This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft File: hnWNin7SGnQXLM7sM4xk02sDeNQ.mft (raw, json) Hash identifier: mrfQRQ7QxkU2hkkMVSsbZykf932Vj39/VloVtEvPCWI= Subject key identifier: BD:8C:09:E3:2F:B8:4B:E2:C2:C3:D9:94:49:37:EA:F9:E5:A3:D8:F9 Authority key identifier: 86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4 Certificate issuer: /CN=86758d8a7ed21a74172cceec338c64d36b0378d4 Certificate serial: 019B330D6BB90FE28A6608308C90C04219C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft Manifest number: 05EB Signing time: Thu 18 Dec 2025 20:01:16 +0000 Manifest this update: Thu 18 Dec 2025 20:01:16 +0000 Manifest next update: Fri 19 Dec 2025 20:01:16 +0000 Files and hashes: 1: Tmqal5XUVoUE8c77AFlzaqU97c0.roa (hash: r3d2ZcS64ApbYh564RwP4TPidKg35TEhpwQ3BNXhcQw=) 2: hnWNin7SGnQXLM7sM4xk02sDeNQ.crl (hash: BHudWV1yDAsSCgNWxv4yLYQqiciTCs9b4c6nBdfBhZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:6b:b9:0f:e2:8a:66:08:30:8c:90:c0:42:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86758d8a7ed21a74172cceec338c64d36b0378d4 Validity Not Before: Dec 18 20:01:16 2025 GMT Not After : Dec 19 20:01:16 2025 GMT Subject: CN=bd8c09e32fb84be2c2c3d9944937eaf9e5a3d8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:ce:08:ee:db:6c:ca:62:91:ea:f8:49:61: 96:9c:96:d7:03:6b:20:73:97:4f:0d:87:38:c2:03: 0d:fa:63:64:60:60:3a:80:3a:71:5d:c8:42:f4:ec: 6d:44:1a:39:b5:5e:87:3c:b8:c4:07:f5:92:9c:b3: c7:43:94:81:34:6a:5d:bd:ff:39:34:52:f6:e4:45: 1f:c9:c3:13:81:04:32:6a:2c:01:ca:b9:fd:42:65: c9:dc:03:88:c5:92:13:7a:95:37:b7:7e:da:93:76: 2f:8a:0c:46:5a:39:f6:ee:5c:a3:39:df:07:98:8c: e4:f8:98:d5:bc:37:56:e3:13:45:63:83:4d:84:d5: 74:38:f5:1c:12:f5:95:18:19:77:3d:3e:c4:41:10: ba:63:bf:18:bf:cf:f5:c6:48:09:b9:71:b6:a1:d1: 34:af:56:2a:68:0b:b8:c5:4a:38:c8:c4:11:95:ab: 8a:9a:b3:34:36:8f:24:ef:6f:37:3e:5b:6e:50:32: 5e:da:76:f0:53:5c:b6:b8:86:d5:a3:31:c8:a3:f9: a6:f0:1f:33:9e:0f:5a:66:a8:af:74:a2:60:1d:d1: db:b9:93:af:00:91:c3:90:87:03:f1:95:8b:15:b9: 90:01:2c:e5:09:b6:bc:0c:e4:d5:8e:60:98:cd:4f: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8C:09:E3:2F:B8:4B:E2:C2:C3:D9:94:49:37:EA:F9:E5:A3:D8:F9 X509v3 Authority Key Identifier: keyid:86:75:8D:8A:7E:D2:1A:74:17:2C:CE:EC:33:8C:64:D3:6B:03:78:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnWNin7SGnQXLM7sM4xk02sDeNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e55a9b-2fa0-4af4-90dd-cdacb8467187/1/hnWNin7SGnQXLM7sM4xk02sDeNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:01:0d:be:e8:85:dd:49:d3:92:9a:fd:1a:0e:92:18:e0:ee: cc:87:d2:6c:6c:7e:6a:81:99:36:76:91:07:cd:66:1e:b5:d3: 80:ad:64:9a:0d:0c:30:75:5b:89:ad:c3:f9:41:ab:68:03:4a: 09:ae:5e:cf:c1:47:36:48:cf:3c:77:bc:e2:d6:4f:9c:f2:f7: db:8b:9f:92:69:32:b2:25:0c:90:64:5d:6b:80:cd:f8:05:22: 22:62:cd:24:20:07:06:70:ef:4d:72:69:d8:61:40:07:7c:f4: 01:1f:d4:d5:55:85:8c:fd:48:33:63:8f:88:30:2c:b1:1a:20: ac:40:20:e0:28:1f:dd:36:79:4e:98:ab:db:af:cd:5f:fd:4f: 75:24:f2:0b:22:44:dd:77:d2:8e:67:84:8b:29:df:af:1f:31: e8:8c:80:8f:70:a1:53:38:96:f8:ae:fe:34:a7:a3:c9:c8:6a: b1:83:c4:15:0a:32:d5:d7:46:4b:74:1f:4e:87:87:9b:99:38: cd:24:73:68:b3:8b:54:80:84:f7:17:2d:a2:ce:ba:a1:65:f0: d3:57:21:ab:7e:77:be:6c:4f:c9:3d:58:b9:42:75:46:a9:64: 39:c6:d9:61:7a:64:22:ea:66:e9:bf:da:d2:ca:68:8e:98:73: 3d:f7:44:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDWu5D+KKZggwjJDAQhnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NzU4ZDhhN2VkMjFhNzQxNzJjY2VlYzMzOGM2NGQzNmIw Mzc4ZDQwHhcNMjUxMjE4MjAwMTE2WhcNMjUxMjE5MjAwMTE2WjAzMTEwLwYDVQQD EyhiZDhjMDllMzJmYjg0YmUyYzJjM2Q5OTQ0OTM3ZWFmOWU1YTNkOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2jOCO7bbMpiker4SWGWnJbXA2sg c5dPDYc4wgMN+mNkYGA6gDpxXchC9OxtRBo5tV6HPLjEB/WSnLPHQ5SBNGpdvf85 NFL25EUfycMTgQQyaiwByrn9QmXJ3AOIxZITepU3t37ak3YvigxGWjn27lyjOd8H mIzk+JjVvDdW4xNFY4NNhNV0OPUcEvWVGBl3PT7EQRC6Y78Yv8/1xkgJuXG2odE0 r1YqaAu4xUo4yMQRlauKmrM0No8k7283PltuUDJe2nbwU1y2uIbVozHIo/mm8B8z ng9aZqivdKJgHdHbuZOvAJHDkIcD8ZWLFbmQASzlCba8DOTVjmCYzU/QPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2MCeMvuEviwsPZlEk36vnlo9j5MB8GA1UdIwQY MBaAFIZ1jYp+0hp0FyzO7DOMZNNrA3jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG5XTmluN1NHblFYTE03c000eGswMnNEZU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNTVhOWItMmZhMC00YWY0LTkwZGQt Y2RhY2I4NDY3MTg3LzEvaG5XTmluN1NHblFYTE03c000eGswMnNEZU5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lNTVhOWItMmZhMC00YWY0LTkwZGQtY2RhY2I4NDY3MTg3 LzEvaG5XTmluN1NHblFYTE03c000eGswMnNEZU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAENvuiF 3UnTkpr9Gg6SGODuzIfSbGx+aoGZNnaRB81mHrXTgK1kmg0MMHVbia3D+UGraANK Ca5ez8FHNkjPPHe84tZPnPL324ufkmkysiUMkGRda4DN+AUiImLNJCAHBnDvTXJp 2GFAB3z0AR/U1VWFjP1IM2OPiDAssRogrEAg4Cgf3TZ5Tpir26/NX/1PdSTyCyJE 3XfSjmeEiynfrx8x6IyAj3ChUziW+K7+NKejychqsYPEFQoy1ddGS3QfToeHm5k4 zSRzaLOLVICE9xctos66oWXw01chq353vmxPyT1YuUJ1RqlkOcbZYXpkIupm6b/a 0spojphzPfdE4g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:53 2025 by rpki-client