This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json) Hash identifier: ZBv7QKnU7HA2wmj53iYycnEiomjBobaR5JRQ/rkGtHo= Subject key identifier: AD:0D:6B:F7:68:34:E6:70:29:38:3C:D5:68:DE:CB:BD:63:95:98:F2 Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Certificate serial: 019B5E9C827707A757FE786990E0CE65469E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft Manifest number: 029E Signing time: Sat 27 Dec 2025 07:01:13 +0000 Manifest this update: Sat 27 Dec 2025 07:01:13 +0000 Manifest next update: Sun 28 Dec 2025 07:01:13 +0000 Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: B0TWBUEFdrSyUSd3J+QfMu6D24PGHuKo5tJttTyxytU=) 2: ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa (hash: v7QZ8HhFIWG34nVuRTJxlOgKji8pCozgn4SVeyKdDG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:82:77:07:a7:57:fe:78:69:90:e0:ce:65:46:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Validity Not Before: Dec 27 07:01:13 2025 GMT Not After : Dec 28 07:01:13 2025 GMT Subject: CN=ad0d6bf76834e67029383cd568decbbd639598f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:ce:5b:92:4d:97:80:f7:52:f0:5f:5c:e0: 72:f0:87:ca:91:b0:62:45:b7:7a:cb:d0:8d:ed:8a: 30:35:bf:cb:16:f3:b7:40:d6:ac:a2:97:33:e5:e4: bf:7f:77:1a:71:71:0b:78:f9:8b:06:03:d2:41:30: 38:5a:65:bf:95:b8:b9:37:19:dc:3d:43:a7:3e:31: 60:9d:dd:7a:e1:cc:b3:5e:3c:46:b1:f9:3b:5f:ef: 0b:6f:1e:cd:d8:43:92:15:4a:db:ff:3e:dd:41:82: de:e0:68:5a:21:1c:21:be:1b:7a:d9:b0:58:42:51: 90:5e:28:b1:8d:1c:e4:6f:00:26:25:78:f9:c6:00: 9e:5d:e2:b3:e7:2a:76:02:85:e3:8a:2d:76:b7:ed: 9f:40:b9:20:51:f6:98:29:d3:00:b8:45:fa:b9:49: a5:c6:70:e2:be:f1:d1:16:9c:28:d9:9d:0e:06:3a: 1a:e3:eb:74:3f:91:32:d4:91:4d:39:43:c3:72:af: 9c:c1:09:8e:d2:ca:72:35:bd:bf:27:cb:d1:98:3b: 03:51:e0:70:97:67:67:d7:34:5b:df:15:39:d0:44: f9:95:1c:7b:24:65:33:b2:fc:76:34:6f:b9:d8:f2: 5a:d6:09:bd:3b:90:db:b9:54:e5:f9:30:5b:44:cd: 5c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0D:6B:F7:68:34:E6:70:29:38:3C:D5:68:DE:CB:BD:63:95:98:F2 X509v3 Authority Key Identifier: keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6c:95:db:33:7f:a0:d9:2f:a7:41:57:3e:51:8f:24:94:12: 05:2c:3e:74:e5:b5:57:6d:9a:c0:b6:44:28:59:52:fc:51:0a: ff:5e:50:18:6a:ac:91:02:2a:3d:bb:c3:66:9f:c9:a6:58:41: 90:c2:45:c3:86:11:f0:ab:fd:56:42:84:4c:bd:94:9b:81:f5: 4e:e0:7f:c5:a5:0a:3a:8f:ef:5c:e9:c0:57:98:3e:c6:9b:f1: df:a0:d4:f8:f4:07:78:09:a3:8d:3e:07:22:4a:6f:6a:93:2f: e0:95:0b:ec:6e:2b:23:dd:fb:28:98:59:d3:b7:5a:54:ff:38: dd:4a:f0:e4:37:b2:92:c5:4d:4b:4d:9c:2b:fe:f7:e7:25:78: f9:8e:68:07:9d:ef:c1:ca:b5:37:7c:d4:cd:af:ec:31:b2:7c: 92:b0:33:7c:ea:07:8b:03:3b:9b:d6:b1:c7:4c:d2:a0:d0:0f: 7f:30:6b:86:f5:83:9e:59:e8:4e:8e:55:06:00:42:51:6c:ce: ba:0e:7d:86:99:c2:3f:10:88:be:b4:2a:3a:96:39:d9:29:ba: df:c5:d0:b1:e1:d9:3b:60:45:f1:3d:96:eb:87:54:69:8f:24: 71:1b:54:aa:73:9e:eb:51:c9:16:a5:5d:33:e4:2d:ec:a2:74: 3c:d9:f1:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenIJ3B6dX/nhpkODOZUaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy ZWQzM2UwHhcNMjUxMjI3MDcwMTEzWhcNMjUxMjI4MDcwMTEzWjAzMTEwLwYDVQQD EyhhZDBkNmJmNzY4MzRlNjcwMjkzODNjZDU2OGRlY2JiZDYzOTU5OGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+TOW5JNl4D3UvBfXOBy8IfKkbBi Rbd6y9CN7YowNb/LFvO3QNasopcz5eS/f3cacXELePmLBgPSQTA4WmW/lbi5Nxnc PUOnPjFgnd164cyzXjxGsfk7X+8Lbx7N2EOSFUrb/z7dQYLe4GhaIRwhvht62bBY QlGQXiixjRzkbwAmJXj5xgCeXeKz5yp2AoXjii12t+2fQLkgUfaYKdMAuEX6uUml xnDivvHRFpwo2Z0OBjoa4+t0P5Ey1JFNOUPDcq+cwQmO0spyNb2/J8vRmDsDUeBw l2dn1zRb3xU50ET5lRx7JGUzsvx2NG+52PJa1gm9O5DbuVTl+TBbRM1cJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0Na/doNOZwKTg81Wjey71jlZjyMB8GA1UdIwQY MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0 LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2yV2zN/ oNkvp0FXPlGPJJQSBSw+dOW1V22awLZEKFlS/FEK/15QGGqskQIqPbvDZp/JplhB kMJFw4YR8Kv9VkKETL2Um4H1TuB/xaUKOo/vXOnAV5g+xpvx36DU+PQHeAmjjT4H IkpvapMv4JUL7G4rI937KJhZ07daVP843Urw5DeyksVNS02cK/735yV4+Y5oB53v wcq1N3zUza/sMbJ8krAzfOoHiwM7m9axx0zSoNAPfzBrhvWDnlnoTo5VBgBCUWzO ug59hpnCPxCIvrQqOpY52Sm638XQseHZO2BF8T2W64dUaY8kcRtUqnOe61HJFqVd M+Qt7KJ0PNnxvg== -----END CERTIFICATE-----Generated at Sat Dec 27 16:03:05 2025 by rpki-client