This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json) Hash identifier: t1f7DYwpWPBObmxO6iVzbeHcimafvhbomruUM85f9wE= Subject key identifier: DB:83:15:4F:17:6B:84:02:C1:14:58:41:FC:66:CA:DF:A5:B3:19:E4 Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Certificate serial: 019AF3F7A7BB98D0859B4DF626D43980E8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft Manifest number: 05DE Signing time: Sat 06 Dec 2025 14:01:25 +0000 Manifest this update: Sat 06 Dec 2025 14:01:25 +0000 Manifest next update: Sun 07 Dec 2025 14:01:25 +0000 Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=) 2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: mF0XiwrnQUvn1Mgr9GId5bywOjqn6r56xrgINgTZXzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:a7:bb:98:d0:85:9b:4d:f6:26:d4:39:80:e8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Validity Not Before: Dec 6 14:01:25 2025 GMT Not After : Dec 7 14:01:25 2025 GMT Subject: CN=db83154f176b8402c1145841fc66cadfa5b319e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1f:b8:8d:cc:4c:5c:cf:46:26:1d:8f:9e:81: 26:72:85:71:7b:f9:4e:1c:9d:a1:90:bf:a8:c1:61: 93:de:7c:7e:50:af:4c:20:ca:dc:be:f7:4e:9d:af: 6d:ff:30:30:c2:b8:71:cd:61:f7:2e:7b:2a:c7:40: 9e:42:55:ec:20:ad:ae:ce:f4:a9:c8:2a:42:3b:cf: d8:2a:bb:9b:28:1d:7e:fc:eb:64:a8:b1:d5:bf:2f: e7:d6:ae:20:ea:18:e2:f7:ef:7a:4a:c7:c6:1f:f0: 69:9d:97:44:4e:fc:35:db:75:e4:16:26:fa:97:3c: 89:c6:a0:90:3d:c3:76:97:f1:86:f8:22:5b:a3:8d: ec:16:19:cd:ea:98:13:ff:7f:8d:50:c4:20:b9:53: 15:09:e7:8a:2e:36:6d:a7:d5:99:5b:1f:15:f6:9e: c1:a0:98:89:e3:75:b6:2c:a5:3b:88:f5:63:ce:fa: 5b:0e:21:68:b7:4c:2e:95:83:cb:9e:23:7d:cd:68: b4:aa:89:ea:39:72:2b:ca:81:7a:03:d3:c5:24:c4: 4d:db:2b:57:95:87:45:f2:11:df:58:8b:2d:b2:e6: af:b8:dd:83:3c:bd:b0:62:e4:ac:90:67:d7:9b:3f: 1d:4d:27:4d:76:0e:c7:7f:2d:ba:30:c9:20:03:fa: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:15:4F:17:6B:84:02:C1:14:58:41:FC:66:CA:DF:A5:B3:19:E4 X509v3 Authority Key Identifier: keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:10:f8:63:67:c9:44:49:de:22:11:89:1c:8e:22:84:ef:11: bf:6c:0f:b5:20:48:24:ff:c3:4d:27:be:67:fc:a0:5f:22:36: 18:27:35:0e:eb:ab:25:a2:59:9f:1c:72:4e:0f:20:c4:b1:a3: 70:ec:af:a6:98:07:c9:ea:fc:0f:ca:ed:b5:60:41:60:7a:fe: a8:67:46:69:9c:df:ef:49:31:e1:73:7d:14:10:39:d6:c4:b8: e2:3b:23:71:7e:ed:32:1b:a6:60:1f:46:9e:43:cf:08:97:d1: 6e:be:c5:25:3f:a8:2c:39:6d:9d:40:c0:cd:0f:4b:1b:af:fc: d9:58:20:79:5f:31:c8:59:b7:a7:0e:d0:53:44:bc:db:c9:db: 68:f4:d8:be:11:07:e1:0d:4b:65:6d:c3:2a:94:b9:ed:9d:99: f0:45:54:58:f2:29:6a:7b:a6:ce:3e:1a:9e:c3:08:b7:79:6f: c8:bb:40:aa:8f:8c:4a:a2:fd:3e:e5:cc:69:e0:8c:c7:80:fc: 54:b7:19:af:51:ba:27:22:55:41:ed:ac:e5:2a:d4:1c:9f:53: e0:b5:8d:c9:09:35:0c:41:cd:a4:f7:3e:20:47:e1:fb:30:38: 47:8c:66:da:e4:9f:09:06:6c:30:c4:ff:38:06:46:86:e1:ab: 23:0c:ee:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96e7mNCFm032JtQ5gOipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDU2ZTIyZGQxMjNjODM0YzBhNGFhNzQ1MTZkNWZiM2Nj NzdkZDEwHhcNMjUxMjA2MTQwMTI1WhcNMjUxMjA3MTQwMTI1WjAzMTEwLwYDVQQD EyhkYjgzMTU0ZjE3NmI4NDAyYzExNDU4NDFmYzY2Y2FkZmE1YjMxOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h+4jcxMXM9GJh2PnoEmcoVxe/lO HJ2hkL+owWGT3nx+UK9MIMrcvvdOna9t/zAwwrhxzWH3Lnsqx0CeQlXsIK2uzvSp yCpCO8/YKrubKB1+/OtkqLHVvy/n1q4g6hji9+96SsfGH/BpnZdETvw123XkFib6 lzyJxqCQPcN2l/GG+CJbo43sFhnN6pgT/3+NUMQguVMVCeeKLjZtp9WZWx8V9p7B oJiJ43W2LKU7iPVjzvpbDiFot0wulYPLniN9zWi0qonqOXIryoF6A9PFJMRN2ytX lYdF8hHfWIstsuavuN2DPL2wYuSskGfXmz8dTSdNdg7Hfy26MMkgA/rUMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuDFU8Xa4QCwRRYQfxmyt+lsxnkMB8GA1UdIwQY MBaAFIQFbiLdEjyDTApKp0UW1fs8x33RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMt NTljOWMzZmI5OTQ3LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMtNTljOWMzZmI5OTQ3 LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhD4Y2fJ REneIhGJHI4ihO8Rv2wPtSBIJP/DTSe+Z/ygXyI2GCc1DuurJaJZnxxyTg8gxLGj cOyvppgHyer8D8rttWBBYHr+qGdGaZzf70kx4XN9FBA51sS44jsjcX7tMhumYB9G nkPPCJfRbr7FJT+oLDltnUDAzQ9LG6/82VggeV8xyFm3pw7QU0S828nbaPTYvhEH 4Q1LZW3DKpS57Z2Z8EVUWPIpanumzj4ansMIt3lvyLtAqo+MSqL9PuXMaeCMx4D8 VLcZr1G6JyJVQe2s5SrUHJ9T4LWNyQk1DEHNpPc+IEfh+zA4R4xm2uSfCQZsMMT/ OAZGhuGrIwzuZg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:56 2025 by rpki-client