This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json) Hash identifier: F2wnyL12ySirKGfuBJ/VYGyEyyxPwV7oCPlU3V6+5Mg= Subject key identifier: 74:55:4C:D9:CB:04:64:F8:D5:0A:C5:01:C5:26:55:9C:BE:00:BD:E0 Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Certificate serial: 019B3079BDF42DB12357F887ACA8EC175B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 08:00:43 +0000 Manifest this update: Thu 18 Dec 2025 08:00:43 +0000 Manifest next update: Fri 19 Dec 2025 08:00:43 +0000 Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=) 2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: C1LcPZ+RQaVQ53lKJ6kDZIYzxgv/KEj/nz8vYc+gqTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:bd:f4:2d:b1:23:57:f8:87:ac:a8:ec:17:5b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Validity Not Before: Dec 18 08:00:43 2025 GMT Not After : Dec 19 08:00:43 2025 GMT Subject: CN=74554cd9cb0464f8d50ac501c526559cbe00bde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:f5:a0:cd:5d:84:96:e1:82:f3:3b:9b:a9: 75:6d:10:5a:35:9f:28:de:d4:eb:2f:12:be:23:ee: 3b:de:bc:5a:a9:ae:bf:8b:a7:2a:27:95:41:2c:db: 5d:4c:81:d9:df:8a:c8:52:2e:9c:aa:5c:52:a0:b2: 71:0b:aa:5b:b8:48:e3:ea:cd:2a:1a:f9:1e:b8:66: 0f:43:a7:7a:74:18:d9:83:98:f5:db:80:4d:1a:f8: f1:25:fe:e0:1a:48:ea:ae:1a:4b:20:3a:49:42:fa: 84:5b:53:26:d8:3b:fe:dc:fa:a6:08:2b:c2:66:40: 0a:e1:7c:70:ec:13:81:a9:be:25:0d:5e:c9:02:43: 71:3e:1b:ac:91:9c:64:54:c8:cb:c2:b0:4c:59:da: b4:89:13:af:c3:e0:dd:66:89:1f:92:cf:fc:14:5b: d8:47:86:c2:ba:81:6b:fe:cc:4a:77:2c:86:b5:fa: eb:11:3d:3f:98:77:40:90:83:4c:40:43:38:99:fa: 3c:f4:ca:3d:27:42:7b:b3:70:4c:60:1d:6a:11:9b: 45:f3:07:3e:62:d1:a4:f0:2e:c6:91:49:29:05:b9: 65:74:51:a7:6f:a6:2f:81:31:ca:f5:b3:1b:02:f3: d9:94:67:39:23:5b:9f:ad:ce:02:a0:73:46:ea:25: cd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:55:4C:D9:CB:04:64:F8:D5:0A:C5:01:C5:26:55:9C:BE:00:BD:E0 X509v3 Authority Key Identifier: keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:83:66:cb:ff:dd:08:4f:13:5a:f3:fb:e0:83:02:c4:59:bf: 5d:72:c2:aa:49:d4:ac:8b:2f:89:50:4c:8f:48:91:65:bc:ae: fa:5b:49:83:0a:46:6f:ac:c5:90:9d:38:14:0a:8f:a4:16:44: 74:20:46:41:49:0f:95:fb:c2:fb:c7:29:76:a0:12:c1:af:d8: 75:d4:f6:c0:4f:43:4c:ce:0c:3a:63:05:e1:54:3c:de:f0:01: 6f:5d:18:0e:0c:a4:cc:f7:b1:17:ed:65:9e:fc:7c:b3:64:b5: 6b:53:f1:da:2e:34:0b:18:eb:98:18:46:c9:72:0a:4a:da:12: 2d:9a:63:d5:8f:96:13:fc:ae:b5:90:f7:6c:b7:12:c7:89:94: da:7d:a3:69:96:b3:2e:fd:e7:02:e9:28:84:c4:47:91:db:89: 78:bc:09:a1:4c:35:d0:a1:a7:cb:f9:a4:f1:6e:ac:1a:66:b2: 5a:0c:dc:50:2b:8d:0a:ad:f1:94:ed:7a:58:59:54:fd:92:9c: 82:29:c2:8d:fe:b9:d5:43:41:e7:d7:73:49:48:5d:26:d4:92: ff:af:35:61:30:e2:d9:ea:0d:87:96:db:33:5e:67:79:bf:d5: 65:63:89:a2:2b:d4:af:8f:1b:a3:fc:6e:9a:03:3e:63:3f:9f: 85:61:e6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweb30LbEjV/iHrKjsF1sLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi MTRjZGEwHhcNMjUxMjE4MDgwMDQzWhcNMjUxMjE5MDgwMDQzWjAzMTEwLwYDVQQD Eyg3NDU1NGNkOWNiMDQ2NGY4ZDUwYWM1MDFjNTI2NTU5Y2JlMDBiZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbT1oM1dhJbhgvM7m6l1bRBaNZ8o 3tTrLxK+I+473rxaqa6/i6cqJ5VBLNtdTIHZ34rIUi6cqlxSoLJxC6pbuEjj6s0q GvkeuGYPQ6d6dBjZg5j124BNGvjxJf7gGkjqrhpLIDpJQvqEW1Mm2Dv+3PqmCCvC ZkAK4Xxw7BOBqb4lDV7JAkNxPhuskZxkVMjLwrBMWdq0iROvw+DdZokfks/8FFvY R4bCuoFr/sxKdyyGtfrrET0/mHdAkINMQEM4mfo89Mo9J0J7s3BMYB1qEZtF8wc+ YtGk8C7GkUkpBblldFGnb6YvgTHK9bMbAvPZlGc5I1ufrc4CoHNG6iXNLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRVTNnLBGT41QrFAcUmVZy+AL3gMB8GA1UdIwQY MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4 LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKINmy//d CE8TWvP74IMCxFm/XXLCqknUrIsviVBMj0iRZbyu+ltJgwpGb6zFkJ04FAqPpBZE dCBGQUkPlfvC+8cpdqASwa/YddT2wE9DTM4MOmMF4VQ83vABb10YDgykzPexF+1l nvx8s2S1a1Px2i40CxjrmBhGyXIKStoSLZpj1Y+WE/yutZD3bLcSx4mU2n2jaZaz Lv3nAukohMRHkduJeLwJoUw10KGny/mk8W6sGmayWgzcUCuNCq3xlO16WFlU/ZKc ginCjf651UNB59dzSUhdJtSS/681YTDi2eoNh5bbM15neb/VZWOJoivUr48bo/xu mgM+Yz+fhWHm0g== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:52 2025 by rpki-client