This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json) Hash identifier: KozZ9cELyl/tliMj+5UgyIbEP1gB6UmQZWzTY6gqOks= Subject key identifier: 4F:FE:F4:BB:B9:B9:8B:A3:0C:9A:B9:D2:A8:77:F2:2C:6A:93:B2:00 Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Certificate serial: 019B454A8C48DE05226A9AF2014A27641256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft Manifest number: 15F6 Signing time: Mon 22 Dec 2025 09:01:12 +0000 Manifest this update: Mon 22 Dec 2025 09:01:12 +0000 Manifest next update: Tue 23 Dec 2025 09:01:12 +0000 Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: 8fKiN57ePv1NXzsszMdvb5uHVaksjDgI1a2nQIS1CY4=) 2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=) 3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:8c:48:de:05:22:6a:9a:f2:01:4a:27:64:12:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Validity Not Before: Dec 22 09:01:12 2025 GMT Not After : Dec 23 09:01:12 2025 GMT Subject: CN=4ffef4bbb9b98ba30c9ab9d2a877f22c6a93b200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:2e:e6:44:2a:87:40:1f:84:6c:ce:79:d1: 6a:54:ae:da:bf:32:72:1d:04:cc:46:b3:98:47:70: e5:03:81:0c:9e:05:6e:f6:c6:5e:b1:0a:38:76:3a: 8f:9d:79:e5:27:5d:ab:90:68:63:f9:f4:bd:1a:ef: fc:06:fb:2d:82:04:27:19:4d:79:a1:83:2f:24:4d: de:e2:bc:a2:56:f3:87:a7:80:1c:27:fd:a2:f2:62: d5:17:39:f3:cc:67:97:d3:f0:fc:9a:c2:62:9e:e5: 12:02:d1:85:cf:3d:b0:a2:ca:f9:4d:91:c0:5c:b0: cd:12:32:37:f1:8e:62:27:15:64:03:8c:41:80:d3: be:01:d8:fc:66:81:b1:a8:80:b5:d7:93:5c:7c:34: d2:30:16:02:a5:47:74:64:db:a9:cc:95:2f:76:7a: d2:ee:0e:0a:54:6f:38:af:e9:4d:dd:7c:df:c2:20: 0a:4f:14:63:dc:45:15:ea:82:69:bc:29:96:97:a3: 46:ba:7c:5f:a3:b5:b4:d0:64:58:c5:b8:0e:21:2f: 26:f9:dc:ad:88:dc:b2:49:7c:5f:36:79:ed:5a:a9: 00:c2:7b:dd:a4:05:0b:8a:eb:45:85:21:2f:53:be: dc:66:9f:95:f9:49:c9:d0:73:ab:1b:10:7b:21:ce: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FE:F4:BB:B9:B9:8B:A3:0C:9A:B9:D2:A8:77:F2:2C:6A:93:B2:00 X509v3 Authority Key Identifier: keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:df:90:0a:9b:6c:9a:ca:f6:70:c4:0b:82:86:90:d8:a7:6b: 51:04:cd:5c:f3:7a:ec:b6:50:77:b2:6c:a8:89:8c:63:93:c7: bd:8e:83:2f:7b:1c:8b:d0:f9:3e:03:a3:6e:54:85:50:de:69: 2a:69:b8:ae:a4:0b:1c:fc:3b:6f:b5:86:76:26:de:7d:12:6f: fe:ef:dc:08:52:4e:38:8f:4b:4c:79:5e:65:47:c7:7f:0a:84: 6a:fb:fe:b5:71:c6:76:d7:33:9f:ff:0d:2d:bc:80:7b:7a:49: 00:94:da:1c:45:5e:e2:07:b2:49:69:e8:78:9c:c0:98:bc:6f: b9:4f:c6:0f:e8:98:bd:9e:ae:01:3c:db:c6:83:5f:57:67:76: d1:79:87:31:86:fa:d3:0d:9e:1e:67:e9:51:f0:72:1d:98:bf: 20:81:d2:1f:fb:32:8a:99:62:26:47:04:ad:c1:a6:ef:d2:f9: 42:0a:f4:fc:a2:ae:e4:af:fa:55:ee:0d:0b:4f:c9:d7:cd:a4: 9b:e0:83:27:5d:b2:c9:d6:19:27:01:d1:86:9c:ee:15:61:31: 4d:59:e0:92:e7:2c:d2:d8:56:14:69:83:49:a1:10:81:03:1b: e8:6b:f9:29:9a:4e:d0:6e:69:cf:3a:fa:37:52:0e:5a:94:52: a8:1a:29:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSoxI3gUiapryAUonZBJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh YzM0NWIwHhcNMjUxMjIyMDkwMTEyWhcNMjUxMjIzMDkwMTEyWjAzMTEwLwYDVQQD Eyg0ZmZlZjRiYmI5Yjk4YmEzMGM5YWI5ZDJhODc3ZjIyYzZhOTNiMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wcu5kQqh0AfhGzOedFqVK7avzJy HQTMRrOYR3DlA4EMngVu9sZesQo4djqPnXnlJ12rkGhj+fS9Gu/8BvstggQnGU15 oYMvJE3e4ryiVvOHp4AcJ/2i8mLVFznzzGeX0/D8msJinuUSAtGFzz2wosr5TZHA XLDNEjI38Y5iJxVkA4xBgNO+Adj8ZoGxqIC115NcfDTSMBYCpUd0ZNupzJUvdnrS 7g4KVG84r+lN3XzfwiAKTxRj3EUV6oJpvCmWl6NGunxfo7W00GRYxbgOIS8m+dyt iNyySXxfNnntWqkAwnvdpAULiutFhSEvU77cZp+V+UnJ0HOrGxB7Ic5uvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/+9Lu5uYujDJq50qh38ixqk7IAMB8GA1UdIwQY MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4 LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqd+QCpts msr2cMQLgoaQ2KdrUQTNXPN67LZQd7JsqImMY5PHvY6DL3sci9D5PgOjblSFUN5p Kmm4rqQLHPw7b7WGdibefRJv/u/cCFJOOI9LTHleZUfHfwqEavv+tXHGdtczn/8N LbyAe3pJAJTaHEVe4geySWnoeJzAmLxvuU/GD+iYvZ6uATzbxoNfV2d20XmHMYb6 0w2eHmfpUfByHZi/IIHSH/syipliJkcErcGm79L5Qgr0/KKu5K/6Ve4NC0/J182k m+CDJ12yydYZJwHRhpzuFWExTVngkucs0thWFGmDSaEQgQMb6Gv5KZpO0G5pzzr6 N1IOWpRSqBopag== -----END CERTIFICATE-----Generated at Mon Dec 22 14:03:37 2025 by rpki-client