This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: mBiCLq0hZNXjmXxHb/VJ95Pk3d+KHYaA948eRXwcSGE= Subject key identifier: E7:77:38:E5:CF:56:7B:51:B5:A0:AC:F2:8A:23:C9:0B:65:E2:2F:14 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019B1203411FAC7D04419A74EA75E515D869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1780 Signing time: Fri 12 Dec 2025 10:02:41 +0000 Manifest this update: Fri 12 Dec 2025 10:02:41 +0000 Manifest next update: Sat 13 Dec 2025 10:02:41 +0000 Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=) 2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=) 3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=) 4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=) 5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=) 6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=) 7: VnzJRH-dJQ-dO_CFYq_t71s4Oyk.roa (hash: gIJOoL/O0S2gcfZbAglWFTP6arjfw9ZP6PtDcF7VgUU=) 8: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: SadZQawIYgugaboTbwRP/bS5VNKKSwlev85GXFaDpb4=) 9: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=) 10: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:41:1f:ac:7d:04:41:9a:74:ea:75:e5:15:d8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Dec 12 10:02:41 2025 GMT Not After : Dec 13 10:02:41 2025 GMT Subject: CN=e77738e5cf567b51b5a0acf28a23c90b65e22f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:eb:1c:73:3f:44:3a:99:5e:f9:0a:82:50:ff: be:fe:ef:48:bc:9f:a2:c7:ef:c1:55:6f:77:37:b5: 1a:7b:3e:91:f4:fa:03:eb:31:93:a1:15:4c:41:ba: b6:49:af:68:a8:83:eb:7b:ee:1b:9e:94:73:57:cd: dc:80:2f:1e:7e:69:bf:dd:4b:d8:99:97:b3:03:34: bf:ef:53:2e:17:66:8d:92:9b:2d:91:d0:3a:52:3a: ad:5b:fa:e5:42:08:f4:a9:a8:b3:46:be:d5:af:e6: e3:ad:d3:86:97:fa:1b:4e:9e:7d:3e:29:6a:52:34: e6:71:04:12:f9:f0:c3:49:d1:60:af:28:4c:bd:ad: b2:81:b7:c1:75:34:33:b3:46:39:30:de:4f:ef:c6: a3:92:64:5e:14:96:ef:2a:26:b9:be:95:3a:61:4c: 29:3d:22:dd:6f:15:44:5a:6d:6c:3f:14:e1:8e:ff: e6:f4:e6:22:2a:84:0a:29:40:bb:45:d4:3a:cf:69: 65:c2:b8:f7:a7:c2:da:ac:d2:56:c7:b9:77:91:aa: 21:f2:67:54:5f:03:25:ec:cf:2f:e9:55:95:16:50: 38:86:cc:3c:1e:20:46:8d:15:b6:59:dd:c3:dc:6a: 31:db:16:31:6f:ee:9f:af:b0:35:06:28:5e:74:4d: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:77:38:E5:CF:56:7B:51:B5:A0:AC:F2:8A:23:C9:0B:65:E2:2F:14 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:38:a0:58:7f:27:4e:5f:d7:9a:0c:81:0c:cc:19:e1:df:0c: eb:06:9c:4e:ae:19:bd:79:f6:3c:c6:cd:7a:96:a4:8d:6c:e9: c6:dd:e3:eb:76:62:0b:68:8a:13:d9:ce:30:d7:e1:d4:48:31: 33:d3:06:e7:09:d5:14:35:7e:a9:2f:f0:b1:c0:33:2b:fc:f8: 56:06:18:3c:d0:f8:f6:a0:e8:2e:86:95:3e:36:96:6b:29:dd: c4:cb:3b:bf:b8:98:5f:30:e4:df:d3:c0:00:a2:96:94:0d:6d: 85:49:06:21:d9:f7:5c:37:eb:3c:02:4b:ca:e6:e1:72:56:2a: e5:7f:11:fc:bf:82:2b:3c:25:26:b7:4e:da:33:f3:cc:9c:29: 22:28:f5:ad:34:b9:6b:3d:61:76:6e:3a:47:87:14:3b:29:3b: 24:ad:6a:f5:5b:c6:5c:37:c6:60:e6:b3:73:fe:d7:9a:43:cb: 43:79:4c:e2:79:85:6b:a8:f9:90:98:67:d3:21:b7:65:f0:ad: 1d:88:1c:d3:4a:01:03:3a:24:fc:71:17:eb:99:e9:92:83:37: c2:f2:43:6a:77:77:b2:45:92:02:b1:c4:18:77:6a:8b:03:a4: 8e:ef:29:14:91:f7:74:5d:97:78:2e:05:8c:2c:d8:51:18:bb: 0d:bd:9b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA0EfrH0EQZp06nXlFdhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjUxMjEyMTAwMjQxWhcNMjUxMjEzMTAwMjQxWjAzMTEwLwYDVQQD EyhlNzc3MzhlNWNmNTY3YjUxYjVhMGFjZjI4YTIzYzkwYjY1ZTIyZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5usccz9EOple+QqCUP++/u9IvJ+i x+/BVW93N7Uaez6R9PoD6zGToRVMQbq2Sa9oqIPre+4bnpRzV83cgC8efmm/3UvY mZezAzS/71MuF2aNkpstkdA6UjqtW/rlQgj0qaizRr7Vr+bjrdOGl/obTp59Pilq UjTmcQQS+fDDSdFgryhMva2ygbfBdTQzs0Y5MN5P78ajkmReFJbvKia5vpU6YUwp PSLdbxVEWm1sPxThjv/m9OYiKoQKKUC7RdQ6z2llwrj3p8LarNJWx7l3kaoh8mdU XwMl7M8v6VWVFlA4hsw8HiBGjRW2Wd3D3Gox2xYxb+6fr7A1BihedE3v6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd3OOXPVntRtaCs8oojyQtl4i8UMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzigWH8n Tl/XmgyBDMwZ4d8M6wacTq4ZvXn2PMbNepakjWzpxt3j63ZiC2iKE9nOMNfh1Egx M9MG5wnVFDV+qS/wscAzK/z4VgYYPND49qDoLoaVPjaWayndxMs7v7iYXzDk39PA AKKWlA1thUkGIdn3XDfrPAJLyubhclYq5X8R/L+CKzwlJrdO2jPzzJwpIij1rTS5 az1hdm46R4cUOyk7JK1q9VvGXDfGYOazc/7XmkPLQ3lM4nmFa6j5kJhn0yG3ZfCt HYgc00oBAzok/HEX65npkoM3wvJDand3skWSArHEGHdqiwOkju8pFJH3dF2XeC4F jCzYURi7Db2bMQ== -----END CERTIFICATE-----Generated at Fri Dec 12 19:54:29 2025 by rpki-client