This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json) Hash identifier: rR8Wa4CNOfLOMmAl2zO7Ge3KhglQfUcmhCoIH2od/28= Subject key identifier: 76:D9:CA:DA:AE:0C:D0:65:BF:BE:C7:BA:7C:2C:1C:F0:A7:54:A9:A5 Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03 Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603 Certificate serial: 019AF12CC8E9F6DFD1D946C7FCD50183D3C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: 2qlX8lU05Z3TfWX2pzzNcZhRKYO6vXUYSXbxHsqG6h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c8:e9:f6:df:d1:d9:46:c7:fc:d5:01:83:d3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=76d9cadaae0cd065bfbec7ba7c2c1cf0a754a9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:3b:4e:bf:fd:1d:d2:ed:90:37:4d:a1:bc: 46:6d:bc:c8:22:f5:12:95:a1:4f:e8:8f:54:0a:6d: fa:ca:49:85:42:32:6c:cf:54:cf:b4:99:1b:c6:f5: 48:ae:b4:0d:22:56:5b:3f:b6:44:06:3c:29:fc:b2: fa:2b:c2:46:2d:80:f3:34:c2:a6:0c:e6:1b:f3:cc: 4c:ff:b6:bc:5d:e4:90:68:e8:dd:38:3e:d6:a4:c9: ef:dc:f4:df:14:e4:0c:0a:ee:18:3f:6b:f2:12:1d: ba:9f:f6:b6:ff:b9:4f:9f:29:e2:05:96:e0:37:85: fc:3e:83:1d:14:91:e1:f2:67:19:96:0d:6c:c7:8d: e1:fe:f1:9b:7a:b9:77:50:73:96:c2:9e:fe:3e:16: 55:ee:74:02:97:a5:a4:7b:ee:b2:a5:06:ae:1b:e8: 9c:fc:4c:6b:b4:aa:dd:80:93:06:c9:34:49:09:96: ac:67:75:cd:ed:00:a8:60:91:6b:14:28:a4:68:d2: 43:db:db:80:06:40:59:91:9f:71:5b:ba:3b:23:40: 9d:ad:59:62:4e:02:27:17:8e:e0:72:b8:8b:5b:95: 28:9b:ed:7d:d0:a9:2e:26:97:fb:47:0b:e2:b2:98: b2:20:a6:e2:a0:fa:03:c2:79:24:d0:b5:62:a4:12: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:CA:DA:AE:0C:D0:65:BF:BE:C7:BA:7C:2C:1C:F0:A7:54:A9:A5 X509v3 Authority Key Identifier: keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:94:c8:92:9f:25:25:1c:2f:e3:17:7e:b3:b9:1f:f0:b1:99: 3d:69:40:27:66:2a:06:31:6a:d0:6a:66:d8:fc:f2:af:48:5f: 8d:75:72:79:5a:51:69:01:9d:92:4d:9e:f3:fb:80:cf:18:b0: d1:3e:c8:15:5c:13:3f:b2:d4:df:76:eb:e0:38:4c:36:a7:70: 24:14:47:ea:ba:6c:f8:49:c6:f4:b2:c9:ca:a8:c6:88:c1:00: 6d:bb:c2:8e:f4:fa:67:80:b1:50:52:12:77:fb:d4:a3:21:89: cd:81:f8:29:b5:4a:69:dd:e1:00:47:6e:5b:be:38:b8:d0:53: 1b:c3:de:f7:96:d7:4e:73:71:c5:b0:da:63:29:be:26:ec:e7: 14:be:df:9b:a4:b0:5a:22:6a:aa:78:36:f0:41:3c:c7:77:9e: c7:76:01:a3:56:17:b0:ad:d2:4f:6f:76:ca:71:e3:22:48:4c: d0:60:10:f4:0f:7f:47:a8:ad:91:e5:f5:6c:63:48:bd:40:23: 6c:be:83:fa:b9:e7:35:24:cf:6f:b6:87:a4:d9:d3:d5:89:c6: 8d:aa:70:31:59:fd:8f:44:06:b0:4e:96:8f:11:4d:bf:1f:99: bf:f6:4c:7f:f6:12:de:aa:af:93:1a:49:af:c3:61:57:59:30: 47:f2:34:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMjp9t/R2UbH/NUBg9PHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYmJkM2UxYmNlNjcyNTFiNThmMjZjZmQyNWZkNDAxNTY0 MTY2MDMwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD Eyg3NmQ5Y2FkYWFlMGNkMDY1YmZiZWM3YmE3YzJjMWNmMGE3NTRhOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotA7Tr/9HdLtkDdNobxGbbzIIvUS laFP6I9UCm36ykmFQjJsz1TPtJkbxvVIrrQNIlZbP7ZEBjwp/LL6K8JGLYDzNMKm DOYb88xM/7a8XeSQaOjdOD7WpMnv3PTfFOQMCu4YP2vyEh26n/a2/7lPnyniBZbg N4X8PoMdFJHh8mcZlg1sx43h/vGberl3UHOWwp7+PhZV7nQCl6Wke+6ypQauG+ic /ExrtKrdgJMGyTRJCZasZ3XN7QCoYJFrFCikaNJD29uABkBZkZ9xW7o7I0CdrVli TgInF47gcriLW5Uom+190KkuJpf7RwvispiyIKbioPoDwnkk0LVipBIl9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbZytquDNBlv77HunwsHPCnVKmlMB8GA1UdIwQY MBaAFB270+G85nJRtY8mz9Jf1AFWQWYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wYzBhNjktNjcwNS00MjZjLTllNzAt Y2Y4YjAxZjZlZjE3LzEvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8wYzBhNjktNjcwNS00MjZjLTllNzAtY2Y4YjAxZjZlZjE3 LzEvSGJ2VDRiem1jbEcxanliUDBsX1VBVlpCWmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZTIkp8l JRwv4xd+s7kf8LGZPWlAJ2YqBjFq0Gpm2Pzyr0hfjXVyeVpRaQGdkk2e8/uAzxiw 0T7IFVwTP7LU33br4DhMNqdwJBRH6rps+EnG9LLJyqjGiMEAbbvCjvT6Z4CxUFIS d/vUoyGJzYH4KbVKad3hAEduW744uNBTG8Pe95bXTnNxxbDaYym+JuznFL7fm6Sw WiJqqng28EE8x3eex3YBo1YXsK3ST292ynHjIkhM0GAQ9A9/R6itkeX1bGNIvUAj bL6D+rnnNSTPb7aHpNnT1YnGjapwMVn9j0QGsE6WjxFNvx+Zv/ZMf/YS3qqvkxpJ r8NhV1kwR/I07Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:48 2025 by rpki-client