This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json) Hash identifier: qYrSphK9jpez5hbl67hrSWj6rLvKE9QC/047FuWeRYE= Subject key identifier: 02:40:F0:71:6F:5C:6E:22:76:4D:5F:24:95:32:A5:92:E3:EF:37:1F Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Certificate serial: 019B0B5A7C0CD8510D2206D4449587C37661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft Manifest number: 15D8 Signing time: Thu 11 Dec 2025 03:00:37 +0000 Manifest this update: Thu 11 Dec 2025 03:00:37 +0000 Manifest next update: Fri 12 Dec 2025 03:00:37 +0000 Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: L3gAEMKLwfbVwOXPO0mb+KrlcIRSDUh8uGSQPzAy1No=) 2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=) 3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:5a:7c:0c:d8:51:0d:22:06:d4:44:95:87:c3:76:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b Validity Not Before: Dec 11 03:00:37 2025 GMT Not After : Dec 12 03:00:37 2025 GMT Subject: CN=0240f0716f5c6e22764d5f249532a592e3ef371f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:e6:cb:fe:11:76:00:43:01:1d:a2:b8:c4: 24:25:f3:f0:bb:5c:fa:f9:b9:12:09:d2:bb:5e:a8: a1:3c:9b:1a:ab:40:90:e2:58:e3:26:9a:8e:be:ed: a0:22:9b:ad:b7:4f:2f:6e:32:d7:e0:22:b2:2d:b2: f8:b6:de:39:64:96:b9:8e:0b:8a:26:93:0e:1f:1e: 7f:39:55:ba:9d:0b:a1:56:2a:d4:93:98:45:d2:ef: 02:e2:00:80:e7:22:9c:ce:5c:71:91:5a:fd:8f:0e: ef:47:f7:a5:31:e7:ce:99:a1:01:71:cf:1e:98:e5: d1:bc:e5:75:62:3d:b8:a3:16:8d:15:71:a9:6e:c5: 02:76:97:21:17:a4:f4:e1:99:9d:76:17:e4:05:82: 44:0f:76:e2:cc:78:83:21:10:ad:b1:73:9d:67:ec: 34:f5:51:55:d8:a0:a4:da:6b:94:14:8d:e9:40:67: 20:22:18:1b:43:34:f7:f9:98:e4:f6:7f:b6:33:cf: 82:a9:3d:8c:6b:46:39:d3:db:03:2d:84:e8:63:48: 19:81:c2:38:be:2b:64:86:a6:c1:8f:11:2d:60:14: 95:bf:26:06:ec:f0:59:4e:f6:7f:7d:8c:81:a5:fb: ef:66:d7:8b:3f:cb:78:98:a9:ea:6c:d8:a5:e5:c7: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:40:F0:71:6F:5C:6E:22:76:4D:5F:24:95:32:A5:92:E3:EF:37:1F X509v3 Authority Key Identifier: keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7f:95:2d:b3:4e:af:5d:c4:e1:d4:d4:a5:57:f8:e7:41:14: 95:49:0b:df:6c:db:e5:2f:60:2f:da:9f:dc:3f:83:b6:94:a4: 8f:a7:15:d4:27:cb:18:b5:0d:db:7c:88:75:c2:ac:04:af:fc: 9c:e6:50:56:78:71:af:53:b1:e0:70:68:88:ab:89:35:6b:83: c9:64:0f:7a:00:a4:12:e8:d2:cc:99:7b:c0:26:74:4c:4e:e3: d1:4f:78:e6:6f:d3:e5:6d:40:9f:b4:02:32:75:76:96:0f:c7: 44:6d:b5:fb:3d:b9:71:8c:04:62:3b:c4:c1:52:12:cc:14:c5: 97:e5:52:d2:85:69:64:fe:a6:ac:be:89:a3:fe:8f:99:93:dc: f1:a5:75:cd:0b:20:bc:59:61:40:76:83:f6:c5:b0:6a:d8:26: b6:3c:f0:e2:2d:99:69:0f:bc:21:cc:96:62:70:bd:fe:b1:35: 61:eb:70:34:c3:5e:c0:b2:c7:5a:9f:df:c4:f7:a6:eb:e7:7d: 3a:c7:f8:e8:01:6e:ff:91:65:c6:b7:c7:3f:36:c2:17:21:2f: cb:3d:1f:8b:1c:1d:d1:42:c2:c4:94:fc:f6:2a:71:26:8b:18: 61:21:19:27:f7:06:70:bb:63:76:9e:aa:8c:31:2e:cc:43:3f: c9:db:44:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLWnwM2FENIgbURJWHw3ZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh YzM0NWIwHhcNMjUxMjExMDMwMDM3WhcNMjUxMjEyMDMwMDM3WjAzMTEwLwYDVQQD EygwMjQwZjA3MTZmNWM2ZTIyNzY0ZDVmMjQ5NTMyYTU5MmUzZWYzNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCrmy/4RdgBDAR2iuMQkJfPwu1z6 +bkSCdK7XqihPJsaq0CQ4ljjJpqOvu2gIputt08vbjLX4CKyLbL4tt45ZJa5jguK JpMOHx5/OVW6nQuhVirUk5hF0u8C4gCA5yKczlxxkVr9jw7vR/elMefOmaEBcc8e mOXRvOV1Yj24oxaNFXGpbsUCdpchF6T04ZmddhfkBYJED3bizHiDIRCtsXOdZ+w0 9VFV2KCk2muUFI3pQGcgIhgbQzT3+Zjk9n+2M8+CqT2Ma0Y509sDLYToY0gZgcI4 vitkhqbBjxEtYBSVvyYG7PBZTvZ/fYyBpfvvZteLP8t4mKnqbNil5ccIhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJA8HFvXG4idk1fJJUypZLj7zcfMB8GA1UdIwQY MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4 LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHX+VLbNO r13E4dTUpVf450EUlUkL32zb5S9gL9qf3D+DtpSkj6cV1CfLGLUN23yIdcKsBK/8 nOZQVnhxr1Ox4HBoiKuJNWuDyWQPegCkEujSzJl7wCZ0TE7j0U945m/T5W1An7QC MnV2lg/HRG21+z25cYwEYjvEwVISzBTFl+VS0oVpZP6mrL6Jo/6PmZPc8aV1zQsg vFlhQHaD9sWwatgmtjzw4i2ZaQ+8IcyWYnC9/rE1YetwNMNewLLHWp/fxPem6+d9 Osf46AFu/5FlxrfHPzbCFyEvyz0fixwd0ULCxJT89ipxJosYYSEZJ/cGcLtjdp6q jDEuzEM/ydtE3w== -----END CERTIFICATE-----Generated at Thu Dec 11 06:48:13 2025 by rpki-client