This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft File: hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft (raw, json) Hash identifier: aUcFRAGj0mPt5IxhHSV+DWLDpC7OEo4Gyw8X5UsxbGA= Subject key identifier: 16:7D:6F:55:A4:B2:A9:C2:E1:0A:9E:7C:29:1A:86:7D:AC:46:A2:1A Authority key identifier: 84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C Certificate issuer: /CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c Certificate serial: 019AF12E56FB0AC7BF13068924AFF2722E8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft Manifest number: 0A46 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl (hash: tOWKI2Z5WdXJmGliQ8a6UuOcNqgAldJaKA4u+kYhbpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:56:fb:0a:c7:bf:13:06:89:24:af:f2:72:2e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=167d6f55a4b2a9c2e10a9e7c291a867dac46a21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:84:71:00:3c:3f:3a:3d:20:46:cf:cb:be: dd:e7:a4:25:bf:ba:6a:b8:55:f5:d6:28:68:9a:75: f8:1f:82:5f:0f:14:b1:4d:28:bb:29:09:d3:a2:20: c0:8d:2a:14:49:5a:6e:28:c5:a2:66:12:d5:97:93: 55:71:37:d1:17:8a:d6:50:83:3d:9b:b5:25:fb:49: 75:f2:c2:b8:59:03:db:17:4e:3b:0b:7c:ab:8e:f7: 32:ce:7b:11:af:9c:d8:f7:55:9a:c9:9d:18:ee:a2: a4:e0:8a:d7:a2:97:6b:6e:73:b0:17:fd:42:3e:34: c2:99:cd:91:a8:f1:dd:b4:cf:cd:63:92:2d:9f:98: 17:da:12:d5:f5:6f:d3:e4:7d:0e:8c:c9:26:77:0a: dd:f0:77:fb:e7:75:72:10:3e:23:0c:b4:a9:46:a7: b4:37:a6:f8:c6:e2:b0:6e:39:f6:fa:b7:91:70:42: 93:98:72:c6:ff:fb:8d:21:a5:e7:37:62:5a:ef:14: 46:52:75:5d:4d:07:2a:5c:d5:9c:d1:8d:93:56:81: 44:e6:c7:34:ed:36:0c:a3:3b:d4:c2:af:81:32:53: a5:fc:4a:a3:81:14:ac:8b:e6:f7:80:3f:61:79:2a: 4d:9a:c9:b2:8d:3b:77:1f:b5:b0:e5:83:03:74:72: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7D:6F:55:A4:B2:A9:C2:E1:0A:9E:7C:29:1A:86:7D:AC:46:A2:1A X509v3 Authority Key Identifier: keyid:84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e1:86:b0:da:34:6d:c8:ba:be:8c:6f:b7:5c:e1:6e:23:c4: cc:7c:b4:58:27:fb:dd:71:40:c0:77:6f:74:1b:29:23:64:64: 72:7c:d1:79:2e:1a:38:03:67:04:af:28:9b:95:f0:6a:79:af: e1:6b:64:16:b7:04:36:0a:4b:0a:7e:f7:c1:9c:2c:45:76:0c: 51:0e:fd:e6:7e:85:11:cc:13:3f:41:e0:9e:17:4e:df:e0:62: a5:54:fd:61:f8:e6:63:bf:05:eb:71:ee:d9:63:be:f0:60:85: ed:68:61:3f:f3:b0:ce:2f:5f:4b:6e:f0:bb:9a:4a:05:53:79: eb:d6:0b:2b:e7:7d:1f:f3:e7:5b:0b:6c:12:98:33:bd:a4:78: 11:0f:44:ab:a3:90:b9:31:16:c4:70:c8:ad:21:ba:41:c4:cb: b8:03:55:49:f7:75:ec:ac:27:29:31:0d:87:07:d1:02:ae:a9: bc:a9:6c:8e:70:38:5f:b1:78:b1:20:43:14:62:a6:c9:10:41: f2:76:0f:4d:d1:11:0b:2f:0f:54:09:81:40:17:1a:e9:fd:ff: c2:60:de:dc:c3:34:e6:7c:92:80:bb:b0:38:62:77:af:d5:b0: 75:5f:52:7e:16:aa:70:80:53:eb:81:8b:41:2d:f7:84:a9:aa: d0:e5:6c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlb7Cse/EwaJJK/yci6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MmIxOGY4ZDFkYjFmOTQ3NjIxYjJkOGY3ODY2MDNlMmIx YmQ1MGMwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD EygxNjdkNmY1NWE0YjJhOWMyZTEwYTllN2MyOTFhODY3ZGFjNDZhMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk2EcQA8Pzo9IEbPy77d56Qlv7pq uFX11ihomnX4H4JfDxSxTSi7KQnToiDAjSoUSVpuKMWiZhLVl5NVcTfRF4rWUIM9 m7Ul+0l18sK4WQPbF047C3yrjvcyznsRr5zY91WayZ0Y7qKk4IrXopdrbnOwF/1C PjTCmc2RqPHdtM/NY5Itn5gX2hLV9W/T5H0OjMkmdwrd8Hf753VyED4jDLSpRqe0 N6b4xuKwbjn2+reRcEKTmHLG//uNIaXnN2Ja7xRGUnVdTQcqXNWc0Y2TVoFE5sc0 7TYMozvUwq+BMlOl/EqjgRSsi+b3gD9heSpNmsmyjTt3H7Ww5YMDdHLakwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZ9b1WksqnC4QqefCkahn2sRqIaMB8GA1UdIwQY MBaAFIQrGPjR2x+UdiGy2PeGYD4rG9UMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaENzWS1OSGJINVIySWJMWTk0WmdQaXNiMVF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zYzhlNzgtZGZhMC00NjE2LWIyMjgt MGI5NzBiOTZjOTBiLzEvaENzWS1OSGJINVIySWJMWTk0WmdQaXNiMVF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zYzhlNzgtZGZhMC00NjE2LWIyMjgtMGI5NzBiOTZjOTBi LzEvaENzWS1OSGJINVIySWJMWTk0WmdQaXNiMVF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOGGsNo0 bci6voxvt1zhbiPEzHy0WCf73XFAwHdvdBspI2RkcnzReS4aOANnBK8om5Xwanmv 4WtkFrcENgpLCn73wZwsRXYMUQ795n6FEcwTP0HgnhdO3+BipVT9YfjmY78F63Hu 2WO+8GCF7WhhP/Owzi9fS27wu5pKBVN569YLK+d9H/PnWwtsEpgzvaR4EQ9Eq6OQ uTEWxHDIrSG6QcTLuANVSfd17KwnKTENhwfRAq6pvKlsjnA4X7F4sSBDFGKmyRBB 8nYPTdERCy8PVAmBQBca6f3/wmDe3MM05nySgLuwOGJ3r9WwdV9SfhaqcIBT64GL QS33hKmq0OVskw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:01 2025 by rpki-client