This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json) Hash identifier: /XLbvcLbLryuIvMm4/69FjZrNko97NThAFVkGngwnb4= Subject key identifier: 58:8B:62:1F:58:E7:98:07:51:2F:BF:21:E2:75:41:55:C9:AE:68:01 Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b Certificate serial: 019B217693BF3A0624CB6C2B8DA7DE8F297D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft Manifest number: 133C Signing time: Mon 15 Dec 2025 10:02:57 +0000 Manifest this update: Mon 15 Dec 2025 10:02:57 +0000 Manifest next update: Tue 16 Dec 2025 10:02:57 +0000 Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: B7JHTtejfjiEUQGrYxwUckvzVn7CAuvXiPrAkezYWsQ=) 2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=) 3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=) 4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:93:bf:3a:06:24:cb:6c:2b:8d:a7:de:8f:29:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b Validity Not Before: Dec 15 10:02:57 2025 GMT Not After : Dec 16 10:02:57 2025 GMT Subject: CN=588b621f58e79807512fbf21e2754155c9ae6801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:22:a6:65:1e:1c:d4:19:f9:0a:2e:a0:77: f0:22:52:79:63:11:7d:d1:bb:07:ee:0f:f2:df:c1: 19:8b:0d:68:e5:1b:50:44:6a:bc:15:50:46:d9:ea: bd:19:8f:69:90:6b:18:f7:a9:82:da:83:a4:8b:72: f6:5e:03:a4:43:49:28:47:d7:ec:ff:d9:b1:83:73: 08:c3:ed:60:d3:4e:a5:a6:53:01:4e:ac:90:14:a5: 40:53:9a:d0:63:86:36:f8:91:13:07:b1:90:04:78: bc:ee:61:38:a4:36:2b:1a:df:45:74:89:de:d8:d1: 9d:82:eb:8b:66:0f:7a:c8:4e:63:ca:22:fc:a0:2d: 2c:56:93:5c:dc:13:4b:83:79:8d:9b:4d:a4:ad:e0: 4d:79:05:15:3b:1b:3a:9d:2f:24:b9:16:5f:36:c5: cc:ce:7b:b8:dc:30:0c:ba:71:c3:dc:59:5f:ba:47: 99:1a:8e:ad:c9:d0:38:15:05:df:89:5c:5a:e6:af: 33:df:be:f4:6a:b3:2c:4e:b9:74:9e:a8:b0:ee:c1: cb:3c:68:70:3a:19:d6:3f:9b:09:78:a3:2f:cf:fe: 6f:df:a4:6d:37:44:b9:3c:8f:d8:29:df:a6:e5:9c: f8:ff:89:ba:26:f9:4d:36:b7:82:6c:ec:3a:19:23: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:62:1F:58:E7:98:07:51:2F:BF:21:E2:75:41:55:C9:AE:68:01 X509v3 Authority Key Identifier: keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4b:12:b4:a8:42:57:6f:8b:af:df:31:85:ee:e7:64:83:cd: 8d:b4:59:68:a5:c4:72:e3:06:cd:24:08:86:97:01:45:27:f5: 96:9b:1d:66:9c:7c:4b:d4:e9:0b:59:6b:56:df:80:f8:2a:22: db:6a:bb:09:f3:8f:a7:be:d3:76:11:c3:31:6f:3e:8b:70:7c: 2a:56:17:7f:6d:cf:7d:99:40:79:7d:5b:4e:c3:f3:9c:09:20: 0b:78:89:69:ab:1a:53:cb:28:bb:ac:04:c3:1d:7c:e2:1f:2a: 38:a5:48:a3:3d:08:ad:c2:f8:ba:35:b1:92:f7:68:30:f3:fc: 74:30:bd:18:07:9a:e7:c8:63:0d:ba:a2:02:dd:02:ec:03:70: b2:c0:46:e5:6b:dd:5a:98:08:eb:a0:e1:24:67:dd:8a:82:07: ae:83:00:54:0a:15:82:b7:35:dd:33:e2:79:b7:db:ec:f8:6c: a8:da:91:09:62:11:9f:8f:ef:9a:eb:2f:5d:c5:b9:a7:65:79: c4:53:b8:c0:65:09:3f:b8:db:dd:c6:20:0f:ec:c9:04:1c:0b: e8:bc:3b:90:04:4d:77:0d:87:e5:03:6f:48:8c:6e:1c:a1:8e: 86:cb:11:2c:f1:e4:7c:f3:fd:24:ff:ca:49:e9:b1:bc:8e:34: 81:88:e6:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdpO/OgYky2wrjafejyl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk MzA1NGIwHhcNMjUxMjE1MTAwMjU3WhcNMjUxMjE2MTAwMjU3WjAzMTEwLwYDVQQD Eyg1ODhiNjIxZjU4ZTc5ODA3NTEyZmJmMjFlMjc1NDE1NWM5YWU2ODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgIipmUeHNQZ+QouoHfwIlJ5YxF9 0bsH7g/y38EZiw1o5RtQRGq8FVBG2eq9GY9pkGsY96mC2oOki3L2XgOkQ0koR9fs /9mxg3MIw+1g006lplMBTqyQFKVAU5rQY4Y2+JETB7GQBHi87mE4pDYrGt9FdIne 2NGdguuLZg96yE5jyiL8oC0sVpNc3BNLg3mNm02kreBNeQUVOxs6nS8kuRZfNsXM znu43DAMunHD3FlfukeZGo6tydA4FQXfiVxa5q8z3770arMsTrl0nqiw7sHLPGhw OhnWP5sJeKMvz/5v36RtN0S5PI/YKd+m5Zz4/4m6JvlNNreCbOw6GSPqQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiLYh9Y55gHUS+/IeJ1QVXJrmgBMB8GA1UdIwQY MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt NGM5M2JlZTI3ZDU0LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0 LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUsStKhC V2+Lr98xhe7nZIPNjbRZaKXEcuMGzSQIhpcBRSf1lpsdZpx8S9TpC1lrVt+A+Coi 22q7CfOPp77TdhHDMW8+i3B8KlYXf23PfZlAeX1bTsPznAkgC3iJaasaU8sou6wE wx184h8qOKVIoz0IrcL4ujWxkvdoMPP8dDC9GAea58hjDbqiAt0C7ANwssBG5Wvd WpgI66DhJGfdioIHroMAVAoVgrc13TPiebfb7PhsqNqRCWIRn4/vmusvXcW5p2V5 xFO4wGUJP7jb3cYgD+zJBBwL6Lw7kARNdw2H5QNvSIxuHKGOhssRLPHkfPP9JP/K SemxvI40gYjmVg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:08:00 2025 by rpki-client