This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json) Hash identifier: ga02kqdU4CuFR7ZsKFoAIc9VinjQp+v+GU77eyMlPnk= Subject key identifier: 5C:36:56:1A:11:76:6C:CB:A8:93:C7:6A:FE:49:96:EB:FA:36:7A:D8 Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Certificate serial: 019B3CEBDDB1E6B894AD59A73C45BBEC3A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: c7XxthIyAZv/kFTuy9Ck7OQq+2DiJiRwiZabc3lCwtM=) 2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:dd:b1:e6:b8:94:ad:59:a7:3c:45:bb:ec:3a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=5c36561a11766ccba893c76afe4996ebfa367ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:6d:51:c6:4a:e1:50:cb:ee:7a:8d:3d:94: 33:d1:e3:26:0f:c1:35:7b:0a:63:6f:ff:39:98:cc: b7:95:18:50:31:d8:6c:fa:0c:fa:c6:da:6b:56:02: 2c:f8:2a:5e:a6:b9:b7:c8:6c:e7:0c:6e:99:b1:b7: 42:59:f3:cd:19:de:b5:16:31:09:a4:b6:6e:29:b9: 33:98:91:45:b6:bd:ea:9c:aa:be:21:b0:a8:09:af: 9b:70:48:04:2c:a9:aa:b3:a8:bb:62:d5:a2:08:f9: 54:bd:cf:14:ad:1b:eb:72:f4:16:63:59:67:aa:22: 71:ab:0d:e2:5c:0b:02:4d:f4:2f:79:39:ce:6f:e2: d0:77:49:87:25:5b:1d:b4:2f:10:32:5a:44:bb:b4: e2:ea:29:86:fd:44:24:3c:46:80:f7:a3:e7:3c:c7: 69:3a:ba:ad:03:8b:ee:f5:cd:07:ea:47:10:2d:96: fd:8d:9c:02:a1:37:b8:01:f2:7d:43:b7:89:0a:f5: 02:a1:e3:74:05:96:9d:55:5e:81:a6:ae:cb:1d:71: fe:6c:4d:8f:a9:89:8a:e6:ba:9e:34:90:a6:2f:1e: ca:9c:26:00:7e:8b:f8:c5:fd:c4:f0:e1:5f:bd:25: 2d:19:9c:5d:63:b0:90:dd:bd:d9:d6:6d:58:e3:39: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:36:56:1A:11:76:6C:CB:A8:93:C7:6A:FE:49:96:EB:FA:36:7A:D8 X509v3 Authority Key Identifier: keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3c:e4:62:33:9e:85:f5:55:3a:79:85:76:d7:1c:ae:6a:46: cf:f5:60:6e:af:ea:85:dd:12:54:aa:16:ad:ed:70:cb:6c:85: 54:b3:7e:e1:0e:f1:10:ec:c7:b5:e7:88:ca:f7:47:9e:af:a1: 5a:3e:ee:24:84:17:90:d1:08:b0:d5:75:e5:f1:f9:1c:79:4d: 66:5d:96:ee:43:b0:c9:a5:8e:0b:54:a5:22:3c:de:05:79:ce: 01:5a:49:21:66:4f:5a:be:79:8c:19:24:1d:eb:73:b1:01:5c: 00:b6:39:27:5b:55:b6:c6:4f:37:ee:5c:3a:e2:6c:ec:89:d0: 7f:65:18:e3:71:13:59:fb:1e:99:61:4c:92:64:06:c6:00:08: cc:fb:56:e0:65:77:d4:d2:e9:49:b4:94:01:9b:77:5b:71:66: af:06:ea:5c:68:9a:b3:cb:b1:ab:a6:46:52:a4:3a:28:3e:b3: 40:3c:a4:b6:69:9b:7e:55:02:2a:a6:01:16:28:08:3a:30:8d: 02:34:0c:95:36:d3:95:f3:bf:0b:83:26:4c:7d:66:39:43:f5: 0d:08:3b:43:9e:c7:37:61:d0:88:c4:9c:c5:d2:03:0c:1a:63: 8a:84:da:fd:cd:17:9f:14:4a:2e:64:39:9c:e7:a4:82:e5:b3: c7:36:f7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8692x5riUrVmnPEW77DprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri ZjYzMzUwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD Eyg1YzM2NTYxYTExNzY2Y2NiYTg5M2M3NmFmZTQ5OTZlYmZhMzY3YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleltUcZK4VDL7nqNPZQz0eMmD8E1 ewpjb/85mMy3lRhQMdhs+gz6xtprVgIs+Cpeprm3yGznDG6ZsbdCWfPNGd61FjEJ pLZuKbkzmJFFtr3qnKq+IbCoCa+bcEgELKmqs6i7YtWiCPlUvc8UrRvrcvQWY1ln qiJxqw3iXAsCTfQveTnOb+LQd0mHJVsdtC8QMlpEu7Ti6imG/UQkPEaA96PnPMdp OrqtA4vu9c0H6kcQLZb9jZwCoTe4AfJ9Q7eJCvUCoeN0BZadVV6Bpq7LHXH+bE2P qYmK5rqeNJCmLx7KnCYAfov4xf3E8OFfvSUtGZxdY7CQ3b3Z1m1Y4zlamwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw2VhoRdmzLqJPHav5Jluv6NnrYMB8GA1UdIwQY MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt NDZkZDEyMDVkY2ZmLzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDzkYjOe hfVVOnmFdtccrmpGz/Vgbq/qhd0SVKoWre1wy2yFVLN+4Q7xEOzHteeIyvdHnq+h Wj7uJIQXkNEIsNV15fH5HHlNZl2W7kOwyaWOC1SlIjzeBXnOAVpJIWZPWr55jBkk HetzsQFcALY5J1tVtsZPN+5cOuJs7InQf2UY43ETWfsemWFMkmQGxgAIzPtW4GV3 1NLpSbSUAZt3W3FmrwbqXGias8uxq6ZGUqQ6KD6zQDyktmmbflUCKqYBFigIOjCN AjQMlTbTlfO/C4MmTH1mOUP1DQg7Q57HN2HQiMScxdIDDBpjioTa/c0XnxRKLmQ5 nOekguWzxzb3sA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:39 2025 by rpki-client