This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json) Hash identifier: ksmhOdXvuspp9VmSHzikenD+idPufGfOzCpXRwl3jjE= Subject key identifier: 08:D6:F9:0E:E1:FD:DB:26:44:56:B2:4E:13:6F:C9:2B:44:AF:87:5C Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6 Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6 Certificate serial: 019AF31B959EFB9252688AF4D093CDB39308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft Manifest number: 0471 Signing time: Sat 06 Dec 2025 10:01:02 +0000 Manifest this update: Sat 06 Dec 2025 10:01:02 +0000 Manifest next update: Sun 07 Dec 2025 10:01:02 +0000 Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=) 2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: yRNlvgakeWBEOZdnE4Q8ThU8NweMwYu7JCm2iGM3IHk=) 3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:95:9e:fb:92:52:68:8a:f4:d0:93:cd:b3:93:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6 Validity Not Before: Dec 6 10:01:02 2025 GMT Not After : Dec 7 10:01:02 2025 GMT Subject: CN=08d6f90ee1fddb264456b24e136fc92b44af875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:22:2d:37:06:8e:83:33:ea:b7:8e:83:ac: d5:cb:d3:11:2c:8e:91:8a:7b:5d:f3:54:1d:cf:2d: 9b:82:62:08:02:49:57:a7:35:f6:01:b7:01:11:77: f7:1f:4c:3d:10:5e:a3:fe:7f:8e:11:7f:7a:d1:ce: 88:89:0d:24:f1:93:70:6f:33:a7:95:95:de:6c:b2: 51:24:37:42:8d:5f:3a:13:91:f9:44:a1:00:6e:91: 1a:e8:c9:02:62:77:f0:64:59:aa:94:4a:1f:8e:fc: 08:ce:15:e2:9b:47:39:dc:fe:6b:86:ce:d7:33:80: 01:91:6e:62:1b:cb:46:71:8a:a5:46:15:a7:cb:09: 64:05:9b:d3:0e:8f:55:2f:97:48:21:e9:4f:d4:fd: d9:27:3a:2e:af:43:83:c8:db:cf:f3:88:64:b4:45: c8:82:35:63:39:e1:3d:44:10:ba:ab:c0:95:14:cd: e3:6e:90:b7:6e:f6:ab:fa:c1:67:c7:cd:13:11:a8: a6:3a:a3:85:f0:36:d8:58:31:51:9f:fa:23:ce:ec: a0:1d:3c:8d:82:11:b6:29:8b:cf:d1:4a:5b:a9:6c: ec:09:3c:02:27:6f:4b:77:df:8a:ac:7f:6b:d5:16: 83:b4:ff:13:60:39:38:90:36:8f:67:30:6d:33:34: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:F9:0E:E1:FD:DB:26:44:56:B2:4E:13:6F:C9:2B:44:AF:87:5C X509v3 Authority Key Identifier: keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:57:3f:48:be:7a:39:d6:7e:67:42:4c:da:98:70:d3:ff: da:db:a2:92:51:e6:01:8c:5b:2c:ec:f5:72:41:95:1e:3b:1e: 23:a4:55:e9:1e:12:4a:e0:df:e7:d8:fb:1a:51:2b:63:6a:0f: dc:13:76:a8:6a:13:8c:4e:05:22:1e:4c:63:8a:12:66:1e:b4: fb:b8:70:cf:7a:5c:a4:6e:fe:dd:bd:6a:21:a4:7b:5c:ed:4a: 6e:c3:fb:25:09:cb:0b:3e:4e:87:99:a9:59:75:02:21:bb:ab: 5d:fa:3d:d7:01:b8:2b:17:bf:fa:27:1f:4a:ca:96:8d:68:0b: 84:d1:f7:2c:a3:74:78:af:9f:90:69:28:fb:fb:af:41:56:94: 44:47:fd:01:14:d6:7a:00:1b:37:0c:61:41:c0:0f:6a:39:1d: 91:12:59:b4:29:f4:c0:8c:a8:c9:11:93:b0:93:7e:66:e3:f4: 2b:b5:ec:a4:56:68:d0:2b:a4:c4:f2:ca:04:54:72:c5:c8:a3: af:e1:04:ac:52:72:6d:9e:16:83:72:27:82:0c:47:f9:7d:28: e8:ad:e8:b1:27:4d:ef:7d:04:47:1e:c5:c2:a4:e1:69:e8:e0: e8:31:d1:fd:e6:ba:dd:b5:7d:72:c7:4f:2f:db:22:d3:40:9f: 6b:f5:6b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5We+5JSaIr00JPNs5MIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmJjMTQ1YzViMjIzOTRkNmZlYWU5OTZiYzBiYjI1MjU0 ODAxYzYwHhcNMjUxMjA2MTAwMTAyWhcNMjUxMjA3MTAwMTAyWjAzMTEwLwYDVQQD EygwOGQ2ZjkwZWUxZmRkYjI2NDQ1NmIyNGUxMzZmYzkyYjQ0YWY4NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAwiLTcGjoMz6reOg6zVy9MRLI6R intd81Qdzy2bgmIIAklXpzX2AbcBEXf3H0w9EF6j/n+OEX960c6IiQ0k8ZNwbzOn lZXebLJRJDdCjV86E5H5RKEAbpEa6MkCYnfwZFmqlEofjvwIzhXim0c53P5rhs7X M4ABkW5iG8tGcYqlRhWnywlkBZvTDo9VL5dIIelP1P3ZJzour0ODyNvP84hktEXI gjVjOeE9RBC6q8CVFM3jbpC3bvar+sFnx80TEaimOqOF8DbYWDFRn/ojzuygHTyN ghG2KYvP0UpbqWzsCTwCJ29Ld9+KrH9r1RaDtP8TYDk4kDaPZzBtMzSlWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjW+Q7h/dsmRFayThNvyStEr4dcMB8GA1UdIwQY MBaAFIUrwUXFsiOU1v6umWvAuyUlSAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMt OGQwNzEwZjNkMjc2LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMtOGQwNzEwZjNkMjc2 LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6BXP0i+ ejnWfmdCTNqYcNP/2tuiklHmAYxbLOz1ckGVHjseI6RV6R4SSuDf59j7GlErY2oP 3BN2qGoTjE4FIh5MY4oSZh60+7hwz3pcpG7+3b1qIaR7XO1KbsP7JQnLCz5Oh5mp WXUCIburXfo91wG4Kxe/+icfSsqWjWgLhNH3LKN0eK+fkGko+/uvQVaUREf9ARTW egAbNwxhQcAPajkdkRJZtCn0wIyoyRGTsJN+ZuP0K7XspFZo0CukxPLKBFRyxcij r+EErFJybZ4Wg3InggxH+X0o6K3osSdN730ERx7FwqThaejg6DHR/ea63bV9csdP L9si00Cfa/VrdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:03 2025 by rpki-client