This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json) Hash identifier: u2sMidPYtb88qTNUIPnOgqKDb8Mjqd3VXyAt1M05jjg= Subject key identifier: E5:39:59:E8:CD:A5:95:EB:EB:74:AE:D5:42:0B:77:8A:8D:0D:41:5D Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Certificate serial: 019B3D5A660EC484097703605987AA8730F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft Manifest number: 0EAE Signing time: Sat 20 Dec 2025 20:01:33 +0000 Manifest this update: Sat 20 Dec 2025 20:01:33 +0000 Manifest next update: Sun 21 Dec 2025 20:01:33 +0000 Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=) 2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: QYX6z+bxtMShBqutvMkzEoJAIIWBvmZqVTmANICqUIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:66:0e:c4:84:09:77:03:60:59:87:aa:87:30:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Validity Not Before: Dec 20 20:01:33 2025 GMT Not After : Dec 21 20:01:33 2025 GMT Subject: CN=e53959e8cda595ebeb74aed5420b778a8d0d415d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:b6:f8:6d:cd:0f:2a:ba:0a:88:bf:63:c4: ba:1d:d4:12:f1:ce:2e:2b:cc:35:db:c2:16:34:3f: bc:da:34:65:76:ef:0c:11:46:0c:cf:19:cd:8b:28: e4:02:63:7d:1a:14:92:0e:84:1c:95:dd:23:3e:0a: f4:3e:ad:4d:cf:2a:e4:bb:51:5d:38:6d:46:53:7d: 08:58:1d:42:13:11:3c:6f:ad:e9:8f:bb:77:c7:c7: bc:f7:ac:94:cf:e5:05:15:df:c3:45:45:72:fd:c5: d6:b5:ab:fc:4e:18:2a:3c:3a:c5:0b:b8:6e:b9:81: 85:f8:0f:1d:5c:e0:eb:24:53:bb:44:2c:ce:a6:00: cd:5e:44:a5:b7:37:f9:87:52:17:85:9c:5f:36:31: 15:af:fb:19:8a:21:cc:b5:2c:b8:bd:04:71:6c:52: dc:00:a7:d6:9a:2e:6a:df:cc:a6:d6:18:48:46:b8: d6:fa:99:0c:c3:63:06:1b:01:5c:64:93:66:91:9e: 0b:8b:42:50:a3:26:a2:3c:e8:80:21:bf:91:2f:a1: 53:7a:91:e1:58:71:fe:54:7f:40:1a:59:3b:df:2f: c1:b8:b9:a4:7e:c8:48:ca:e6:2d:6b:b0:59:31:33: d1:27:b7:74:fe:90:37:7b:96:df:53:c3:4e:2a:e1: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:59:E8:CD:A5:95:EB:EB:74:AE:D5:42:0B:77:8A:8D:0D:41:5D X509v3 Authority Key Identifier: keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c4:79:7d:c6:a3:c2:21:5d:8a:14:31:56:dc:48:d2:28:c1: 22:31:43:2c:78:1f:b1:6b:60:c0:c4:d7:25:18:57:11:8d:77: 6a:ce:a6:15:8b:23:3c:3b:43:9e:60:94:a1:d6:7d:2f:fb:e6: d4:bc:ca:c0:ea:f5:13:1d:58:c1:cc:ad:43:02:fa:8a:a8:0c: ad:6f:8f:9c:6f:61:e9:e2:e1:c0:4e:9c:32:01:9a:9d:8a:6b: 04:fb:87:3a:79:59:b5:71:52:90:66:2e:73:a1:0a:36:38:63: 66:82:3d:c4:7b:57:6b:e4:8c:3e:83:96:2d:38:45:53:5f:5f: 08:ae:c4:a4:ec:b6:17:a7:94:32:22:37:25:c4:4b:d4:b3:3a: 6f:52:5f:71:bb:b5:da:d0:63:30:e0:6d:64:c7:90:98:bf:be: 62:83:01:06:4e:2b:3a:a4:92:0e:48:48:e0:3a:80:53:08:84: bc:08:a9:bf:ca:ae:16:d3:c4:e7:41:f1:d0:ca:d1:f2:81:e9: a4:49:9d:32:e9:95:65:5b:81:19:05:a4:fe:71:5f:19:ab:e3: 18:bf:e0:4d:ec:76:cb:dc:b3:4d:5c:41:57:19:75:f4:31:55: b6:c1:93:82:3a:91:46:95:d9:9f:16:71:de:74:09:db:e9:4d: eb:61:07:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WmYOxIQJdwNgWYeqhzD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDA1ZTAxN2UzMzNkMTdiM2FlYjhjNWQ0OTQzYmU4ZGM2 N2MwODQwHhcNMjUxMjIwMjAwMTMzWhcNMjUxMjIxMjAwMTMzWjAzMTEwLwYDVQQD EyhlNTM5NTllOGNkYTU5NWViZWI3NGFlZDU0MjBiNzc4YThkMGQ0MTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/m2+G3NDyq6Coi/Y8S6HdQS8c4u K8w128IWND+82jRldu8MEUYMzxnNiyjkAmN9GhSSDoQcld0jPgr0Pq1Nzyrku1Fd OG1GU30IWB1CExE8b63pj7t3x8e896yUz+UFFd/DRUVy/cXWtav8ThgqPDrFC7hu uYGF+A8dXODrJFO7RCzOpgDNXkSltzf5h1IXhZxfNjEVr/sZiiHMtSy4vQRxbFLc AKfWmi5q38ym1hhIRrjW+pkMw2MGGwFcZJNmkZ4Li0JQoyaiPOiAIb+RL6FTepHh WHH+VH9AGlk73y/BuLmkfshIyuYta7BZMTPRJ7d0/pA3e5bfU8NOKuEjywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU5WejNpZXr63Su1UILd4qNDUFdMB8GA1UdIwQY MBaAFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQt NDdjOTUwMzM2ZTJmLzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQtNDdjOTUwMzM2ZTJm LzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcR5fcaj wiFdihQxVtxI0ijBIjFDLHgfsWtgwMTXJRhXEY13as6mFYsjPDtDnmCUodZ9L/vm 1LzKwOr1Ex1YwcytQwL6iqgMrW+PnG9h6eLhwE6cMgGanYprBPuHOnlZtXFSkGYu c6EKNjhjZoI9xHtXa+SMPoOWLThFU19fCK7EpOy2F6eUMiI3JcRL1LM6b1Jfcbu1 2tBjMOBtZMeQmL++YoMBBk4rOqSSDkhI4DqAUwiEvAipv8quFtPE50Hx0MrR8oHp pEmdMumVZVuBGQWk/nFfGavjGL/gTex2y9yzTVxBVxl19DFVtsGTgjqRRpXZnxZx 3nQJ2+lN62EHUw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:32 2025 by rpki-client