This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft File: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft (raw, json) Hash identifier: XQVXT4G4wQoB9Kv+jihduiNi2EmOAelyJoukd3jymbo= Subject key identifier: 3F:5E:78:E3:4B:1D:44:9A:BF:2F:9E:B3:6E:8C:D2:68:A1:74:52:EE Authority key identifier: 85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32 Certificate issuer: /CN=8559fea7e83e64e5d82562313c3a3f190f49f032 Certificate serial: 019B59E43CF92C1EB56A36715E5A3EE0EBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft Manifest number: 127D Signing time: Fri 26 Dec 2025 09:01:28 +0000 Manifest this update: Fri 26 Dec 2025 09:01:28 +0000 Manifest next update: Sat 27 Dec 2025 09:01:28 +0000 Files and hashes: 1: hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl (hash: XYtPxafR4AvP0VztD80RiymTUoR9xASmUMf9bf+iAJc=) 2: uwxSfgtDb1hs4GjNpuGb8j73UQc.roa (hash: RSHlzEu5gedHDd64WPHnVhXKRlBuPWqfK8I3+3ZiN70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:3c:f9:2c:1e:b5:6a:36:71:5e:5a:3e:e0:eb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8559fea7e83e64e5d82562313c3a3f190f49f032 Validity Not Before: Dec 26 09:01:28 2025 GMT Not After : Dec 27 09:01:28 2025 GMT Subject: CN=3f5e78e34b1d449abf2f9eb36e8cd268a17452ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:1e:1b:2c:6c:c7:8c:5f:12:ff:c2:13:c4: c5:7f:dc:b4:d8:a9:f0:6c:9d:d9:06:89:16:bd:6e: 76:09:6f:e1:ee:b4:b7:25:78:62:92:aa:10:b1:4f: e4:ff:41:20:94:0d:56:17:b2:42:11:00:54:3e:51: ac:c1:69:e4:51:21:df:24:66:60:a3:a8:e0:cb:2d: 19:70:9b:bc:1e:73:90:e9:84:ee:91:26:be:ff:7e: 7d:4a:0f:ac:5e:73:69:61:dd:19:33:5a:27:38:bd: ae:7e:fa:76:a2:d4:eb:68:67:32:6c:1d:ee:3d:77: 96:2c:88:cb:63:07:bb:ac:82:69:93:0a:c4:94:03: af:52:4e:63:70:3f:30:72:f3:bb:c4:2b:b1:30:25: a3:a7:42:ad:47:df:15:04:b9:9a:e0:f1:36:a3:c3: 9b:d3:37:4e:e5:65:92:2b:87:cb:08:cc:11:59:79: ff:12:59:5d:8e:b2:21:27:6b:61:97:d2:af:55:f2: 62:d3:ae:20:4c:9a:fd:ae:3b:40:97:fd:de:a7:7c: a2:6a:b5:ca:72:ae:e1:b9:45:78:43:a7:e2:ec:e7: c0:13:1a:f5:13:a2:78:68:95:a7:de:a9:96:3a:6b: 23:7a:a8:88:75:09:11:2b:f7:e0:9c:a1:27:70:d7: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5E:78:E3:4B:1D:44:9A:BF:2F:9E:B3:6E:8C:D2:68:A1:74:52:EE X509v3 Authority Key Identifier: keyid:85:59:FE:A7:E8:3E:64:E5:D8:25:62:31:3C:3A:3F:19:0F:49:F0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76e87d-7595-4ba1-a2d7-870e64d464d5/1/hVn-p-g-ZOXYJWIxPDo_GQ9J8DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:bf:65:a5:d8:21:27:27:bc:08:59:70:be:7b:61:f6:77:c7: 5d:3c:86:0e:10:45:65:ad:ae:3b:65:07:b4:a7:7b:c6:ae:ed: c9:64:c7:37:90:65:62:61:cc:d4:ce:95:50:fc:4e:94:d7:53: ea:e5:d3:4a:24:f3:6b:c5:b9:fc:b8:ad:3a:4d:6c:d2:10:3d: 24:dd:3c:74:a1:2c:32:57:a7:a3:de:fb:7c:5f:ac:5f:9d:16: 5a:75:c8:75:69:fa:35:69:b7:54:5b:01:2b:4f:a5:8d:05:0a: 96:7b:b9:f4:59:39:3b:7a:32:7a:18:01:3c:ff:de:90:c9:f4: 9f:08:f1:e3:a1:5d:c2:24:49:b2:f9:31:f2:4f:31:c1:c4:26: 6c:c8:5d:1f:fb:d9:60:32:be:66:62:fd:81:50:8b:be:e5:c2: 0a:aa:e4:1d:bf:6f:b0:ef:cc:c8:5d:01:94:8b:5f:91:c8:f9: 7d:0a:3d:17:b4:a9:20:42:a7:7e:69:4f:29:fd:c7:7e:50:84: 5d:fb:de:73:7b:b8:37:8f:2d:78:8d:f4:35:24:97:7f:06:d1: 72:45:31:17:65:7d:10:28:45:29:2c:f6:ce:4f:ab:77:f2:93: 5c:1e:43:fe:42:4b:31:0f:2f:47:a9:4b:5e:d5:0e:6c:ff:a0: 7d:a7:ee:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Dz5LB61ajZxXlo+4OvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NTlmZWE3ZTgzZTY0ZTVkODI1NjIzMTNjM2EzZjE5MGY0 OWYwMzIwHhcNMjUxMjI2MDkwMTI4WhcNMjUxMjI3MDkwMTI4WjAzMTEwLwYDVQQD EygzZjVlNzhlMzRiMWQ0NDlhYmYyZjllYjM2ZThjZDI2OGExNzQ1MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr64eGyxsx4xfEv/CE8TFf9y02Knw bJ3ZBokWvW52CW/h7rS3JXhikqoQsU/k/0EglA1WF7JCEQBUPlGswWnkUSHfJGZg o6jgyy0ZcJu8HnOQ6YTukSa+/359Sg+sXnNpYd0ZM1onOL2ufvp2otTraGcybB3u PXeWLIjLYwe7rIJpkwrElAOvUk5jcD8wcvO7xCuxMCWjp0KtR98VBLma4PE2o8Ob 0zdO5WWSK4fLCMwRWXn/ElldjrIhJ2thl9KvVfJi064gTJr9rjtAl/3ep3yiarXK cq7huUV4Q6fi7OfAExr1E6J4aJWn3qmWOmsjeqiIdQkRK/fgnKEncNfGIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9eeONLHUSavy+es26M0mihdFLuMB8GA1UdIwQY MBaAFIVZ/qfoPmTl2CViMTw6PxkPSfAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDct ODcwZTY0ZDQ2NGQ1LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83NmU4N2QtNzU5NS00YmExLWEyZDctODcwZTY0ZDQ2NGQ1 LzEvaFZuLXAtZy1aT1hZSldJeFBEb19HUTlKOERJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy79lpdgh Jye8CFlwvnth9nfHXTyGDhBFZa2uO2UHtKd7xq7tyWTHN5BlYmHM1M6VUPxOlNdT 6uXTSiTza8W5/LitOk1s0hA9JN08dKEsMleno977fF+sX50WWnXIdWn6NWm3VFsB K0+ljQUKlnu59Fk5O3oyehgBPP/ekMn0nwjx46FdwiRJsvkx8k8xwcQmbMhdH/vZ YDK+ZmL9gVCLvuXCCqrkHb9vsO/MyF0BlItfkcj5fQo9F7SpIEKnfmlPKf3HflCE Xfvec3u4N48teI30NSSXfwbRckUxF2V9EChFKSz2zk+rd/KTXB5D/kJLMQ8vR6lL XtUObP+gfafu2g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:12 2025 by rpki-client