This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json) Hash identifier: 9y+JnKuGK3vUqJqbkBXYgJ8CZUgh23+8StWQFf9FMLo= Subject key identifier: F7:7A:61:59:81:38:9A:90:E5:2D:61:98:C2:F1:70:E2:4A:25:9A:F7 Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04 Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904 Certificate serial: 019B668C7DC3153E15AD79D6F6F2AA8CB17F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft Manifest number: 09B1 Signing time: Sun 28 Dec 2025 20:00:41 +0000 Manifest this update: Sun 28 Dec 2025 20:00:41 +0000 Manifest next update: Mon 29 Dec 2025 20:00:41 +0000 Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=) 2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=) 3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: coei+gxwTs3Gy+pWae0kgKiocyakk71YGbhZlPOAj88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:7d:c3:15:3e:15:ad:79:d6:f6:f2:aa:8c:b1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904 Validity Not Before: Dec 28 20:00:41 2025 GMT Not After : Dec 29 20:00:41 2025 GMT Subject: CN=f77a615981389a90e52d6198c2f170e24a259af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:9d:4a:8b:40:76:a8:3c:41:6a:5f:9f:37: 26:a1:f1:d1:3c:9f:42:d6:62:9e:01:32:7c:62:d9: 5b:93:68:f8:9b:42:20:54:0f:d1:47:7d:e4:e6:8e: 07:5f:59:94:7e:32:1d:24:c6:f9:4c:37:6d:d9:ca: bc:83:01:f6:ea:d2:cf:e7:42:5c:f4:de:e4:be:46: fc:6e:ec:9e:1a:69:ab:16:74:7e:fb:6c:36:8b:2d: 6c:bc:27:6c:b0:87:f6:41:0f:ff:cd:71:56:03:f4: 4b:70:8b:8e:10:da:82:63:36:0b:7b:f2:f6:0f:c2: f5:f7:05:05:8a:98:05:7f:da:83:18:d9:18:c6:f4: 1c:88:86:c2:1b:d5:97:68:1b:dc:c8:83:14:98:7f: 1e:4f:24:a8:e7:6a:cb:c1:d2:5a:cf:0c:3f:69:fd: 3d:34:84:6a:db:60:38:ec:c1:9c:f6:33:66:95:3a: 91:7c:26:44:c2:97:ba:27:9f:af:0f:06:b0:c1:14: d7:c3:4f:fb:cc:21:d9:7e:59:dc:fe:92:da:f3:7c: 20:9e:5b:8b:65:84:00:c1:f8:d1:c8:10:f9:a2:6a: 77:ab:94:b3:d2:b4:07:c4:2b:8f:41:e6:57:02:67: 8c:c1:f9:10:d6:6b:a5:6b:cc:6b:cd:62:e1:38:57: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7A:61:59:81:38:9A:90:E5:2D:61:98:C2:F1:70:E2:4A:25:9A:F7 X509v3 Authority Key Identifier: keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:ae:7e:36:03:16:d0:2d:fa:7c:27:54:71:1a:b1:f9:9a: 5a:64:a7:e6:a6:0d:12:a1:26:82:39:5f:06:80:64:98:4f:14: 59:6b:31:33:5c:79:e0:41:29:5f:7d:6f:0d:64:33:9a:a7:6c: 39:1e:50:ba:0d:89:18:fe:9e:d8:e1:db:08:0e:89:0e:a5:8d: 6d:54:2a:77:9b:d5:fc:90:f9:48:68:fb:26:5e:7f:78:97:c1: 79:18:b5:a6:27:a5:1d:bc:f5:40:6d:90:e9:54:42:9e:7b:cb: e3:1e:b5:78:40:09:32:92:1c:c9:b7:da:f2:56:23:be:64:7e: 9f:59:17:62:df:3a:90:a6:c2:c3:20:d5:6c:3e:17:da:9b:10: d9:ce:5c:18:3d:8e:cf:4f:90:9f:89:9a:2e:15:76:51:75:67: b8:cf:a4:aa:d5:15:07:e1:77:5c:1f:38:62:06:44:6a:e0:01: d2:6a:57:3c:bc:98:ed:fc:95:53:3f:b5:9e:26:73:51:36:ec: 51:8e:76:51:a4:c7:37:fd:b2:b1:3c:7f:89:74:1c:3c:f9:44: 42:06:47:74:b2:76:b5:bd:62:e4:a0:96:fb:72:4d:d5:6f:a2: 95:26:14:5e:7c:bd:81:5a:58:3b:18:94:15:d1:ef:e1:f4:ad: ee:59:0e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjH3DFT4VrXnW9vKqjLF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MjBiNzdkMDM1YjkxMmZmYTQwNmRmZGRmMjllM2EyOTYz ZTY5MDQwHhcNMjUxMjI4MjAwMDQxWhcNMjUxMjI5MjAwMDQxWjAzMTEwLwYDVQQD EyhmNzdhNjE1OTgxMzg5YTkwZTUyZDYxOThjMmYxNzBlMjRhMjU5YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SydSotAdqg8QWpfnzcmofHRPJ9C 1mKeATJ8Ytlbk2j4m0IgVA/RR33k5o4HX1mUfjIdJMb5TDdt2cq8gwH26tLP50Jc 9N7kvkb8buyeGmmrFnR++2w2iy1svCdssIf2QQ//zXFWA/RLcIuOENqCYzYLe/L2 D8L19wUFipgFf9qDGNkYxvQciIbCG9WXaBvcyIMUmH8eTySo52rLwdJazww/af09 NIRq22A47MGc9jNmlTqRfCZEwpe6J5+vDwawwRTXw0/7zCHZflnc/pLa83wgnluL ZYQAwfjRyBD5omp3q5Sz0rQHxCuPQeZXAmeMwfkQ1mula8xrzWLhOFfZXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd6YVmBOJqQ5S1hmMLxcOJKJZr3MB8GA1UdIwQY MBaAFIUgt30DW5Ev+kBt/d8p46KWPmkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAt MWFmMjc5NjI1ZmQwLzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mMDQ2ODYtMzU5Yi00NzQ0LWI5MzAtMWFmMjc5NjI1ZmQw LzEvaFNDM2ZRTmJrU182UUczOTN5bmpvcFktYVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBiufjYD FtAt+nwnVHEasfmaWmSn5qYNEqEmgjlfBoBkmE8UWWsxM1x54EEpX31vDWQzmqds OR5Qug2JGP6e2OHbCA6JDqWNbVQqd5vV/JD5SGj7Jl5/eJfBeRi1pielHbz1QG2Q 6VRCnnvL4x61eEAJMpIcybfa8lYjvmR+n1kXYt86kKbCwyDVbD4X2psQ2c5cGD2O z0+Qn4maLhV2UXVnuM+kqtUVB+F3XB84YgZEauAB0mpXPLyY7fyVUz+1niZzUTbs UY52UaTHN/2ysTx/iXQcPPlEQgZHdLJ2tb1i5KCW+3JN1W+ilSYUXny9gVpYOxiU FdHv4fSt7lkOfg== -----END CERTIFICATE-----Generated at Mon Dec 29 05:23:09 2025 by rpki-client