This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json) Hash identifier: 99dLDFktgdt6ES+kAlOX/3jBH2FMGvj942dc3DTOgCM= Subject key identifier: 71:D0:89:0C:36:6D:46:13:9C:72:8E:C4:6E:4B:A2:58:4E:D5:0C:C0 Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Certificate serial: 019B397D6324923254700407702457364514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft Manifest number: 43 Signing time: Sat 20 Dec 2025 02:01:17 +0000 Manifest this update: Sat 20 Dec 2025 02:01:17 +0000 Manifest next update: Sun 21 Dec 2025 02:01:17 +0000 Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: 41LAlU8LsT0Q7EEfSoAslRKwMc7aozbEOLuMVOnMD20=) 2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:63:24:92:32:54:70:04:07:70:24:57:36:45:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Validity Not Before: Dec 20 02:01:17 2025 GMT Not After : Dec 21 02:01:17 2025 GMT Subject: CN=71d0890c366d46139c728ec46e4ba2584ed50cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:e0:1e:87:ae:b0:7b:92:17:5e:38:a2:ca: 96:d6:ef:c4:2c:0e:07:79:46:ec:1c:b7:f4:4f:1c: 46:0f:89:16:cc:54:1d:21:54:bb:c8:44:f9:ee:02: f2:d8:a6:61:a7:a1:83:d5:ec:81:66:65:d0:f9:92: 73:05:2a:50:10:70:87:46:28:20:03:08:3e:82:dd: 71:c7:dc:d7:66:6b:ba:a6:09:25:03:12:79:89:e4: 91:fd:60:38:1f:34:12:b6:55:1f:56:b2:1f:ad:db: 86:b4:2a:ed:25:c0:6c:f7:5d:45:fd:cd:8b:3f:35: 15:ec:aa:f2:82:57:95:97:ae:e2:d6:33:fe:3b:7b: b0:71:17:dd:4b:8a:9e:d4:19:b3:99:ca:35:1d:e7: 37:9d:98:99:be:11:ba:ab:4e:c3:53:b9:dd:b2:cd: b0:dd:fa:27:bc:a5:46:65:86:67:46:e4:eb:df:c4: 09:2e:c0:99:63:ba:70:24:e9:b8:27:71:b8:e4:52: 04:95:36:d4:2a:88:fe:be:76:d8:61:77:50:ae:9d: 93:1f:8e:db:33:65:34:72:8b:94:24:9e:48:d2:a5: fd:ce:de:14:87:9f:4b:ec:77:9f:b7:00:4f:05:32: 01:79:71:63:da:96:c0:ea:54:f0:05:56:7b:da:2b: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D0:89:0C:36:6D:46:13:9C:72:8E:C4:6E:4B:A2:58:4E:D5:0C:C0 X509v3 Authority Key Identifier: keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:39:ec:ac:79:27:54:93:c3:ca:e7:66:25:1b:6d:21:22:45: e3:57:05:13:3d:b9:06:d3:cd:77:8f:a0:08:9b:62:63:3c:6a: 34:77:6f:3a:a7:b1:73:4e:93:29:92:88:2c:57:77:b5:ad:5c: 73:e1:63:f6:40:45:5d:33:cd:05:3d:9b:80:4a:50:ea:7d:15: 5c:34:e7:84:f4:5d:08:dd:02:28:fe:68:3e:48:b8:4a:eb:a5: 61:66:16:f5:d6:63:62:4b:c5:a9:c3:06:fb:2c:f7:f1:85:e5: 69:4b:7b:c5:fd:a2:34:c2:fe:d5:7c:35:42:62:a4:57:2f:e5: a4:9c:0c:1b:82:4b:38:41:25:3e:91:a8:4c:18:ba:16:5b:c1: 9d:13:d2:48:3c:4a:ce:3c:1a:49:56:15:78:a5:1e:8d:24:5b: d1:47:1a:70:ef:22:24:35:93:6f:dd:54:88:d3:20:01:05:8f: 8a:d0:5a:0e:35:f3:63:4c:92:86:40:89:cb:af:a7:64:4d:88: c2:75:c1:12:14:6c:b7:7d:1e:67:03:00:a6:8c:0d:89:0e:e2: 93:8d:56:ee:cc:7f:df:f8:da:16:6b:e2:4b:4b:60:6f:3f:a1: 4a:ac:7a:52:79:e4:c8:a9:b8:3b:71:fb:d4:58:6d:30:35:63: 4e:54:de:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWMkkjJUcAQHcCRXNkUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzZiMzFmOWRlOWQzNTk0OTU5ZDFlNTlkNjZjOWI3ZTkz ZmVkNjYwHhcNMjUxMjIwMDIwMTE3WhcNMjUxMjIxMDIwMTE3WjAzMTEwLwYDVQQD Eyg3MWQwODkwYzM2NmQ0NjEzOWM3MjhlYzQ2ZTRiYTI1ODRlZDUwY2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpHgHoeusHuSF144osqW1u/ELA4H eUbsHLf0TxxGD4kWzFQdIVS7yET57gLy2KZhp6GD1eyBZmXQ+ZJzBSpQEHCHRigg Awg+gt1xx9zXZmu6pgklAxJ5ieSR/WA4HzQStlUfVrIfrduGtCrtJcBs911F/c2L PzUV7KrygleVl67i1jP+O3uwcRfdS4qe1Bmzmco1Hec3nZiZvhG6q07DU7ndss2w 3fonvKVGZYZnRuTr38QJLsCZY7pwJOm4J3G45FIElTbUKoj+vnbYYXdQrp2TH47b M2U0couUJJ5I0qX9zt4Uh59L7HeftwBPBTIBeXFj2pbA6lTwBVZ72isPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHQiQw2bUYTnHKOxG5LolhO1QzAMB8GA1UdIwQY MBaAFB7Gsx+d6dNZSVnR5Z1mybfpP+1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDct ODU3ODM4OGE1N2ZmLzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDctODU3ODM4OGE1N2Zm LzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjnsrHkn VJPDyudmJRttISJF41cFEz25BtPNd4+gCJtiYzxqNHdvOqexc06TKZKILFd3ta1c c+Fj9kBFXTPNBT2bgEpQ6n0VXDTnhPRdCN0CKP5oPki4SuulYWYW9dZjYkvFqcMG +yz38YXlaUt7xf2iNML+1Xw1QmKkVy/lpJwMG4JLOEElPpGoTBi6FlvBnRPSSDxK zjwaSVYVeKUejSRb0UcacO8iJDWTb91UiNMgAQWPitBaDjXzY0yShkCJy6+nZE2I wnXBEhRst30eZwMApowNiQ7ik41W7sx/3/jaFmviS0tgbz+hSqx6UnnkyKm4O3H7 1FhtMDVjTlTe5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:50:07 2025 by rpki-client