This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json) Hash identifier: ihlQltLF+A3ukiClZB67aEV5ceVBV0DnCIGBpzUH5hU= Subject key identifier: FA:F0:61:60:28:F4:9C:A2:5D:5C:F4:AB:CF:FA:E0:86:29:B2:89:00 Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Certificate serial: 019B3BA21A7B37E8161CA090EF1A3759D2E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft Manifest number: 08B1 Signing time: Sat 20 Dec 2025 12:00:37 +0000 Manifest this update: Sat 20 Dec 2025 12:00:37 +0000 Manifest next update: Sun 21 Dec 2025 12:00:37 +0000 Files and hashes: 1: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=) 2: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 9BhplstDCLGXn0xjOadWj5LBl0ZLqX98xd9OIE9mazI=) 3: LOrPhrxzmthFtrBc_3p4iGaGz3I.roa (hash: Jh9crPRRbXnyNqoxl2RVNueTjVhGBqJWJmOwAJP93xk=) 4: M4s-_cED_UmJMrNFksqxDmieBbc.roa (hash: ZyoLq1Z/3bfjk1VdO62xUznD9Mn7kYIEhSQSV8tMSeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:1a:7b:37:e8:16:1c:a0:90:ef:1a:37:59:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8 Validity Not Before: Dec 20 12:00:37 2025 GMT Not After : Dec 21 12:00:37 2025 GMT Subject: CN=faf0616028f49ca25d5cf4abcffae08629b28900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:c0:41:90:4d:ac:9a:8e:e4:1d:f1:ac:94: 99:4a:34:43:a6:90:bc:82:49:ea:f9:8c:d6:ff:ec: d8:f0:eb:34:d4:87:b4:0f:e9:f5:58:28:47:ef:2b: 84:d1:03:4e:95:f4:00:aa:a2:84:ed:0c:b8:e9:6f: 75:65:43:73:ee:9e:60:3b:00:ee:8c:1f:3a:b1:73: 74:04:ff:86:c4:45:27:09:57:62:f1:b8:ed:94:c4: e5:00:31:55:68:18:30:c5:01:55:d3:20:2d:c8:e8: b9:c6:45:58:3a:b0:7a:7b:cd:29:89:6a:63:b1:3f: 7a:b3:7e:52:94:ed:03:4b:6c:5c:ca:37:64:0f:b9: 17:93:06:33:6b:12:e8:ea:57:8d:81:b3:31:a4:bb: 3b:ad:a1:04:35:cb:0c:c9:98:23:78:9d:95:29:ab: 13:83:f6:a1:6e:37:81:21:ae:ba:40:47:da:11:ad: 7f:21:7b:4b:12:da:62:40:a1:f6:11:a4:0b:52:37: 60:6a:f9:2a:3c:2c:6d:fc:1f:43:1d:f7:da:18:72: 75:06:f4:12:a9:47:0a:e6:bb:70:c1:ee:a3:ad:c9: 1b:20:30:72:ca:c7:88:fe:4e:8a:af:5a:cb:d6:fd: da:46:5c:b4:a6:6d:4b:57:6d:36:71:cc:36:60:c6: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F0:61:60:28:F4:9C:A2:5D:5C:F4:AB:CF:FA:E0:86:29:B2:89:00 X509v3 Authority Key Identifier: keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:aa:bb:e4:86:bd:cf:8b:20:56:e4:8d:1d:0f:c5:10:e1:82: 09:f7:0b:85:d5:bf:db:3b:3c:ef:77:a5:64:3e:fd:10:77:29: 19:60:15:57:74:eb:9d:73:48:52:69:8a:9c:cc:a1:d3:64:a9: 06:e8:75:ee:21:f2:b3:d6:96:48:b7:f5:1e:e1:57:15:a6:9d: eb:02:e5:39:df:1f:d2:74:7d:fd:e8:81:2d:b2:d3:22:9e:f0: 84:1a:65:ec:25:1f:81:a8:5d:00:8c:8e:79:3a:ff:d3:3d:5e: 03:9b:25:a7:3b:30:f8:01:c2:d4:d1:22:d9:9a:a4:8d:73:8c: 79:89:a6:6e:82:ba:32:e4:bc:f2:6a:54:dc:c8:60:e3:a2:c2: 95:3e:f5:f3:6f:39:04:a0:d1:06:9a:59:c1:a6:b4:0e:4f:c5: 89:1f:fa:e4:bf:40:52:7d:b4:b7:fa:3b:44:80:5e:38:38:df: 73:97:7a:ef:5f:ba:dd:12:42:57:cb:c2:c7:96:d3:18:86:8a: 55:ea:0f:ac:b8:1e:c9:f5:bf:0b:c6:14:89:65:56:2a:69:80: c7:cf:b5:b4:74:de:71:8e:6d:db:a4:2f:c6:cc:f1:4f:6e:8a: 7f:1f:94:0e:5f:ea:9b:78:98:f9:75:53:7d:c9:3b:4f:ac:11: 4a:e0:99:ad -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs7ohp7N+gWHKCQ7xo3WdLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2 Mzc4YTgwHhcNMjUxMjIwMTIwMDM3WhcNMjUxMjIxMTIwMDM3WjAzMTEwLwYDVQQD EyhmYWYwNjE2MDI4ZjQ5Y2EyNWQ1Y2Y0YWJjZmZhZTA4NjI5YjI4OTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjbAQZBNrJqO5B3xrJSZSjRDppC8 gknq+YzW/+zY8Os01Ie0D+n1WChH7yuE0QNOlfQAqqKE7Qy46W91ZUNz7p5gOwDu jB86sXN0BP+GxEUnCVdi8bjtlMTlADFVaBgwxQFV0yAtyOi5xkVYOrB6e80piWpj sT96s35SlO0DS2xcyjdkD7kXkwYzaxLo6leNgbMxpLs7raEENcsMyZgjeJ2VKasT g/ahbjeBIa66QEfaEa1/IXtLEtpiQKH2EaQLUjdgavkqPCxt/B9DHffaGHJ1BvQS qUcK5rtwwe6jrckbIDByyseI/k6Kr1rL1v3aRly0pm1LV202ccw2YMajLwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPrwYWAo9JyiXVz0q8/64IYpsokAMB8GA1UdIwQY MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqq7 5Ia9z4sgVuSNHQ/FEOGCCfcLhdW/2zs873elZD79EHcpGWAVV3TrnXNIUmmKnMyh 02SpBuh17iHys9aWSLf1HuFXFaad6wLlOd8f0nR9/eiBLbLTIp7whBpl7CUfgahd AIyOeTr/0z1eA5slpzsw+AHC1NEi2ZqkjXOMeYmmboK6MuS88mpU3Mhg46LClT71 8285BKDRBppZwaa0Dk/FiR/65L9AUn20t/o7RIBeODjfc5d671+63RJCV8vCx5bT GIaKVeoPrLgeyfW/C8YUiWVWKmmAx8+1tHTecY5t26QvxszxT26Kfx+UDl/qm3iY +XVTfck7T6wRSuCZrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:20 2025 by rpki-client