This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json) Hash identifier: RqKWl7URHQkRtm7gw/tyGcX7g+G+K60v9qmnFKH+Mqk= Subject key identifier: BE:00:94:18:AD:3F:97:5B:23:36:0A:BD:FA:36:C4:39:13:45:F3:38 Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23 Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23 Certificate serial: 019B631DD108137F26C409F094C68587B21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft Manifest number: 0F9B Signing time: Sun 28 Dec 2025 04:00:56 +0000 Manifest this update: Sun 28 Dec 2025 04:00:56 +0000 Manifest next update: Mon 29 Dec 2025 04:00:56 +0000 Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: OawRviZa4srBfSa980RwkjwOT/8ULzjcpYuOLeh+TFE=) 2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:d1:08:13:7f:26:c4:09:f0:94:c6:85:87:b2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23 Validity Not Before: Dec 28 04:00:56 2025 GMT Not After : Dec 29 04:00:56 2025 GMT Subject: CN=be009418ad3f975b23360abdfa36c4391345f338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f9:22:68:49:88:e9:c9:2c:12:cf:7c:c1:a9: f8:20:0d:5d:43:d3:fb:a8:2f:55:7d:ce:a8:d7:52: 7c:3c:07:7f:e3:87:e2:4c:6a:be:ce:22:d5:f3:8b: dc:ce:05:d2:26:77:3a:f9:0a:63:bd:fa:ec:11:4f: 23:44:c0:98:d3:37:20:6b:ce:6c:12:98:4e:2a:74: 45:b0:56:0d:dd:ad:8e:04:e6:86:a7:bb:65:3e:f0: 57:86:d8:6a:f7:f1:18:82:e5:8d:ba:35:85:8a:6b: 6d:8c:cc:13:50:59:90:c6:d2:c8:a5:e5:37:d6:20: d6:d0:6c:f6:2a:87:57:53:d6:19:b0:57:45:52:f3: ff:52:7e:31:3d:fa:f8:86:79:95:40:08:4a:80:1a: cd:67:2b:41:4d:36:8c:d9:0d:9d:13:ba:1b:6c:45: 76:85:a8:dd:4a:a7:16:4f:29:fb:18:8e:58:f7:44: c9:8c:cf:59:3c:69:b8:92:1a:55:96:d9:10:c5:ab: 34:9c:b4:e1:c4:12:e1:2a:82:b3:29:24:89:48:8e: 10:ee:04:f3:7f:df:00:37:7c:84:f2:70:8c:40:3c: 80:9a:cb:b9:f8:27:6c:f5:9f:ac:6a:3c:1a:4b:02: 6d:2a:80:f9:23:97:af:f0:4b:b0:42:06:a0:aa:3d: e6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:00:94:18:AD:3F:97:5B:23:36:0A:BD:FA:36:C4:39:13:45:F3:38 X509v3 Authority Key Identifier: keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6b:71:4e:18:b4:a3:bd:46:02:cd:25:20:c0:74:ca:86:0a: 33:7b:02:a0:ea:c3:9e:17:ff:3f:9b:8e:77:d0:c4:d3:67:e1: c3:4b:a7:3a:a3:b9:48:c7:1b:69:9e:21:94:66:bc:8c:b2:38: 68:70:ed:84:f8:f7:c4:ad:43:19:de:13:08:d6:6c:93:12:e6: 2d:ae:1b:17:6c:59:cf:c3:db:bf:f3:e3:79:78:a7:ff:22:01: ed:64:63:a3:46:eb:43:6d:b6:db:32:e0:26:31:37:80:a5:56: 6a:d0:ee:c0:77:5a:9b:09:e2:f9:d6:a6:f2:cd:94:26:aa:31: 3a:ec:c2:98:7f:66:89:aa:f4:c1:5d:0f:02:7f:8b:7e:eb:e6: 93:6a:67:57:68:4c:77:40:84:aa:6b:dc:ec:8c:00:45:f7:ff: ec:60:fb:b8:ec:a8:b3:8d:b0:d6:23:9d:66:b3:c8:4b:29:09: 3c:f1:67:64:aa:0f:95:47:c2:43:44:74:9b:1d:ed:8d:1f:70: 33:f4:64:38:7d:02:fb:63:51:ef:e3:9c:1b:81:b8:d5:3d:98: 66:71:12:61:74:41:f4:2c:5c:43:3d:c9:e4:71:01:42:7b:b1: 1d:b8:58:fb:b8:a7:30:f4:3b:34:2f:8e:ae:f3:d8:a0:ec:9e: da:e6:ce:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHdEIE38mxAnwlMaFh7IdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmY3MGMwZWMyMTAxMGRiZDZmZTkxNWYzMzI2MzAwZmUz MTRiMjMwHhcNMjUxMjI4MDQwMDU2WhcNMjUxMjI5MDQwMDU2WjAzMTEwLwYDVQQD EyhiZTAwOTQxOGFkM2Y5NzViMjMzNjBhYmRmYTM2YzQzOTEzNDVmMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vkiaEmI6cksEs98wan4IA1dQ9P7 qC9Vfc6o11J8PAd/44fiTGq+ziLV84vczgXSJnc6+QpjvfrsEU8jRMCY0zcga85s EphOKnRFsFYN3a2OBOaGp7tlPvBXhthq9/EYguWNujWFimttjMwTUFmQxtLIpeU3 1iDW0Gz2KodXU9YZsFdFUvP/Un4xPfr4hnmVQAhKgBrNZytBTTaM2Q2dE7obbEV2 hajdSqcWTyn7GI5Y90TJjM9ZPGm4khpVltkQxas0nLThxBLhKoKzKSSJSI4Q7gTz f98AN3yE8nCMQDyAmsu5+Cds9Z+sajwaSwJtKoD5I5ev8EuwQgagqj3miwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4AlBitP5dbIzYKvfo2xDkTRfM4MB8GA1UdIwQY MBaAFIUvcMDsIQENvW/pFfMyYwD+MUsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYt ZmIyMzVhZmY0NjE4LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYtZmIyMzVhZmY0NjE4 LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWtxThi0 o71GAs0lIMB0yoYKM3sCoOrDnhf/P5uOd9DE02fhw0unOqO5SMcbaZ4hlGa8jLI4 aHDthPj3xK1DGd4TCNZskxLmLa4bF2xZz8Pbv/PjeXin/yIB7WRjo0brQ2222zLg JjE3gKVWatDuwHdamwni+dam8s2UJqoxOuzCmH9miar0wV0PAn+Lfuvmk2pnV2hM d0CEqmvc7IwARff/7GD7uOyos42w1iOdZrPISykJPPFnZKoPlUfCQ0R0mx3tjR9w M/RkOH0C+2NR7+OcG4G41T2YZnESYXRB9CxcQz3J5HEBQnuxHbhY+7inMPQ7NC+O rvPYoOye2ubObw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:42:59 2025 by rpki-client