This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json) Hash identifier: 7hbAo2m7wqGuTh8okQe3/WeqKEBU+6zyCZRKyHAkfhQ= Subject key identifier: F4:02:B6:4B:58:D8:02:46:EF:52:77:99:9B:68:FA:A5:E1:02:81:9F Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Certificate serial: 019AF0BF382CC96BFE69549B3222C679E539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft Manifest number: 1766 Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=) 2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: 6x89PQxRr4YWFp2RCilMkVFHqi1DflurQ1z+9VnjUfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:38:2c:c9:6b:fe:69:54:9b:32:22:c6:79:e5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=f402b64b58d80246ef5277999b68faa5e102819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:a0:58:03:4c:da:e1:7f:35:d5:b5:d8:80: 46:37:65:85:9f:b3:37:18:a8:17:5c:cc:6c:e2:9b: 10:7c:9c:67:73:fd:48:44:76:af:50:ff:03:ff:0c: 8d:33:4b:06:f2:a6:79:13:6c:12:13:d6:80:25:41: a5:7e:16:ce:c5:aa:5d:6f:9d:2c:74:cc:9a:03:e1: 23:ba:54:0f:02:70:1d:14:5d:14:f7:ac:11:e5:68: f1:dd:9f:4b:01:f9:d8:ca:8b:4e:ab:66:c4:ef:25: 53:9b:60:d9:41:e7:d8:c7:18:16:4c:d3:b9:56:9a: ff:3c:03:84:27:8a:90:44:7c:03:61:1b:63:63:46: fc:89:b6:06:aa:04:4f:e2:54:92:10:53:6a:4d:03: f0:72:96:43:0f:e7:db:d1:58:ae:04:c6:e1:d9:5e: 31:c0:4c:db:5f:e4:92:4d:a6:72:39:fd:ca:b4:bb: e8:31:ed:3b:36:f9:24:f5:2a:f0:f1:48:20:e4:98: aa:cc:72:81:56:d2:0d:7c:fc:fb:dc:25:6c:71:6b: b7:f1:41:7a:5f:6b:4d:9e:07:2c:2a:8b:21:64:d9: 8d:b0:5f:ba:87:2e:84:b6:cf:97:3c:83:2c:6f:6a: b6:ed:b8:28:13:5d:eb:e1:5f:0f:84:84:44:03:85: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:02:B6:4B:58:D8:02:46:EF:52:77:99:9B:68:FA:A5:E1:02:81:9F X509v3 Authority Key Identifier: keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c2:41:20:29:2a:ad:95:e1:b6:67:1f:3f:af:9a:ce:f4:a3: 98:28:85:75:b8:b7:bc:3a:c8:e0:9f:3f:cc:cd:05:c7:15:0a: 99:86:1b:fc:2f:72:07:ed:2e:ce:46:3a:ed:4a:60:e5:63:fa: 6c:6b:5b:66:87:de:af:07:79:4b:e5:bb:65:5c:f0:b8:db:08: a9:ab:8a:6f:bd:62:08:d2:14:76:18:5b:04:b5:9c:5d:0d:78: 51:7c:fe:66:83:37:47:5e:b4:dd:a1:1a:86:79:ba:e2:a0:be: 58:57:b9:96:81:77:49:98:cc:d4:7b:e8:ef:56:e4:7d:c4:34: 46:c8:0b:0f:43:b5:66:5e:06:81:57:1e:6a:d9:e3:b6:50:2e: 4d:88:f8:5b:44:5a:e7:9b:15:cf:64:f3:59:d6:b5:5e:43:cd: 3c:f1:8e:7c:54:d1:5b:db:c3:4f:09:79:86:d4:db:e7:6c:c1: c4:9f:4c:ee:fd:bf:41:ef:24:72:83:1d:4d:a9:58:cf:37:11: f0:c9:5d:ed:25:21:8d:c5:ed:95:1f:42:f0:fb:e2:3f:d8:0e: 68:58:53:8e:e2:64:b0:32:e5:eb:53:64:1c:55:11:00:18:70: 6b:65:33:c9:82:f2:39:e1:c0:d0:c9:cf:21:dc:c1:3c:18:3f: 8d:2c:3a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzgsyWv+aVSbMiLGeeU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi MTRjZGEwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD EyhmNDAyYjY0YjU4ZDgwMjQ2ZWY1Mjc3OTk5YjY4ZmFhNWUxMDI4MTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfGgWANM2uF/NdW12IBGN2WFn7M3 GKgXXMxs4psQfJxnc/1IRHavUP8D/wyNM0sG8qZ5E2wSE9aAJUGlfhbOxapdb50s dMyaA+EjulQPAnAdFF0U96wR5Wjx3Z9LAfnYyotOq2bE7yVTm2DZQefYxxgWTNO5 Vpr/PAOEJ4qQRHwDYRtjY0b8ibYGqgRP4lSSEFNqTQPwcpZDD+fb0ViuBMbh2V4x wEzbX+SSTaZyOf3KtLvoMe07Nvkk9Srw8Ugg5JiqzHKBVtINfPz73CVscWu38UF6 X2tNngcsKoshZNmNsF+6hy6Ets+XPIMsb2q27bgoE13r4V8PhIREA4Uj8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQCtktY2AJG71J3mZto+qXhAoGfMB8GA1UdIwQY MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4 LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsJBICkq rZXhtmcfP6+azvSjmCiFdbi3vDrI4J8/zM0FxxUKmYYb/C9yB+0uzkY67Upg5WP6 bGtbZoferwd5S+W7ZVzwuNsIqauKb71iCNIUdhhbBLWcXQ14UXz+ZoM3R1603aEa hnm64qC+WFe5loF3SZjM1Hvo71bkfcQ0RsgLD0O1Zl4GgVceatnjtlAuTYj4W0Ra 55sVz2TzWda1XkPNPPGOfFTRW9vDTwl5htTb52zBxJ9M7v2/Qe8kcoMdTalYzzcR 8Mld7SUhjcXtlR9C8PviP9gOaFhTjuJksDLl61NkHFURABhwa2UzyYLyOeHA0MnP IdzBPBg/jSw6Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:37 2025 by rpki-client