This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json) Hash identifier: dEUlgM77fvoFjl3vPfgQRU917a7qTcb9DfmCxJ663gw= Subject key identifier: 93:CD:FA:1D:8B:24:AE:02:62:56:0F:51:A2:90:3D:75:80:72:DA:A5 Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Certificate serial: 019AF1D2614D854BF393122433EAE9288764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft Manifest number: 0889 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=) 2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=) 3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: kT/dZNqbWB0PoRWLFSjkeK9ANY9u1jlzuePQpBTKwA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:61:4d:85:4b:f3:93:12:24:33:ea:e9:28:87:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=93cdfa1d8b24ae0262560f51a2903d758072daa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:d8:3d:af:6e:42:b4:c7:27:a2:65:66:44: 56:7d:23:a3:e7:1b:55:f2:e8:2f:41:a8:fc:b2:a8: 21:ce:3f:c1:5c:d6:40:5d:1a:78:51:4d:92:d7:3a: 14:aa:b4:2c:45:51:04:34:2c:a0:9f:3e:1a:40:95: 6a:b2:47:2d:b5:ae:f9:7f:3d:d3:20:81:02:84:3c: 40:3b:78:6a:f3:38:a9:a2:ce:fa:2e:7b:86:69:c8: 0d:d5:63:7e:d9:3a:b3:13:d8:2b:91:21:55:5c:5c: 72:29:fd:cb:d0:c7:6e:e1:b7:6f:92:22:62:6d:11: ea:d1:11:67:f5:62:07:1f:8a:49:7a:46:a2:c8:f7: 1e:df:f6:06:92:26:1b:a7:9a:97:25:66:95:b5:2f: 3d:1d:78:ac:38:99:69:ba:cf:09:0e:6c:96:77:1f: 6c:3f:58:49:f4:db:01:59:5d:45:df:bc:82:30:aa: 5f:0d:9c:9a:61:78:f0:a3:44:0a:8f:8c:d2:68:b1: cd:1f:1c:57:7e:66:d7:5a:a8:eb:8c:46:8a:8a:3d: de:15:0f:ee:d1:03:30:37:30:e2:0c:a4:da:45:93: 55:3d:00:4a:7a:f4:fb:a6:08:1d:a1:07:38:a6:9a: fb:fb:d7:7b:db:8e:1c:3c:08:60:2a:73:d5:20:30: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CD:FA:1D:8B:24:AE:02:62:56:0F:51:A2:90:3D:75:80:72:DA:A5 X509v3 Authority Key Identifier: keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3d:ce:df:af:26:e0:9b:ee:cb:1e:6f:22:0a:fb:d0:42:a8: 30:49:6a:ca:59:ce:c7:2b:1d:ba:87:0f:15:f7:8e:e6:8e:02: d2:6f:db:a6:9e:cb:95:53:8c:9b:5c:ba:bc:6a:41:ae:b1:05: d0:d7:93:cf:5c:71:db:ee:05:ca:16:59:36:b7:9d:cf:05:5b: 0d:1a:d4:30:e2:92:78:75:5e:40:5f:11:cc:7f:30:08:f0:41: 60:77:58:95:65:20:67:e5:07:90:dd:90:73:84:d4:2b:69:b5: 53:b6:71:5c:73:97:59:11:7e:e7:ef:86:b0:87:09:c7:71:50: 7d:60:d3:75:87:fc:6b:2f:3f:d3:cf:4a:5b:eb:63:a1:36:39: 0c:7d:b3:e8:7b:2e:d7:1e:b0:33:d7:22:ec:9d:a4:d5:36:57: 17:a6:8a:60:72:ea:3e:38:29:55:1c:41:b2:43:12:3d:1f:77: 1f:8b:22:3a:39:f2:2f:73:f5:93:3e:da:ea:04:aa:91:5a:10: df:94:4b:3e:52:70:e5:13:f7:90:e1:bc:25:52:4b:b0:77:9d: 5d:3f:cc:44:d5:63:fa:7c:1e:7e:e6:57:ba:d6:43:74:55:88: ef:d7:ac:11:49:5e:83:6b:13:0c:1f:de:64:db:b2:fa:c0:78: 58:6f:19:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0mFNhUvzkxIkM+rpKIdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2 Mzc4YTgwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD Eyg5M2NkZmExZDhiMjRhZTAyNjI1NjBmNTFhMjkwM2Q3NTgwNzJkYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCrYPa9uQrTHJ6JlZkRWfSOj5xtV 8ugvQaj8sqghzj/BXNZAXRp4UU2S1zoUqrQsRVEENCygnz4aQJVqskctta75fz3T IIEChDxAO3hq8zipos76LnuGacgN1WN+2TqzE9grkSFVXFxyKf3L0Mdu4bdvkiJi bRHq0RFn9WIHH4pJekaiyPce3/YGkiYbp5qXJWaVtS89HXisOJlpus8JDmyWdx9s P1hJ9NsBWV1F37yCMKpfDZyaYXjwo0QKj4zSaLHNHxxXfmbXWqjrjEaKij3eFQ/u 0QMwNzDiDKTaRZNVPQBKevT7pggdoQc4ppr7+9d7244cPAhgKnPVIDA0zQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJPN+h2LJK4CYlYPUaKQPXWActqlMB8GA1UdIwQY MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjD3O 368m4Jvuyx5vIgr70EKoMElqylnOxysduocPFfeO5o4C0m/bpp7LlVOMm1y6vGpB rrEF0NeTz1xx2+4FyhZZNredzwVbDRrUMOKSeHVeQF8RzH8wCPBBYHdYlWUgZ+UH kN2Qc4TUK2m1U7ZxXHOXWRF+5++GsIcJx3FQfWDTdYf8ay8/089KW+tjoTY5DH2z 6Hsu1x6wM9ci7J2k1TZXF6aKYHLqPjgpVRxBskMSPR93H4siOjnyL3P1kz7a6gSq kVoQ35RLPlJw5RP3kOG8JVJLsHedXT/MRNVj+nwefuZXutZDdFWI79esEUleg2sT DB/eZNuy+sB4WG8ZcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:52 2025 by rpki-client