This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json) Hash identifier: fL/ZmY3rV9hdbZz/1Y8LkuNLlVQTOuLU2ttXYz/GdzA= Subject key identifier: B9:DD:D1:9C:64:00:32:89:48:F0:83:98:67:D0:3E:86:34:C3:EC:73 Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Certificate serial: 019AF23F7D6EB9281EE8C1C587F41BB5B0D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft Manifest number: 15CB Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: Kfy5Pb/ih2rexLqVwUyiizBR52f74s5a/2mBEJcD68c=) 2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=) 3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7d:6e:b9:28:1e:e8:c1:c5:87:f4:1b:b5:b0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=b9ddd19c6400328948f0839867d03e8634c3ec73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:e9:50:54:49:2f:fa:f4:5a:42:30:5f:be: a6:38:9e:2a:9f:39:e6:1d:53:33:9e:ac:87:ea:12: fd:bb:2a:af:ab:b3:34:a2:6f:a3:ce:81:cd:1b:d3: 7b:0b:8a:f1:87:25:c1:0b:5b:22:ab:5a:e5:49:c2: 9c:98:37:5a:49:e1:e2:56:62:18:a4:1d:7f:be:28: 19:89:d2:b0:57:4f:f2:c8:3a:65:a6:a3:e4:22:28: 82:69:55:13:1f:ee:d0:50:10:da:04:23:86:72:6b: 79:ab:5f:96:de:13:4a:9a:b9:fa:98:ad:53:7e:84: 1b:bb:ae:34:91:58:26:67:35:e6:ec:62:29:03:f3: a6:c9:dc:55:47:b0:84:9f:54:39:32:aa:c1:76:0a: 86:05:8c:1b:e0:b5:7d:85:86:06:1a:e8:69:f8:f1: 11:a8:b1:d8:8d:fd:79:61:ff:88:64:54:c5:98:d6: 6e:2d:02:80:a1:18:8d:7d:e5:80:47:b4:4c:cb:f7: 54:94:53:6d:ca:bd:b0:4c:37:b4:23:7b:52:d4:6a: a2:db:c2:18:fb:42:76:fe:5a:9b:3a:39:bf:99:9d: d9:22:e7:14:9b:22:03:22:48:7f:35:f1:c2:7e:6f: cc:ce:bf:d3:03:5a:b1:04:7d:6b:2e:c0:4c:03:5f: 36:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:D1:9C:64:00:32:89:48:F0:83:98:67:D0:3E:86:34:C3:EC:73 X509v3 Authority Key Identifier: keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d7:c3:a4:e6:d9:34:85:17:d4:dc:f4:9b:c3:9f:7a:5e:75: 4e:7f:65:54:12:50:20:ac:95:62:25:85:51:ee:c0:4b:4c:7e: a4:d4:85:27:7f:cd:eb:7d:e2:54:9c:11:5e:c8:f2:b8:ef:03: 58:61:0f:02:a3:54:4b:d8:25:0f:d8:1d:b4:0c:66:cc:d7:bb: cf:d1:12:b3:3d:71:d6:1c:0c:a2:58:66:8a:0e:c3:e9:95:20: 6b:6d:e7:9f:41:9c:58:5e:cc:07:43:68:d5:2b:2f:c3:6d:44: 1e:db:ae:72:a2:b4:82:34:ec:3e:2c:c0:d3:10:96:64:ee:f4: 53:48:8b:e9:2e:53:d8:ef:8b:8b:98:20:c9:ac:78:90:04:6b: 42:d1:4a:f9:64:82:28:d6:0d:de:89:3d:16:ac:43:41:9b:5d: ff:13:21:d8:d5:50:78:ac:5d:ac:a3:f6:6f:fa:df:df:7e:ff: d3:67:c2:e6:75:fb:f8:69:65:75:42:c6:9a:28:9d:a5:f4:ae: df:4e:59:23:06:d3:5d:f8:ba:7c:ed:a8:ef:19:f6:99:54:bd: 5a:32:03:b6:1a:53:83:6e:96:5e:ae:af:84:0d:d5:66:58:99: 26:93:bb:15:08:02:c5:d4:05:eb:2f:d2:6f:75:08:3d:18:ba: 9b:29:86:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP31uuSge6MHFh/QbtbDXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh YzM0NWIwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EyhiOWRkZDE5YzY0MDAzMjg5NDhmMDgzOTg2N2QwM2U4NjM0YzNlYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArijpUFRJL/r0WkIwX76mOJ4qnznm HVMznqyH6hL9uyqvq7M0om+jzoHNG9N7C4rxhyXBC1siq1rlScKcmDdaSeHiVmIY pB1/vigZidKwV0/yyDplpqPkIiiCaVUTH+7QUBDaBCOGcmt5q1+W3hNKmrn6mK1T foQbu640kVgmZzXm7GIpA/OmydxVR7CEn1Q5MqrBdgqGBYwb4LV9hYYGGuhp+PER qLHYjf15Yf+IZFTFmNZuLQKAoRiNfeWAR7RMy/dUlFNtyr2wTDe0I3tS1Gqi28IY +0J2/lqbOjm/mZ3ZIucUmyIDIkh/NfHCfm/Mzr/TA1qxBH1rLsBMA1825wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnd0ZxkADKJSPCDmGfQPoY0w+xzMB8GA1UdIwQY MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4 LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNfDpObZ NIUX1Nz0m8Ofel51Tn9lVBJQIKyVYiWFUe7AS0x+pNSFJ3/N633iVJwRXsjyuO8D WGEPAqNUS9glD9gdtAxmzNe7z9ESsz1x1hwMolhmig7D6ZUga23nn0GcWF7MB0No 1Ssvw21EHtuucqK0gjTsPizA0xCWZO70U0iL6S5T2O+Li5ggyax4kARrQtFK+WSC KNYN3ok9FqxDQZtd/xMh2NVQeKxdrKP2b/rf337/02fC5nX7+GlldULGmiidpfSu 305ZIwbTXfi6fO2o7xn2mVS9WjIDthpTg26WXq6vhA3VZliZJpO7FQgCxdQF6y/S b3UIPRi6mymG8w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:02 2025 by rpki-client