This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json) Hash identifier: /Z89E2AETQpq9pWyRGgfoxNOOIBxc1QS4cf/NEHnHhU= Subject key identifier: A5:CD:96:23:D0:29:43:4C:F6:89:AB:5E:4A:47:ED:24:B8:17:8E:F0 Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37 Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537 Certificate serial: 019B4C5FA2209E1DB506B58E73FC2B687D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft Manifest number: 0839 Signing time: Tue 23 Dec 2025 18:01:34 +0000 Manifest this update: Tue 23 Dec 2025 18:01:34 +0000 Manifest next update: Wed 24 Dec 2025 18:01:34 +0000 Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: 40nbaZmyG4f5C4iifPL6GzwxXQ0Db+v7RYM3UP/8OAY=) 2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:a2:20:9e:1d:b5:06:b5:8e:73:fc:2b:68:7d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537 Validity Not Before: Dec 23 18:01:34 2025 GMT Not After : Dec 24 18:01:34 2025 GMT Subject: CN=a5cd9623d029434cf689ab5e4a47ed24b8178ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:db:ca:13:67:64:37:38:f5:4c:38:87:cf: e3:10:18:0e:c9:d6:0e:59:42:8a:fa:b0:46:7b:cc: 88:47:f3:08:19:34:21:d6:10:19:5b:fb:09:9d:4a: 6a:6d:bb:22:9d:55:80:99:81:e5:e8:6c:71:ca:00: 16:75:27:0c:d1:da:57:73:9a:12:99:c6:c3:7b:20: 28:ee:bf:20:a4:36:c3:48:c8:df:dc:59:c8:6e:f6: bb:39:cf:69:76:96:37:62:fd:e4:8e:82:6e:63:61: 01:ce:06:25:d5:fb:82:e1:c8:00:76:35:6f:9c:d5: 21:c5:78:bb:4f:80:f9:cc:1c:20:2b:a8:ef:8d:a9: 3e:74:97:13:58:4e:27:5a:3b:70:a6:59:5b:89:95: 90:7d:7c:f5:cd:65:08:f5:eb:ee:03:6f:7f:de:9a: c5:d5:63:30:8b:bb:85:5a:7c:4a:0a:83:75:1c:6e: 99:20:85:20:0d:74:59:d6:cb:1c:04:57:73:05:6f: b7:a2:20:18:3f:1b:c0:39:1d:ee:c1:2a:d4:58:ca: f8:56:d0:c4:90:be:03:15:ae:1f:8a:ac:05:48:fa: a2:62:9f:47:fb:78:06:10:8b:71:0d:55:ee:47:60: d6:4c:f9:50:34:3d:02:40:b7:e8:b8:c3:4a:6c:89: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:96:23:D0:29:43:4C:F6:89:AB:5E:4A:47:ED:24:B8:17:8E:F0 X509v3 Authority Key Identifier: keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ef:89:b1:07:37:58:ea:45:f3:4d:79:32:c5:bf:74:9d:0a: b5:1f:07:3d:8b:4e:4e:5f:a4:a1:01:cc:13:48:78:58:99:61: f8:fd:29:20:7d:00:8a:01:0f:28:c0:c5:40:6c:3d:39:32:b7: 5c:e9:c1:69:de:8e:a4:aa:f4:2d:38:86:cb:e8:16:4a:04:d9: 99:97:19:ef:64:02:eb:1c:3e:cb:62:46:66:08:26:f7:66:0a: 1c:72:ad:23:1f:1c:80:bc:2b:ce:8e:67:c6:22:06:7b:41:d1: 34:d2:42:80:97:7a:6b:14:95:b3:c6:e0:c2:ae:73:67:ac:d3: 50:e0:e1:4d:25:66:5a:6a:e7:0e:4c:ed:23:70:68:5a:41:7f: 3a:34:67:1d:77:11:21:81:97:b2:40:bc:0b:2c:60:6c:66:08: 36:bc:cf:7f:ea:0f:e3:7f:53:2b:42:7d:ad:e3:01:a7:84:cf: ab:90:4b:11:41:13:e0:14:4c:20:f0:50:95:c0:e5:34:4e:26: d0:cd:d0:58:9b:9b:75:7f:dc:76:5d:46:c1:0c:d3:fc:6f:5b: e9:f4:e8:0f:a0:67:85:95:66:8e:9b:e1:70:ac:af:1a:e0:20: 87:94:77:dd:89:3f:b7:f6:07:20:1f:16:dd:78:28:3c:c4:44: d3:b9:54:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX6Ignh21BrWOc/wraH0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OWI1YjZhM2Q4MmJkMDBlZDMxYzZjZWIzYWVhN2FkNTkx ZWU1MzcwHhcNMjUxMjIzMTgwMTM0WhcNMjUxMjI0MTgwMTM0WjAzMTEwLwYDVQQD EyhhNWNkOTYyM2QwMjk0MzRjZjY4OWFiNWU0YTQ3ZWQyNGI4MTc4ZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznXbyhNnZDc49Uw4h8/jEBgOydYO WUKK+rBGe8yIR/MIGTQh1hAZW/sJnUpqbbsinVWAmYHl6GxxygAWdScM0dpXc5oS mcbDeyAo7r8gpDbDSMjf3FnIbva7Oc9pdpY3Yv3kjoJuY2EBzgYl1fuC4cgAdjVv nNUhxXi7T4D5zBwgK6jvjak+dJcTWE4nWjtwpllbiZWQfXz1zWUI9evuA29/3prF 1WMwi7uFWnxKCoN1HG6ZIIUgDXRZ1sscBFdzBW+3oiAYPxvAOR3uwSrUWMr4VtDE kL4DFa4fiqwFSPqiYp9H+3gGEItxDVXuR2DWTPlQND0CQLfouMNKbIlcxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXNliPQKUNM9omrXkpH7SS4F47wMB8GA1UdIwQY MBaAFIWbW2o9gr0A7THGzrOup61ZHuU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2Qt MmZjOWU2YjZmYzk2LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84ZWRiODItY2UyYi00NGUxLTkyY2QtMmZjOWU2YjZmYzk2 LzEvaFp0YmFqMkN2UUR0TWNiT3M2Nm5yVmtlNVRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj++JsQc3 WOpF8015MsW/dJ0KtR8HPYtOTl+koQHME0h4WJlh+P0pIH0AigEPKMDFQGw9OTK3 XOnBad6OpKr0LTiGy+gWSgTZmZcZ72QC6xw+y2JGZggm92YKHHKtIx8cgLwrzo5n xiIGe0HRNNJCgJd6axSVs8bgwq5zZ6zTUODhTSVmWmrnDkztI3BoWkF/OjRnHXcR IYGXskC8CyxgbGYINrzPf+oP439TK0J9reMBp4TPq5BLEUET4BRMIPBQlcDlNE4m 0M3QWJubdX/cdl1GwQzT/G9b6fToD6BnhZVmjpvhcKyvGuAgh5R33Yk/t/YHIB8W 3XgoPMRE07lUng== -----END CERTIFICATE-----Generated at Wed Dec 24 02:56:14 2025 by rpki-client