This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json) Hash identifier: 3dF7AAZSxmwD9YL6Oi8VHqdST9LlnM3vkZI1oF17Lh4= Subject key identifier: 07:CA:42:00:AB:24:78:3A:D8:A2:03:78:AF:AD:2C:75:EC:06:B5:92 Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Certificate serial: 019B39EB74BBB666EEE7F6507AF3DB285EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft Manifest number: 028B Signing time: Sat 20 Dec 2025 04:01:30 +0000 Manifest this update: Sat 20 Dec 2025 04:01:30 +0000 Manifest next update: Sun 21 Dec 2025 04:01:30 +0000 Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: s1djNe3ITS6zB5E4RzN+tjniPAprH5lvIcOzV3bcuGw=) 2: ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa (hash: v7QZ8HhFIWG34nVuRTJxlOgKji8pCozgn4SVeyKdDG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:74:bb:b6:66:ee:e7:f6:50:7a:f3:db:28:5e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Validity Not Before: Dec 20 04:01:30 2025 GMT Not After : Dec 21 04:01:30 2025 GMT Subject: CN=07ca4200ab24783ad8a20378afad2c75ec06b592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:8f:09:45:5c:b1:e9:fa:d7:98:d6:f7:7d: 2f:20:8a:d6:7c:d8:95:d9:a2:6f:a8:c6:bd:c1:1d: 3b:7a:09:93:1b:04:1d:7c:52:01:97:dc:63:6a:5f: 2b:ab:50:3c:0e:c9:ac:ed:51:20:04:3d:ad:19:1c: 1d:91:62:fe:18:f1:fb:c3:c4:0c:6d:72:2c:fc:2b: 58:b8:59:e6:62:ae:87:6f:f6:7a:61:52:6f:d6:59: e0:ca:42:aa:a2:b9:65:66:70:cc:88:4c:b5:45:a9: 8b:c8:9b:fb:b7:bc:e0:15:6f:b2:0d:bb:11:f1:06: 3f:88:b1:94:e2:c3:45:8f:34:89:b5:7f:a0:8e:18: c6:20:e1:bc:f7:4d:89:a4:cf:93:6c:18:7f:c9:4a: 52:e2:d8:ba:40:7c:41:09:5a:af:5f:0d:ac:b6:c7: 44:b1:7d:51:78:70:55:90:b4:fd:07:61:8b:aa:c4: 06:07:1c:22:05:4b:1e:fc:2d:44:c7:95:b2:e6:32: 7f:be:21:a3:df:35:76:49:2f:65:9d:9a:50:46:cd: 67:f0:8e:a9:a9:8f:3a:fe:19:9e:85:19:c8:73:5d: b8:d2:03:c6:36:5a:6c:6c:57:36:6b:d6:c7:13:e6: 09:cb:25:5e:7a:2a:7c:73:a3:09:6e:17:38:dc:25: 67:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CA:42:00:AB:24:78:3A:D8:A2:03:78:AF:AD:2C:75:EC:06:B5:92 X509v3 Authority Key Identifier: keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e1:cb:41:9f:c1:fd:ef:03:fd:42:d0:ba:cf:5b:cd:ea:ef: dd:ee:9d:5d:82:27:04:cc:4f:81:33:cc:ab:35:b2:35:fc:d8: 7d:50:90:b6:d4:f1:72:e1:64:e5:fa:7a:28:ab:62:f1:f4:ec: ac:2d:38:55:7c:e3:17:6b:9b:bf:8d:0a:be:69:73:97:15:13: 05:33:1c:2e:bc:a2:b1:43:69:ed:78:8f:1b:16:59:5c:28:7f: a7:30:9f:f6:1f:9f:64:3e:b2:31:97:7b:39:e6:dc:5f:dd:00: 5f:9c:8c:6b:26:94:38:35:03:b4:96:92:a0:63:53:38:2c:e1: 73:c7:db:96:30:86:17:df:51:03:c3:d8:db:e9:5a:4e:a6:df: 71:e3:e2:e9:c6:fe:18:6f:9b:10:b5:d2:fc:c1:90:9f:2c:12: ed:77:c3:2c:40:87:1a:da:48:28:34:82:9f:87:a3:9c:5b:45: 54:85:79:35:cd:28:bc:89:7c:9e:dd:9b:b2:31:a3:38:c7:41: 13:9a:1c:49:30:99:94:3e:46:c9:dc:c3:d7:f4:9c:e8:36:5f: 89:ea:aa:50:dc:70:7e:6c:44:ef:bb:83:25:61:31:9c:e5:57: 0d:33:f2:ed:4c:ba:2f:17:88:00:63:26:41:6f:b0:75:a9:d4: f3:60:9e:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs563S7tmbu5/ZQevPbKF6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy ZWQzM2UwHhcNMjUxMjIwMDQwMTMwWhcNMjUxMjIxMDQwMTMwWjAzMTEwLwYDVQQD EygwN2NhNDIwMGFiMjQ3ODNhZDhhMjAzNzhhZmFkMmM3NWVjMDZiNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJaPCUVcsen615jW930vIIrWfNiV 2aJvqMa9wR07egmTGwQdfFIBl9xjal8rq1A8Dsms7VEgBD2tGRwdkWL+GPH7w8QM bXIs/CtYuFnmYq6Hb/Z6YVJv1lngykKqorllZnDMiEy1RamLyJv7t7zgFW+yDbsR 8QY/iLGU4sNFjzSJtX+gjhjGIOG8902JpM+TbBh/yUpS4ti6QHxBCVqvXw2stsdE sX1ReHBVkLT9B2GLqsQGBxwiBUse/C1Ex5Wy5jJ/viGj3zV2SS9lnZpQRs1n8I6p qY86/hmehRnIc1240gPGNlpsbFc2a9bHE+YJyyVeeip8c6MJbhc43CVn6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfKQgCrJHg62KIDeK+tLHXsBrWSMB8GA1UdIwQY MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0 LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOHLQZ/B /e8D/ULQus9bzerv3e6dXYInBMxPgTPMqzWyNfzYfVCQttTxcuFk5fp6KKti8fTs rC04VXzjF2ubv40KvmlzlxUTBTMcLryisUNp7XiPGxZZXCh/pzCf9h+fZD6yMZd7 OebcX90AX5yMayaUODUDtJaSoGNTOCzhc8fbljCGF99RA8PY2+laTqbfcePi6cb+ GG+bELXS/MGQnywS7XfDLECHGtpIKDSCn4ejnFtFVIV5Nc0ovIl8nt2bsjGjOMdB E5ocSTCZlD5GydzD1/Sc6DZfieqqUNxwfmxE77uDJWExnOVXDTPy7Uy6LxeIAGMm QW+wdanU82Ce7g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:06:07 2025 by rpki-client