This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json) Hash identifier: 61H8DFzx5F1X0YFMtQc9ru2U6mPPqFmGcRAeEBRVxz4= Subject key identifier: 58:5A:1F:14:11:BF:CE:A0:9B:37:10:E3:51:CF:10:75:76:8F:F8:1A Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Certificate serial: 019B269B9753F025DAC9C3E45A9C1771AE57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft Manifest number: 0281 Signing time: Tue 16 Dec 2025 10:01:29 +0000 Manifest this update: Tue 16 Dec 2025 10:01:29 +0000 Manifest next update: Wed 17 Dec 2025 10:01:29 +0000 Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: RjB/AijQUYwWFwgUR0jAuVAYE96Ip1950BTpr7rFHsI=) 2: ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa (hash: v7QZ8HhFIWG34nVuRTJxlOgKji8pCozgn4SVeyKdDG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:97:53:f0:25:da:c9:c3:e4:5a:9c:17:71:ae:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Validity Not Before: Dec 16 10:01:29 2025 GMT Not After : Dec 17 10:01:29 2025 GMT Subject: CN=585a1f1411bfcea09b3710e351cf1075768ff81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:e4:8f:dc:6c:9a:1a:fa:96:e9:c3:fd:9c: d9:46:96:73:2c:29:f1:7f:89:c4:66:75:57:6e:0c: c1:b5:ff:16:42:82:dd:d3:55:1f:81:8a:32:3c:01: 4f:cb:94:4e:dc:c2:f6:5b:ba:4a:ef:1a:73:9f:b1: dc:d3:99:be:c8:dc:36:47:4a:96:47:49:fa:9b:b6: 3d:0c:df:eb:6f:ea:34:e7:a6:2f:f2:3c:99:c5:d8: fe:19:01:4c:d5:0e:da:23:e6:82:f7:f1:97:dc:53: 0d:10:c7:9c:3e:6b:c7:de:9d:70:6b:69:d7:1e:2f: e4:08:66:10:9f:2a:52:85:21:ab:1b:60:ab:59:50: ba:0a:d6:cc:2e:0c:ef:58:99:c6:a0:91:7c:15:77: 76:f1:45:3a:30:59:83:df:47:7c:da:71:ad:4c:f3: 60:56:d3:68:c2:a9:76:fd:0a:6d:f0:bc:7c:2e:c1: cc:49:e6:09:56:24:2d:14:39:4a:a0:2c:ce:3e:37: c2:a4:51:f2:34:7c:ec:cd:6a:3b:3a:9d:d1:b9:9e: cd:dd:b2:29:17:24:c8:3d:6a:b0:8d:42:f5:a4:57: d1:a9:f9:b4:41:42:a4:98:e2:df:4e:77:dd:b4:76: c5:35:db:32:fb:cb:07:3d:70:fe:b2:0a:e7:f2:2c: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:1F:14:11:BF:CE:A0:9B:37:10:E3:51:CF:10:75:76:8F:F8:1A X509v3 Authority Key Identifier: keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5f:ff:34:a2:99:f1:dc:ea:d1:56:e1:82:40:d9:04:77:e3: 8d:89:c9:4b:e7:09:ec:22:c1:bd:fa:4c:f0:77:f0:b8:9b:f2: c9:2b:4f:56:18:aa:68:73:96:91:e2:0a:c5:d2:d2:3e:7c:4b: d8:8f:8e:24:93:c7:37:c1:d3:f1:bc:64:5a:f5:ed:9a:68:0d: e7:54:40:4f:64:18:30:03:05:2c:b9:e0:3a:ae:56:46:14:9a: 89:aa:00:2d:31:e0:a7:71:3e:ca:8e:65:45:43:29:93:68:db: 91:b5:ee:30:f4:fd:74:ff:2b:9b:74:ee:7c:47:f1:e3:35:c2: 39:19:dd:04:34:2d:d3:e7:de:1b:7f:a0:05:da:66:02:8c:2d: 8c:75:3a:f3:42:3d:87:aa:5b:62:63:91:ee:a2:34:69:24:c8: 41:4f:e6:ca:9b:84:89:c4:1f:8e:99:1b:c8:ad:3d:2e:3e:0a: 32:64:74:d0:0a:60:ef:44:be:73:b6:2c:26:78:b4:c6:e3:0f: 18:e1:45:ec:53:37:6d:b5:f9:ab:f4:79:4c:f3:2c:e4:46:3b: 8d:60:99:38:5a:ba:30:96:d0:15:35:61:15:34:24:3c:80:57: 85:39:c2:e3:d4:7f:21:18:b9:d0:b6:5c:9b:c1:b1:d0:39:d6: dd:6f:1f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm5dT8CXaycPkWpwXca5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy ZWQzM2UwHhcNMjUxMjE2MTAwMTI5WhcNMjUxMjE3MTAwMTI5WjAzMTEwLwYDVQQD Eyg1ODVhMWYxNDExYmZjZWEwOWIzNzEwZTM1MWNmMTA3NTc2OGZmODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYPkj9xsmhr6lunD/ZzZRpZzLCnx f4nEZnVXbgzBtf8WQoLd01UfgYoyPAFPy5RO3ML2W7pK7xpzn7Hc05m+yNw2R0qW R0n6m7Y9DN/rb+o056Yv8jyZxdj+GQFM1Q7aI+aC9/GX3FMNEMecPmvH3p1wa2nX Hi/kCGYQnypShSGrG2CrWVC6CtbMLgzvWJnGoJF8FXd28UU6MFmD30d82nGtTPNg VtNowql2/Qpt8Lx8LsHMSeYJViQtFDlKoCzOPjfCpFHyNHzszWo7Op3RuZ7N3bIp FyTIPWqwjUL1pFfRqfm0QUKkmOLfTnfdtHbFNdsy+8sHPXD+sgrn8iyYBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhaHxQRv86gmzcQ41HPEHV2j/gaMB8GA1UdIwQY MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0 LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl//NKKZ 8dzq0VbhgkDZBHfjjYnJS+cJ7CLBvfpM8HfwuJvyyStPVhiqaHOWkeIKxdLSPnxL 2I+OJJPHN8HT8bxkWvXtmmgN51RAT2QYMAMFLLngOq5WRhSaiaoALTHgp3E+yo5l RUMpk2jbkbXuMPT9dP8rm3TufEfx4zXCORndBDQt0+feG3+gBdpmAowtjHU680I9 h6pbYmOR7qI0aSTIQU/mypuEicQfjpkbyK09Lj4KMmR00Apg70S+c7YsJni0xuMP GOFF7FM3bbX5q/R5TPMs5EY7jWCZOFq6MJbQFTVhFTQkPIBXhTnC49R/IRi50LZc m8Gx0DnW3W8fXQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:23:49 2025 by rpki-client