This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json) Hash identifier: pu0SFdTvn164E0vANF2LBFTlDxMqh2KOsOImKE1s1Gc= Subject key identifier: 18:BE:8C:26:7A:01:D0:A8:82:35:06:B2:0E:64:D6:E0:EF:8E:36:24 Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Certificate serial: 019AEFAD0289201DF76D4943BFFDC845B7C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft Manifest number: 07C4 Signing time: Fri 05 Dec 2025 18:01:24 +0000 Manifest this update: Fri 05 Dec 2025 18:01:24 +0000 Manifest next update: Sat 06 Dec 2025 18:01:24 +0000 Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=) 2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: F4EtZmo/G0q76Jd9wkGCRU5g3Kfbc9dprU+2JpHZTSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:ad:02:89:20:1d:f7:6d:49:43:bf:fd:c8:45:b7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Validity Not Before: Dec 5 18:01:24 2025 GMT Not After : Dec 6 18:01:24 2025 GMT Subject: CN=18be8c267a01d0a8823506b20e64d6e0ef8e3624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:91:f0:f7:83:69:c6:66:bf:19:31:e2:eb: 85:6c:49:1f:6e:8c:64:ea:dd:f1:d9:f3:2d:9f:3e: 47:86:4c:ea:4a:a0:9b:7d:67:63:9f:6a:7b:56:2e: 7d:40:93:84:0c:6c:5a:4f:f8:54:f2:d7:be:f9:68: 12:6b:21:29:8f:95:e3:62:ed:0e:22:34:23:f5:ac: 4f:98:b0:ef:16:6d:95:cb:5f:db:76:9a:a1:c3:f5: cf:85:25:71:c0:96:aa:ca:94:b2:86:b1:0d:6c:6e: 07:9b:1d:bf:54:ce:e6:6f:31:45:b5:9b:6a:39:4b: 84:53:c3:d8:05:76:0f:43:5c:37:89:ee:82:32:27: 67:1c:c3:50:93:30:89:90:e8:11:8b:50:6e:3a:f1: ea:d0:3c:05:a5:38:d4:e6:b6:2b:5c:4e:ff:0b:77: 90:55:b2:91:6f:fc:83:8d:de:c1:97:b9:24:91:c4: 33:cf:a7:6e:22:fb:bd:d0:0d:7f:31:ec:0d:cb:db: 43:25:42:da:99:7c:83:27:13:ed:7d:ca:73:15:83: 92:0f:ff:a3:05:45:2d:34:e2:09:bc:b8:58:cc:d5: bf:17:09:74:14:39:65:94:75:4c:de:91:17:fa:2c: 93:35:53:e0:32:0c:96:d0:e0:be:3f:e7:54:5c:65: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BE:8C:26:7A:01:D0:A8:82:35:06:B2:0E:64:D6:E0:EF:8E:36:24 X509v3 Authority Key Identifier: keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ab:ad:4f:27:c9:73:3c:15:78:e4:4a:87:64:21:7c:d0:fb: 24:26:25:a6:ff:0f:6b:4d:ed:89:10:27:50:f9:df:35:8c:1f: 78:77:c8:72:29:11:4c:65:2e:09:c7:18:a5:b9:0d:8e:55:9b: f0:bb:f8:1f:e6:8c:a8:ab:41:29:24:54:d7:40:27:22:55:fb: e4:55:d9:95:dd:68:e2:76:68:96:8b:31:33:81:54:27:93:77: 2a:da:4b:c6:fa:ec:1a:81:4f:79:38:c6:fb:91:b8:3e:46:d2: 93:3b:b5:a5:c9:1f:e8:48:ed:f5:81:86:c5:8c:e7:b1:0e:1b: 3e:90:8b:6b:37:bd:f2:72:17:42:94:6d:72:e5:84:c2:b5:c4: e6:ab:3e:13:5a:3c:1d:d3:b4:64:18:76:05:1e:78:da:b0:03: 04:ab:e5:b4:a7:ec:25:c4:36:5d:5d:28:55:16:6b:04:df:ea: f5:28:38:2e:2b:67:1a:81:5e:88:23:62:37:67:e9:ca:65:db: a6:5b:7c:cf:00:e2:17:ea:e1:eb:c4:13:32:83:8a:34:fc:b2: f3:04:f2:41:9d:5f:5a:8e:68:89:0c:ad:1d:a6:69:1c:95:5e: c1:52:78:b3:23:63:55:9f:6b:83:8f:04:fe:dc:7b:c5:c3:11: 30:6d:c7:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvrQKJIB33bUlDv/3IRbfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy Yzg5NjkwHhcNMjUxMjA1MTgwMTI0WhcNMjUxMjA2MTgwMTI0WjAzMTEwLwYDVQQD EygxOGJlOGMyNjdhMDFkMGE4ODIzNTA2YjIwZTY0ZDZlMGVmOGUzNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq22R8PeDacZmvxkx4uuFbEkfboxk 6t3x2fMtnz5HhkzqSqCbfWdjn2p7Vi59QJOEDGxaT/hU8te++WgSayEpj5XjYu0O IjQj9axPmLDvFm2Vy1/bdpqhw/XPhSVxwJaqypSyhrENbG4Hmx2/VM7mbzFFtZtq OUuEU8PYBXYPQ1w3ie6CMidnHMNQkzCJkOgRi1BuOvHq0DwFpTjU5rYrXE7/C3eQ VbKRb/yDjd7Bl7kkkcQzz6duIvu90A1/MewNy9tDJULamXyDJxPtfcpzFYOSD/+j BUUtNOIJvLhYzNW/Fwl0FDlllHVM3pEX+iyTNVPgMgyW0OC+P+dUXGWcYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi+jCZ6AdCogjUGsg5k1uDvjjYkMB8GA1UdIwQY MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3 LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKutTyfJ czwVeORKh2QhfND7JCYlpv8Pa03tiRAnUPnfNYwfeHfIcikRTGUuCccYpbkNjlWb 8Lv4H+aMqKtBKSRU10AnIlX75FXZld1o4nZolosxM4FUJ5N3KtpLxvrsGoFPeTjG +5G4PkbSkzu1pckf6Ejt9YGGxYznsQ4bPpCLaze98nIXQpRtcuWEwrXE5qs+E1o8 HdO0ZBh2BR542rADBKvltKfsJcQ2XV0oVRZrBN/q9Sg4LitnGoFeiCNiN2fpymXb plt8zwDiF+rh68QTMoOKNPyy8wTyQZ1fWo5oiQytHaZpHJVewVJ4syNjVZ9rg48E /tx7xcMRMG3Hmg== -----END CERTIFICATE-----Generated at Sat Dec 6 02:14:17 2025 by rpki-client