This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json) Hash identifier: kjVT24U8iEBo7K44na+LrFCmpOjO6xv4RL5gCUnleQA= Subject key identifier: 4A:85:64:7B:98:AE:B8:BC:BF:60:FB:FD:B0:3F:1A:36:C2:38:BF:FA Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Certificate serial: 019AF2400F2330D9803D7F9B7B00904AD6DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft Manifest number: 0510 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: Q3GzNTexryQPHEVyuVI8StgTtV7cy+x2gfcBoQjlbk8=) 2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0f:23:30:d9:80:3d:7f:9b:7b:00:90:4a:d6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=4a85647b98aeb8bcbf60fbfdb03f1a36c238bffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:2b:03:f0:c1:76:2c:c1:90:88:ac:7a:60: ab:25:fd:a0:4e:aa:29:ce:94:15:8f:31:81:c8:96: aa:bb:64:da:e7:34:d7:a8:79:dd:59:72:52:26:ca: 07:28:65:99:16:65:54:ff:c9:98:b7:a4:e2:82:35: bf:b6:b4:7e:9c:b3:69:39:4b:72:f7:7c:7f:2a:41: 93:ae:3f:19:66:49:15:b2:de:9f:a0:2b:a0:e1:a5: 38:93:bb:db:28:8c:e3:9b:0c:e1:be:ae:ae:34:e9: bf:f4:37:87:6e:df:2f:f6:b2:7b:c1:5f:2d:a4:ab: 5b:27:c2:e5:7e:9c:b1:ba:ea:5f:c2:26:16:88:e8: a2:fd:6b:f1:45:d3:ac:37:2e:46:6f:12:53:13:08: 8b:01:f7:61:d4:83:52:3c:1e:47:d2:98:7b:e1:ee: 62:b9:bc:6d:7a:ec:9a:d1:fa:3d:90:00:13:45:ad: c7:76:32:c4:50:84:d3:40:e6:11:a0:84:5a:de:d5: bc:1b:2e:69:99:a6:45:80:be:b9:63:de:a7:0c:50: 38:6e:84:f6:70:68:88:87:2c:74:d2:28:21:c8:1d: 7b:2f:5c:a7:6b:d8:9a:b4:8e:a7:79:1c:90:d2:52: b6:05:43:df:b1:0b:79:1f:52:37:62:56:59:22:60: 82:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:64:7B:98:AE:B8:BC:BF:60:FB:FD:B0:3F:1A:36:C2:38:BF:FA X509v3 Authority Key Identifier: keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:59:8e:9b:43:5c:e7:d0:3c:61:27:02:02:b2:81:56:8c:6b: 17:4a:05:b9:c3:fe:29:0e:37:6e:24:c2:f0:50:1e:3a:7c:a8: 77:8a:75:0f:75:f7:45:32:32:bf:7e:56:9e:ec:55:a5:44:09: 34:3d:16:1b:98:9d:05:57:e2:52:7e:e5:d2:8b:7e:42:99:6e: e0:ea:de:93:78:ea:14:d3:27:01:b0:c3:ad:36:25:aa:ce:d9: c2:64:5a:52:39:40:77:12:7b:84:15:f2:15:77:26:3b:ab:b5: 1f:6d:b0:ab:e9:f6:fb:1d:39:04:4b:5c:24:50:80:f4:e0:5f: 41:d9:92:dc:44:ed:3d:64:bd:15:8c:4d:f5:0b:e9:78:a0:73: bd:69:23:9b:e3:55:4e:97:d8:f3:06:c3:4a:71:f4:a7:4c:36: 7f:4f:3d:41:d3:d4:66:a5:d5:94:35:97:9a:11:a2:e3:f0:6d: 56:d4:7e:82:63:3a:f4:67:13:60:cc:d7:81:09:c2:66:b2:4f: c1:c6:7a:aa:06:be:b0:56:12:15:be:8d:26:67:66:7b:de:fc: 3a:8a:17:05:08:b4:83:20:20:e0:bf:8a:83:70:44:be:2d:93: d5:33:b2:12:a1:05:13:a3:5e:78:41:d8:9a:68:19:8b:24:55: 70:e8:6a:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQA8jMNmAPX+bewCQStbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4 MDE5NDkwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD Eyg0YTg1NjQ3Yjk4YWViOGJjYmY2MGZiZmRiMDNmMWEzNmMyMzhiZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnIrA/DBdizBkIisemCrJf2gTqop zpQVjzGByJaqu2Ta5zTXqHndWXJSJsoHKGWZFmVU/8mYt6TigjW/trR+nLNpOUty 93x/KkGTrj8ZZkkVst6foCug4aU4k7vbKIzjmwzhvq6uNOm/9DeHbt8v9rJ7wV8t pKtbJ8LlfpyxuupfwiYWiOii/WvxRdOsNy5GbxJTEwiLAfdh1INSPB5H0ph74e5i ubxteuya0fo9kAATRa3HdjLEUITTQOYRoIRa3tW8Gy5pmaZFgL65Y96nDFA4boT2 cGiIhyx00ighyB17L1yna9iatI6neRyQ0lK2BUPfsQt5H1I3YlZZImCC0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqFZHuYrri8v2D7/bA/GjbCOL/6MB8GA1UdIwQY MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt M2IwNjhkYjQxMTQwLzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2lmOm0Nc 59A8YScCArKBVoxrF0oFucP+KQ43biTC8FAeOnyod4p1D3X3RTIyv35WnuxVpUQJ ND0WG5idBVfiUn7l0ot+Qplu4Orek3jqFNMnAbDDrTYlqs7ZwmRaUjlAdxJ7hBXy FXcmO6u1H22wq+n2+x05BEtcJFCA9OBfQdmS3ETtPWS9FYxN9QvpeKBzvWkjm+NV TpfY8wbDSnH0p0w2f089QdPUZqXVlDWXmhGi4/BtVtR+gmM69GcTYMzXgQnCZrJP wcZ6qga+sFYSFb6NJmdme978OooXBQi0gyAg4L+Kg3BEvi2T1TOyEqEFE6NeeEHY mmgZiyRVcOhqQw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:46 2025 by rpki-client