This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json) Hash identifier: egYMZ3o8zAY+dc5GD4azwFzbGV+zazeyPcu2n/aO6dM= Subject key identifier: D7:4D:6A:D7:B6:E6:2B:5C:4B:2C:11:BA:9A:FF:89:41:21:94:AD:28 Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32 Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032 Certificate serial: 019AF19AE0C7A81BBDCBF30BA6CBE549B960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft Manifest number: 1247 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: 71gjLikllLylb9gm1fdmD50f4NbeocmWxd0Q/ce5bOY=) 2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e0:c7:a8:1b:bd:cb:f3:0b:a6:cb:e5:49:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=d74d6ad7b6e62b5c4b2c11ba9aff89412194ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:75:35:a7:5a:38:35:1b:e7:e6:8d:41:8c:ac: 30:dd:09:5c:74:31:7c:ba:42:82:95:e6:2e:2d:0e: 43:a0:54:dd:63:5d:c1:e8:50:e1:ba:7a:7d:fb:5c: 8e:5a:76:27:63:18:01:7b:6f:02:fd:34:7e:d0:6e: 8b:aa:b0:ae:ca:ef:22:c9:a8:85:67:32:99:0e:5d: 4e:3b:41:6c:61:6a:59:8b:29:8d:5f:5a:9d:1f:6e: 39:79:ad:09:da:3f:d2:1e:d9:65:66:58:71:0d:67: a6:8d:19:f6:2c:73:69:bb:e0:bf:1d:b4:b2:e5:c6: 0d:34:fa:25:d1:68:97:d6:02:56:9c:98:37:c4:e9: 02:b0:1a:d5:79:a5:c4:51:98:ac:2f:15:c8:e8:37: da:24:b3:fd:fe:a4:2f:70:1e:c6:31:07:bc:cf:03: f1:5a:5d:8d:fc:c4:0c:e1:36:e8:51:83:2c:62:c9: 4f:e5:e7:aa:52:23:49:1d:cb:43:9c:73:ff:17:1a: 62:e1:b9:33:79:3b:5f:a8:c6:96:92:b5:15:e8:b2: 17:5c:ab:50:77:0e:c1:a7:bd:7f:f8:dd:ba:75:0b: cb:bd:d2:80:ac:28:e9:3b:e3:0e:d8:04:cf:e2:37: c9:8d:46:23:7d:d1:6d:2a:e5:8c:64:e9:7b:0d:01: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4D:6A:D7:B6:E6:2B:5C:4B:2C:11:BA:9A:FF:89:41:21:94:AD:28 X509v3 Authority Key Identifier: keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:28:d5:06:4c:28:5f:a1:bc:d8:8d:d0:99:a7:dd:ef:28:6e: 63:28:e8:07:68:58:13:35:a7:59:00:6d:de:f3:02:61:e7:db: b7:68:58:7e:d3:70:3e:7f:93:ff:2e:a0:1e:b2:c7:1a:df:26: 4b:96:c6:01:f5:df:ca:cb:12:b5:42:14:1b:ec:6b:4c:2d:9c: 3f:50:d4:04:29:db:c1:03:72:24:e6:8a:11:44:d2:ac:05:c9: c1:0c:20:77:97:f8:0c:aa:9b:88:6b:ed:83:72:dd:3d:5c:03: 65:f8:fb:27:dd:6b:c3:35:23:2a:7f:01:c9:50:60:70:55:49: 69:f7:88:f8:29:1d:40:47:44:7c:4c:3e:1a:06:fd:38:20:37: 4f:da:f8:8d:f3:b3:ae:33:68:c3:a6:c7:59:9b:ab:1e:63:a7: ec:aa:03:04:63:eb:46:db:ec:96:0a:d4:44:92:c2:38:57:b8: 58:c5:c2:77:be:3d:d9:23:5b:16:e2:c8:8c:fa:fb:3f:32:5d: fa:d3:52:4a:8b:43:91:4c:2a:02:e1:5b:72:ec:6b:9d:58:50: c4:02:9b:ec:e3:83:d5:80:fe:a2:45:c3:9c:b9:05:cf:e1:33: 16:58:13:8d:93:32:c2:63:09:48:07:70:c1:5c:79:63:be:9b: 6f:c9:f2:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuDHqBu9y/MLpsvlSblgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NTlmZWE3ZTgzZTY0ZTVkODI1NjIzMTNjM2EzZjE5MGY0 OWYwMzIwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EyhkNzRkNmFkN2I2ZTYyYjVjNGIyYzExYmE5YWZmODk0MTIxOTRhZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnU1p1o4NRvn5o1BjKww3QlcdDF8 ukKCleYuLQ5DoFTdY13B6FDhunp9+1yOWnYnYxgBe28C/TR+0G6LqrCuyu8iyaiF ZzKZDl1OO0FsYWpZiymNX1qdH245ea0J2j/SHtllZlhxDWemjRn2LHNpu+C/HbSy 5cYNNPol0WiX1gJWnJg3xOkCsBrVeaXEUZisLxXI6DfaJLP9/qQvcB7GMQe8zwPx Wl2N/MQM4TboUYMsYslP5eeqUiNJHctDnHP/Fxpi4bkzeTtfqMaWkrUV6LIXXKtQ dw7Bp71/+N26dQvLvdKArCjpO+MO2ATP4jfJjUYjfdFtKuWMZOl7DQE83QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdNate25itcSywRupr/iUEhlK0oMB8GA1UdIwQY MBaAFIVZ/qfoPmTl2CViMTw6PxkPSfAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDct ODcwZTY0ZDQ2NGQ1LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDctODcwZTY0ZDQ2NGQ1 LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSjVBkwo X6G82I3Qmafd7yhuYyjoB2hYEzWnWQBt3vMCYefbt2hYftNwPn+T/y6gHrLHGt8m S5bGAfXfyssStUIUG+xrTC2cP1DUBCnbwQNyJOaKEUTSrAXJwQwgd5f4DKqbiGvt g3LdPVwDZfj7J91rwzUjKn8ByVBgcFVJafeI+CkdQEdEfEw+Ggb9OCA3T9r4jfOz rjNow6bHWZurHmOn7KoDBGPrRtvslgrURJLCOFe4WMXCd7492SNbFuLIjPr7PzJd +tNSSotDkUwqAuFbcuxrnVhQxAKb7OOD1YD+okXDnLkFz+EzFlgTjZMywmMJSAdw wVx5Y76bb8ny4w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:58 2025 by rpki-client