This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json) Hash identifier: uOV1eo1CBQT4p/AmL5bauTvBane2gbQzL0M26awLe+4= Subject key identifier: 69:38:56:82:FA:57:42:27:8A:C6:E8:E3:A9:F7:A5:BD:2B:27:53:6E Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5 Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5 Certificate serial: 019B4B159131211110B38652B328330B40E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 12:01:03 +0000 Manifest this update: Tue 23 Dec 2025 12:01:03 +0000 Manifest next update: Wed 24 Dec 2025 12:01:03 +0000 Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=) 2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=) 3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: dEwDI8PPmnBh78Gc0Rll2K4Iako7HvxJqfZko2lptKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:91:31:21:11:10:b3:86:52:b3:28:33:0b:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5 Validity Not Before: Dec 23 12:01:03 2025 GMT Not After : Dec 24 12:01:03 2025 GMT Subject: CN=69385682fa5742278ac6e8e3a9f7a5bd2b27536e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:56:3a:f6:68:15:0a:ba:97:56:2c:71:58: a1:d0:fc:d6:4d:c0:d7:71:a2:fe:57:f0:cd:97:8b: d7:96:0f:42:8f:3c:6a:d3:d8:6e:b4:53:72:d8:5d: 6e:9b:05:3c:73:b6:26:e0:7e:23:0c:77:84:f9:61: 4c:0b:5a:86:0c:53:fd:a0:ec:d3:8a:8c:27:8d:5f: d0:d2:38:93:d2:4e:7e:02:d5:23:0d:a0:ed:01:53: 5a:23:91:70:86:cc:6e:ad:4f:c9:36:38:62:07:fb: 61:6a:78:b8:b5:7c:35:b8:6f:a9:a4:18:4f:2c:a1: c6:45:35:4a:d8:04:b2:40:08:c1:82:5e:e3:15:e0: 2f:ed:d2:59:02:65:c8:95:59:2d:61:16:07:58:71: fc:7d:ef:bf:61:4e:de:7c:37:16:2f:f9:6f:6a:3a: 1c:29:13:ce:48:9c:3e:77:06:d0:56:b0:bd:29:11: e0:a8:32:56:dc:30:27:ed:e5:fe:f9:c4:d1:b1:e6: 9b:f6:0a:b2:d5:be:93:f4:fc:1d:a6:b7:62:c6:20: f7:e9:25:f8:36:78:f8:e5:11:d0:43:da:47:c2:ac: a8:8c:b0:0e:e5:28:6c:67:c7:fb:ba:df:42:a6:ca: 91:5d:fd:eb:82:6a:4c:be:90:14:13:c7:75:1c:e9: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:56:82:FA:57:42:27:8A:C6:E8:E3:A9:F7:A5:BD:2B:27:53:6E X509v3 Authority Key Identifier: keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c3:11:6b:a4:21:89:f2:73:d6:1d:0a:f4:06:bd:05:02:ec: 58:5a:ef:bd:90:58:9b:42:09:29:3d:54:90:cc:7b:6d:08:e7: a1:1f:a5:aa:e6:d3:a7:aa:ba:a4:d1:2a:a2:60:25:5c:eb:2d: 9a:db:50:98:70:89:d1:8c:48:a0:da:2e:9c:dc:08:80:40:27: 23:2e:b4:fa:18:82:0e:76:97:11:56:4b:17:94:3f:43:41:cf: a0:45:ce:90:6f:a3:a1:5e:1c:98:ea:0f:3c:37:96:57:6a:00: 15:9f:7e:8e:3a:ca:d7:bc:47:a8:84:a8:7a:db:4a:e6:93:b2: 41:ba:a7:b5:e3:4a:71:16:f7:8b:64:ee:44:17:b7:46:3f:5c: e4:70:0f:d7:5e:a1:f8:70:63:e6:58:30:10:69:0b:cf:7c:c7: 14:27:60:07:6c:b2:6b:b1:9f:71:89:4d:ae:89:17:26:71:fe: d7:3d:ad:32:cd:a6:10:1e:08:5c:1d:31:10:aa:bd:9f:1d:97: 95:74:56:f0:92:f7:3d:2b:3a:89:f8:bd:44:4c:33:63:95:61: bf:4b:ac:6b:f0:f3:1b:7c:cc:71:40:d9:ef:96:f5:2d:9a:7a: 27:65:24:9d:97:c3:2f:88:95:01:8d:cf:b2:48:86:00:44:da: ee:4b:01:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFZExIREQs4ZSsygzC0DgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4 ZDI1YTUwHhcNMjUxMjIzMTIwMTAzWhcNMjUxMjI0MTIwMTAzWjAzMTEwLwYDVQQD Eyg2OTM4NTY4MmZhNTc0MjI3OGFjNmU4ZTNhOWY3YTViZDJiMjc1MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2JWOvZoFQq6l1YscVih0PzWTcDX caL+V/DNl4vXlg9Cjzxq09hutFNy2F1umwU8c7Ym4H4jDHeE+WFMC1qGDFP9oOzT iownjV/Q0jiT0k5+AtUjDaDtAVNaI5FwhsxurU/JNjhiB/thani4tXw1uG+ppBhP LKHGRTVK2ASyQAjBgl7jFeAv7dJZAmXIlVktYRYHWHH8fe+/YU7efDcWL/lvajoc KRPOSJw+dwbQVrC9KRHgqDJW3DAn7eX++cTRseab9gqy1b6T9PwdprdixiD36SX4 Nnj45RHQQ9pHwqyojLAO5ShsZ8f7ut9CpsqRXf3rgmpMvpAUE8d1HOkLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk4VoL6V0Inisbo46n3pb0rJ1NuMB8GA1UdIwQY MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMMRa6Qh ifJz1h0K9Aa9BQLsWFrvvZBYm0IJKT1UkMx7bQjnoR+lqubTp6q6pNEqomAlXOst mttQmHCJ0YxIoNounNwIgEAnIy60+hiCDnaXEVZLF5Q/Q0HPoEXOkG+joV4cmOoP PDeWV2oAFZ9+jjrK17xHqISoettK5pOyQbqnteNKcRb3i2TuRBe3Rj9c5HAP116h +HBj5lgwEGkLz3zHFCdgB2yya7GfcYlNrokXJnH+1z2tMs2mEB4IXB0xEKq9nx2X lXRW8JL3PSs6ifi9REwzY5Vhv0usa/DzG3zMcUDZ75b1LZp6J2UknZfDL4iVAY3P skiGAETa7ksBGw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:17:39 2025 by rpki-client