This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2f0b9b-0629-4382-9389-82d6adb6c918/1/HZGUbJzTuATxrX507zS_U7u6gws.mft File: HZGUbJzTuATxrX507zS_U7u6gws.mft (raw, json) Hash identifier: lckddcWls5pBd/VO9oSvHLTC+uEGf+4EsAVVwY401MM= Subject key identifier: 82:B5:6A:4C:83:56:45:1B:BD:C9:1C:41:5E:EA:05:5F:46:BA:0F:6A Authority key identifier: 1D:91:94:6C:9C:D3:B8:04:F1:AD:7E:74:EF:34:BF:53:BB:BA:83:0B Certificate issuer: /CN=1d91946c9cd3b804f1ad7e74ef34bf53bbba830b Certificate serial: 019AF163E191E468259518727779D796E12C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZGUbJzTuATxrX507zS_U7u6gws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2f0b9b-0629-4382-9389-82d6adb6c918/1/HZGUbJzTuATxrX507zS_U7u6gws.mft Manifest number: B9 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: HZGUbJzTuATxrX507zS_U7u6gws.crl (hash: rGCDu2sRkECSAynFh/zqnGcNiIjt7UQ6hmG15Vc5LpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2f0b9b-0629-4382-9389-82d6adb6c918/1/HZGUbJzTuATxrX507zS_U7u6gws.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/2f0b9b-0629-4382-9389-82d6adb6c918/1/HZGUbJzTuATxrX507zS_U7u6gws.mft rsync://rpki.ripe.net/repository/DEFAULT/HZGUbJzTuATxrX507zS_U7u6gws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e1:91:e4:68:25:95:18:72:77:79:d7:96:e1:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d91946c9cd3b804f1ad7e74ef34bf53bbba830b Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=82b56a4c8356451bbdc91c415eea055f46ba0f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:95:13:75:61:70:7c:27:b1:a8:12:43:e9: 2e:d8:4d:f4:92:d7:30:bb:92:c5:19:21:86:b0:f9: ab:b5:df:dc:8b:0c:1e:17:7d:5e:f1:05:f9:47:93: 69:62:99:f6:c8:c8:24:63:b2:60:f4:cb:18:cd:2a: 9b:df:77:a2:e4:b7:2a:38:10:94:db:50:7d:ac:28: 92:de:fb:4c:47:ee:95:1e:55:76:8f:91:7d:65:86: 9a:b3:0c:f7:c2:8b:2c:65:09:f6:ca:8a:ff:61:47: 14:80:2b:42:41:be:f8:2b:8c:a1:7e:0f:3f:ae:f4: 2f:2c:87:6c:a9:9d:67:c2:ae:51:8d:16:8b:c3:00: a0:3d:a8:32:03:6f:77:bf:4d:ff:18:85:b6:36:e6: 10:51:f8:11:b5:ef:d5:c6:e0:14:98:94:45:94:07: f7:89:fc:bd:18:5d:8a:6b:6e:cf:59:8f:ba:d5:ac: b7:21:48:6e:d8:4c:74:93:74:d5:86:57:c9:39:b6: 7e:25:51:f7:8b:7e:25:33:b6:10:a4:00:61:ba:20: 56:17:2f:be:ce:53:68:2f:51:c7:82:a7:a1:74:92: 4b:51:6d:74:a9:7e:bc:da:e1:53:36:69:b8:15:12: 64:f7:00:ad:f5:ed:66:16:26:78:77:61:cd:ee:1a: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B5:6A:4C:83:56:45:1B:BD:C9:1C:41:5E:EA:05:5F:46:BA:0F:6A X509v3 Authority Key Identifier: keyid:1D:91:94:6C:9C:D3:B8:04:F1:AD:7E:74:EF:34:BF:53:BB:BA:83:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZGUbJzTuATxrX507zS_U7u6gws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2f0b9b-0629-4382-9389-82d6adb6c918/1/HZGUbJzTuATxrX507zS_U7u6gws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2f0b9b-0629-4382-9389-82d6adb6c918/1/HZGUbJzTuATxrX507zS_U7u6gws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ef:b3:3f:55:f4:15:75:32:e8:d6:34:72:72:5a:d9:b9:b9: 13:5e:5b:f7:8e:45:48:74:95:50:90:11:4f:86:85:46:cf:f3: 8b:5f:37:a0:99:83:88:ed:9f:c6:c8:2e:59:d5:1c:4a:88:06: 14:63:6a:97:2a:98:41:51:21:e5:61:b9:89:d1:af:ad:3f:70: 93:24:76:1c:b6:c8:bf:d5:bc:3b:a8:57:f2:79:92:fd:ee:5a: dd:52:0a:af:3d:57:44:26:74:8c:38:da:ab:83:1a:97:56:25: 7f:07:2c:dc:19:a9:fa:d0:e2:1b:14:5f:7b:ba:02:5b:77:20: 9e:fd:b6:38:0c:27:b6:be:a4:0c:e1:f2:a2:9d:48:a2:37:fb: b9:fb:11:d4:c6:ac:3c:0f:c7:49:8b:de:ce:19:35:ab:b6:37: da:f2:7b:17:0c:70:42:17:b2:8c:69:a7:a2:8a:9b:73:c9:44: fe:56:21:35:52:88:87:29:a1:aa:84:f1:ad:0e:d7:6b:eb:10: 2d:86:38:fe:01:9a:83:79:5d:a8:4c:c4:db:59:b7:c4:52:8b: ef:78:05:0d:4d:72:ee:e6:12:60:38:ef:ad:2f:08:27:73:b6: a8:96:13:71:aa:55:7a:b4:33:53:9f:dc:de:cf:8a:42:4e:15: 94:98:81:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+GR5GgllRhyd3nXluEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOTE5NDZjOWNkM2I4MDRmMWFkN2U3NGVmMzRiZjUzYmJi YTgzMGIwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD Eyg4MmI1NmE0YzgzNTY0NTFiYmRjOTFjNDE1ZWVhMDU1ZjQ2YmEwZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhyVE3VhcHwnsagSQ+ku2E30ktcw u5LFGSGGsPmrtd/ciwweF31e8QX5R5NpYpn2yMgkY7Jg9MsYzSqb33ei5LcqOBCU 21B9rCiS3vtMR+6VHlV2j5F9ZYaaswz3wossZQn2yor/YUcUgCtCQb74K4yhfg8/ rvQvLIdsqZ1nwq5RjRaLwwCgPagyA293v03/GIW2NuYQUfgRte/VxuAUmJRFlAf3 ify9GF2Ka27PWY+61ay3IUhu2Ex0k3TVhlfJObZ+JVH3i34lM7YQpABhuiBWFy++ zlNoL1HHgqehdJJLUW10qX682uFTNmm4FRJk9wCt9e1mFiZ4d2HN7hryBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK1akyDVkUbvckcQV7qBV9Gug9qMB8GA1UdIwQY MBaAFB2RlGyc07gE8a1+dO80v1O7uoMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFpHVWJKelR1QVR4clg1MDd6U19VN3U2Z3dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZjBiOWItMDYyOS00MzgyLTkzODkt ODJkNmFkYjZjOTE4LzEvSFpHVWJKelR1QVR4clg1MDd6U19VN3U2Z3dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8yZjBiOWItMDYyOS00MzgyLTkzODktODJkNmFkYjZjOTE4 LzEvSFpHVWJKelR1QVR4clg1MDd6U19VN3U2Z3dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju+zP1X0 FXUy6NY0cnJa2bm5E15b945FSHSVUJART4aFRs/zi183oJmDiO2fxsguWdUcSogG FGNqlyqYQVEh5WG5idGvrT9wkyR2HLbIv9W8O6hX8nmS/e5a3VIKrz1XRCZ0jDja q4Mal1Ylfwcs3Bmp+tDiGxRfe7oCW3cgnv22OAwntr6kDOHyop1Iojf7ufsR1Mas PA/HSYvezhk1q7Y32vJ7FwxwQheyjGmnooqbc8lE/lYhNVKIhymhqoTxrQ7Xa+sQ LYY4/gGag3ldqEzE21m3xFKL73gFDU1y7uYSYDjvrS8IJ3O2qJYTcapVerQzU5/c 3s+KQk4VlJiBqg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:25 2025 by rpki-client