This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json) Hash identifier: D+kMLQFk+mFsuF/cGc/r0pJpq4/dh6Kaf33PU5n6GjI= Subject key identifier: 56:F7:BA:0F:98:7C:8E:11:39:0C:AB:6C:66:0F:F7:C4:BE:03:7C:E5 Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37 Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537 Certificate serial: 019AF19B9A4A9F96F340938AC6817AA2687C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft Manifest number: 080A Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: 7xXGPfFk5XpJXsvp2AmGP6ckomSf7LJbd2WfSqpPXEw=) 2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9a:4a:9f:96:f3:40:93:8a:c6:81:7a:a2:68:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=56f7ba0f987c8e11390cab6c660ff7c4be037ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:76:ae:da:b1:7a:32:b6:ac:ae:a6:d2:d3: 90:2a:60:9c:2b:14:b5:dd:44:40:fb:ce:da:28:dd: 82:74:d6:12:d6:0c:f2:1b:b0:0f:88:36:40:57:30: bd:43:ef:18:5c:2a:48:5d:66:e3:13:e5:b4:a2:70: a3:6d:87:04:5f:46:ae:43:d3:96:34:91:c1:fc:7b: 36:bf:f5:23:58:a0:69:31:50:42:93:2c:cf:ed:63: ea:43:a0:59:03:5f:cb:f6:b1:93:a4:1c:ec:45:5c: ca:90:01:3e:2e:70:23:08:8a:69:c2:5d:d5:88:ee: 5a:df:11:86:01:e0:b3:6d:13:ae:98:31:09:49:1b: c5:49:81:55:34:f8:12:cb:37:63:0a:6b:75:fb:68: e3:35:48:bc:74:90:54:e8:99:92:fc:86:a3:88:00: 0a:b2:be:be:d7:eb:50:69:d3:0c:55:65:2b:c7:d7: b3:a1:bc:9c:e9:13:c0:6f:8a:2c:e2:51:38:76:15: 13:d0:0d:c2:8d:0b:94:99:76:0e:fd:24:e2:c5:d8: aa:2c:52:4e:af:ec:8e:e0:b1:59:3f:22:8f:e8:3a: 0e:58:f8:a6:20:5a:49:8a:3c:8a:20:98:c5:6b:bd: c3:f2:d5:68:c1:8f:28:ea:ef:87:fd:e1:97:bd:41: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F7:BA:0F:98:7C:8E:11:39:0C:AB:6C:66:0F:F7:C4:BE:03:7C:E5 X509v3 Authority Key Identifier: keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fe:f0:11:af:84:8e:36:d6:d7:30:e3:20:b5:a1:8e:f7:06: ec:2e:5a:a6:1e:9e:24:7f:e1:3c:8c:30:e0:90:88:21:2f:ed: 42:f7:e2:c6:68:2c:50:d4:f2:a1:4e:a6:e0:0c:52:77:21:f2: c5:35:06:ab:cf:d7:7d:83:bb:d4:8f:bc:3d:c0:75:cb:a6:c3: e7:79:f9:55:1b:36:14:ef:02:36:e0:b6:91:7c:7a:5f:b2:63: a5:bc:db:33:64:ab:a5:78:b2:e4:83:f4:ee:16:26:67:7c:ff: a3:df:48:e5:b6:62:18:0f:95:b3:2a:a6:11:d3:2a:b6:95:59: 9f:27:aa:f1:a9:66:b9:48:06:18:1b:07:b0:bb:8f:81:dd:f5: ff:53:1d:8d:32:e0:6e:57:e6:f5:20:26:40:70:12:08:ef:e2: e3:19:a5:d3:4b:e5:11:7f:34:51:2e:38:db:18:f4:6a:f7:0c: d2:44:9a:e3:91:29:c1:cb:50:cd:d0:1e:d5:92:5a:20:93:db: 6b:5b:ae:f4:fe:19:13:44:6b:32:a2:75:99:5c:db:66:d9:d5: cb:a9:49:c3:88:cb:96:ae:0b:8c:6f:cc:cd:cd:b9:62:dc:c4: 7b:55:5e:a7:73:ca:5c:8d:f6:2c:9d:31:9d:e8:ef:37:36:de: 1b:83:e9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5pKn5bzQJOKxoF6omh8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx ZWU1MzcwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg1NmY3YmEwZjk4N2M4ZTExMzkwY2FiNmM2NjBmZjdjNGJlMDM3Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBp2rtqxejK2rK6m0tOQKmCcKxS1 3URA+87aKN2CdNYS1gzyG7APiDZAVzC9Q+8YXCpIXWbjE+W0onCjbYcEX0auQ9OW NJHB/Hs2v/UjWKBpMVBCkyzP7WPqQ6BZA1/L9rGTpBzsRVzKkAE+LnAjCIppwl3V iO5a3xGGAeCzbROumDEJSRvFSYFVNPgSyzdjCmt1+2jjNUi8dJBU6JmS/IajiAAK sr6+1+tQadMMVWUrx9ezobyc6RPAb4os4lE4dhUT0A3CjQuUmXYO/STixdiqLFJO r+yO4LFZPyKP6DoOWPimIFpJijyKIJjFa73D8tVowY8o6u+H/eGXvUHe6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb3ug+YfI4ROQyrbGYP98S+A3zlMB8GA1UdIwQY MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2 LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/7wEa+E jjbW1zDjILWhjvcG7C5aph6eJH/hPIww4JCIIS/tQvfixmgsUNTyoU6m4AxSdyHy xTUGq8/XfYO71I+8PcB1y6bD53n5VRs2FO8CNuC2kXx6X7JjpbzbM2SrpXiy5IP0 7hYmZ3z/o99I5bZiGA+VsyqmEdMqtpVZnyeq8almuUgGGBsHsLuPgd31/1MdjTLg blfm9SAmQHASCO/i4xml00vlEX80US442xj0avcM0kSa45EpwctQzdAe1ZJaIJPb a1uu9P4ZE0RrMqJ1mVzbZtnVy6lJw4jLlq4LjG/Mzc25YtzEe1Vep3PKXI32LJ0x nejvNzbeG4PpZg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:35:05 2025 by rpki-client