This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json) Hash identifier: PfNnoOVzzNEffpIRgPeNaVosUlPWOLFDn4eUFIHzo+U= Subject key identifier: A7:AC:58:81:BA:05:CB:2A:BF:B1:1F:9C:A1:38:EE:1F:55:CF:52:1D Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Certificate serial: 019B2AAE96D2545D51FC95C351CFCFC513A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 05:00:43 +0000 Manifest this update: Wed 17 Dec 2025 05:00:43 +0000 Manifest next update: Thu 18 Dec 2025 05:00:43 +0000 Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=) 2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: mt0O4cO0eWzgUlPMi6tTEVsXZ3OE1y9jZ9F/SDqtqCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:96:d2:54:5d:51:fc:95:c3:51:cf:cf:c5:13:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Validity Not Before: Dec 17 05:00:43 2025 GMT Not After : Dec 18 05:00:43 2025 GMT Subject: CN=a7ac5881ba05cb2abfb11f9ca138ee1f55cf521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:47:4f:ef:df:b1:b8:36:d3:cc:b6:3d:39: d0:e1:7d:9f:6c:37:df:9e:ef:52:63:60:d8:cb:de: 01:7f:56:49:b4:ba:b4:26:39:bf:a4:e3:11:d0:6b: 78:93:4f:53:a8:98:e4:0b:13:99:a7:09:b0:b3:f6: a3:ea:f6:ef:26:13:b3:5e:5b:44:33:e6:0d:cf:de: c6:a9:dc:a3:87:e4:66:bb:bc:05:f7:7b:fe:e3:95: b3:5b:f6:d6:bc:c6:f1:35:0c:a2:3a:a1:64:28:97: ce:85:59:4b:fc:a2:ac:b1:98:8a:e0:e2:63:d1:95: 63:02:cb:bc:2e:b4:55:65:1d:e7:07:78:d6:3c:f0: 05:d0:7f:ab:e8:55:be:59:fd:90:2c:17:b5:28:6d: 03:84:11:1f:d5:b5:67:c9:32:7f:3a:5e:00:48:f2: 8d:54:a1:81:d7:56:df:48:1f:33:ff:e3:3a:5a:31: ff:ed:f9:c9:41:5a:90:e2:01:86:6a:31:4e:a9:58: 77:0c:e7:e6:26:8f:7d:a4:34:09:40:75:10:ce:e1: 51:9c:e4:99:44:d6:70:85:5b:15:a4:15:ea:fc:fc: 27:2f:97:5f:0a:49:1e:f8:b3:0a:75:58:c0:ce:f8: c1:36:51:c8:d0:d3:06:1c:81:6c:f5:e6:37:b9:77: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:58:81:BA:05:CB:2A:BF:B1:1F:9C:A1:38:EE:1F:55:CF:52:1D X509v3 Authority Key Identifier: keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:21:40:17:0e:9a:54:61:14:15:85:75:95:e0:90:6e:9d:d1: d9:b4:29:dc:65:f8:2a:e6:b5:36:84:a5:9d:2f:d1:62:25:88: 52:da:d5:c6:79:3d:31:18:b1:c4:d5:b1:51:e0:43:f9:9c:4d: 01:f7:e8:82:ba:4e:c1:dd:91:e3:e6:89:f3:70:54:ae:77:4c: e9:ff:68:48:5d:32:8f:bd:9e:e1:34:23:47:f6:ee:db:72:1c: 34:26:6e:38:a1:8b:3a:69:f8:23:b2:4b:02:9c:11:f4:e3:c8: bd:0d:86:50:29:99:e0:36:c7:ca:36:52:94:ed:46:cb:70:d2: 07:b5:b4:73:74:3d:ca:6d:36:c0:54:85:8b:fd:da:6d:9e:5b: b7:63:6d:08:45:01:88:20:c7:c0:95:a4:7a:c5:73:d4:33:aa: 1a:5b:25:16:86:1a:4c:5c:1f:f4:8a:eb:c0:1b:fe:8f:23:1c: c7:d1:57:3b:01:bf:cd:3f:db:7e:82:af:ac:92:a9:c5:2b:e3: 44:28:4e:69:77:df:ac:1a:7b:e9:b9:e3:c2:50:c1:5a:d0:0c: 99:22:5b:50:2d:c2:98:67:0c:dc:d9:a5:88:6c:1c:39:4f:0c: 59:cb:06:fd:8a:38:45:89:05:8d:c7:34:9a:26:e3:a0:25:10: 0c:0b:37:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrpbSVF1R/JXDUc/PxROpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi MTRjZGEwHhcNMjUxMjE3MDUwMDQzWhcNMjUxMjE4MDUwMDQzWjAzMTEwLwYDVQQD EyhhN2FjNTg4MWJhMDVjYjJhYmZiMTFmOWNhMTM4ZWUxZjU1Y2Y1MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA499HT+/fsbg208y2PTnQ4X2fbDff nu9SY2DYy94Bf1ZJtLq0Jjm/pOMR0Gt4k09TqJjkCxOZpwmws/aj6vbvJhOzXltE M+YNz97Gqdyjh+Rmu7wF93v+45WzW/bWvMbxNQyiOqFkKJfOhVlL/KKssZiK4OJj 0ZVjAsu8LrRVZR3nB3jWPPAF0H+r6FW+Wf2QLBe1KG0DhBEf1bVnyTJ/Ol4ASPKN VKGB11bfSB8z/+M6WjH/7fnJQVqQ4gGGajFOqVh3DOfmJo99pDQJQHUQzuFRnOSZ RNZwhVsVpBXq/PwnL5dfCkke+LMKdVjAzvjBNlHI0NMGHIFs9eY3uXeIXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKesWIG6Bcsqv7EfnKE47h9Vz1IdMB8GA1UdIwQY MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4 LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSFAFw6a VGEUFYV1leCQbp3R2bQp3GX4Kua1NoSlnS/RYiWIUtrVxnk9MRixxNWxUeBD+ZxN AffogrpOwd2R4+aJ83BUrndM6f9oSF0yj72e4TQjR/bu23IcNCZuOKGLOmn4I7JL ApwR9OPIvQ2GUCmZ4DbHyjZSlO1Gy3DSB7W0c3Q9ym02wFSFi/3abZ5bt2NtCEUB iCDHwJWkesVz1DOqGlslFoYaTFwf9IrrwBv+jyMcx9FXOwG/zT/bfoKvrJKpxSvj RChOaXffrBp76bnjwlDBWtAMmSJbUC3CmGcM3NmliGwcOU8MWcsG/Yo4RYkFjcc0 mibjoCUQDAs3hg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:10 2025 by rpki-client