C:83:6D:B7:0E:0B:03:A5 X509v3 Authority Key Identifier: keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:de:5d:2e:2d:8d:17:b1:d4:d6:fe:f3:f3:1c:a9:33:29:d8: 02:4c:79:15:cf:b3:d5:f8:c0:d6:d4:f1:bb:61:29:9b:2e:89: 2c:ed:6f:d5:48:70:80:cb:7b:31:72:26:f4:c9:2c:d2:10:7f: 15:f6:63:77:5b:3e:a5:2d:63:00:d9:a7:3a:6c:87:eb:04:97: fa:8c:cd:7e:a5:41:44:b4:c2:0a:97:90:e6:da:23:d7:70:09: 56:b1:7f:42:91:1d:72:ee:2f:97:2d:08:29:0b:b0:04:9f:81: 4a:25:b2:81:35:dc:10:28:e4:6d:be:dd:6e:d3:be:86:65:9d: 4d:1c:da:82:2d:57:21:62:bc:48:48:91:ed:23:fc:6c:37:f1: 7b:38:e2:cd:05:17:e4:7a:21:73:3e:1e:28:36:64:f9:f8:a7: 25:92:ab:4f:fa:29:77:4e:47:40:72:4a:fe:2f:7c:7d:da:ff: c6:3e:17:45:b3:af:1f:1f:3c:6f:4b:75:64:0c:be:7a:aa:d3: d6:35:94:08:3d:4e:6d:e0:7b:7b:8f:6d:73:cb:53:ba:cc:4f: 94:ab:75:81:7e:5a:4a:6c:67:04:52:8d:fb:ae:65:2a:13:95: 2a:1f:4c:d5:b2:cb:2e:b4:fb:62:b6:c8:3b:72:79:ce:10:e8: 4e:64:5c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGZZj90Bt3UAxwaEIudO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNjEwNGEyZDMzNTA4MjdjYWQxMWExNjU2OWNhYjU5ZjBm ODc3NGMwHhcNMjUxMjE1MTMwMTAwWhcNMjUxMjE2MTMwMTAwWjAzMTEwLwYDVQQD EygzOGFmNWFjNTAxNTZlZGIxMjQ5OWVhOWE4YzgzNmRiNzBlMGIwM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE/qY+8rL+UqTxVG/w7lWC6YBoJZ NFjjzMA1iDFHcqSdRi4lXifapvp7CbSiN5Qr1kso/Os+8joX9u+cWYZDdTk7t4f8 7MGJn60brAap4RpXUy4Sf4p63lQuwoFNjmL1/GspEr+By1D9TouXJCUdN0V16NIu fylzGBjp8V5paIkiwYAOO3imVmAzcO7bm3EyWMhusufHyvs3Bl8nLaAq1/Dy4zDr xhi+S6uSlb112t8WyYKCCSeE6jqYc5i6tHyEcW5TyaUXzADEmugYwRwtBP0gfzK1 FzrCbsBUsw0kOA3kynZAsKobDXkD4z9ssCnQzxDQHYJbDb4bUibJwlGZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDivWsUBVu2xJJnqmoyDbbcOCwOlMB8GA1UdIwQY MBaAFBxhBKLTNQgnytEaFlacq1nw+HdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2Ut MTQ5MDc5NjI3NzEzLzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2UtMTQ5MDc5NjI3NzEz LzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFd5dLi2N F7HU1v7z8xypMynYAkx5Fc+z1fjA1tTxu2Epmy6JLO1v1UhwgMt7MXIm9Mks0hB/ FfZjd1s+pS1jANmnOmyH6wSX+ozNfqVBRLTCCpeQ5toj13AJVrF/QpEdcu4vly0I KQuwBJ+BSiWygTXcECjkbb7dbtO+hmWdTRzagi1XIWK8SEiR7SP8bDfxezjizQUX 5Hohcz4eKDZk+finJZKrT/opd05HQHJK/i98fdr/xj4XRbOvHx88b0t1ZAy+eqrT 1jWUCD1ObeB7e49tc8tTusxPlKt1gX5aSmxnBFKN+65lKhOVKh9M1bLLLrT7YrbI O3J5zhDoTmRc4w== -----END CERTIFICATE-----Generated at Mon Dec 15 14:38:57 2025 by rpki-client