This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json) Hash identifier: 8w/XdfUh2mGFwDPbE07zmMVd/BP9/49llHKm3NzahHk= Subject key identifier: D5:B3:59:1B:AA:5C:B4:1A:8C:7D:DF:D1:74:46:2D:8C:DE:41:DC:65 Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Certificate serial: 019B3F118EB4983A973416E85382D45075F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft Manifest number: 0610 Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=) 2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=) 3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: 8oOFsLpni8jC20xhxCcwfGMYpxlc+SKFxNajTusIyQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8e:b4:98:3a:97:34:16:e8:53:82:d4:50:75:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=d5b3591baa5cb41a8c7ddfd174462d8cde41dc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0b:4c:50:9b:f3:7d:60:0e:ae:cf:42:9b:a6: 07:a5:03:ac:e5:45:ee:f5:de:6d:45:5c:3b:1d:9d: ff:26:eb:01:2c:c5:17:7a:6b:1e:a2:ac:67:25:1a: 3b:4a:c4:85:1f:83:ff:54:63:9c:ee:b7:51:d8:d7: da:10:22:55:f3:45:36:14:04:e6:c3:c9:66:3f:3e: 4c:1c:45:b1:25:12:f7:86:1f:22:06:21:5b:d9:43: 55:04:b8:43:00:5f:22:bc:ff:eb:43:21:ad:a1:40: 65:4e:f8:8c:e2:41:83:63:61:85:5a:5c:4d:bb:ea: 81:27:6b:d2:ad:0c:6b:0d:30:35:04:c6:70:38:df: d7:3d:12:04:f0:d4:ca:17:2c:43:7b:6d:2e:e8:1c: 8a:08:6d:3a:26:c3:e2:d8:bb:ed:3b:a6:1e:74:b3: 91:5b:aa:41:c5:73:fa:71:9a:67:e9:c1:3d:46:93: ec:fa:40:9c:61:6f:76:5a:cf:9f:25:0e:7e:0a:6a: 72:9c:c9:a2:c9:b7:93:ec:54:e8:43:26:38:68:75: 7a:f2:00:bb:b7:a4:9b:5e:8d:14:69:7a:88:6f:0d: 07:71:45:fa:93:d9:87:10:ee:23:2e:37:2f:eb:7b: 47:98:11:00:8c:40:aa:b5:ac:32:e5:05:c7:a8:2b: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:59:1B:AA:5C:B4:1A:8C:7D:DF:D1:74:46:2D:8C:DE:41:DC:65 X509v3 Authority Key Identifier: keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:99:2b:70:10:a6:73:cd:5c:a2:cf:ed:86:ca:04:3b:01:b3: 4f:3e:d2:7f:2b:0a:f2:6f:8c:1e:73:e5:28:4e:04:c2:9c:ab: 37:60:88:8f:6a:51:fd:d0:2a:4e:34:45:99:ac:7a:1b:5b:81: 0b:1b:fa:50:e2:1e:d4:f1:04:e4:26:99:b2:b6:de:42:95:ab: 28:c6:af:bb:08:4b:d0:f4:8f:2d:4d:f0:9c:89:65:d3:07:ea: e4:e5:a1:fc:cd:f8:42:5f:78:c3:1f:60:4e:3d:62:6a:c7:a9: f1:34:34:59:fe:68:c6:0b:a3:f5:16:e7:af:98:4e:04:ac:34: 80:d4:56:4c:33:94:8b:31:a1:13:a7:af:66:fb:bb:05:81:ad: 63:df:92:df:6c:d9:9d:91:27:f2:86:3b:71:fc:65:0e:e0:6b: d1:da:bf:11:31:fa:04:97:15:e2:34:1c:10:23:f0:05:94:b2: ba:d3:d7:18:20:d7:d9:20:db:82:80:36:9c:ef:28:15:48:cb: 73:48:d1:c5:b0:81:42:64:51:4a:5e:27:c2:59:7b:44:48:61: 97:00:82:09:35:44:f2:cd:16:9c:6d:a5:78:15:14:70:b6:a7: c6:b4:9f:80:e4:bf:3f:8b:4c:59:47:43:fb:dd:b5:31:d1:f7: 7a:70:9e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EY60mDqXNBboU4LUUHX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4 ZjZhN2IwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD EyhkNWIzNTkxYmFhNWNiNDFhOGM3ZGRmZDE3NDQ2MmQ4Y2RlNDFkYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wtMUJvzfWAOrs9Cm6YHpQOs5UXu 9d5tRVw7HZ3/JusBLMUXemseoqxnJRo7SsSFH4P/VGOc7rdR2NfaECJV80U2FATm w8lmPz5MHEWxJRL3hh8iBiFb2UNVBLhDAF8ivP/rQyGtoUBlTviM4kGDY2GFWlxN u+qBJ2vSrQxrDTA1BMZwON/XPRIE8NTKFyxDe20u6ByKCG06JsPi2LvtO6YedLOR W6pBxXP6cZpn6cE9RpPs+kCcYW92Ws+fJQ5+CmpynMmiybeT7FToQyY4aHV68gC7 t6SbXo0UaXqIbw0HcUX6k9mHEO4jLjcv63tHmBEAjECqtawy5QXHqCtQ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWzWRuqXLQajH3f0XRGLYzeQdxlMB8GA1UdIwQY MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt MmFlMzUxNzU3MTNjLzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5krcBCm c81cos/thsoEOwGzTz7SfysK8m+MHnPlKE4EwpyrN2CIj2pR/dAqTjRFmax6G1uB Cxv6UOIe1PEE5CaZsrbeQpWrKMavuwhL0PSPLU3wnIll0wfq5OWh/M34Ql94wx9g Tj1iasep8TQ0Wf5oxguj9Rbnr5hOBKw0gNRWTDOUizGhE6evZvu7BYGtY9+S32zZ nZEn8oY7cfxlDuBr0dq/ETH6BJcV4jQcECPwBZSyutPXGCDX2SDbgoA2nO8oFUjL c0jRxbCBQmRRSl4nwll7REhhlwCCCTVE8s0WnG2leBUUcLanxrSfgOS/P4tMWUdD +921MdH3enCe3g== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:17 2025 by rpki-client