This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json) Hash identifier: jVwVC3QRxrtUW7EeHz07FJOqNzyFle2IdjGDaw1RYUY= Subject key identifier: 30:0F:38:AF:8C:55:6B:1D:D4:6F:2B:6D:0B:D4:ED:CE:3E:F0:2D:42 Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71 Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171 Certificate serial: 019AF35268ACC9C847D25A152DE0EAAF1908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft Manifest number: 02F2 Signing time: Sat 06 Dec 2025 11:00:55 +0000 Manifest this update: Sat 06 Dec 2025 11:00:55 +0000 Manifest next update: Sun 07 Dec 2025 11:00:55 +0000 Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: atxdxvt8saiaf1HD/IZAg1qXIPAPxg3saA3sJg6xLF4=) 2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:68:ac:c9:c8:47:d2:5a:15:2d:e0:ea:af:19:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86c62c6962ea33029b480260989e1851c3252171 Validity Not Before: Dec 6 11:00:55 2025 GMT Not After : Dec 7 11:00:55 2025 GMT Subject: CN=300f38af8c556b1dd46f2b6d0bd4edce3ef02d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:03:d6:cd:f7:62:e5:5f:58:2b:5a:ec:e7: 4e:65:0f:3e:7a:fa:c7:50:64:2f:99:cb:b4:39:96: ba:32:8b:61:c1:69:37:68:bd:e1:b7:4b:77:22:43: 5c:0e:c0:a8:38:ec:57:b6:af:99:3c:6d:b8:c5:a8: ab:4e:69:b4:d1:fd:1b:6c:5a:d8:85:83:59:72:7d: 4d:f1:b7:b7:7b:bd:93:40:19:1b:8b:cc:48:7c:47: 92:9c:59:c4:46:63:ea:02:ed:e7:da:eb:38:fe:a5: 92:9d:65:1e:46:4e:65:92:4e:25:e0:a4:8e:b1:49: 35:85:af:a3:cc:08:b7:ca:51:7c:08:ef:55:aa:84: 7b:db:ca:bc:e3:48:75:01:c0:b7:19:d3:d8:b9:67: f0:18:1e:cc:4a:09:c5:14:8e:08:c9:b7:70:9f:6f: c2:57:55:44:0c:11:b3:f5:fc:bb:45:76:2e:99:37: fa:ce:07:a1:f1:73:12:ab:73:0f:2a:42:74:93:a7: 21:7e:66:bb:12:2d:dc:73:3e:1f:6d:ce:2a:dc:58: 12:bb:b3:80:4e:56:5b:e2:f2:90:99:19:60:42:e9: 80:57:38:4a:dd:b9:51:d8:69:71:94:29:53:66:c5: a5:23:81:fc:95:59:6f:d4:24:a6:d3:9e:2a:98:29: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0F:38:AF:8C:55:6B:1D:D4:6F:2B:6D:0B:D4:ED:CE:3E:F0:2D:42 X509v3 Authority Key Identifier: keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3c:d0:76:59:79:fa:7e:b1:7a:8f:0e:30:7e:c2:81:0d:3c: 5a:06:69:c0:fc:b0:ed:30:ff:b6:cc:c1:bc:78:af:b1:db:5a: 48:17:5f:58:0d:b6:26:95:12:9c:21:7e:14:cf:85:33:80:96: b2:ac:00:1c:cd:2a:0f:5a:eb:98:c9:07:6f:d8:7a:5f:5e:3e: 0f:76:ba:bc:06:25:27:16:02:51:74:08:85:39:87:7c:5c:38: 2c:85:fe:4d:c2:4c:c1:70:e9:02:3c:d1:d7:52:11:74:03:aa: fa:f9:3e:e7:28:63:15:74:88:fd:68:f8:af:b9:4e:1e:a7:01: 56:7d:f3:f2:6f:97:7c:2e:17:19:38:3b:c6:d4:99:e5:30:e1: a6:c9:4b:05:0c:c8:57:25:d6:68:8c:5d:cc:2b:b6:94:d8:20: 1a:c0:f6:86:60:1d:48:3a:ac:1c:5f:86:f3:d4:b5:8b:e5:cb: f1:71:af:b6:5c:f9:73:45:bd:2e:43:12:f6:30:2d:41:0b:ce: 58:29:5c:da:c0:ea:76:53:ec:6b:f1:13:1a:dc:b5:45:77:d2: 5d:0b:9f:a2:f0:f7:4e:19:03:28:8c:b9:9b:09:c4:2e:3d:ee: e5:2d:79:dc:55:69:31:e4:09:0b:6d:b3:17:5e:fe:54:25:6e: b7:e0:b1:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmisychH0loVLeDqrxkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YzYyYzY5NjJlYTMzMDI5YjQ4MDI2MDk4OWUxODUxYzMy NTIxNzEwHhcNMjUxMjA2MTEwMDU1WhcNMjUxMjA3MTEwMDU1WjAzMTEwLwYDVQQD EygzMDBmMzhhZjhjNTU2YjFkZDQ2ZjJiNmQwYmQ0ZWRjZTNlZjAyZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfED1s33YuVfWCta7OdOZQ8+evrH UGQvmcu0OZa6MothwWk3aL3ht0t3IkNcDsCoOOxXtq+ZPG24xairTmm00f0bbFrY hYNZcn1N8be3e72TQBkbi8xIfEeSnFnERmPqAu3n2us4/qWSnWUeRk5lkk4l4KSO sUk1ha+jzAi3ylF8CO9VqoR728q840h1AcC3GdPYuWfwGB7MSgnFFI4Iybdwn2/C V1VEDBGz9fy7RXYumTf6zgeh8XMSq3MPKkJ0k6chfma7Ei3ccz4fbc4q3FgSu7OA TlZb4vKQmRlgQumAVzhK3blR2GlxlClTZsWlI4H8lVlv1CSm054qmCnN3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAPOK+MVWsd1G8rbQvU7c4+8C1CMB8GA1UdIwQY MBaAFIbGLGli6jMCm0gCYJieGFHDJSFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHNZc2FXTHFNd0tiU0FKZ21KNFlVY01sSVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zNzVmMDQtM2ViMi00ZDliLTkwZmQt MjQ5YmI0NjFiYTViLzEvaHNZc2FXTHFNd0tiU0FKZ21KNFlVY01sSVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zNzVmMDQtM2ViMi00ZDliLTkwZmQtMjQ5YmI0NjFiYTVi LzEvaHNZc2FXTHFNd0tiU0FKZ21KNFlVY01sSVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDzQdll5 +n6xeo8OMH7CgQ08WgZpwPyw7TD/tszBvHivsdtaSBdfWA22JpUSnCF+FM+FM4CW sqwAHM0qD1rrmMkHb9h6X14+D3a6vAYlJxYCUXQIhTmHfFw4LIX+TcJMwXDpAjzR 11IRdAOq+vk+5yhjFXSI/Wj4r7lOHqcBVn3z8m+XfC4XGTg7xtSZ5TDhpslLBQzI VyXWaIxdzCu2lNggGsD2hmAdSDqsHF+G89S1i+XL8XGvtlz5c0W9LkMS9jAtQQvO WClc2sDqdlPsa/ETGty1RXfSXQufovD3ThkDKIy5mwnELj3u5S153FVpMeQJC22z F17+VCVut+Cx4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:21 2025 by rpki-client