This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json) Hash identifier: l0xDrowr7Bx1t0nta+soeDTBo2E3ncZxKllkzecGG1g= Subject key identifier: 53:76:F6:70:06:3A:22:6C:B3:80:B0:80:FB:5F:2E:18:1F:89:43:73 Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156 Certificate serial: 019AF1D198F9B197FD18D0E7B4F1107D0BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft Manifest number: 02AD Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=) 2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: tkVtX0WJ7Pujlr3idXIge+TIO2chht5tprnx3cDO2Zw=) 3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:98:f9:b1:97:fd:18:d0:e7:b4:f1:10:7d:0b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=5376f670063a226cb380b080fb5f2e181f894373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:13:54:ad:46:6d:14:c3:58:4f:9c:7b:73: 6a:40:96:d0:d7:86:01:a1:e4:4a:ae:95:33:5e:80: 8d:fd:e9:97:ff:37:d2:b5:57:fc:a4:b7:30:6a:b8: b6:9b:73:fd:e3:b9:16:a6:16:3b:c5:6e:c3:0e:df: 18:77:89:0e:f0:56:c9:49:c3:d2:ba:7e:81:a8:86: 37:9f:9a:10:f8:50:b1:6b:f3:69:ce:71:e6:2e:a4: 2c:1d:8e:f2:56:32:00:65:15:aa:19:6f:41:f2:8a: 56:70:89:21:08:65:6f:f7:62:5e:08:df:48:ab:fe: 9b:b9:08:3d:06:66:7f:6e:99:ac:0b:e4:59:92:fe: 6e:4a:a0:12:1d:7d:a7:05:2a:b9:f0:32:b6:5e:00: 63:af:6e:c8:0b:7f:eb:7d:b0:de:bc:4a:9f:3d:ab: 5b:6c:b6:d9:45:2f:e5:cb:82:9c:e4:8c:8d:33:ac: c0:33:65:33:9a:ac:b9:e5:c2:f4:a4:e5:e4:a8:be: e5:e7:5e:fe:d5:8a:f3:d1:99:91:be:98:7b:71:28: 4d:d0:69:0a:01:63:04:6f:72:c8:b6:d0:43:2b:e7: 49:24:f1:4e:a4:bd:df:04:7a:20:c9:a7:56:bb:98: 18:06:81:31:74:47:67:b7:bc:6a:dc:56:9e:ea:26: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:F6:70:06:3A:22:6C:B3:80:B0:80:FB:5F:2E:18:1F:89:43:73 X509v3 Authority Key Identifier: keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:21:f3:08:cd:60:06:fa:76:5d:9f:e1:cd:ba:f0:df:59:3c: ac:c1:8f:39:e2:97:2d:95:b7:51:25:ab:73:d1:0f:79:63:f0: 23:f7:40:4e:11:4a:25:0a:40:29:c7:ed:7c:50:06:f9:2f:25: 42:0a:7b:f8:1b:cc:cc:4b:6f:11:89:2c:a9:ac:34:5f:9c:7b: 32:2f:77:ae:5c:1e:fb:9e:e3:10:c6:d8:84:28:85:40:32:3a: 47:a8:44:89:0e:2e:e6:aa:df:25:fc:36:15:71:ca:a4:94:c4: 41:8c:0b:3c:48:22:46:16:76:28:bc:9b:bc:14:33:45:09:54: c4:1b:22:ef:3e:c4:d2:b7:a6:82:01:d5:b6:c6:fa:6a:b3:e8: a8:fc:8f:26:37:99:41:26:02:0f:c2:b8:68:1a:ae:dd:4c:35: 99:71:44:de:98:17:e4:e5:be:b1:44:25:8d:fb:5d:61:a0:e0: dc:c5:dc:47:7d:0b:6d:46:49:91:d6:e9:db:11:10:76:dd:57: 09:5e:fd:6d:d0:86:87:87:51:88:55:cc:80:b3:41:9c:ea:9e: 75:fe:ef:c2:a8:f0:13:03:6b:bf:1e:ff:38:c7:5d:a3:03:13: cb:4c:9b:5e:b0:ed:40:7e:bb:27:96:e2:2f:ca:b0:1c:84:c1: 35:15:af:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zj5sZf9GNDntPEQfQu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmNkN2JjMTkxNDIwNTZhY2FmOTU3M2NhYTFhZjhkZTg3 MTgxNTYwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD Eyg1Mzc2ZjY3MDA2M2EyMjZjYjM4MGIwODBmYjVmMmUxODFmODk0MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfATVK1GbRTDWE+ce3NqQJbQ14YB oeRKrpUzXoCN/emX/zfStVf8pLcwari2m3P947kWphY7xW7DDt8Yd4kO8FbJScPS un6BqIY3n5oQ+FCxa/NpznHmLqQsHY7yVjIAZRWqGW9B8opWcIkhCGVv92JeCN9I q/6buQg9BmZ/bpmsC+RZkv5uSqASHX2nBSq58DK2XgBjr27IC3/rfbDevEqfPatb bLbZRS/ly4Kc5IyNM6zAM2Uzmqy55cL0pOXkqL7l517+1Yrz0ZmRvph7cShN0GkK AWMEb3LIttBDK+dJJPFOpL3fBHogyadWu5gYBoExdEdnt7xq3Fae6iZ4+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN29nAGOiJss4CwgPtfLhgfiUNzMB8GA1UdIwQY MBaAFIRs17wZFCBWrK+Vc8qhr43ocYFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMt ZDE5NTlmM2UyZjc2LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMtZDE5NTlmM2UyZjc2 LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciHzCM1g Bvp2XZ/hzbrw31k8rMGPOeKXLZW3USWrc9EPeWPwI/dAThFKJQpAKcftfFAG+S8l Qgp7+BvMzEtvEYksqaw0X5x7Mi93rlwe+57jEMbYhCiFQDI6R6hEiQ4u5qrfJfw2 FXHKpJTEQYwLPEgiRhZ2KLybvBQzRQlUxBsi7z7E0remggHVtsb6arPoqPyPJjeZ QSYCD8K4aBqu3Uw1mXFE3pgX5OW+sUQljftdYaDg3MXcR30LbUZJkdbp2xEQdt1X CV79bdCGh4dRiFXMgLNBnOqedf7vwqjwEwNrvx7/OMddowMTy0ybXrDtQH67J5bi L8qwHITBNRWvsA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:56 2025 by rpki-client