This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json) Hash identifier: R+opW6y9sc8/mIenro+D4Duhz6l8HnSXcQGhIqxZOL4= Subject key identifier: FA:44:FF:DB:25:39:5B:A1:0A:E8:D8:45:C1:1E:A9:42:49:43:CA:F6 Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Certificate serial: 019B4EBBB0B1ECE57DC9007AF2B200BF0F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft Manifest number: 060D Signing time: Wed 24 Dec 2025 05:01:21 +0000 Manifest this update: Wed 24 Dec 2025 05:01:21 +0000 Manifest next update: Thu 25 Dec 2025 05:01:21 +0000 Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=) 2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: mPQ0WSSmZ6BaztzSgnBGG4jyVH/oQa1LhtOKnAvYku8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:b0:b1:ec:e5:7d:c9:00:7a:f2:b2:00:bf:0f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1 Validity Not Before: Dec 24 05:01:21 2025 GMT Not After : Dec 25 05:01:21 2025 GMT Subject: CN=fa44ffdb25395ba10ae8d845c11ea9424943caf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:9c:1d:47:d0:87:bb:86:cb:a5:31:35:af: 60:90:99:33:0c:fe:14:e6:76:b8:bb:90:b4:f9:fa: c6:f8:f5:cc:a9:06:9e:5b:a6:63:67:bb:8a:59:1f: 0a:e2:fa:c9:59:dc:94:82:44:6a:e7:1e:a1:3a:91: 3c:5d:2a:2c:c6:48:28:f9:83:5f:ff:90:28:e4:62: 71:12:d5:0b:cb:07:2a:5d:f3:b7:19:c4:77:fd:74: 69:d5:f5:e5:9e:39:40:a8:70:92:d3:12:6f:af:7a: b4:10:4d:08:a5:76:07:02:16:8e:dc:bf:05:f7:cc: 32:03:18:b6:21:5a:6e:64:60:f1:3e:e8:d7:3b:fb: 03:05:60:c6:cf:83:d3:27:41:15:9c:b3:f9:7d:a4: b0:a1:2b:51:47:bd:3f:85:c3:4b:22:7f:e2:99:1c: 0c:68:17:03:68:be:50:12:cb:5c:b4:42:80:a7:96: 55:83:eb:76:e9:d3:df:a1:9d:9b:eb:83:ad:b5:ad: 6a:65:87:e0:8c:91:39:c6:83:0a:ae:51:be:b3:41: 75:33:22:e3:a5:f2:01:27:fd:f1:c6:f5:00:34:49: 5e:75:af:8d:24:fc:a6:11:b1:ad:cc:3f:26:f9:23: 32:25:45:65:18:84:87:d3:18:df:5d:f0:8f:23:d0: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:44:FF:DB:25:39:5B:A1:0A:E8:D8:45:C1:1E:A9:42:49:43:CA:F6 X509v3 Authority Key Identifier: keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ea:4f:60:4c:74:be:e0:35:62:c3:42:0c:c0:38:c3:2c:d5: 9a:a4:2a:ce:ab:42:aa:3b:f9:db:ee:7c:5f:f6:d4:13:95:01: 6c:9c:65:c1:8b:ea:7d:83:18:64:4c:1c:45:fd:6a:b8:38:50: 45:d4:f4:a9:81:52:ae:2a:b9:fe:71:b9:c7:1a:d3:85:36:80: ce:f4:55:a0:f6:31:cf:c1:bd:56:79:e9:51:85:06:28:4b:79: 0f:ab:f6:7c:5b:30:ed:04:99:4e:17:1e:db:96:16:2c:79:49: db:22:2b:e1:69:59:ed:0c:92:ba:1a:73:d3:44:32:55:12:ac: f8:40:a4:b1:45:82:c8:cc:7d:4f:00:69:65:3b:fc:d1:78:f2: 32:1d:53:dd:b8:aa:50:21:e1:a7:70:be:99:9b:ef:bd:4a:72: 1d:bb:5a:f3:b7:eb:4e:b7:21:c5:a4:d6:09:1f:99:e8:52:34: 4e:4d:24:a7:1a:16:f0:51:52:b4:f3:eb:46:47:b5:71:25:94: ad:d9:f2:41:73:a9:cd:81:21:e2:c7:99:2c:21:c8:05:76:ed: 4d:60:73:7f:0c:ce:cb:a9:d9:75:a3:74:98:01:92:87:1f:49: 54:63:74:25:eb:58:0b:4d:cf:f0:9a:90:16:97:94:56:34:c1: ca:d8:29:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu7Cx7OV9yQB68rIAvw8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDU2ZTIyZGQxMjNjODM0YzBhNGFhNzQ1MTZkNWZiM2Nj NzdkZDEwHhcNMjUxMjI0MDUwMTIxWhcNMjUxMjI1MDUwMTIxWjAzMTEwLwYDVQQD EyhmYTQ0ZmZkYjI1Mzk1YmExMGFlOGQ4NDVjMTFlYTk0MjQ5NDNjYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zicHUfQh7uGy6UxNa9gkJkzDP4U 5na4u5C0+frG+PXMqQaeW6ZjZ7uKWR8K4vrJWdyUgkRq5x6hOpE8XSosxkgo+YNf /5Ao5GJxEtULywcqXfO3GcR3/XRp1fXlnjlAqHCS0xJvr3q0EE0IpXYHAhaO3L8F 98wyAxi2IVpuZGDxPujXO/sDBWDGz4PTJ0EVnLP5faSwoStRR70/hcNLIn/imRwM aBcDaL5QEstctEKAp5ZVg+t26dPfoZ2b64Otta1qZYfgjJE5xoMKrlG+s0F1MyLj pfIBJ/3xxvUANEleda+NJPymEbGtzD8m+SMyJUVlGISH0xjfXfCPI9DFmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpE/9slOVuhCujYRcEeqUJJQ8r2MB8GA1UdIwQY MBaAFIQFbiLdEjyDTApKp0UW1fs8x33RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMt NTljOWMzZmI5OTQ3LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMtNTljOWMzZmI5OTQ3 LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOpPYEx0 vuA1YsNCDMA4wyzVmqQqzqtCqjv52+58X/bUE5UBbJxlwYvqfYMYZEwcRf1quDhQ RdT0qYFSriq5/nG5xxrThTaAzvRVoPYxz8G9VnnpUYUGKEt5D6v2fFsw7QSZThce 25YWLHlJ2yIr4WlZ7QySuhpz00QyVRKs+ECksUWCyMx9TwBpZTv80XjyMh1T3biq UCHhp3C+mZvvvUpyHbta87frTrchxaTWCR+Z6FI0Tk0kpxoW8FFStPPrRke1cSWU rdnyQXOpzYEh4seZLCHIBXbtTWBzfwzOy6nZdaN0mAGShx9JVGN0JetYC03P8JqQ FpeUVjTBytgpZw== -----END CERTIFICATE-----Generated at Wed Dec 24 12:25:52 2025 by rpki-client