This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft File: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json) Hash identifier: SaykQ58vRfLUDJBd8FVK5S1JURpZDk0FyiIMHimm+JE= Subject key identifier: 2D:42:F5:A0:1A:07:9B:26:A4:5A:5F:7B:27:40:06:28:C4:67:77:66 Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb Certificate serial: 019AF5AEA63736EDF992DE6A3CA1D8F86867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft Manifest number: 07CA Signing time: Sat 06 Dec 2025 22:00:54 +0000 Manifest this update: Sat 06 Dec 2025 22:00:54 +0000 Manifest next update: Sun 07 Dec 2025 22:00:54 +0000 Files and hashes: 1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=) 2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: 0RprihN5/mk7cKycyJgh8F5CijD8q7JNwX0ZxIW8UD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:a6:37:36:ed:f9:92:de:6a:3c:a1:d8:f8:68:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb Validity Not Before: Dec 6 22:00:54 2025 GMT Not After : Dec 7 22:00:54 2025 GMT Subject: CN=2d42f5a01a079b26a45a5f7b27400628c4677766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:02:cd:33:a4:8b:a9:2b:51:f8:a6:f1:b9:65: b4:05:30:38:86:c2:7e:21:28:b1:0c:f0:ee:e0:16: 9d:ea:5c:41:58:e7:92:b6:20:ad:d3:58:2f:60:89: 97:40:99:ae:7e:8f:9b:e9:ab:b2:45:49:83:6a:1d: 26:35:31:8b:e0:72:31:a6:f1:34:a1:96:ea:96:33: 6c:d3:12:e0:6f:2d:62:f4:c6:e0:d7:fe:ec:b4:81: c9:f6:ab:57:9e:ea:9e:06:b4:2f:5a:1d:3f:70:77: 30:c3:af:83:88:23:67:5a:89:88:b2:c7:09:0f:82: 3d:7a:32:fc:ee:3a:24:ec:41:85:30:28:40:d1:d8: ed:da:da:2a:e8:ec:ee:66:ce:dd:82:2f:4a:d4:62: 34:fd:b0:ee:09:fd:38:3b:d0:15:3e:c0:fd:13:6a: 5b:49:e4:cd:38:97:6e:16:77:d9:c7:f6:23:b1:e0: 5e:3d:e1:f4:e3:dd:4f:74:ce:18:24:56:75:74:ab: 89:15:7e:0a:ca:85:19:67:02:dd:dd:19:2f:78:7f: 11:d7:40:fd:94:a2:3c:f0:a3:5a:a7:6b:fa:be:5a: 4b:31:d8:99:df:10:bb:15:32:8e:3f:2a:10:5f:e7: 75:72:8a:67:b5:97:b7:87:d1:84:60:b1:77:ec:c1: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:F5:A0:1A:07:9B:26:A4:5A:5F:7B:27:40:06:28:C4:67:77:66 X509v3 Authority Key Identifier: keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:90:0b:ce:63:d8:c6:71:89:65:66:22:84:2d:0f:16:4f:7b: 72:3b:82:f0:d9:31:ef:91:18:79:6f:d8:a6:6d:3e:da:60:42: b5:ab:ae:a8:85:dc:12:62:8b:99:39:fa:96:fa:43:f9:85:ca: 5b:47:9a:fa:36:f7:5a:70:e5:63:78:98:88:1a:79:a3:0f:a3: d6:85:4c:70:5d:0a:5d:13:cd:37:a1:e9:5a:50:12:b0:2f:2b: a6:9b:aa:a8:37:d9:b6:e1:00:d0:83:c2:24:8b:b4:8f:3f:fc: 51:16:21:33:bb:b5:a4:f4:73:94:69:d0:06:3a:7b:de:97:67: 23:fe:26:be:f5:b3:59:03:36:2b:c6:6e:70:f5:3c:88:d8:fc: 08:04:2f:96:d3:ff:e6:ca:ec:43:18:e3:5f:1b:f4:19:dc:a3: d4:9a:ad:97:0d:e0:e2:da:2a:f7:5e:c2:d3:83:80:27:e5:c1: f1:6a:e6:f7:31:d1:e9:1e:93:7c:7d:fc:4a:da:6b:29:c2:44: c9:53:ff:15:ce:0f:a6:07:f0:67:ff:c0:fd:d9:0d:ef:f7:2b: 66:af:00:11:e7:a3:18:54:ab:e3:ef:f9:14:a8:c1:79:d4:47: 22:4d:49:7f:18:2d:0c:83:c1:9a:6e:30:8a:e9:a2:bf:3b:12: b2:55:55:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqY3Nu35kt5qPKHY+GhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWRkOTNmMmM3ZTZmNTIyZjJiMjg5NGIwMzU5ZjY2Nzli YzhkZmIwHhcNMjUxMjA2MjIwMDU0WhcNMjUxMjA3MjIwMDU0WjAzMTEwLwYDVQQD EygyZDQyZjVhMDFhMDc5YjI2YTQ1YTVmN2IyNzQwMDYyOGM0Njc3NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/gLNM6SLqStR+KbxuWW0BTA4hsJ+ ISixDPDu4Bad6lxBWOeStiCt01gvYImXQJmufo+b6auyRUmDah0mNTGL4HIxpvE0 oZbqljNs0xLgby1i9Mbg1/7stIHJ9qtXnuqeBrQvWh0/cHcww6+DiCNnWomIsscJ D4I9ejL87jok7EGFMChA0djt2toq6OzuZs7dgi9K1GI0/bDuCf04O9AVPsD9E2pb SeTNOJduFnfZx/YjseBePeH0491PdM4YJFZ1dKuJFX4KyoUZZwLd3RkveH8R10D9 lKI88KNap2v6vlpLMdiZ3xC7FTKOPyoQX+d1copntZe3h9GEYLF37MF13wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1C9aAaB5smpFpfeydABijEZ3dmMB8GA1UdIwQY MBaAFIVd2T8sfm9SLysolLA1n2Z5vI37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFYzWlB5eC1iMUl2S3lpVXNEV2Zabm04amZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZWRjYTAtMjcwNi00ZWM3LTk0ZWIt MmIyMDg5NGFkZWMwLzEvaFYzWlB5eC1iMUl2S3lpVXNEV2Zabm04amZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84ZWRjYTAtMjcwNi00ZWM3LTk0ZWItMmIyMDg5NGFkZWMw LzEvaFYzWlB5eC1iMUl2S3lpVXNEV2Zabm04amZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZALzmPY xnGJZWYihC0PFk97cjuC8Nkx75EYeW/Ypm0+2mBCtauuqIXcEmKLmTn6lvpD+YXK W0ea+jb3WnDlY3iYiBp5ow+j1oVMcF0KXRPNN6HpWlASsC8rppuqqDfZtuEA0IPC JIu0jz/8URYhM7u1pPRzlGnQBjp73pdnI/4mvvWzWQM2K8ZucPU8iNj8CAQvltP/ 5srsQxjjXxv0Gdyj1Jqtlw3g4toq917C04OAJ+XB8Wrm9zHR6R6TfH38StprKcJE yVP/Fc4PpgfwZ//A/dkN7/crZq8AEeejGFSr4+/5FKjBedRHIk1JfxgtDIPBmm4w iumivzsSslVVdQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:29 2025 by rpki-client