This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json) Hash identifier: kLdk5Llvze9/0yu7HwH+ZPdtTXCLlTTBt8qglBUWPIU= Subject key identifier: FA:DB:9B:BD:33:80:99:13:3F:8D:E2:52:B1:3E:52:C3:C1:29:AD:6F Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6 Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6 Certificate serial: 019B1BAACE5B9305A92A30D51292428D1FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft Manifest number: 0486 Signing time: Sun 14 Dec 2025 07:02:17 +0000 Manifest this update: Sun 14 Dec 2025 07:02:17 +0000 Manifest next update: Mon 15 Dec 2025 07:02:17 +0000 Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=) 2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: vw50xFq5el6SksWcNQQhm9S3SvMuo0vgAcHJ7pTryxM=) 3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:ce:5b:93:05:a9:2a:30:d5:12:92:42:8d:1f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6 Validity Not Before: Dec 14 07:02:17 2025 GMT Not After : Dec 15 07:02:17 2025 GMT Subject: CN=fadb9bbd338099133f8de252b13e52c3c129ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:18:f4:46:93:19:9e:ca:b2:16:c6:70:73: 61:43:b0:99:5f:74:b9:28:87:b2:7a:f1:f4:e4:24: 3d:2a:08:1e:a2:e3:09:cc:d0:fb:90:61:4a:b3:15: 00:b4:9c:cb:2e:ff:fa:03:75:0e:21:b5:a0:12:97: c3:78:06:b9:fc:0a:13:38:70:40:9c:65:91:69:98: fa:ee:a3:1c:aa:7c:f4:4f:03:03:53:78:5d:72:0d: 5f:9f:50:e7:86:1c:24:b0:b2:80:ee:8d:3f:65:70: f0:c2:c4:55:1a:11:ad:ee:29:ed:b0:d5:0f:99:bf: 69:2c:f2:3f:7e:49:d6:c3:8c:68:9c:b9:8d:be:25: 41:2c:ec:fc:14:15:ba:3a:4b:49:b8:8b:bb:fb:46: ec:ff:16:e2:ff:07:68:8e:ef:97:c3:ab:27:da:d1: 5b:5f:73:94:5f:00:9b:49:d2:49:0f:64:6a:47:5f: 23:8d:0b:eb:0f:43:86:9c:c8:9d:1c:be:5c:be:76: 29:ce:65:8b:9b:6a:43:5f:da:9c:76:8c:04:03:bf: 34:5a:62:20:86:72:20:d4:f0:2b:3f:02:88:da:46: ce:16:3b:dc:f2:9e:48:53:36:92:b8:37:ce:9b:92: c7:a7:ba:e8:38:91:56:7d:d0:2b:6d:a7:19:bf:6d: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:9B:BD:33:80:99:13:3F:8D:E2:52:B1:3E:52:C3:C1:29:AD:6F X509v3 Authority Key Identifier: keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:17:4e:4e:7a:a3:bd:35:8d:a6:46:e6:5b:f4:b4:42:91:13: 60:72:fa:07:f6:fc:d6:1b:e0:79:b8:51:29:bf:be:ee:b5:40: 14:b8:60:c0:be:4e:e4:4b:12:9d:3e:94:52:3d:a8:aa:75:4e: 83:68:56:94:ac:cf:92:68:75:b7:83:82:72:14:e8:81:50:dd: db:7a:18:0d:2f:ca:c4:75:8c:b5:9e:74:92:24:fe:23:01:bf: ca:17:2b:23:53:a6:f1:f9:a8:71:16:37:f6:b9:c1:54:97:30: f1:3a:54:f1:68:bb:68:7b:ff:09:f4:c4:0b:67:8b:61:e1:58: c8:c7:7d:a7:d1:da:7b:69:98:51:87:44:83:ac:c3:a1:c0:cd: 85:32:35:6d:10:a4:81:88:22:82:ac:60:a0:b2:d1:34:b6:f1: f4:30:f6:4f:09:37:85:fd:89:8f:d9:c6:df:ad:66:41:74:67: 22:de:de:71:d2:03:77:a1:2d:ad:cc:42:54:4e:6d:c3:e8:5f: a2:17:d9:7e:66:a4:ec:66:e2:c9:2a:fd:ef:59:3b:7f:1a:8e: eb:4f:34:05:7c:a6:46:21:e8:55:03:25:8f:74:96:69:11:72: 01:bf:a3:d4:d0:dd:60:d4:35:50:61:40:2c:f1:80:4a:3f:ac: c4:c1:2e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqs5bkwWpKjDVEpJCjR/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmJjMTQ1YzViMjIzOTRkNmZlYWU5OTZiYzBiYjI1MjU0 ODAxYzYwHhcNMjUxMjE0MDcwMjE3WhcNMjUxMjE1MDcwMjE3WjAzMTEwLwYDVQQD EyhmYWRiOWJiZDMzODA5OTEzM2Y4ZGUyNTJiMTNlNTJjM2MxMjlhZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs0Y9EaTGZ7KshbGcHNhQ7CZX3S5 KIeyevH05CQ9KggeouMJzND7kGFKsxUAtJzLLv/6A3UOIbWgEpfDeAa5/AoTOHBA nGWRaZj67qMcqnz0TwMDU3hdcg1fn1DnhhwksLKA7o0/ZXDwwsRVGhGt7intsNUP mb9pLPI/fknWw4xonLmNviVBLOz8FBW6OktJuIu7+0bs/xbi/wdoju+Xw6sn2tFb X3OUXwCbSdJJD2RqR18jjQvrD0OGnMidHL5cvnYpzmWLm2pDX9qcdowEA780WmIg hnIg1PArPwKI2kbOFjvc8p5IUzaSuDfOm5LHp7roOJFWfdArbacZv22/VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrbm70zgJkTP43iUrE+UsPBKa1vMB8GA1UdIwQY MBaAFIUrwUXFsiOU1v6umWvAuyUlSAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMt OGQwNzEwZjNkMjc2LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMtOGQwNzEwZjNkMjc2 LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBdOTnqj vTWNpkbmW/S0QpETYHL6B/b81hvgebhRKb++7rVAFLhgwL5O5EsSnT6UUj2oqnVO g2hWlKzPkmh1t4OCchTogVDd23oYDS/KxHWMtZ50kiT+IwG/yhcrI1Om8fmocRY3 9rnBVJcw8TpU8Wi7aHv/CfTEC2eLYeFYyMd9p9Hae2mYUYdEg6zDocDNhTI1bRCk gYgigqxgoLLRNLbx9DD2Twk3hf2Jj9nG361mQXRnIt7ecdIDd6EtrcxCVE5tw+hf ohfZfmak7GbiySr971k7fxqO6080BXymRiHoVQMlj3SWaRFyAb+j1NDdYNQ1UGFA LPGASj+sxMEuLg== -----END CERTIFICATE-----Generated at Sun Dec 14 11:52:06 2025 by rpki-client