This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json) Hash identifier: HKDWUQBiSvfB3zmkAlyjetvPhdYHW4QAX2ADiJX7CJU= Subject key identifier: BE:C4:85:AD:53:CE:97:3C:95:F4:B6:B4:29:6E:80:9E:2D:CE:42:C6 Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a Certificate serial: 019AF389718E9DAECC85DE88CADE2BAE1871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:02 +0000 Manifest this update: Sat 06 Dec 2025 12:01:02 +0000 Manifest next update: Sun 07 Dec 2025 12:01:02 +0000 Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=) 2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: mrHZSPVERfFQbG+DRf7fz780CMRuyLwwIAy5Pq4SHPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:71:8e:9d:ae:cc:85:de:88:ca:de:2b:ae:18:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a Validity Not Before: Dec 6 12:01:02 2025 GMT Not After : Dec 7 12:01:02 2025 GMT Subject: CN=bec485ad53ce973c95f4b6b4296e809e2dce42c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:e2:9f:41:f8:91:03:93:df:40:d4:4f:d1: e0:a9:ca:52:fc:a5:9b:54:6f:a7:a7:fe:90:86:d3: a5:f9:14:e2:fb:8c:27:32:81:af:68:d7:d7:dc:b9: b3:e7:f8:c9:c3:92:50:1d:32:82:05:27:3a:ff:49: 94:89:69:95:03:44:bb:dd:af:8e:6f:d5:a8:ee:7b: 78:c0:6f:ac:ee:43:45:00:53:08:91:3d:58:7a:6c: 66:37:8d:7a:bc:f9:fb:f9:cc:62:24:19:67:94:f4: ff:da:34:c6:36:cb:59:b7:88:3e:8b:ed:5c:dc:db: 7d:f5:72:f7:8a:44:99:a7:ea:1a:9e:34:c1:e4:0a: 83:f9:a6:c1:fa:44:d3:17:98:9f:49:b0:22:4f:5b: 4a:72:d2:14:61:2d:db:ca:22:98:b9:6e:d8:ce:a2: 15:57:93:32:45:34:54:34:32:2e:57:16:25:f3:58: fb:33:01:df:4e:db:ac:c3:89:65:1d:59:9b:58:34: ce:6f:e0:c5:df:12:8b:e3:0f:26:8b:b2:3b:f0:df: 05:4d:a8:45:2c:d7:f7:60:03:e2:1f:21:b9:5a:18: d8:12:fb:dd:07:17:e7:d6:5f:b0:76:ae:0d:c9:04: a3:45:d5:10:a6:e3:09:ea:d3:a1:99:c8:3a:6b:a6: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C4:85:AD:53:CE:97:3C:95:F4:B6:B4:29:6E:80:9E:2D:CE:42:C6 X509v3 Authority Key Identifier: keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:53:19:48:bd:ce:63:4d:1f:a8:00:a0:ae:63:96:94:37:a2: 0d:9b:b9:b8:e0:46:a6:86:4e:f3:93:fd:09:16:40:a6:aa:ff: 39:f6:d3:a5:7e:6b:32:05:f2:ec:85:5e:e4:ae:bf:b5:b2:de: 81:c7:d6:c6:de:b2:42:1b:6c:f3:49:03:22:92:da:89:ea:29: 9a:15:60:03:c8:c8:c6:ec:d3:aa:ba:b2:6e:f8:5e:bc:16:6e: 61:af:71:df:80:f1:83:d9:1f:99:6d:c2:b1:06:5e:8f:70:60: c7:b5:16:cd:bd:6a:a2:69:f7:43:f4:ca:2d:28:13:e4:e0:99: e9:9b:8e:32:48:d0:82:5e:08:80:a0:f9:b4:a5:e1:03:03:f3: fe:56:f6:30:c4:21:44:23:76:33:d3:09:d4:4e:a6:6b:c5:63: e3:6b:1d:73:62:bd:01:f5:47:f3:95:be:6b:3f:5c:2e:30:e1: 1b:0b:d5:a7:f6:e9:ae:08:78:34:9b:ed:ed:59:ff:f0:ad:c8: bd:43:a9:b8:ce:60:bc:5d:78:59:70:9f:20:77:96:6a:a6:22: 6f:91:15:b9:66:8a:ba:b9:8b:34:38:4b:0a:ca:6a:52:38:cd: 3f:03:19:15:9a:b7:9e:4f:5e:2d:b0:25:1f:1b:7f:95:08:97: 79:45:5c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXGOna7Mhd6Iyt4rrhhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YjdkNWNjZGFmMDMzMDk3NDk3NDU3NjQyMDBhNzI3Mjc2 NDczMGEwHhcNMjUxMjA2MTIwMTAyWhcNMjUxMjA3MTIwMTAyWjAzMTEwLwYDVQQD EyhiZWM0ODVhZDUzY2U5NzNjOTVmNGI2YjQyOTZlODA5ZTJkY2U0MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Lin0H4kQOT30DUT9HgqcpS/KWb VG+np/6QhtOl+RTi+4wnMoGvaNfX3Lmz5/jJw5JQHTKCBSc6/0mUiWmVA0S73a+O b9Wo7nt4wG+s7kNFAFMIkT1YemxmN416vPn7+cxiJBlnlPT/2jTGNstZt4g+i+1c 3Nt99XL3ikSZp+oanjTB5AqD+abB+kTTF5ifSbAiT1tKctIUYS3byiKYuW7YzqIV V5MyRTRUNDIuVxYl81j7MwHfTtusw4llHVmbWDTOb+DF3xKL4w8mi7I78N8FTahF LNf3YAPiHyG5WhjYEvvdBxfn1l+wdq4NyQSjRdUQpuMJ6tOhmcg6a6bMnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Eha1Tzpc8lfS2tClugJ4tzkLGMB8GA1UdIwQY MBaAFIW31cza8DMJdJdFdkIApycnZHMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGJmVnpOcndNd2wwbDBWMlFnQ25KeWRrY3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTM3ZDgtMWQzNi00MWJiLWI3ZmEt NDA5NDkzNjk0YTUyLzEvaGJmVnpOcndNd2wwbDBWMlFnQ25KeWRrY3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMTM3ZDgtMWQzNi00MWJiLWI3ZmEtNDA5NDkzNjk0YTUy LzEvaGJmVnpOcndNd2wwbDBWMlFnQ25KeWRrY3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1MZSL3O Y00fqACgrmOWlDeiDZu5uOBGpoZO85P9CRZApqr/OfbTpX5rMgXy7IVe5K6/tbLe gcfWxt6yQhts80kDIpLaieopmhVgA8jIxuzTqrqybvhevBZuYa9x34Dxg9kfmW3C sQZej3Bgx7UWzb1qomn3Q/TKLSgT5OCZ6ZuOMkjQgl4IgKD5tKXhAwPz/lb2MMQh RCN2M9MJ1E6ma8Vj42sdc2K9AfVH85W+az9cLjDhGwvVp/bprgh4NJvt7Vn/8K3I vUOpuM5gvF14WXCfIHeWaqYib5EVuWaKurmLNDhLCspqUjjNPwMZFZq3nk9eLbAl Hxt/lQiXeUVcBA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:28 2025 by rpki-client