This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json) Hash identifier: rRWmDKHquggJGg7R+/IMZjFNwmXEY3CtXS++5sH8pXI= Subject key identifier: 26:70:0C:34:20:16:11:1E:53:49:E6:32:EE:89:B4:1F:EC:B4:D9:FE Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Certificate serial: 019B262DCF47882034321AB69D50064BED49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft Manifest number: 170E Signing time: Tue 16 Dec 2025 08:01:34 +0000 Manifest this update: Tue 16 Dec 2025 08:01:34 +0000 Manifest next update: Wed 17 Dec 2025 08:01:34 +0000 Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=) 2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: 0fNC3cbo05DWShNcSHsF48dnP8kTPBi6QGaQQKQEnXI=) 3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:cf:47:88:20:34:32:1a:b6:9d:50:06:4b:ed:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a Validity Not Before: Dec 16 08:01:34 2025 GMT Not After : Dec 17 08:01:34 2025 GMT Subject: CN=26700c342016111e5349e632ee89b41fecb4d9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:1e:7c:35:ad:ed:30:f2:53:24:f0:f2:62: 26:df:53:de:6f:b7:ee:e7:85:1d:fd:dd:1c:62:0c: bc:a4:e9:25:34:2a:aa:3c:f5:26:84:b6:89:e7:37: f0:af:a6:30:92:c5:f9:45:35:21:ad:88:68:e1:48: 95:c5:22:7e:46:eb:49:7a:63:1a:29:95:1b:f9:27: 4a:ae:54:f9:ce:1f:e5:04:96:94:14:d7:1d:78:a0: af:3f:aa:54:dd:c3:83:d2:f9:6d:86:73:da:a4:f6: 91:bd:60:2e:53:3f:01:98:c8:0d:07:1f:27:dc:62: 86:71:71:b1:0d:bd:b2:47:14:3b:6d:b7:6f:ab:a8: f3:5a:57:0c:e3:6b:b8:03:3d:9d:fc:61:fd:1f:af: a4:5e:b9:97:71:f5:2c:50:6d:a6:76:d4:7b:dd:4f: a4:5f:d9:c5:55:91:54:67:41:cd:b8:c5:7b:63:71: f3:d3:ec:74:f1:d7:82:ca:bd:87:8d:bb:e3:fe:a1: 66:83:f7:71:fb:be:01:6c:61:d0:93:11:3f:1e:23: 28:6b:08:0d:ad:08:b5:50:51:6b:39:8a:23:5e:49: 35:31:fa:c7:74:bc:f0:e1:00:cd:72:14:77:fa:05: cb:97:8b:bd:57:b4:b4:1c:0a:37:9e:b9:5b:b8:bb: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:70:0C:34:20:16:11:1E:53:49:E6:32:EE:89:B4:1F:EC:B4:D9:FE X509v3 Authority Key Identifier: keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:57:d0:a5:7d:24:39:54:41:5a:d3:56:f7:c4:63:b9:d3:0e: a9:0d:25:44:13:61:9c:4b:45:02:97:e5:ee:dc:d5:de:88:14: ce:ec:40:3f:21:c8:13:5f:fc:a5:40:79:77:dc:61:2d:85:23: cb:8d:18:00:18:fc:bc:7c:7b:a2:e9:ba:6a:f2:33:37:26:ee: 38:4e:13:61:3b:e8:52:03:8b:23:23:1e:54:25:cd:2d:45:f9: 63:e4:fe:66:67:03:76:b6:6b:86:9d:29:b0:db:64:3f:86:0f: 5a:9d:e7:41:2f:42:86:c8:8e:9e:74:72:a6:73:dc:ad:1c:64: 2c:d8:e4:bd:5c:ae:d1:75:09:06:a6:73:93:75:d2:49:e5:ea: f8:c2:7c:db:bb:b8:af:48:72:79:60:14:5b:44:db:9a:97:0c: 8f:8b:76:8b:4d:3b:53:cf:a1:2e:9b:fa:ae:34:a6:e5:72:42: 36:cd:2f:e5:60:0a:1d:8a:35:f1:99:87:15:c9:12:7a:23:5b: 47:64:08:6f:30:8c:b3:24:ae:62:dc:fc:36:eb:5b:a0:63:19: a0:e1:d8:c2:b1:e5:84:78:4b:b5:e5:7a:f9:bf:71:09:88:be: 9a:1f:5b:43:2a:2c:b5:9d:6f:3f:be:1e:d5:f8:ec:13:1d:e6: 05:db:0b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLc9HiCA0Mhq2nVAGS+1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYmJmYTQ5ODc3YmM1ZDllNGNmNDQ2OTUwZmQxNDI3OTky OWY0OWEwHhcNMjUxMjE2MDgwMTM0WhcNMjUxMjE3MDgwMTM0WjAzMTEwLwYDVQQD EygyNjcwMGMzNDIwMTYxMTFlNTM0OWU2MzJlZTg5YjQxZmVjYjRkOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApycefDWt7TDyUyTw8mIm31Peb7fu 54Ud/d0cYgy8pOklNCqqPPUmhLaJ5zfwr6YwksX5RTUhrYho4UiVxSJ+RutJemMa KZUb+SdKrlT5zh/lBJaUFNcdeKCvP6pU3cOD0vlthnPapPaRvWAuUz8BmMgNBx8n 3GKGcXGxDb2yRxQ7bbdvq6jzWlcM42u4Az2d/GH9H6+kXrmXcfUsUG2mdtR73U+k X9nFVZFUZ0HNuMV7Y3Hz0+x08deCyr2Hjbvj/qFmg/dx+74BbGHQkxE/HiMoawgN rQi1UFFrOYojXkk1MfrHdLzw4QDNchR3+gXLl4u9V7S0HAo3nrlbuLtHHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZwDDQgFhEeU0nmMu6JtB/stNn+MB8GA1UdIwQY MBaAFBy7+kmHe8XZ5M9EaVD9FCeZKfSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYt NDZiZjc2MjYxOGU3LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84NTFjYWMtZTFkOC00NTcxLTgyYTYtNDZiZjc2MjYxOGU3 LzEvSEx2NlNZZDd4ZG5rejBScFVQMFVKNWtwOUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFfQpX0k OVRBWtNW98RjudMOqQ0lRBNhnEtFApfl7tzV3ogUzuxAPyHIE1/8pUB5d9xhLYUj y40YABj8vHx7oum6avIzNybuOE4TYTvoUgOLIyMeVCXNLUX5Y+T+ZmcDdrZrhp0p sNtkP4YPWp3nQS9ChsiOnnRypnPcrRxkLNjkvVyu0XUJBqZzk3XSSeXq+MJ827u4 r0hyeWAUW0TbmpcMj4t2i007U8+hLpv6rjSm5XJCNs0v5WAKHYo18ZmHFckSeiNb R2QIbzCMsySuYtz8NutboGMZoOHYwrHlhHhLteV6+b9xCYi+mh9bQyostZ1vP74e 1fjsEx3mBdsLug== -----END CERTIFICATE-----Generated at Tue Dec 16 15:34:48 2025 by rpki-client