This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json) Hash identifier: cDMT7d215TW0z4p/JJVlvCOnZ6Kck6Hl8XvbnUIy8MA= Subject key identifier: FA:52:2B:6B:7E:CE:B7:AB:CF:56:DD:9B:0A:C9:C5:E4:08:FC:0F:C1 Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b Certificate serial: 019B0C371D272E9F07B558B5A4EACD8C3435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft Manifest number: 1331 Signing time: Thu 11 Dec 2025 07:01:37 +0000 Manifest this update: Thu 11 Dec 2025 07:01:37 +0000 Manifest next update: Fri 12 Dec 2025 07:01:37 +0000 Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: iKoAfJD/sa/Wqgp/c8svLg9cKJx/0Xz+RWQ+ZuLboYA=) 2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=) 3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=) 4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 07:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:1d:27:2e:9f:07:b5:58:b5:a4:ea:cd:8c:34:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b Validity Not Before: Dec 11 07:01:37 2025 GMT Not After : Dec 12 07:01:37 2025 GMT Subject: CN=fa522b6b7eceb7abcf56dd9b0ac9c5e408fc0fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:43:a1:b4:cf:6a:49:fa:ba:5a:c2:6d:25: 5a:c1:7f:dc:7a:02:f2:cd:37:d8:4b:ff:e9:f7:63: 31:b7:cd:22:5a:da:51:76:56:3e:92:b9:1b:46:2c: f2:f7:38:23:90:94:89:f7:2f:03:9a:6a:b1:c1:46: 0a:bf:0a:e8:a2:55:98:f5:26:cd:35:1e:c7:cc:c2: 6f:34:7e:f3:02:7e:b7:3d:08:1c:dd:67:78:27:11: f9:ab:fb:66:d8:0f:26:2a:52:f7:18:c1:68:80:03: d7:d3:4f:31:c1:fd:0c:da:ad:62:a4:bb:e1:ee:b3: a7:f8:59:7e:0e:8b:07:6b:8c:b7:10:79:35:fd:e6: f7:34:89:b8:40:93:2d:14:67:d4:79:f1:db:fe:18: 06:90:92:a9:00:15:2c:8d:09:5d:ad:8a:a2:98:b9: e5:0e:26:62:8c:56:2e:3c:e4:ee:68:30:f3:b5:6d: 0c:8a:66:16:cf:05:d5:f3:4e:3d:7d:28:fd:d2:ec: 51:9c:e9:c9:26:9b:c2:11:c2:6d:56:d1:b8:6b:47: c5:07:08:4d:21:a7:eb:9b:c5:10:53:43:17:50:a8: a2:f4:f1:81:d6:69:87:2b:d0:72:e7:39:4d:07:38: 75:02:e1:7e:37:66:1c:6f:7b:c3:00:32:51:4e:60: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:2B:6B:7E:CE:B7:AB:CF:56:DD:9B:0A:C9:C5:E4:08:FC:0F:C1 X509v3 Authority Key Identifier: keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3d:9e:d9:68:d8:96:48:90:e7:93:65:72:54:4a:a4:36:0b: 14:8c:9e:e0:e8:8c:73:d2:34:f5:19:6d:0a:0b:3e:50:ba:30: 78:22:2e:70:bb:e8:b2:0f:83:10:e7:b4:5d:97:9a:ee:03:06: 4d:40:ce:06:42:78:ab:8f:cf:e0:96:ef:7d:5e:8a:4c:cf:28: 26:7a:d3:c8:74:90:30:48:23:d7:d3:20:5c:40:fc:a5:ef:8e: 71:76:db:d9:93:96:fd:b3:0f:84:ff:8c:ad:ca:ea:8c:41:66: 13:71:00:fc:c0:93:8d:58:ec:df:79:ba:d7:46:1b:91:a6:3b: 8a:d7:91:9c:0d:fd:da:55:6d:07:3c:ee:f1:74:35:64:21:8b: 87:d8:c7:87:88:6b:8c:c7:c0:f2:87:35:7f:e4:ec:ec:89:8c: 16:13:9c:87:37:36:06:6c:7e:5b:b2:fc:5c:ce:6d:8f:a6:09: ee:0b:57:f8:16:43:74:92:d3:3c:89:b7:4e:4e:b8:b5:c8:8d: 26:4c:17:cd:f1:04:80:9a:fd:0d:e9:2b:a3:a0:08:9f:e9:c3: 97:57:25:a4:b8:5b:ef:7f:56:89:09:6d:1a:cb:dd:30:c5:45: f6:79:68:d7:03:5c:48:79:b8:e8:ff:26:12:1d:9d:b7:5a:f8: a1:9b:15:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNx0nLp8HtVi1pOrNjDQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk MzA1NGIwHhcNMjUxMjExMDcwMTM3WhcNMjUxMjEyMDcwMTM3WjAzMTEwLwYDVQQD EyhmYTUyMmI2YjdlY2ViN2FiY2Y1NmRkOWIwYWM5YzVlNDA4ZmMwZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssBDobTPakn6ulrCbSVawX/cegLy zTfYS//p92Mxt80iWtpRdlY+krkbRizy9zgjkJSJ9y8DmmqxwUYKvwroolWY9SbN NR7HzMJvNH7zAn63PQgc3Wd4JxH5q/tm2A8mKlL3GMFogAPX008xwf0M2q1ipLvh 7rOn+Fl+DosHa4y3EHk1/eb3NIm4QJMtFGfUefHb/hgGkJKpABUsjQldrYqimLnl DiZijFYuPOTuaDDztW0MimYWzwXV8049fSj90uxRnOnJJpvCEcJtVtG4a0fFBwhN Iafrm8UQU0MXUKii9PGB1mmHK9By5zlNBzh1AuF+N2Ycb3vDADJRTmASAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpSK2t+zrerz1bdmwrJxeQI/A/BMB8GA1UdIwQY MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt NGM5M2JlZTI3ZDU0LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0 LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArz2e2WjY lkiQ55NlclRKpDYLFIye4OiMc9I09RltCgs+ULoweCIucLvosg+DEOe0XZea7gMG TUDOBkJ4q4/P4JbvfV6KTM8oJnrTyHSQMEgj19MgXED8pe+OcXbb2ZOW/bMPhP+M rcrqjEFmE3EA/MCTjVjs33m610YbkaY7iteRnA392lVtBzzu8XQ1ZCGLh9jHh4hr jMfA8oc1f+Ts7ImMFhOchzc2Bmx+W7L8XM5tj6YJ7gtX+BZDdJLTPIm3Tk64tciN JkwXzfEEgJr9Dekro6AIn+nDl1clpLhb739WiQltGsvdMMVF9nlo1wNcSHm46P8m Eh2dt1r4oZsVuw== -----END CERTIFICATE-----Generated at Thu Dec 11 15:08:37 2025 by rpki-client