This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json) Hash identifier: eBbOlduey+FkGhGO6NymI3GthmIpRtrfNz1HJIZhcvA= Subject key identifier: EA:14:AD:83:FF:31:A9:81:47:2E:6C:BB:3B:FB:94:3F:5D:2B:F3:B4 Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85 Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85 Certificate serial: 019AF0BF876355AEAE034AAA305A830B5140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft Manifest number: 1767 Signing time: Fri 05 Dec 2025 23:01:14 +0000 Manifest this update: Fri 05 Dec 2025 23:01:14 +0000 Manifest next update: Sat 06 Dec 2025 23:01:14 +0000 Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=) 2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: I4VyDSgOYy/zcm98RPBadQqR/9lwmdX2DmG2xwBiekE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:87:63:55:ae:ae:03:4a:aa:30:5a:83:0b:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85 Validity Not Before: Dec 5 23:01:14 2025 GMT Not After : Dec 6 23:01:14 2025 GMT Subject: CN=ea14ad83ff31a981472e6cbb3bfb943f5d2bf3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:eb:d2:1e:30:f4:f7:5d:24:da:da:0a:69:1a: 67:43:50:4b:90:ac:2c:d4:f8:e8:63:bc:2e:97:e1: 5a:84:32:42:fc:18:af:ac:3d:df:4e:53:0a:46:a7: 59:c7:0b:84:af:2a:2c:f4:f4:23:a0:fc:aa:55:c1: a6:4c:cd:2c:53:56:7d:d9:ef:fe:7b:ef:3c:31:c8: 17:54:6b:11:97:59:20:1f:d6:c6:1c:0a:89:df:16: a7:3b:60:e7:24:74:36:a1:b6:29:6d:5e:3b:58:08: 1e:21:1a:0e:b5:9f:ff:ed:31:f3:a1:93:f4:96:cc: 95:ad:03:f3:e9:f9:aa:84:e0:bb:60:8f:76:d7:e6: 35:1a:0d:aa:c9:1e:f8:b9:a1:d7:13:d8:78:01:f8: 59:87:e6:b2:07:bf:05:b5:b9:2a:c8:0b:1a:13:26: 0e:2d:d1:1c:3f:2b:6d:cd:c4:7a:a5:6d:23:ab:3a: 20:27:e1:87:cd:48:d5:bd:44:5f:7d:59:60:ca:4e: f0:eb:23:ba:9b:c4:50:10:46:64:63:ad:5d:0b:8c: 91:48:94:30:c7:06:3b:b2:43:34:11:72:d2:78:8d: 4e:dd:1f:58:7d:c2:b3:7d:08:47:8c:ab:ed:e7:2b: c8:bf:2f:25:c1:5e:bb:5d:29:11:a7:b3:81:54:0e: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:14:AD:83:FF:31:A9:81:47:2E:6C:BB:3B:FB:94:3F:5D:2B:F3:B4 X509v3 Authority Key Identifier: keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:be:5e:51:2a:5f:39:5a:a3:6b:ad:94:ac:d8:7b:18:68:95: 3e:90:43:2d:c9:6d:22:3f:e6:e9:56:6b:d2:3b:28:8c:1a:c8: be:a7:ba:24:4c:2a:0a:9a:f0:02:14:4b:ed:4c:e1:84:e5:d9: 0c:f3:7a:17:7d:47:1e:09:5c:e2:94:da:f3:7e:72:27:de:45: 9a:4f:28:cf:40:1b:96:28:51:56:4c:d5:5d:05:4a:3d:48:eb: 9d:fc:83:7c:09:af:c2:f1:3b:75:38:98:84:fc:f0:16:1c:8d: 04:8f:06:0e:e4:0f:0b:e1:ac:8f:14:5f:2f:14:ca:d7:a6:f1: 87:26:ed:f6:9c:32:73:c4:31:e8:09:31:61:13:78:b3:bc:30: 10:4a:f8:6f:b9:22:e2:28:45:e4:a6:8f:12:cb:b1:75:53:e8: 28:56:19:70:a9:1d:ad:62:cd:9e:0e:87:7f:d2:ab:28:d7:f2: ad:a3:1d:5b:e4:ff:d3:de:e3:82:7c:c5:8e:67:ef:90:19:18: 30:4c:34:9e:ed:af:11:ec:c9:4a:b7:16:96:e7:c4:46:fc:60: a0:84:11:de:83:4f:51:8f:2f:7a:f8:32:3b:24:58:ac:bd:29: db:ef:0d:87:be:0a:b0:13:ea:0e:5c:1f:86:78:4a:5b:c5:e8: 79:61:ff:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4djVa6uA0qqMFqDC1FAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YzM1MjVkNjhiNjExMTY1NjRlMTZlMWRkNGU1NmNiMDM1 YzljODUwHhcNMjUxMjA1MjMwMTE0WhcNMjUxMjA2MjMwMTE0WjAzMTEwLwYDVQQD EyhlYTE0YWQ4M2ZmMzFhOTgxNDcyZTZjYmIzYmZiOTQzZjVkMmJmM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6evSHjD0910k2toKaRpnQ1BLkKws 1PjoY7wul+FahDJC/BivrD3fTlMKRqdZxwuEryos9PQjoPyqVcGmTM0sU1Z92e/+ e+88McgXVGsRl1kgH9bGHAqJ3xanO2DnJHQ2obYpbV47WAgeIRoOtZ//7THzoZP0 lsyVrQPz6fmqhOC7YI921+Y1Gg2qyR74uaHXE9h4AfhZh+ayB78FtbkqyAsaEyYO LdEcPyttzcR6pW0jqzogJ+GHzUjVvURffVlgyk7w6yO6m8RQEEZkY61dC4yRSJQw xwY7skM0EXLSeI1O3R9YfcKzfQhHjKvt5yvIvy8lwV67XSkRp7OBVA40/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoUrYP/MamBRy5suzv7lD9dK/O0MB8GA1UdIwQY MBaAFIXDUl1othEWVk4W4d1OVssDXJyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDkt Njk0ZGJmYWRkYjhmLzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85ZmJlYzEtZWJkMi00MWJhLTgzZDktNjk0ZGJmYWRkYjhm LzEvaGNOU1hXaTJFUlpXVGhiaDNVNVd5d05jbklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyr5eUSpf OVqja62UrNh7GGiVPpBDLcltIj/m6VZr0jsojBrIvqe6JEwqCprwAhRL7UzhhOXZ DPN6F31HHglc4pTa835yJ95Fmk8oz0AblihRVkzVXQVKPUjrnfyDfAmvwvE7dTiY hPzwFhyNBI8GDuQPC+GsjxRfLxTK16bxhybt9pwyc8Qx6AkxYRN4s7wwEEr4b7ki 4ihF5KaPEsuxdVPoKFYZcKkdrWLNng6Hf9KrKNfyraMdW+T/097jgnzFjmfvkBkY MEw0nu2vEezJSrcWlufERvxgoIQR3oNPUY8vevgyOyRYrL0p2+8Nh74KsBPqDlwf hnhKW8XoeWH/eg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:08 2025 by rpki-client