This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json) Hash identifier: +ZBrSNabNJ+OP7IqagTBqRhe1rhBY1fI16WpZF7Uzl0= Subject key identifier: 7B:A9:81:C8:5B:DA:AB:D4:4E:48:AF:5E:26:44:93:D7:73:77:FE:20 Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Certificate serial: 019B0EC9D5307E6E6F72A0437A4B68F23448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft Manifest number: 05F7 Signing time: Thu 11 Dec 2025 19:01:06 +0000 Manifest this update: Thu 11 Dec 2025 19:01:06 +0000 Manifest next update: Fri 12 Dec 2025 19:01:06 +0000 Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=) 2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=) 3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: CCSP5WmCWk9ixxd9/aY95h64aO9voNn1wtAx6a9vauE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:d5:30:7e:6e:6f:72:a0:43:7a:4b:68:f2:34:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Validity Not Before: Dec 11 19:01:06 2025 GMT Not After : Dec 12 19:01:06 2025 GMT Subject: CN=7ba981c85bdaabd44e48af5e264493d77377fe20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:c4:82:93:10:60:52:6c:90:f5:0f:6c:8b: 04:40:3f:31:cf:d0:64:64:3a:ee:e4:a6:41:9b:a7: 98:26:56:5e:4d:8c:71:54:28:01:13:0b:c4:f0:e9: f2:38:9a:5a:05:65:68:cf:64:da:21:9b:de:1b:75: 7e:cc:fc:7e:d9:88:fd:b9:2c:a2:60:a0:c4:f9:80: 57:e4:34:cd:b2:a6:d0:f1:fb:02:26:c0:f8:87:23: ed:68:3e:53:e7:c5:14:dd:56:88:2c:1e:0f:16:6a: 67:0c:cf:e6:5c:aa:19:32:ee:dc:93:41:72:d0:37: ce:9b:51:f3:20:4f:94:6f:2c:46:f3:70:8a:15:f4: ac:29:cc:36:15:77:dc:eb:9e:50:fe:b9:f4:22:f1: eb:de:37:e4:2c:68:75:d6:f2:c1:9d:d3:eb:e6:5d: 15:c7:18:66:a2:63:be:34:93:5a:ce:a5:a4:ac:7b: 12:8e:07:0e:6d:be:c2:04:8b:54:a2:f3:44:53:9a: 92:59:49:67:f0:30:5d:00:32:1f:d7:6d:c2:d7:b5: 50:b0:a3:ca:73:6e:ac:6b:1c:dc:b9:7f:fc:f6:f1: 29:5c:1b:12:e0:8f:f9:5b:bf:7c:1b:ac:c0:76:37: 6b:7a:d6:1d:f4:83:ac:ca:7f:35:ec:36:20:bd:36: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A9:81:C8:5B:DA:AB:D4:4E:48:AF:5E:26:44:93:D7:73:77:FE:20 X509v3 Authority Key Identifier: keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4c:37:a8:ce:98:24:fd:a2:06:a1:84:11:ab:d8:9f:6d:f4: 68:90:f2:c6:51:6a:09:63:1e:bd:cc:86:52:2a:52:61:14:0a: 6a:4e:51:a8:ef:b8:65:5d:ad:d8:99:b3:21:e2:ea:ca:e2:f1: 8f:9a:44:66:99:d9:61:42:88:37:86:b0:a3:3c:ac:8b:02:52: 39:54:86:fd:24:96:86:2f:56:14:96:b3:44:f9:86:c1:db:58: f0:f1:e7:77:39:ac:28:ec:35:eb:5e:ca:69:25:3d:df:e7:aa: 5a:5e:5c:44:92:52:a3:16:57:a1:41:73:cd:32:85:df:de:9f: 62:01:ca:46:3b:00:b1:b9:7a:67:12:9b:90:06:38:b2:e0:f6: d1:eb:22:33:47:bb:11:a9:e1:28:f0:4d:99:1d:5b:27:01:34: 55:4f:cc:15:82:f0:59:e9:6e:26:d2:5d:88:3f:fc:4e:db:46: 43:36:50:6d:68:1d:a7:3e:20:3e:6d:00:33:31:a5:e7:cc:be: 01:96:ef:06:d3:0d:8a:09:86:e9:98:d2:56:4f:2c:ca:a7:7f: b0:6c:b0:74:a4:e4:51:b1:1d:e1:0a:e9:86:45:73:09:dc:7e: db:89:08:69:28:12:ed:ca:14:4f:b9:77:73:ea:7b:c1:c4:91: c8:84:47:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOydUwfm5vcqBDekto8jRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4 ZjZhN2IwHhcNMjUxMjExMTkwMTA2WhcNMjUxMjEyMTkwMTA2WjAzMTEwLwYDVQQD Eyg3YmE5ODFjODViZGFhYmQ0NGU0OGFmNWUyNjQ0OTNkNzczNzdmZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc3EgpMQYFJskPUPbIsEQD8xz9Bk ZDru5KZBm6eYJlZeTYxxVCgBEwvE8OnyOJpaBWVoz2TaIZveG3V+zPx+2Yj9uSyi YKDE+YBX5DTNsqbQ8fsCJsD4hyPtaD5T58UU3VaILB4PFmpnDM/mXKoZMu7ck0Fy 0DfOm1HzIE+UbyxG83CKFfSsKcw2FXfc655Q/rn0IvHr3jfkLGh11vLBndPr5l0V xxhmomO+NJNazqWkrHsSjgcObb7CBItUovNEU5qSWUln8DBdADIf123C17VQsKPK c26saxzcuX/89vEpXBsS4I/5W798G6zAdjdretYd9IOsyn817DYgvTY4dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHupgchb2qvUTkivXiZEk9dzd/4gMB8GA1UdIwQY MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt MmFlMzUxNzU3MTNjLzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkw3qM6Y JP2iBqGEEavYn230aJDyxlFqCWMevcyGUipSYRQKak5RqO+4ZV2t2JmzIeLqyuLx j5pEZpnZYUKIN4awozysiwJSOVSG/SSWhi9WFJazRPmGwdtY8PHndzmsKOw1617K aSU93+eqWl5cRJJSoxZXoUFzzTKF396fYgHKRjsAsbl6ZxKbkAY4suD20esiM0e7 EanhKPBNmR1bJwE0VU/MFYLwWeluJtJdiD/8TttGQzZQbWgdpz4gPm0AMzGl58y+ AZbvBtMNigmG6ZjSVk8syqd/sGywdKTkUbEd4QrphkVzCdx+24kIaSgS7coUT7l3 c+p7wcSRyIRHtQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:43:36 2025 by rpki-client