This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft File: hWlFRtV2UOyEZtOS0X-jQylgFUA.mft (raw, json) Hash identifier: Wll9gobNBAEa+TYv5N/u5excQ4dqmjGq4iht5TqBBUc= Subject key identifier: FA:54:39:6A:6A:D8:BC:6B:F9:00:E9:01:95:7D:95:31:53:C5:66:24 Authority key identifier: 85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40 Certificate issuer: /CN=85694546d57650ec8466d392d17fa34329601540 Certificate serial: 019AF0F5DD89473A288F223D737D7FE24E58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft Manifest number: 0142 Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Sun 07 Dec 2025 00:00:36 +0000 Files and hashes: 1: hWlFRtV2UOyEZtOS0X-jQylgFUA.crl (hash: YK/SbAzuGziFrGUai96bluDquN+9Pu6LyyqIgXFqQMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dd:89:47:3a:28:8f:22:3d:73:7d:7f:e2:4e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85694546d57650ec8466d392d17fa34329601540 Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 7 00:00:36 2025 GMT Subject: CN=fa54396a6ad8bc6bf900e901957d953153c56624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:af:a7:39:2c:c9:51:fb:80:b0:d1:df:f0:c5: dc:53:2d:1f:01:2f:0e:d6:5a:93:5e:8e:62:c5:97: 61:0e:56:25:7e:27:1d:5a:c1:57:70:02:72:21:7e: 55:6b:da:cb:a2:00:b9:09:f0:02:f4:5f:fa:99:cb: a0:da:26:fa:66:e3:03:1a:75:f2:f5:72:52:9f:d4: f8:ba:83:9b:f3:5d:1a:d9:c0:a9:3a:d3:ca:61:8e: 8f:d9:d0:90:ea:7c:a7:37:e1:05:75:4c:59:b0:44: d3:cf:84:f0:a2:83:b7:26:4e:7a:93:53:88:49:b5: 86:c3:14:cf:03:59:07:f1:6e:d8:48:0f:c9:6b:c8: 17:49:61:d7:97:37:f4:61:bf:63:6f:c9:41:71:9e: b5:83:e1:81:32:de:a4:76:7b:51:96:ad:d2:89:d1: 62:5a:05:e2:93:27:77:5f:9d:3d:5b:28:df:53:9c: 2f:5c:cc:d0:41:73:d3:26:e9:80:31:64:2a:ab:43: 3a:11:48:f3:a8:c0:13:e1:cc:a5:76:35:54:83:70: 05:bf:0e:ee:e0:b0:71:b1:39:0a:f9:28:4a:ce:2c: 41:7d:d8:1f:e5:2c:dc:65:8e:49:76:39:12:c5:a8: 76:63:fd:8d:2d:37:97:ee:ae:fd:c3:48:26:84:ec: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:39:6A:6A:D8:BC:6B:F9:00:E9:01:95:7D:95:31:53:C5:66:24 X509v3 Authority Key Identifier: keyid:85:69:45:46:D5:76:50:EC:84:66:D3:92:D1:7F:A3:43:29:60:15:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWlFRtV2UOyEZtOS0X-jQylgFUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/354a55-e6a9-4d17-b313-3f0841ae6bc1/1/hWlFRtV2UOyEZtOS0X-jQylgFUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:15:5a:b6:bd:e6:dd:79:3e:4c:d1:e8:dc:74:e0:22:7e: 14:da:47:76:1b:ad:50:d8:ac:d6:8e:f9:16:69:30:17:a7:5a: 29:b7:c6:a3:06:cc:00:78:cc:c0:5d:b6:2c:cb:9c:4b:88:1a: 25:94:83:4f:58:24:9c:0d:72:e1:44:4d:08:94:1b:a5:1f:84: 66:2a:b5:2c:2e:18:76:7d:93:6b:bb:bf:ff:a3:85:a3:b8:0f: c8:0d:bf:c3:60:48:6d:14:b8:a9:c4:df:26:5b:d8:47:66:56: eb:f1:34:46:00:24:36:0e:a3:d6:9c:2d:f9:ab:12:da:a9:13: 6f:de:d4:31:83:21:8e:fa:29:e5:38:bb:7b:6f:de:fe:a3:1b: 42:72:13:d5:27:eb:72:50:6b:20:11:59:b0:5a:08:83:83:55: 4d:57:a8:df:d7:d8:96:e2:5f:3f:54:35:e1:ad:cc:7d:8f:12: 85:ae:8f:6d:89:6b:89:5f:5e:15:66:1f:36:a4:a8:b4:86:e9: c0:a3:3d:5b:6f:07:d1:64:ee:fe:1c:7d:24:76:4b:44:47:1f: 83:c5:a8:a1:3c:cf:c7:23:61:f3:cd:de:c9:d4:c8:f6:99:b2: c1:89:11:85:1b:7d:40:50:ae:a8:c2:b1:0d:e9:ab:97:6c:dc: 77:01:aa:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9d2JRzoojyI9c31/4k5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Njk0NTQ2ZDU3NjUwZWM4NDY2ZDM5MmQxN2ZhMzQzMjk2 MDE1NDAwHhcNMjUxMjA2MDAwMDM2WhcNMjUxMjA3MDAwMDM2WjAzMTEwLwYDVQQD EyhmYTU0Mzk2YTZhZDhiYzZiZjkwMGU5MDE5NTdkOTUzMTUzYzU2NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q+nOSzJUfuAsNHf8MXcUy0fAS8O 1lqTXo5ixZdhDlYlficdWsFXcAJyIX5Va9rLogC5CfAC9F/6mcug2ib6ZuMDGnXy 9XJSn9T4uoOb810a2cCpOtPKYY6P2dCQ6nynN+EFdUxZsETTz4TwooO3Jk56k1OI SbWGwxTPA1kH8W7YSA/Ja8gXSWHXlzf0Yb9jb8lBcZ61g+GBMt6kdntRlq3SidFi WgXikyd3X509WyjfU5wvXMzQQXPTJumAMWQqq0M6EUjzqMAT4cyldjVUg3AFvw7u 4LBxsTkK+ShKzixBfdgf5SzcZY5JdjkSxah2Y/2NLTeX7q79w0gmhOyK4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpUOWpq2Lxr+QDpAZV9lTFTxWYkMB8GA1UdIwQY MBaAFIVpRUbVdlDshGbTktF/o0MpYBVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdsRlJ0VjJVT3lFWnRPUzBYLWpReWxnRlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zNTRhNTUtZTZhOS00ZDE3LWIzMTMt M2YwODQxYWU2YmMxLzEvaFdsRlJ0VjJVT3lFWnRPUzBYLWpReWxnRlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zNTRhNTUtZTZhOS00ZDE3LWIzMTMtM2YwODQxYWU2YmMx LzEvaFdsRlJ0VjJVT3lFWnRPUzBYLWpReWxnRlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYUVWra9 5t15PkzR6Nx04CJ+FNpHdhutUNis1o75FmkwF6daKbfGowbMAHjMwF22LMucS4ga JZSDT1gknA1y4URNCJQbpR+EZiq1LC4Ydn2Ta7u//6OFo7gPyA2/w2BIbRS4qcTf JlvYR2ZW6/E0RgAkNg6j1pwt+asS2qkTb97UMYMhjvop5Ti7e2/e/qMbQnIT1Sfr clBrIBFZsFoIg4NVTVeo39fYluJfP1Q14a3MfY8Sha6PbYlriV9eFWYfNqSotIbp wKM9W28H0WTu/hx9JHZLREcfg8WooTzPxyNh883eydTI9pmywYkRhRt9QFCuqMKx Demrl2zcdwGqZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:40 2025 by rpki-client