This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json) Hash identifier: /bK0cymSubRuDGl61voANaha9GyOrO/DhoxhW8SskvA= Subject key identifier: 8A:B8:84:F3:F7:33:FB:71:19:FF:8C:87:0D:C8:FB:7F:DD:DA:C6:E7 Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Certificate serial: 019AEC7434A88FA49E6F13ACC7087BC04CF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft Manifest number: 035A Signing time: Fri 05 Dec 2025 03:00:29 +0000 Manifest this update: Fri 05 Dec 2025 03:00:29 +0000 Manifest next update: Sat 06 Dec 2025 03:00:29 +0000 Files and hashes: 1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=) 2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: xbI0nZGJA0XaX5PSMI9b97NIup7fmee/WgeePR9Ut4A=) 3: kh3br9io16kmw-7oicNKEQZ-s1U.roa (hash: KMo3OoyX+kQWR2ToLgUVj9Uww/2q4pq0J+EYnmu4w/I=) 4: vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa (hash: EZ8noFz8pUG/Mp84LZG9CdH2CpZHNivjG9K+XxXNqrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:74:34:a8:8f:a4:9e:6f:13:ac:c7:08:7b:c0:4c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Validity Not Before: Dec 5 03:00:29 2025 GMT Not After : Dec 6 03:00:29 2025 GMT Subject: CN=8ab884f3f733fb7119ff8c870dc8fb7fdddac6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:57:a8:08:0b:12:d4:a9:46:68:85:cc:81: df:82:3c:d5:4c:03:95:e5:48:56:72:02:11:96:a5: af:31:6a:3a:a4:76:9c:af:d2:53:9d:49:4d:02:f8: 47:99:35:d3:0a:21:01:15:dd:d1:d8:93:62:df:9b: fa:67:37:6a:74:f9:f0:df:99:4a:7f:10:65:14:6e: d4:60:3d:1c:c1:45:4c:5a:fa:7b:80:4d:46:6c:94: b9:95:89:6e:70:e0:99:26:15:8f:43:ce:5c:b4:b5: f2:6f:30:00:d0:f1:42:52:78:9a:2b:d4:c4:e4:d2: fa:47:15:86:ff:e9:fe:e1:05:a0:d2:5b:d6:f5:4c: c3:1c:45:56:1e:d6:bf:0a:7c:e4:82:54:92:dc:6a: 5c:33:b8:de:3d:5a:99:48:e6:95:6a:80:9c:8d:f1: 12:80:d6:06:13:9b:2f:da:20:be:07:dc:42:4c:67: e6:33:47:1a:3a:38:d9:da:fe:43:33:47:96:25:ca: 71:5f:c5:fa:be:14:21:45:ac:76:75:a6:06:7c:19: 05:77:0c:4f:dd:de:cf:22:f7:e4:7d:e9:0c:c4:7c: d3:e6:af:16:1d:53:d8:5c:34:87:a7:16:35:f4:a4: 18:a9:91:5a:0f:71:d3:30:bb:09:d9:c9:63:de:d9: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:84:F3:F7:33:FB:71:19:FF:8C:87:0D:C8:FB:7F:DD:DA:C6:E7 X509v3 Authority Key Identifier: keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e1:10:d3:be:af:3f:b0:15:dd:f1:6a:bc:5a:12:68:cd:63: e6:4c:54:76:7f:77:55:25:1e:e4:a2:e1:29:1d:56:93:b9:5d: 6b:37:b8:90:b6:34:6d:2a:f1:77:d2:88:d1:de:ca:d3:cc:1d: 66:99:df:fc:9e:0d:e5:40:5a:b6:d1:91:56:49:3c:d0:f7:3e: 12:dc:b7:d4:b5:4b:db:82:64:70:6c:68:6d:15:be:78:05:8e: 5a:56:37:43:e7:e1:c7:04:35:3b:f5:96:7b:81:74:dd:06:29: 31:ed:7a:49:70:fd:a8:8e:69:b9:a7:12:32:f7:d7:25:95:c0: 54:55:3e:d1:18:cd:c2:3b:44:8e:16:60:f2:60:73:28:3b:56: 99:5f:7d:a4:0f:12:68:42:de:b4:22:b0:80:a3:e2:2a:3c:60: 50:b9:f9:42:51:3c:b6:88:7e:58:3e:48:47:d9:46:4b:3e:56: 3f:68:25:2d:99:e7:0a:7e:c4:b3:99:74:be:47:c2:5f:ce:eb: 39:8f:59:b6:6f:29:73:1c:71:cb:6b:e1:c9:53:d7:a1:ed:f5: 28:a6:be:18:42:85:5e:5f:f3:e0:2f:d9:b9:ae:ba:a9:19:53: 94:8b:2c:74:b4:ce:97:d1:d0:41:1f:27:83:22:35:b7:56:27: 74:d1:ce:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrsdDSoj6SebxOsxwh7wEzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5 MWQ3MzkwHhcNMjUxMjA1MDMwMDI5WhcNMjUxMjA2MDMwMDI5WjAzMTEwLwYDVQQD Eyg4YWI4ODRmM2Y3MzNmYjcxMTlmZjhjODcwZGM4ZmI3ZmRkZGFjNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5pXqAgLEtSpRmiFzIHfgjzVTAOV 5UhWcgIRlqWvMWo6pHacr9JTnUlNAvhHmTXTCiEBFd3R2JNi35v6ZzdqdPnw35lK fxBlFG7UYD0cwUVMWvp7gE1GbJS5lYlucOCZJhWPQ85ctLXybzAA0PFCUniaK9TE 5NL6RxWG/+n+4QWg0lvW9UzDHEVWHta/CnzkglSS3GpcM7jePVqZSOaVaoCcjfES gNYGE5sv2iC+B9xCTGfmM0caOjjZ2v5DM0eWJcpxX8X6vhQhRax2daYGfBkFdwxP 3d7PIvfkfekMxHzT5q8WHVPYXDSHpxY19KQYqZFaD3HTMLsJ2clj3tndMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq4hPP3M/txGf+Mhw3I+3/d2sbnMB8GA1UdIwQY MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1 LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeEQ076v P7AV3fFqvFoSaM1j5kxUdn93VSUe5KLhKR1Wk7ldaze4kLY0bSrxd9KI0d7K08wd Zpnf/J4N5UBattGRVkk80Pc+Ety31LVL24JkcGxobRW+eAWOWlY3Q+fhxwQ1O/WW e4F03QYpMe16SXD9qI5puacSMvfXJZXAVFU+0RjNwjtEjhZg8mBzKDtWmV99pA8S aELetCKwgKPiKjxgULn5QlE8toh+WD5IR9lGSz5WP2glLZnnCn7Es5l0vkfCX87r OY9Ztm8pcxxxy2vhyVPXoe31KKa+GEKFXl/z4C/Zua66qRlTlIssdLTOl9HQQR8n gyI1t1YndNHOAA== -----END CERTIFICATE-----Generated at Fri Dec 5 10:06:45 2025 by rpki-client