This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json) Hash identifier: M3hdaF9U9+qW55WAWUbLVfF2ZGsGrZzxfqW98MjWZ+o= Subject key identifier: 31:AA:2A:55:02:30:8E:30:CB:9C:E8:E2:CB:FE:AB:01:8A:D8:63:2B Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Certificate serial: 019AF1D1A1937350840330C778DC607D6631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft Manifest number: 0265 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: jKXJx4Vwfe3D9SFAAFNjxGcjmkGnRRm6SzOmXuTlHzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a1:93:73:50:84:03:30:c7:78:dc:60:7d:66:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=31aa2a5502308e30cb9ce8e2cbfeab018ad8632b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:a0:6e:c0:05:04:87:2a:d6:e8:03:a3:76: fc:81:e5:7d:36:64:d6:d9:6e:24:8f:e1:a8:a7:04: a1:e3:d9:c9:57:a0:54:6c:56:b2:ea:26:2c:ad:02: 04:c7:4b:77:c1:33:50:e0:f9:44:d3:6f:fa:98:26: 13:5c:12:2d:86:6a:3c:e4:64:6b:38:e0:f9:0f:10: f9:69:5b:ba:10:5e:e7:08:36:fa:ad:52:76:f8:99: 22:1e:e2:24:62:77:08:76:55:30:e2:29:ba:21:02: 3d:8c:25:21:0e:61:d0:97:7d:82:67:ad:10:24:bd: fc:02:26:c9:87:df:7b:83:99:06:c7:02:58:f8:ce: 75:36:42:15:5e:64:4f:17:64:7d:fa:28:e6:0c:9d: 34:f9:9a:9d:30:a4:a2:04:d2:0a:3a:17:fe:e0:c5: 1b:31:30:5b:a7:60:f4:ae:3e:2c:65:37:2b:5f:65: 4e:b9:4b:1b:13:79:67:b1:45:da:b2:43:6d:53:36: d1:3a:ec:04:4b:a5:66:0b:ca:a1:27:d4:13:45:ba: eb:82:06:fe:91:4b:f1:d2:7d:83:34:b6:13:f6:98: e9:df:e2:d4:67:96:99:f6:90:0e:f3:34:76:0a:9c: 34:be:c5:0c:56:c2:c5:7a:36:6e:7f:9d:8f:ee:0f: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AA:2A:55:02:30:8E:30:CB:9C:E8:E2:CB:FE:AB:01:8A:D8:63:2B X509v3 Authority Key Identifier: keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c0:62:c7:87:5a:e2:75:4e:b8:89:85:4a:60:ea:34:68:e7: 5e:62:aa:d4:46:6e:5c:81:03:7b:a0:2a:78:f8:f8:77:ba:b3: 1b:63:14:65:85:26:2a:06:75:c8:5b:da:cd:6a:20:77:a3:1a: 82:0e:ab:9c:4a:69:e9:be:7f:98:50:9f:e2:fb:11:cd:58:8a: 04:f0:54:2e:9a:e5:bf:90:06:9c:4b:5d:d2:4b:f8:5b:11:d9: 24:9a:c6:16:21:9c:31:e2:53:61:4e:83:08:2f:a1:39:e7:51: ab:2e:d3:8c:dd:50:a4:b3:89:a2:32:f2:1a:26:1d:07:00:a6: 62:06:11:7e:93:a2:7d:ac:49:14:64:15:ea:4f:2e:2e:f5:4a: 19:00:ff:e4:60:1f:a1:d4:6b:21:58:aa:51:6e:68:a8:c7:c2: cf:05:d6:ab:8d:5f:84:6f:37:01:9b:cb:65:72:36:e5:d8:4e: b9:d1:9e:a0:38:3c:70:65:f3:46:a3:d1:38:6c:e2:90:ac:ec: 0e:47:0a:e8:9f:ae:ba:4d:9b:d3:7a:e5:fd:e8:b9:5e:c1:d0: 58:0e:58:95:6f:f1:8f:7d:d4:7a:9d:37:3a:2b:79:f0:b9:d8: 1e:f8:f3:6c:58:f5:59:c9:17:3e:c2:53:8a:2d:b6:fc:a9:2a: 9c:ed:27:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aGTc1CEAzDHeNxgfWYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy ZWQzM2UwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EygzMWFhMmE1NTAyMzA4ZTMwY2I5Y2U4ZTJjYmZlYWIwMThhZDg2MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXygbsAFBIcq1ugDo3b8geV9NmTW 2W4kj+GopwSh49nJV6BUbFay6iYsrQIEx0t3wTNQ4PlE02/6mCYTXBIthmo85GRr OOD5DxD5aVu6EF7nCDb6rVJ2+JkiHuIkYncIdlUw4im6IQI9jCUhDmHQl32CZ60Q JL38AibJh997g5kGxwJY+M51NkIVXmRPF2R9+ijmDJ00+ZqdMKSiBNIKOhf+4MUb MTBbp2D0rj4sZTcrX2VOuUsbE3lnsUXaskNtUzbROuwES6VmC8qhJ9QTRbrrggb+ kUvx0n2DNLYT9pjp3+LUZ5aZ9pAO8zR2Cpw0vsUMVsLFejZuf52P7g9XFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGqKlUCMI4wy5zo4sv+qwGK2GMrMB8GA1UdIwQY MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0 LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksBix4da 4nVOuImFSmDqNGjnXmKq1EZuXIEDe6AqePj4d7qzG2MUZYUmKgZ1yFvazWogd6Ma gg6rnEpp6b5/mFCf4vsRzViKBPBULprlv5AGnEtd0kv4WxHZJJrGFiGcMeJTYU6D CC+hOedRqy7TjN1QpLOJojLyGiYdBwCmYgYRfpOifaxJFGQV6k8uLvVKGQD/5GAf odRrIViqUW5oqMfCzwXWq41fhG83AZvLZXI25dhOudGeoDg8cGXzRqPROGzikKzs DkcK6J+uuk2b03rl/ei5XsHQWA5YlW/xj33Uep03Oit58LnYHvjzbFj1WckXPsJT ii22/KkqnO0n8g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:36 2025 by rpki-client