This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json) Hash identifier: RCMC9ruzNXWmuxfNXN9LF3xNVKYD6WIZEoOYfoVTOy8= Subject key identifier: 7D:63:E5:10:BD:9D:F0:26:A3:82:BE:A0:16:50:47:66:54:36:2E:A2 Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04 Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904 Certificate serial: 019AF0BF01102AC3C8F73DF48DEFF19B643C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft Manifest number: 0974 Signing time: Fri 05 Dec 2025 23:00:40 +0000 Manifest this update: Fri 05 Dec 2025 23:00:40 +0000 Manifest next update: Sat 06 Dec 2025 23:00:40 +0000 Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=) 2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=) 3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: 2T9QZ5B6G+Xv1Z9yDAcFc6PWMc0ZolVdQVUJV1h88j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:01:10:2a:c3:c8:f7:3d:f4:8d:ef:f1:9b:64:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904 Validity Not Before: Dec 5 23:00:40 2025 GMT Not After : Dec 6 23:00:40 2025 GMT Subject: CN=7d63e510bd9df026a382bea01650476654362ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:10:7c:74:b9:f3:aa:79:32:ec:58:9c:80: 77:3e:46:17:cb:14:96:5f:f6:f0:d4:40:ad:92:14: 81:5f:99:80:87:0e:1f:ae:36:7f:a8:50:c2:d5:8c: 47:07:16:44:89:f7:3d:fd:75:a4:54:98:a9:fb:72: 45:f7:bb:b9:42:bd:06:21:82:4b:0e:6f:19:15:12: 49:33:a2:35:0b:8d:0e:42:7f:c6:30:e6:fe:e8:47: 66:a6:8d:66:4e:5c:48:22:6e:be:92:0f:78:7b:fc: fa:20:07:03:cb:9e:86:aa:d2:22:62:7a:ac:f6:94: 7c:6e:9f:01:6d:a1:d8:d4:9d:b8:fd:e7:e3:c6:d7: 4b:1a:1f:74:a9:c2:b3:4f:8a:e0:8a:58:cb:51:82: 44:03:dd:eb:9a:89:96:80:31:e1:31:fb:4b:37:b7: ff:46:6c:10:28:27:dd:2a:4c:32:25:6d:00:c1:3c: a8:75:8d:17:d0:88:e0:9c:f8:f2:7e:6d:95:30:bf: 00:2e:ca:6a:49:26:83:55:42:e4:dc:ce:14:b9:11: 70:81:90:ea:de:6f:89:40:75:a9:7f:26:cd:77:d1: 7d:4b:2c:ee:fe:14:0f:16:e7:18:43:27:e4:cb:3c: 84:8c:b8:90:07:54:8e:11:3a:ea:b1:9b:97:46:a4: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:E5:10:BD:9D:F0:26:A3:82:BE:A0:16:50:47:66:54:36:2E:A2 X509v3 Authority Key Identifier: keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:69:77:d5:e1:8f:b0:64:98:8f:e7:61:33:80:39:c6:8b:33: 8d:a5:5e:13:8e:28:02:1a:ea:87:c9:2e:75:36:44:ad:17:f9: c3:c1:b2:16:e2:0e:ba:fd:8d:8a:81:21:94:60:ee:25:bd:84: 7b:66:a9:e4:db:6b:51:5f:00:ce:24:ca:80:63:5e:98:ec:3c: c0:c5:da:ab:c3:88:dd:2b:da:78:98:0f:b1:db:67:33:07:fd: 57:b3:b3:fc:77:f3:58:79:2c:fc:d2:11:52:fc:17:57:aa:bd: a8:bb:f2:c4:37:b2:e3:73:63:78:33:86:f6:13:66:3c:8f:f6: 64:e7:59:b0:b6:82:c3:68:39:70:36:91:da:c2:b4:68:a2:65: b9:f3:f0:ac:23:81:a5:dc:bd:ff:84:e0:4b:77:6d:51:8b:0c: 3c:b7:cf:f9:a7:61:5d:30:b7:10:e6:4e:4b:0a:ed:91:f4:af: ed:aa:6c:4b:6e:83:12:5d:78:af:3b:60:3b:70:da:90:f2:17: 28:2e:f7:b2:fb:91:86:11:44:72:72:91:62:c6:06:25:98:16: 26:6a:74:26:91:5d:af:a7:5b:45:3a:af:2a:a3:76:6a:13:a0: 2d:1e:37:2a:6d:01:55:5d:9b:6c:31:ed:03:31:6e:48:13:92: 62:f5:d2:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwEQKsPI9z30je/xm2Q8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz ZTY5MDQwHhcNMjUxMjA1MjMwMDQwWhcNMjUxMjA2MjMwMDQwWjAzMTEwLwYDVQQD Eyg3ZDYzZTUxMGJkOWRmMDI2YTM4MmJlYTAxNjUwNDc2NjU0MzYyZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkQfHS586p5MuxYnIB3PkYXyxSW X/bw1ECtkhSBX5mAhw4frjZ/qFDC1YxHBxZEifc9/XWkVJip+3JF97u5Qr0GIYJL Dm8ZFRJJM6I1C40OQn/GMOb+6Edmpo1mTlxIIm6+kg94e/z6IAcDy56GqtIiYnqs 9pR8bp8BbaHY1J24/efjxtdLGh90qcKzT4rgiljLUYJEA93rmomWgDHhMftLN7f/ RmwQKCfdKkwyJW0AwTyodY0X0IjgnPjyfm2VML8ALspqSSaDVULk3M4UuRFwgZDq 3m+JQHWpfybNd9F9Syzu/hQPFucYQyfkyzyEjLiQB1SOETrqsZuXRqQb8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1j5RC9nfAmo4K+oBZQR2ZUNi6iMB8GA1UdIwQY MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnml31eGP sGSYj+dhM4A5xoszjaVeE44oAhrqh8kudTZErRf5w8GyFuIOuv2NioEhlGDuJb2E e2ap5NtrUV8AziTKgGNemOw8wMXaq8OI3SvaeJgPsdtnMwf9V7Oz/HfzWHks/NIR UvwXV6q9qLvyxDey43NjeDOG9hNmPI/2ZOdZsLaCw2g5cDaR2sK0aKJlufPwrCOB pdy9/4TgS3dtUYsMPLfP+adhXTC3EOZOSwrtkfSv7apsS26DEl14rztgO3DakPIX KC73svuRhhFEcnKRYsYGJZgWJmp0JpFdr6dbRTqvKqN2ahOgLR43Km0BVV2bbDHt AzFuSBOSYvXSbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:00 2025 by rpki-client