This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json) Hash identifier: JHIQ6V/beM1Wr2gPU140/dn9h48DiDV7Sw2wPuYMtUA= Subject key identifier: 87:41:20:CA:E8:AD:25:16:93:1B:CB:BF:0A:B3:BF:93:D8:94:FA:8F Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f Certificate serial: 019B44A618C20289E375CBF78E0D441DA57E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft Manifest number: 14C2 Signing time: Mon 22 Dec 2025 06:01:34 +0000 Manifest this update: Mon 22 Dec 2025 06:01:34 +0000 Manifest next update: Tue 23 Dec 2025 06:01:34 +0000 Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=) 2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: has9rjcfcj1eOUQ4Vc1YUx45JuLdQ+xsMwnmGOoHXQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:18:c2:02:89:e3:75:cb:f7:8e:0d:44:1d:a5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f Validity Not Before: Dec 22 06:01:34 2025 GMT Not After : Dec 23 06:01:34 2025 GMT Subject: CN=874120cae8ad2516931bcbbf0ab3bf93d894fa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:a8:fa:51:70:a0:d4:eb:e4:de:54:7a:f8: 28:7d:77:3d:ae:6b:73:a5:a1:5e:29:e0:2a:ee:00: 7e:2f:26:11:93:cc:92:fb:9e:e4:f8:70:f9:38:ce: 55:6f:b4:b5:97:5c:07:e6:0a:aa:64:eb:74:2e:4b: e2:1c:b1:60:35:51:72:ae:9c:35:65:a0:66:b2:45: 10:1f:a9:f3:a5:ea:37:da:23:d8:bf:bf:cf:fb:09: 36:54:40:dd:64:ba:0d:f2:d2:57:c5:b2:68:fd:e1: 20:63:bc:cd:b0:5a:7b:79:ba:75:fc:d3:9f:88:bd: e1:8f:d9:d6:91:2b:9e:99:a7:9a:27:d5:7f:37:37: 3f:4d:7c:c1:7e:af:24:f9:d9:de:f7:3b:c2:87:90: 2c:87:0c:85:f9:63:a2:e5:df:34:76:34:ce:7f:c8: de:a4:a4:e8:f1:ac:7b:df:ca:55:d2:f1:6b:72:4a: d8:11:e8:4b:06:93:46:be:23:b9:3a:b4:b6:16:81: 79:02:81:3f:fe:66:36:55:96:1f:54:59:11:f3:e2: 76:3b:95:f2:51:ec:b2:5a:1f:d2:3b:fe:1f:27:73: 5b:f9:d8:2c:5c:67:27:53:c4:3a:48:20:80:46:2a: 9e:02:ec:6b:49:59:cd:b9:be:0b:51:be:e1:dc:b7: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:20:CA:E8:AD:25:16:93:1B:CB:BF:0A:B3:BF:93:D8:94:FA:8F X509v3 Authority Key Identifier: keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8e:35:9a:19:27:23:d8:ea:b5:2c:51:71:01:9e:02:71:54: e8:32:93:ba:b2:3a:2c:bf:f5:86:41:08:5d:13:7c:94:9b:27: 71:32:85:39:27:5e:1f:c0:a3:1d:18:a8:8a:d8:d8:cc:7d:35: 13:4d:86:6c:e9:80:80:00:da:d3:2f:3e:4c:16:37:e4:d4:21: 2c:5e:49:e2:27:a7:29:a4:fa:33:d5:46:22:fb:54:b0:f5:25: 7a:14:ca:9a:cf:b0:0a:87:13:3d:6a:19:ca:ea:b6:90:53:ec: a2:b6:bf:51:86:8e:6f:87:ea:84:62:12:03:34:cc:a6:13:62: fb:38:1a:96:05:ca:cf:2a:74:57:64:ac:a5:2b:5a:04:5a:b7: 98:c1:70:24:f5:97:c9:23:02:bb:1c:75:b6:64:6a:67:34:85: 45:9b:32:9a:3e:d0:4e:be:63:60:f9:64:28:3e:a7:6b:46:00: 72:f6:0b:c2:d9:93:07:1c:a6:ab:83:15:fb:07:de:44:96:e3: eb:d6:1a:3c:38:8a:93:37:97:41:ef:5c:cf:3e:ab:7b:be:76: 37:76:75:7a:44:14:0d:41:88:5d:c3:47:a7:80:42:9a:82:6b: 18:ef:5f:31:6f:31:d7:73:ab:ca:a0:f6:e6:f2:b0:ff:eb:a5: f0:2b:22:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEphjCAonjdcv3jg1EHaV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YzQxMTJlZmM5YmVkODQ3NjFkMzY3OGI4N2M0ODM5NDhk MmE3MmYwHhcNMjUxMjIyMDYwMTM0WhcNMjUxMjIzMDYwMTM0WjAzMTEwLwYDVQQD Eyg4NzQxMjBjYWU4YWQyNTE2OTMxYmNiYmYwYWIzYmY5M2Q4OTRmYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllqo+lFwoNTr5N5UevgofXc9rmtz paFeKeAq7gB+LyYRk8yS+57k+HD5OM5Vb7S1l1wH5gqqZOt0LkviHLFgNVFyrpw1 ZaBmskUQH6nzpeo32iPYv7/P+wk2VEDdZLoN8tJXxbJo/eEgY7zNsFp7ebp1/NOf iL3hj9nWkSuemaeaJ9V/Nzc/TXzBfq8k+dne9zvCh5AshwyF+WOi5d80djTOf8je pKTo8ax738pV0vFrckrYEehLBpNGviO5OrS2FoF5AoE//mY2VZYfVFkR8+J2O5Xy UeyyWh/SO/4fJ3Nb+dgsXGcnU8Q6SCCARiqeAuxrSVnNub4LUb7h3LcCHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdBIMrorSUWkxvLvwqzv5PYlPqPMB8GA1UdIwQY MBaAFIbEES78m+2Edh02eLh8SDlI0qcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQt MDBiOTZkNzRkOGIwLzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQtMDBiOTZkNzRkOGIw LzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI41mhkn I9jqtSxRcQGeAnFU6DKTurI6LL/1hkEIXRN8lJsncTKFOSdeH8CjHRioitjYzH01 E02GbOmAgADa0y8+TBY35NQhLF5J4ienKaT6M9VGIvtUsPUlehTKms+wCocTPWoZ yuq2kFPsora/UYaOb4fqhGISAzTMphNi+zgalgXKzyp0V2SspStaBFq3mMFwJPWX ySMCuxx1tmRqZzSFRZsymj7QTr5jYPlkKD6na0YAcvYLwtmTBxymq4MV+wfeRJbj 69YaPDiKkzeXQe9czz6re752N3Z1ekQUDUGIXcNHp4BCmoJrGO9fMW8x13OryqD2 5vKw/+ul8CsioA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:55:27 2025 by rpki-client