This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft File: hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft (raw, json) Hash identifier: nAgsE6FPkf6Bv16xk4rAnNK5ndpa7gYhmbli+frjvik= Subject key identifier: E7:F7:13:2E:DB:FB:A8:BB:B4:DD:3F:BD:9C:C8:6B:07:AF:F5:E7:79 Authority key identifier: 84:8B:12:94:D2:76:9F:A3:7B:34:8A:CC:5D:AB:FC:B8:FE:6F:99:98 Certificate issuer: /CN=848b1294d2769fa37b348acc5dabfcb8fe6f9998 Certificate serial: 019B35A09CD48666F3C815B366F516091884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft Manifest number: 0284 Signing time: Fri 19 Dec 2025 08:01:16 +0000 Manifest this update: Fri 19 Dec 2025 08:01:16 +0000 Manifest next update: Sat 20 Dec 2025 08:01:16 +0000 Files and hashes: 1: duguTeW8ErmRr7f5ZEryR3oV58E.roa (hash: q3OOsJ7Kv17p8ez5C5AQYcTLGWf82piJmxtRxe/QdaM=) 2: hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl (hash: lvwxupANgRNm/L+P+STSuKrce74ffq5XpITXGUmHOGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:9c:d4:86:66:f3:c8:15:b3:66:f5:16:09:18:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848b1294d2769fa37b348acc5dabfcb8fe6f9998 Validity Not Before: Dec 19 08:01:16 2025 GMT Not After : Dec 20 08:01:16 2025 GMT Subject: CN=e7f7132edbfba8bbb4dd3fbd9cc86b07aff5e779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:03:43:95:2a:fe:98:c3:fb:57:65:58:11: 70:13:26:5c:c0:06:58:5e:cc:c6:1f:ed:5b:4d:c5: 3d:21:e4:2c:ff:76:47:c7:bc:58:21:c2:b4:40:fd: 79:14:df:47:25:85:44:e0:63:18:03:cd:ad:46:72: 93:c4:86:b1:e4:94:03:14:04:e0:54:28:dc:d3:23: de:11:e9:2b:7e:0a:91:28:55:d3:34:67:03:ef:fb: 11:98:f3:65:1a:d9:24:35:2c:85:98:a2:31:97:23: ff:9d:cd:65:9a:56:f2:cd:a3:12:83:96:c5:24:e2: d7:01:39:84:7b:15:ea:df:41:93:f2:c1:b6:f6:24: f4:21:9c:99:04:1f:63:1d:fa:2d:63:3e:95:2b:2e: 91:fd:85:50:76:d3:e5:d9:a1:bc:7e:db:0a:78:cb: 80:09:b6:7f:7d:0b:02:3f:4a:1a:78:97:5c:03:5d: 22:ab:01:d7:b8:01:0d:72:c5:c9:07:5c:7a:d9:b0: 6c:5a:bf:f7:1a:3c:ec:48:27:a9:c9:47:80:8a:c8: 26:9b:3c:04:96:dc:2c:94:37:20:cb:bb:fe:dc:5c: 12:12:ef:7f:71:0e:d8:37:49:7e:a4:64:44:61:35: ea:96:63:4a:54:86:cd:47:05:ee:31:52:9f:11:57: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F7:13:2E:DB:FB:A8:BB:B4:DD:3F:BD:9C:C8:6B:07:AF:F5:E7:79 X509v3 Authority Key Identifier: keyid:84:8B:12:94:D2:76:9F:A3:7B:34:8A:CC:5D:AB:FC:B8:FE:6F:99:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:52:a2:da:8c:65:b7:69:24:9e:0a:b6:60:49:7d:38:e0:49: 69:85:11:4b:a6:47:a9:46:10:49:2e:7f:78:ba:9a:9a:b4:2e: d7:d8:36:f6:a7:a7:cc:4b:fb:55:3b:7e:78:44:20:90:62:89: 19:f2:7c:fb:4c:fd:8e:4b:ee:84:89:5b:78:9b:8c:93:d9:9f: df:47:e2:92:8a:a4:06:2c:f1:df:1f:b1:23:14:7a:3b:49:11: a0:58:2c:f2:2b:57:af:f6:e9:84:4c:97:2b:d4:53:d1:ce:24: d6:62:03:e5:9f:25:79:a6:a5:a0:bb:83:26:c7:9e:f7:ce:b0: 78:48:09:f1:ba:db:b0:ca:f9:1d:93:ed:c2:56:ca:16:5f:73: 9b:84:ac:4c:ff:fd:9b:53:7f:dd:8e:f8:1d:f0:3e:11:a0:01: 0d:a1:e7:ff:03:ab:c9:a5:4f:c3:77:a4:a5:a3:53:15:d7:8a: 91:9e:a8:8a:c4:a9:32:4d:84:17:26:a9:38:7c:81:cf:0d:1f: 01:3b:2e:33:d6:8e:bf:74:9f:bb:1f:a8:9c:5c:ac:e4:96:a8: 23:1f:dc:d7:b6:29:98:ad:34:4a:71:50:31:ae:e7:ca:35:22: d5:77:50:ab:b3:f8:e0:0f:21:7a:ee:50:5b:43:cf:9b:e2:f1: 11:b6:bb:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oJzUhmbzyBWzZvUWCRiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OGIxMjk0ZDI3NjlmYTM3YjM0OGFjYzVkYWJmY2I4ZmU2 Zjk5OTgwHhcNMjUxMjE5MDgwMTE2WhcNMjUxMjIwMDgwMTE2WjAzMTEwLwYDVQQD EyhlN2Y3MTMyZWRiZmJhOGJiYjRkZDNmYmQ5Y2M4NmIwN2FmZjVlNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQEDQ5Uq/pjD+1dlWBFwEyZcwAZY XszGH+1bTcU9IeQs/3ZHx7xYIcK0QP15FN9HJYVE4GMYA82tRnKTxIax5JQDFATg VCjc0yPeEekrfgqRKFXTNGcD7/sRmPNlGtkkNSyFmKIxlyP/nc1lmlbyzaMSg5bF JOLXATmEexXq30GT8sG29iT0IZyZBB9jHfotYz6VKy6R/YVQdtPl2aG8ftsKeMuA CbZ/fQsCP0oaeJdcA10iqwHXuAENcsXJB1x62bBsWr/3GjzsSCepyUeAisgmmzwE ltwslDcgy7v+3FwSEu9/cQ7YN0l+pGREYTXqlmNKVIbNRwXuMVKfEVcOZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf3Ey7b+6i7tN0/vZzIawev9ed5MB8GA1UdIwQY MBaAFISLEpTSdp+jezSKzF2r/Lj+b5mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YTIzNGMtNjUxMi00NDQ3LTgyM2Mt MGRiNzI1OWYyMGI4LzEvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85YTIzNGMtNjUxMi00NDQ3LTgyM2MtMGRiNzI1OWYyMGI4 LzEvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlKi2oxl t2kkngq2YEl9OOBJaYURS6ZHqUYQSS5/eLqamrQu19g29qenzEv7VTt+eEQgkGKJ GfJ8+0z9jkvuhIlbeJuMk9mf30fikoqkBizx3x+xIxR6O0kRoFgs8itXr/bphEyX K9RT0c4k1mID5Z8leaaloLuDJsee986weEgJ8brbsMr5HZPtwlbKFl9zm4SsTP/9 m1N/3Y74HfA+EaABDaHn/wOryaVPw3ekpaNTFdeKkZ6oisSpMk2EFyapOHyBzw0f ATsuM9aOv3Sfux+onFys5JaoIx/c17YpmK00SnFQMa7nyjUi1XdQq7P44A8heu5Q W0PPm+LxEba7iQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:47 2025 by rpki-client