This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json) Hash identifier: cfisxowhH3CHA2WXf5BvaGKfMZAJ99o4eyH9+Q8lpxs= Subject key identifier: 47:F0:CC:04:41:94:CE:36:0B:EB:A5:C3:0E:43:52:F9:51:5A:DC:44 Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Certificate serial: 019B58D118980CECA2D330F8DE61CA739EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft Manifest number: 106A Signing time: Fri 26 Dec 2025 04:00:56 +0000 Manifest this update: Fri 26 Dec 2025 04:00:56 +0000 Manifest next update: Sat 27 Dec 2025 04:00:56 +0000 Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: fUiavNN8t+6oz5VsKcy5GriWKVbnnrf51v9Bcelqgso=) 2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:18:98:0c:ec:a2:d3:30:f8:de:61:ca:73:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376 Validity Not Before: Dec 26 04:00:56 2025 GMT Not After : Dec 27 04:00:56 2025 GMT Subject: CN=47f0cc044194ce360beba5c30e4352f9515adc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:48:e8:6f:8b:89:40:5b:55:86:e9:70:cc: f3:00:6b:c1:a2:b1:3b:5b:b9:22:1e:c0:d8:2a:e5: f6:45:5e:a0:3c:1e:46:3b:1b:0c:ad:7f:28:2a:3c: 2c:ab:e0:c8:a5:4f:59:af:50:96:e1:e6:43:76:c7: 44:43:25:2f:7e:eb:a5:68:0f:a5:2d:f8:24:cf:4d: 16:54:cf:c4:87:14:ca:64:d9:5e:ab:c2:55:a7:5d: f5:5c:74:ad:aa:0e:e0:a9:17:f4:92:31:a3:66:49: d6:c7:64:04:2a:e6:4a:a2:f4:d6:26:8b:35:c0:a3: a8:a4:15:9e:af:62:c6:ab:43:3d:42:08:2f:64:1d: f5:f2:a0:e4:39:e8:03:53:bd:8c:cf:11:cb:6a:84: ce:0b:bd:75:79:fc:6e:60:a6:72:68:92:6a:61:03: 02:4c:b0:6a:1b:73:9b:b7:dd:e3:9e:d7:a6:1b:e8: a8:f2:fc:8c:e6:4e:47:89:d1:c2:a1:7f:a1:a9:71: 56:22:22:39:f2:c3:2e:84:9d:53:3f:73:1e:65:95: 91:b2:ac:c5:29:8d:f9:dc:13:09:3d:3c:97:ba:69: 92:57:6c:2c:d3:f4:2f:99:60:13:f9:74:a0:5f:6c: dd:25:e9:0c:24:57:a4:42:f8:2e:87:41:35:de:62: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F0:CC:04:41:94:CE:36:0B:EB:A5:C3:0E:43:52:F9:51:5A:DC:44 X509v3 Authority Key Identifier: keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d3:cb:aa:7c:e8:32:e3:70:02:23:10:d3:2f:00:f0:df:08: e3:4a:ca:46:42:d1:2c:40:87:07:68:8c:d3:0f:0c:54:15:ce: 6d:28:71:30:dc:0a:88:83:0a:2d:e7:d4:d6:3b:42:4d:f5:ad: dc:81:d5:7a:7e:41:e5:e6:24:c5:06:f7:06:7c:28:df:f8:66: a5:28:22:81:f2:ec:34:e8:94:03:71:56:77:3c:19:2a:3e:e3: 95:78:46:0b:4f:32:07:45:6f:f2:ff:2d:58:4a:ca:19:0d:7a: 65:d3:a8:2e:20:77:27:9c:e2:66:5e:61:11:4f:0a:0a:75:21: e8:50:2a:8d:de:32:75:73:5a:1e:5d:6c:4f:43:fb:ef:c2:1a: 57:e0:98:33:bc:2a:01:de:42:82:14:05:f4:29:ba:ac:17:3f: d2:a2:8f:4c:2a:5a:d3:98:35:5b:ec:70:8c:32:06:6b:12:f3: 07:b1:b7:af:bd:74:4d:82:1a:ee:e5:6c:06:3b:25:3b:af:eb: 3c:94:66:62:51:f1:b8:36:07:d1:b2:d5:88:3c:88:b9:05:4b: 1f:d6:8c:0d:d7:cf:71:5a:f5:da:76:4d:2c:e7:84:b1:57:80: 21:0c:cc:5f:a1:a8:2f:57:e5:c4:f0:a8:c5:f1:0f:50:a1:e7: 41:1b:fb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0RiYDOyi0zD43mHKc57AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MDBhYWYxM2Q0ZGU5Yzk1YjYzNzU5YWQxODYzNmFiYzhl MjYzNzYwHhcNMjUxMjI2MDQwMDU2WhcNMjUxMjI3MDQwMDU2WjAzMTEwLwYDVQQD Eyg0N2YwY2MwNDQxOTRjZTM2MGJlYmE1YzMwZTQzNTJmOTUxNWFkYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE5I6G+LiUBbVYbpcMzzAGvBorE7 W7kiHsDYKuX2RV6gPB5GOxsMrX8oKjwsq+DIpU9Zr1CW4eZDdsdEQyUvfuulaA+l Lfgkz00WVM/EhxTKZNleq8JVp131XHStqg7gqRf0kjGjZknWx2QEKuZKovTWJos1 wKOopBWer2LGq0M9QggvZB318qDkOegDU72MzxHLaoTOC711efxuYKZyaJJqYQMC TLBqG3Obt93jntemG+io8vyM5k5HidHCoX+hqXFWIiI58sMuhJ1TP3MeZZWRsqzF KY353BMJPTyXummSV2ws0/QvmWAT+XSgX2zdJekMJFekQvguh0E13mJgNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfwzARBlM42C+ulww5DUvlRWtxEMB8GA1UdIwQY MBaAFIYAqvE9TenJW2N1mtGGNqvI4mN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgt MjI0NGZkNjE4NWQzLzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iN2QyMGUtMzNiYy00YjIzLWExOTgtMjI0NGZkNjE4NWQz LzEvaGdDcThUMU42Y2xiWTNXYTBZWTJxOGppWTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdPLqnzo MuNwAiMQ0y8A8N8I40rKRkLRLECHB2iM0w8MVBXObShxMNwKiIMKLefU1jtCTfWt 3IHVen5B5eYkxQb3Bnwo3/hmpSgigfLsNOiUA3FWdzwZKj7jlXhGC08yB0Vv8v8t WErKGQ16ZdOoLiB3J5ziZl5hEU8KCnUh6FAqjd4ydXNaHl1sT0P778IaV+CYM7wq Ad5CghQF9Cm6rBc/0qKPTCpa05g1W+xwjDIGaxLzB7G3r710TYIa7uVsBjslO6/r PJRmYlHxuDYH0bLViDyIuQVLH9aMDdfPcVr12nZNLOeEsVeAIQzMX6GoL1flxPCo xfEPUKHnQRv7SQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:15 2025 by rpki-client