This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json) Hash identifier: cE5WPrZPkouEHpIFZJlqsxhO+94W/ASBkldoCj16+r8= Subject key identifier: C4:DB:3A:32:C0:E4:D8:55:0A:87:E5:9B:B6:EA:52:86:09:06:D7:00 Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Certificate serial: 019AF19AD320F29DB4E4F917E83C4B969D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: kLbRSReWOqRgftIgWV5vFUVRf6mJNE2U9X/lkZ5ri+E=) 2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d3:20:f2:9d:b4:e4:f9:17:e8:3c:4b:96:9d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=c4db3a32c0e4d8550a87e59bb6ea52860906d700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:6f:90:c1:2a:2c:61:bd:e9:7e:7e:a1:e4: cb:89:28:2f:b0:64:66:70:d1:d3:e5:8d:46:96:d4: 6b:15:aa:07:56:ca:2c:6a:5f:ea:46:2c:71:51:b7: a7:36:9c:36:d4:c3:b0:a3:02:81:73:3f:5f:2c:4a: 9b:0f:30:d0:96:a8:55:a1:01:76:b3:c7:b9:ea:cd: 12:81:55:8c:0e:3a:32:ae:29:94:70:86:b5:66:c2: e6:b5:dc:c6:14:f5:03:c5:b6:66:10:77:b6:94:c0: 88:03:f4:9b:ce:e0:7a:8b:28:b9:9d:93:fb:9d:99: fc:92:93:90:d0:31:98:60:a0:db:dc:2d:11:d9:aa: 97:de:88:d1:59:42:ee:00:47:1f:2f:85:ce:ad:59: 3f:20:4a:69:7d:25:c0:62:5e:65:26:7f:d1:24:ba: 04:1f:ed:ef:9d:db:79:c6:0a:0d:4c:13:db:92:78: ac:ae:a4:ff:60:9e:76:7d:93:5e:b1:36:d5:66:80: 93:d1:8c:11:da:d6:a9:d2:cd:07:dd:13:17:e2:ba: 13:84:28:92:a8:a6:68:00:ee:17:d2:e2:da:f1:ec: 9f:4e:54:30:dd:8e:97:95:37:46:eb:0c:59:73:ff: 57:4a:8c:31:71:20:59:a4:90:36:34:39:5d:4f:f7: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DB:3A:32:C0:E4:D8:55:0A:87:E5:9B:B6:EA:52:86:09:06:D7:00 X509v3 Authority Key Identifier: keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:09:16:e6:7f:4a:73:a9:a1:c4:d7:d9:26:40:ae:51:95:e8: 81:d7:6a:a7:e9:0b:34:82:d4:5f:c3:d5:45:ef:f9:db:00:78: f0:0f:7f:a9:68:bf:3b:76:1d:b5:6f:b7:6c:b3:98:b2:b1:0a: 14:5a:54:ba:f7:76:13:c1:64:c8:0b:17:29:d6:a8:0b:55:db: a5:00:eb:60:82:e6:11:89:31:b7:89:49:f9:b9:8f:18:33:1a: dd:ce:11:7b:40:7c:b1:72:ab:eb:6c:d4:c1:5a:8f:8e:25:c2: 3f:df:df:e4:37:95:d1:56:cf:34:3e:07:07:98:87:4d:a5:66: ce:d0:1a:a3:32:bf:9a:d7:0f:cb:ce:ff:9e:ac:73:6d:f4:eb: 41:0d:5d:03:51:ec:c2:88:26:e4:c0:13:39:63:36:a1:82:fe: da:d6:cf:73:c8:29:35:37:3f:75:36:d2:8e:a3:73:bb:7e:39: 1a:74:65:9d:89:3b:41:02:3e:fc:14:c3:02:4d:f4:4d:51:37: ad:7c:90:6e:6a:c8:58:0c:17:6b:25:60:2d:2d:39:bd:46:ec: 3d:17:cb:47:05:3b:3c:05:02:e0:24:67:89:e4:7f:67:76:d6: 59:9d:f8:50:66:7b:52:6a:15:60:4c:7a:a7:83:17:27:f6:a6: 3a:50:0f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtMg8p205PkX6DxLlp0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri ZjYzMzUwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhjNGRiM2EzMmMwZTRkODU1MGE4N2U1OWJiNmVhNTI4NjA5MDZkNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPFvkMEqLGG96X5+oeTLiSgvsGRm cNHT5Y1GltRrFaoHVsosal/qRixxUbenNpw21MOwowKBcz9fLEqbDzDQlqhVoQF2 s8e56s0SgVWMDjoyrimUcIa1ZsLmtdzGFPUDxbZmEHe2lMCIA/SbzuB6iyi5nZP7 nZn8kpOQ0DGYYKDb3C0R2aqX3ojRWULuAEcfL4XOrVk/IEppfSXAYl5lJn/RJLoE H+3vndt5xgoNTBPbknisrqT/YJ52fZNesTbVZoCT0YwR2tap0s0H3RMX4roThCiS qKZoAO4X0uLa8eyfTlQw3Y6XlTdG6wxZc/9XSowxcSBZpJA2NDldT/fxywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTbOjLA5NhVCoflm7bqUoYJBtcAMB8GA1UdIwQY MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt NDZkZDEyMDVkY2ZmLzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQkW5n9K c6mhxNfZJkCuUZXogddqp+kLNILUX8PVRe/52wB48A9/qWi/O3YdtW+3bLOYsrEK FFpUuvd2E8FkyAsXKdaoC1XbpQDrYILmEYkxt4lJ+bmPGDMa3c4Re0B8sXKr62zU wVqPjiXCP9/f5DeV0VbPND4HB5iHTaVmztAaozK/mtcPy87/nqxzbfTrQQ1dA1Hs wogm5MATOWM2oYL+2tbPc8gpNTc/dTbSjqNzu345GnRlnYk7QQI+/BTDAk30TVE3 rXyQbmrIWAwXayVgLS05vUbsPRfLRwU7PAUC4CRnieR/Z3bWWZ34UGZ7UmoVYEx6 p4MXJ/amOlAPBw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:37 2025 by rpki-client