This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json) Hash identifier: nB/BjJWC7v6CKGk0CG3VZ2ag3hd9TCHzeSvxgPbZ+3c= Subject key identifier: DF:F8:92:E0:A3:E7:AC:C8:C2:EA:1C:D3:FF:57:A9:2D:FD:88:5C:DC Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32 Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032 Certificate serial: 019B5607A755FF31C8E46EEA45641D941E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft Manifest number: 127B Signing time: Thu 25 Dec 2025 15:01:40 +0000 Manifest this update: Thu 25 Dec 2025 15:01:40 +0000 Manifest next update: Fri 26 Dec 2025 15:01:40 +0000 Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: 8TJ3UEaU68srcNPPiTl0OcMayEvUFiYQj2FtJ1Mm7MU=) 2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:a7:55:ff:31:c8:e4:6e:ea:45:64:1d:94:1e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032 Validity Not Before: Dec 25 15:01:40 2025 GMT Not After : Dec 26 15:01:40 2025 GMT Subject: CN=dff892e0a3e7acc8c2ea1cd3ff57a92dfd885cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:45:ea:c8:80:d5:0c:34:17:19:36:05:42: 50:60:37:f7:48:f7:86:ce:46:0d:d8:f0:36:02:c8: 1a:96:6e:39:57:94:67:d8:c8:85:0e:58:4e:ee:84: ab:dc:1a:72:2f:8f:92:1f:70:c5:a4:e4:da:fa:0b: 9e:aa:78:0e:22:f3:77:99:62:00:17:f0:2a:e8:59: d9:4b:3b:52:55:4d:47:ed:cc:92:19:01:fd:58:ac: f4:ac:29:27:52:80:c4:f9:87:69:d2:f4:7b:dc:63: 32:19:86:97:9c:25:43:92:a7:ce:cc:12:3e:da:e2: c5:9a:5f:b3:f4:6c:25:30:3d:92:47:e6:59:58:8f: 1d:24:71:e4:93:ba:aa:15:8c:2b:59:64:3e:48:2a: 58:e6:df:1a:d7:9d:bf:ed:40:44:4a:cd:21:4a:75: 0c:2d:68:67:b2:11:ea:a9:6b:fb:4e:fd:3e:1e:a5: bd:4e:6d:d7:a0:fe:30:11:48:d9:59:bf:c0:54:08: 1c:f6:03:6a:6a:1e:51:19:fa:1f:a9:2f:82:3f:58: 96:d9:7e:23:31:9c:3e:12:88:77:af:b7:58:ec:20: dc:15:d2:e7:45:3f:22:a8:9d:57:28:73:f1:ab:63: 94:e2:24:2b:34:fb:d8:e3:ac:12:b5:ea:45:de:53: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F8:92:E0:A3:E7:AC:C8:C2:EA:1C:D3:FF:57:A9:2D:FD:88:5C:DC X509v3 Authority Key Identifier: keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:cb:3d:87:af:86:1c:8e:13:40:15:d8:72:b1:4f:47:2c:55: 2d:cc:bd:95:87:a9:d6:07:68:b4:23:72:3d:22:f0:f2:de:ac: d7:87:af:9b:9b:ee:8f:59:46:8a:5b:9f:f1:ee:ca:62:1e:98: fb:7a:4b:e3:b5:93:78:30:57:f0:a2:ac:e1:87:7c:a6:e2:bd: 88:d5:31:65:b4:78:9d:be:e4:ac:aa:df:37:fe:e7:e3:06:f9: 75:6a:77:8d:c3:17:d5:67:c1:2d:ba:65:38:ec:01:98:2c:d4: 5d:af:19:66:59:ec:3b:5b:6c:d2:23:a3:3f:c3:49:fe:8e:40: 93:08:64:11:6b:f7:95:72:df:45:c2:f8:7f:58:29:7c:0f:85: 7a:96:e0:09:54:cd:82:1a:c9:69:17:8c:28:47:db:64:8c:91: 57:24:54:f2:3d:b3:b9:4f:c4:03:d3:a4:9b:8b:17:70:c7:e5: fa:b7:f0:0c:e2:92:45:f0:33:2f:3d:60:a4:53:20:9c:37:4c: 42:44:1b:1c:a2:84:8c:58:48:e5:55:35:78:80:ca:1d:e3:4f: fd:8f:62:9b:0c:7f:2a:90:4e:b3:5c:eb:93:bf:88:49:73:45: 74:06:9f:88:2e:5e:c1:65:b0:b4:49:e7:b3:09:ea:ea:f9:b2: 21:23:9d:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWB6dV/zHI5G7qRWQdlB6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NTlmZWE3ZTgzZTY0ZTVkODI1NjIzMTNjM2EzZjE5MGY0 OWYwMzIwHhcNMjUxMjI1MTUwMTQwWhcNMjUxMjI2MTUwMTQwWjAzMTEwLwYDVQQD EyhkZmY4OTJlMGEzZTdhY2M4YzJlYTFjZDNmZjU3YTkyZGZkODg1Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNF6siA1Qw0Fxk2BUJQYDf3SPeG zkYN2PA2Asgalm45V5Rn2MiFDlhO7oSr3BpyL4+SH3DFpOTa+gueqngOIvN3mWIA F/Aq6FnZSztSVU1H7cySGQH9WKz0rCknUoDE+Ydp0vR73GMyGYaXnCVDkqfOzBI+ 2uLFml+z9GwlMD2SR+ZZWI8dJHHkk7qqFYwrWWQ+SCpY5t8a152/7UBESs0hSnUM LWhnshHqqWv7Tv0+HqW9Tm3XoP4wEUjZWb/AVAgc9gNqah5RGfofqS+CP1iW2X4j MZw+Eoh3r7dY7CDcFdLnRT8iqJ1XKHPxq2OU4iQrNPvY46wStepF3lMv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/4kuCj56zIwuoc0/9XqS39iFzcMB8GA1UdIwQY MBaAFIVZ/qfoPmTl2CViMTw6PxkPSfAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDct ODcwZTY0ZDQ2NGQ1LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDctODcwZTY0ZDQ2NGQ1 LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcs9h6+G HI4TQBXYcrFPRyxVLcy9lYep1gdotCNyPSLw8t6s14evm5vuj1lGiluf8e7KYh6Y +3pL47WTeDBX8KKs4Yd8puK9iNUxZbR4nb7krKrfN/7n4wb5dWp3jcMX1WfBLbpl OOwBmCzUXa8ZZlnsO1ts0iOjP8NJ/o5AkwhkEWv3lXLfRcL4f1gpfA+FepbgCVTN ghrJaReMKEfbZIyRVyRU8j2zuU/EA9Okm4sXcMfl+rfwDOKSRfAzLz1gpFMgnDdM QkQbHKKEjFhI5VU1eIDKHeNP/Y9imwx/KpBOs1zrk7+ISXNFdAafiC5ewWWwtEnn swnq6vmyISOdIg== -----END CERTIFICATE-----Generated at Fri Dec 26 00:16:47 2025 by rpki-client