This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json) Hash identifier: sPSWvJMMTF0jglc0AKu7evVW3KTjV5RZWhsX/sWbT8U= Subject key identifier: 7B:C0:DA:C8:37:E9:1D:E5:66:8D:3C:31:68:5F:FA:A6:8A:0B:54:91 Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Certificate serial: 019B3BA24741B79A95A36837432D02C66248 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft Manifest number: 15F1 Signing time: Sat 20 Dec 2025 12:00:49 +0000 Manifest this update: Sat 20 Dec 2025 12:00:49 +0000 Manifest next update: Sun 21 Dec 2025 12:00:49 +0000 Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: R5whTOLFKAnjYpzUDIeYegMM1zWaxYSKrgcs7Dskv0o=) 2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=) 3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:47:41:b7:9a:95:a3:68:37:43:2d:02:c6:62:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Validity Not Before: Dec 20 12:00:49 2025 GMT Not After : Dec 21 12:00:49 2025 GMT Subject: CN=7bc0dac837e91de5668d3c31685ffaa68a0b5491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:d3:56:e9:3f:34:de:8c:3d:e7:a8:fc:d4: 69:4f:21:f5:34:81:46:90:3a:47:7e:cc:ad:bd:29: de:42:fb:0e:f5:28:4a:a4:77:7a:06:89:05:fe:f4: 35:d4:8a:d5:c1:65:20:c9:36:7e:8c:e9:23:47:88: 7d:db:1b:2a:d8:f3:e1:3f:4e:5d:a7:ea:52:ef:ec: fe:a0:e1:65:3e:b7:50:66:bb:35:b2:77:22:41:43: 4b:8a:b3:9d:36:6b:73:ca:86:c1:4e:5e:b8:d0:4d: 28:d6:c9:c2:61:98:6b:ac:88:31:bf:84:12:a3:bf: b4:e0:8c:0b:8f:b8:dc:b0:7a:18:57:dc:47:3e:89: 1f:01:04:90:e0:c1:ea:14:b8:c2:3e:ad:e5:d4:b5: 66:97:79:6c:b5:f1:f0:20:a2:7d:e5:a1:4e:e2:25: ec:70:e2:10:59:d6:44:00:cb:9f:f1:ea:f9:2b:e5: e6:84:a7:c1:57:88:1a:7d:bb:d0:90:93:95:d1:b2: 45:2b:d8:18:e5:7f:59:c5:83:b1:57:e1:12:77:78: bb:1d:ee:69:62:d9:aa:0c:bc:df:30:60:86:87:fd: 44:f4:e4:02:e1:86:62:d2:29:37:14:fe:2b:53:fe: 57:7a:84:50:ba:ad:36:ed:a8:62:ce:01:8f:e2:cf: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:DA:C8:37:E9:1D:E5:66:8D:3C:31:68:5F:FA:A6:8A:0B:54:91 X509v3 Authority Key Identifier: keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:08:79:cd:b2:2a:df:11:c1:b1:e2:8f:cf:f8:61:8c:d8:4a: 86:bd:d8:dd:b6:6f:87:e4:6f:0b:2a:59:ad:53:a9:c8:7d:f2: 96:f0:a3:44:d1:5d:fc:c0:c1:69:f0:c4:98:c5:39:6c:e7:74: 32:6f:3f:69:81:47:b1:35:ee:d0:36:91:47:1c:10:ab:c8:68: ff:87:15:e7:4b:9a:42:57:37:5a:b2:3b:4d:47:38:93:1a:e6: d0:36:13:07:07:7a:31:ce:f2:4f:cb:2a:c9:c9:58:ef:12:b9: 0c:7c:4d:5a:87:bd:de:de:24:b0:02:9c:f9:6b:cb:f0:5f:62: 9c:c4:ef:14:88:2b:0d:60:91:1a:06:40:ea:85:d9:72:f9:ed: 85:53:f2:f3:00:1a:34:18:d0:ef:fa:77:d9:6e:8b:9b:59:49: 91:3a:2f:66:58:c4:ed:63:30:47:11:82:f7:6a:b7:53:f3:01: 50:a2:08:22:63:8e:91:d3:84:da:c5:6f:90:63:42:68:35:de: 71:8f:0a:b3:fe:c5:9e:cf:b3:be:78:ce:38:21:cd:d8:97:d8: 4a:7b:07:8e:ea:81:37:2f:f8:cb:90:27:88:db:51:38:8f:2a: 05:fb:1c:eb:0e:67:0e:07:b7:1f:0f:ae:ff:73:24:a8:1f:97: ef:33:16:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7okdBt5qVo2g3Qy0CxmJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh YzM0NWIwHhcNMjUxMjIwMTIwMDQ5WhcNMjUxMjIxMTIwMDQ5WjAzMTEwLwYDVQQD Eyg3YmMwZGFjODM3ZTkxZGU1NjY4ZDNjMzE2ODVmZmFhNjhhMGI1NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpjTVuk/NN6MPeeo/NRpTyH1NIFG kDpHfsytvSneQvsO9ShKpHd6BokF/vQ11IrVwWUgyTZ+jOkjR4h92xsq2PPhP05d p+pS7+z+oOFlPrdQZrs1snciQUNLirOdNmtzyobBTl640E0o1snCYZhrrIgxv4QS o7+04IwLj7jcsHoYV9xHPokfAQSQ4MHqFLjCPq3l1LVml3lstfHwIKJ95aFO4iXs cOIQWdZEAMuf8er5K+XmhKfBV4gafbvQkJOV0bJFK9gY5X9ZxYOxV+ESd3i7He5p YtmqDLzfMGCGh/1E9OQC4YZi0ik3FP4rU/5XeoRQuq027ahizgGP4s9nAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvA2sg36R3lZo08MWhf+qaKC1SRMB8GA1UdIwQY MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4 LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxwh5zbIq 3xHBseKPz/hhjNhKhr3Y3bZvh+RvCypZrVOpyH3ylvCjRNFd/MDBafDEmMU5bOd0 Mm8/aYFHsTXu0DaRRxwQq8ho/4cV50uaQlc3WrI7TUc4kxrm0DYTBwd6Mc7yT8sq yclY7xK5DHxNWoe93t4ksAKc+WvL8F9inMTvFIgrDWCRGgZA6oXZcvnthVPy8wAa NBjQ7/p32W6Lm1lJkTovZljE7WMwRxGC92q3U/MBUKIIImOOkdOE2sVvkGNCaDXe cY8Ks/7Fns+zvnjOOCHN2JfYSnsHjuqBNy/4y5AniNtROI8qBfsc6w5nDge3Hw+u /3MkqB+X7zMWBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:46 2025 by rpki-client