This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft File: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft (raw, json) Hash identifier: mOQ9EKvk7q6uLN//l9I+TJhC2TX2HB7GbsURJMW68cY= Subject key identifier: 49:DE:3D:4B:20:DB:75:63:FF:24:E4:89:C6:AE:EA:53:C5:77:11:E3 Authority key identifier: D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC Certificate issuer: /CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc Certificate serial: 019B657AC70BA84334989673A1A00364CB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft Manifest number: 0958 Signing time: Sun 28 Dec 2025 15:01:43 +0000 Manifest this update: Sun 28 Dec 2025 15:01:43 +0000 Manifest next update: Mon 29 Dec 2025 15:01:43 +0000 Files and hashes: 1: 0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl (hash: jzARMoq4KM/b2Y5Sax315xTvD49bVrziMFOQcXj8uug=) 2: 50bo-j7HR95aUFz7is7MBLLkMsc.roa (hash: aYgErZR0B+wLx1tDGd7DRHlBnCECIPjEQvva1IOrhbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:c7:0b:a8:43:34:98:96:73:a1:a0:03:64:cb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21a5940722b207b29d95a6c81be0d2bf4d410cc Validity Not Before: Dec 28 15:01:43 2025 GMT Not After : Dec 29 15:01:43 2025 GMT Subject: CN=49de3d4b20db7563ff24e489c6aeea53c57711e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:46:ee:c5:57:62:8c:f0:3b:d5:29:a0:b5: db:a8:8e:9e:b9:c1:ee:dd:c3:d9:bf:55:74:dc:f9: f6:c4:27:4c:9c:27:69:00:6a:2e:f0:a1:ea:a7:08: ec:c4:40:93:72:7b:97:a5:af:54:8d:c2:3f:8b:9d: c0:05:9a:51:93:63:f4:c2:33:8f:38:7d:d6:1a:c7: 48:a3:37:80:ba:ec:20:c9:d3:11:9a:c5:7b:cc:c3: 47:ba:1a:13:d1:d1:72:a9:07:ea:ae:2b:74:41:89: 28:c2:85:db:a2:c4:a8:bd:11:c4:5d:68:c7:31:9f: d7:62:7e:1c:26:01:51:87:fc:3b:f3:54:47:5f:9d: db:be:b9:73:db:99:e2:03:86:87:e6:4c:d3:cc:5f: f5:eb:d5:8e:ad:fa:98:3b:16:6f:12:d9:b2:31:01: 7a:74:22:26:7e:be:f4:0b:45:ac:6f:1e:3f:2f:f7: 6f:a3:10:ec:0d:a6:a7:7d:4c:ff:58:85:b8:97:6d: 42:cc:e8:8e:67:73:10:75:fe:cd:df:0f:d0:c1:cd: 8f:a6:4f:3b:0a:d8:e3:b3:8e:f6:ed:b6:98:9e:f4: 49:d5:72:bb:3e:ec:74:52:ca:ef:1f:be:d5:76:cd: a5:1a:bc:ae:5a:dd:6d:72:9b:eb:fe:bf:0d:66:2d: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:3D:4B:20:DB:75:63:FF:24:E4:89:C6:AE:EA:53:C5:77:11:E3 X509v3 Authority Key Identifier: keyid:D2:1A:59:40:72:2B:20:7B:29:D9:5A:6C:81:BE:0D:2B:F4:D4:10:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/56433a-0a70-4eae-9f9d-8cfbdb799284/1/0hpZQHIrIHsp2Vpsgb4NK_TUEMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:48:ec:a7:08:2f:85:47:66:54:13:95:cd:98:4b:c0:00:5a: d2:91:59:75:c2:64:47:5d:5e:0b:7d:b0:e1:18:90:89:71:5b: 80:7e:a1:74:5e:48:ac:eb:d3:b6:d7:d5:b6:01:66:23:ca:16: c5:78:da:99:09:dc:a9:86:60:69:3a:70:72:a7:19:0d:6c:35: 91:b5:23:46:31:31:ea:2f:1b:e2:b2:e5:a7:fe:96:64:42:86: b1:fc:14:80:7e:4c:9a:11:78:c7:10:04:3d:12:0d:3b:bf:9d: 91:cc:cc:0a:40:9b:99:55:f0:c3:e2:2d:af:ad:dd:66:61:8a: 4d:38:6d:7e:4e:83:ff:81:8a:83:57:f7:47:25:9a:a9:7a:3b: c4:d8:eb:56:76:ba:a8:57:12:92:d1:4d:72:de:a8:5b:8a:2e: d6:4c:25:f5:ae:5f:90:e3:f5:fc:7f:1e:8e:66:ae:05:28:88: 2c:3e:69:8f:d7:69:ca:6b:de:ec:17:06:88:39:e8:4b:a9:0e: cc:62:07:a4:cd:61:11:8a:50:8d:fb:a1:97:e6:f9:a4:34:93: 5e:7a:4e:e7:21:ad:d7:97:1d:0a:1f:ca:05:1b:ae:e4:2a:09: bf:db:7a:39:af:80:78:ce:e9:1f:2b:f9:07:dd:14:33:89:1b: 36:7c:cb:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlescLqEM0mJZzoaADZMsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMWE1OTQwNzIyYjIwN2IyOWQ5NWE2YzgxYmUwZDJiZjRk NDEwY2MwHhcNMjUxMjI4MTUwMTQzWhcNMjUxMjI5MTUwMTQzWjAzMTEwLwYDVQQD Eyg0OWRlM2Q0YjIwZGI3NTYzZmYyNGU0ODljNmFlZWE1M2M1NzcxMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbdG7sVXYozwO9UpoLXbqI6eucHu 3cPZv1V03Pn2xCdMnCdpAGou8KHqpwjsxECTcnuXpa9UjcI/i53ABZpRk2P0wjOP OH3WGsdIozeAuuwgydMRmsV7zMNHuhoT0dFyqQfqrit0QYkowoXbosSovRHEXWjH MZ/XYn4cJgFRh/w781RHX53bvrlz25niA4aH5kzTzF/169WOrfqYOxZvEtmyMQF6 dCImfr70C0Wsbx4/L/dvoxDsDaanfUz/WIW4l21CzOiOZ3MQdf7N3w/Qwc2Ppk87 Ctjjs4727baYnvRJ1XK7Pux0UsrvH77Vds2lGryuWt1tcpvr/r8NZi2/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnePUsg23Vj/yTkicau6lPFdxHjMB8GA1UdIwQY MBaAFNIaWUByKyB7KdlabIG+DSv01BDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQt OGNmYmRiNzk5Mjg0LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81NjQzM2EtMGE3MC00ZWFlLTlmOWQtOGNmYmRiNzk5Mjg0 LzEvMGhwWlFISXJJSHNwMlZwc2diNE5LX1RVRU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0jspwgv hUdmVBOVzZhLwABa0pFZdcJkR11eC32w4RiQiXFbgH6hdF5IrOvTttfVtgFmI8oW xXjamQncqYZgaTpwcqcZDWw1kbUjRjEx6i8b4rLlp/6WZEKGsfwUgH5MmhF4xxAE PRINO7+dkczMCkCbmVXww+Itr63dZmGKTThtfk6D/4GKg1f3RyWaqXo7xNjrVna6 qFcSktFNct6oW4ou1kwl9a5fkOP1/H8ejmauBSiILD5pj9dpymve7BcGiDnoS6kO zGIHpM1hEYpQjfuhl+b5pDSTXnpO5yGt15cdCh/KBRuu5CoJv9t6Oa+AeM7pHyv5 B90UM4kbNnzLGA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:21:34 2025 by rpki-client