This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft File: hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft (raw, json) Hash identifier: JOpZpCNYbPUCQyX5IvZFJoWy4ifspH8MqAjmRbG6lP8= Subject key identifier: F0:F7:55:63:71:6D:ED:EC:F0:6A:A3:F1:34:9C:1A:B4:8F:BC:7E:91 Authority key identifier: 84:8B:12:94:D2:76:9F:A3:7B:34:8A:CC:5D:AB:FC:B8:FE:6F:99:98 Certificate issuer: /CN=848b1294d2769fa37b348acc5dabfcb8fe6f9998 Certificate serial: 019B4324E00BA331A7F57832519E8E3ADD3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft Manifest number: 028B Signing time: Sun 21 Dec 2025 23:00:48 +0000 Manifest this update: Sun 21 Dec 2025 23:00:48 +0000 Manifest next update: Mon 22 Dec 2025 23:00:48 +0000 Files and hashes: 1: duguTeW8ErmRr7f5ZEryR3oV58E.roa (hash: q3OOsJ7Kv17p8ez5C5AQYcTLGWf82piJmxtRxe/QdaM=) 2: hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl (hash: lynKKpbgwC7Q0lhQGupPnDIdQqhBvMHudEuMQJhU4dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:e0:0b:a3:31:a7:f5:78:32:51:9e:8e:3a:dd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848b1294d2769fa37b348acc5dabfcb8fe6f9998 Validity Not Before: Dec 21 23:00:48 2025 GMT Not After : Dec 22 23:00:48 2025 GMT Subject: CN=f0f75563716dedecf06aa3f1349c1ab48fbc7e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:8c:5c:56:1c:f2:07:e9:c0:a5:51:68:fa: 79:5d:f4:7f:9d:88:6b:80:4d:85:b5:c3:f1:f2:b2: ec:f8:b1:8d:a6:10:e3:bf:04:d3:94:2b:4a:f4:bb: 90:48:c5:c2:af:36:fc:ef:ef:23:b4:ff:85:21:9b: 19:c3:12:45:56:32:ae:d5:72:61:e2:f5:1a:9e:ac: d3:6d:5f:50:b7:3c:a1:5c:ad:85:2d:78:75:25:1c: 31:e3:fc:a7:9e:e9:37:df:2e:71:a0:b4:eb:3f:46: df:72:3d:09:2c:8f:a2:c9:e4:d3:1c:e9:94:ba:eb: 3b:58:16:04:ad:c1:64:8f:f6:21:63:b8:36:0d:65: a7:8a:85:75:11:41:50:7b:72:be:34:27:7b:01:b1: da:f1:2d:68:9b:e3:5b:dd:da:e7:32:e5:a7:b8:b7: d0:9e:a4:e1:20:cc:c4:b4:04:fc:e4:ff:7e:2c:90: 3d:b6:ed:e2:23:a1:85:6b:75:74:69:cd:7b:bc:eb: d4:74:a9:c9:c5:b2:ad:e5:ac:3c:c9:d9:a3:df:21: e0:dd:67:f7:91:5e:bf:d8:7e:88:50:2f:67:a9:18: b6:11:18:c2:64:39:bd:f0:10:4a:0e:5c:d0:6a:14: 9f:41:e0:38:12:ef:71:d3:ba:89:15:38:2b:d3:46: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F7:55:63:71:6D:ED:EC:F0:6A:A3:F1:34:9C:1A:B4:8F:BC:7E:91 X509v3 Authority Key Identifier: keyid:84:8B:12:94:D2:76:9F:A3:7B:34:8A:CC:5D:AB:FC:B8:FE:6F:99:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIsSlNJ2n6N7NIrMXav8uP5vmZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9a234c-6512-4447-823c-0db7259f20b8/1/hIsSlNJ2n6N7NIrMXav8uP5vmZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d8:38:5c:4e:31:c2:37:e1:08:3d:6c:8f:da:35:98:b3:69: 47:2c:ea:57:dc:d2:1f:cc:ae:52:99:cb:3f:66:1f:27:a8:96: b5:cc:c8:51:82:23:80:2b:13:e3:61:d4:72:a5:00:cc:14:5f: 35:e9:1a:00:b4:5d:8e:78:d0:d3:09:9e:2e:97:bd:b8:fc:3a: 55:d8:1d:33:47:e5:dd:11:42:2d:5a:6e:cb:85:61:03:69:82: fd:35:cc:20:cc:dc:2b:fd:ca:bb:2f:f5:d5:ef:c5:62:88:44: 31:1b:66:52:1d:52:61:16:cc:7b:54:79:73:89:01:e1:0f:6c: 5f:43:8b:5f:1c:cf:44:0f:a5:f1:2a:6d:fe:a5:42:63:ff:30: ef:98:77:6e:8d:2e:aa:a0:5e:36:96:17:8f:53:21:70:ad:e0: f4:83:81:e0:1c:64:04:0c:75:ca:32:14:34:71:a8:8e:fe:fa: de:0c:57:23:0b:19:b9:81:35:de:8a:f2:5b:c9:6c:3a:17:69: 61:7d:8d:c7:55:e4:ea:ca:64:fa:b0:a8:28:3c:5c:f3:18:b2: e6:df:db:54:68:8c:cd:ab:8e:de:c8:b4:1b:8c:ad:d8:5c:95: 08:8b:be:68:21:c2:ea:f4:fc:a4:76:57:e9:09:d6:0b:8f:ec: 9d:9d:24:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJOALozGn9XgyUZ6OOt09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OGIxMjk0ZDI3NjlmYTM3YjM0OGFjYzVkYWJmY2I4ZmU2 Zjk5OTgwHhcNMjUxMjIxMjMwMDQ4WhcNMjUxMjIyMjMwMDQ4WjAzMTEwLwYDVQQD EyhmMGY3NTU2MzcxNmRlZGVjZjA2YWEzZjEzNDljMWFiNDhmYmM3ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB2MXFYc8gfpwKVRaPp5XfR/nYhr gE2FtcPx8rLs+LGNphDjvwTTlCtK9LuQSMXCrzb87+8jtP+FIZsZwxJFVjKu1XJh 4vUanqzTbV9QtzyhXK2FLXh1JRwx4/ynnuk33y5xoLTrP0bfcj0JLI+iyeTTHOmU uus7WBYErcFkj/YhY7g2DWWnioV1EUFQe3K+NCd7AbHa8S1om+Nb3drnMuWnuLfQ nqThIMzEtAT85P9+LJA9tu3iI6GFa3V0ac17vOvUdKnJxbKt5aw8ydmj3yHg3Wf3 kV6/2H6IUC9nqRi2ERjCZDm98BBKDlzQahSfQeA4Eu9x07qJFTgr00anbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD3VWNxbe3s8Gqj8TScGrSPvH6RMB8GA1UdIwQY MBaAFISLEpTSdp+jezSKzF2r/Lj+b5mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YTIzNGMtNjUxMi00NDQ3LTgyM2Mt MGRiNzI1OWYyMGI4LzEvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85YTIzNGMtNjUxMi00NDQ3LTgyM2MtMGRiNzI1OWYyMGI4 LzEvaElzU2xOSjJuNk43TklyTVhhdjh1UDV2bVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadg4XE4x wjfhCD1sj9o1mLNpRyzqV9zSH8yuUpnLP2YfJ6iWtczIUYIjgCsT42HUcqUAzBRf NekaALRdjnjQ0wmeLpe9uPw6VdgdM0fl3RFCLVpuy4VhA2mC/TXMIMzcK/3Kuy/1 1e/FYohEMRtmUh1SYRbMe1R5c4kB4Q9sX0OLXxzPRA+l8Spt/qVCY/8w75h3bo0u qqBeNpYXj1MhcK3g9IOB4BxkBAx1yjIUNHGojv763gxXIwsZuYE13oryW8lsOhdp YX2Nx1Xk6spk+rCoKDxc8xiy5t/bVGiMzauO3si0G4yt2FyVCIu+aCHC6vT8pHZX 6QnWC4/snZ0k2g== -----END CERTIFICATE-----Generated at Mon Dec 22 06:32:04 2025 by rpki-client