This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json) Hash identifier: v1CJFzDepYisIYaH3rBzUCY36wE9OCVi4KK9c/crcA8= Subject key identifier: F7:D0:17:F2:66:E0:CC:D5:21:BD:95:22:20:BF:47:03:13:A9:28:22 Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Certificate serial: 019AF1D1D6B678AB1CBDE468C852B690C4D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft Manifest number: 05E8 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=) 2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=) 3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: AFJrxUU9BKCgdvtXxHJv3v+uSsbOMJ/rjxoN5JYR4is=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d6:b6:78:ab:1c:bd:e4:68:c8:52:b6:90:c4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=f7d017f266e0ccd521bd952220bf470313a92822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:52:d9:fb:bf:50:0f:6b:e8:b6:f6:cd:06: bd:95:b1:5a:50:4a:02:22:8a:f9:09:d0:da:83:15: 1d:82:a8:fe:85:00:b1:7c:aa:48:97:65:91:aa:6e: b1:cd:23:32:74:26:d7:81:bc:0a:1b:09:61:ad:3b: 55:2c:97:db:ed:40:75:88:2f:ed:67:43:32:d7:d4: 70:92:13:38:2a:43:ee:a2:81:75:f9:d9:8e:42:b9: 1c:7a:0f:03:0a:0c:d9:f4:ce:d6:37:51:04:7f:d2: eb:54:09:65:a1:bd:58:09:ac:12:8d:d3:06:57:86: 10:29:7f:20:db:58:f1:76:4f:e5:ff:33:a0:fc:8b: 4a:1b:e9:a3:49:2c:92:1b:01:43:e6:59:08:ed:fc: e6:c1:45:61:26:6b:00:fc:bc:b2:1f:69:13:c7:d7: 20:07:2d:34:09:f5:25:ca:86:d2:6a:ce:34:2b:1d: 86:e7:82:6d:92:d0:6d:81:90:87:ce:c1:89:ca:83: 0d:32:2f:bb:d2:b7:8e:21:9b:fc:df:d9:9f:df:fe: 8a:63:56:04:da:87:01:6e:e6:2c:5e:e4:40:eb:eb: 79:16:4c:bb:93:5a:01:61:5c:27:ca:c5:0d:29:5c: b6:8b:24:f8:e5:e5:3e:ef:ba:b6:7b:3c:ca:6d:45: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:17:F2:66:E0:CC:D5:21:BD:95:22:20:BF:47:03:13:A9:28:22 X509v3 Authority Key Identifier: keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a6:b1:0d:f4:a2:6a:76:b9:c2:68:0c:59:fc:06:7a:6c:34: b9:7b:02:c5:18:19:10:f2:a5:e3:35:39:6f:e5:7b:37:c2:b3: 84:ea:5c:8b:53:8e:48:ba:0a:5d:24:ad:80:b6:6c:4d:d4:e9: 3e:40:77:76:34:39:25:32:f6:d5:16:9b:bd:47:68:1a:c1:7e: 3a:e7:ba:70:9f:35:72:97:53:c2:7f:16:45:73:9b:17:5b:cf: bb:6b:7b:78:73:40:18:e4:45:fb:83:7d:27:b8:a2:34:60:3b: b6:e7:77:37:b0:88:54:1b:f2:c0:48:b6:b8:e3:c7:7c:9d:fb: 50:aa:0f:01:f4:de:eb:cd:54:b0:d4:0f:35:3f:f3:c4:ad:f2: 0a:76:64:09:fe:5d:b5:de:8e:f4:2c:44:bd:10:ab:0d:4c:4d: 91:b1:92:93:80:51:07:f9:f3:e9:90:fe:d9:ca:9e:24:2c:24: e6:ab:1f:99:0a:88:87:15:b2:18:95:60:4b:e1:88:02:7f:71: a9:46:e8:79:6a:d3:fd:4c:86:c7:cf:fc:50:75:5a:18:bb:c6: 94:e1:3a:d9:7f:8e:dd:ab:bd:9a:10:ff:a1:ac:38:9c:0f:53: ea:7a:b2:57:e4:d2:62:e5:fe:1e:b7:40:e7:e6:ba:d1:1d:1b: eb:12:a6:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0da2eKscveRoyFK2kMTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4 ZjZhN2IwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhmN2QwMTdmMjY2ZTBjY2Q1MjFiZDk1MjIyMGJmNDcwMzEzYTkyODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8pS2fu/UA9r6Lb2zQa9lbFaUEoC Ior5CdDagxUdgqj+hQCxfKpIl2WRqm6xzSMydCbXgbwKGwlhrTtVLJfb7UB1iC/t Z0My19RwkhM4KkPuooF1+dmOQrkceg8DCgzZ9M7WN1EEf9LrVAllob1YCawSjdMG V4YQKX8g21jxdk/l/zOg/ItKG+mjSSySGwFD5lkI7fzmwUVhJmsA/LyyH2kTx9cg By00CfUlyobSas40Kx2G54JtktBtgZCHzsGJyoMNMi+70reOIZv839mf3/6KY1YE 2ocBbuYsXuRA6+t5Fky7k1oBYVwnysUNKVy2iyT45eU+77q2ezzKbUXr/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfQF/Jm4MzVIb2VIiC/RwMTqSgiMB8GA1UdIwQY MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt MmFlMzUxNzU3MTNjLzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6axDfSi ana5wmgMWfwGemw0uXsCxRgZEPKl4zU5b+V7N8KzhOpci1OOSLoKXSStgLZsTdTp PkB3djQ5JTL21RabvUdoGsF+Oue6cJ81cpdTwn8WRXObF1vPu2t7eHNAGORF+4N9 J7iiNGA7tud3N7CIVBvywEi2uOPHfJ37UKoPAfTe681UsNQPNT/zxK3yCnZkCf5d td6O9CxEvRCrDUxNkbGSk4BRB/nz6ZD+2cqeJCwk5qsfmQqIhxWyGJVgS+GIAn9x qUboeWrT/UyGx8/8UHVaGLvGlOE62X+O3au9mhD/oaw4nA9T6nqyV+TSYuX+HrdA 5+a60R0b6xKmZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:24:38 2025 by rpki-client