This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json) Hash identifier: Q1eTJm4yknil+KcdFxzrxUdqLm7kiOzcZ7f6qyglpss= Subject key identifier: A5:58:8D:59:4F:31:E2:87:A0:93:65:00:94:1E:00:95:3A:54:C9:B5 Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Certificate serial: 019B085AFF60CBA6EA24F8EA645F9B4ACB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft Manifest number: 0A85 Signing time: Wed 10 Dec 2025 13:02:19 +0000 Manifest this update: Wed 10 Dec 2025 13:02:19 +0000 Manifest next update: Thu 11 Dec 2025 13:02:19 +0000 Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=) 2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: NIut8nV+SzabZg9A3IGLQbwsLrbtlM8joyejZMJbBbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:ff:60:cb:a6:ea:24:f8:ea:64:5f:9b:4a:cb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e Validity Not Before: Dec 10 13:02:19 2025 GMT Not After : Dec 11 13:02:19 2025 GMT Subject: CN=a5588d594f31e287a0936500941e00953a54c9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:f0:c8:fc:d1:d0:f0:58:64:dc:49:6a:c4: e6:70:a0:73:39:f6:24:e6:b2:82:b2:16:69:7e:7b: 77:0c:db:98:05:a3:6f:40:c3:54:fe:ed:18:4d:be: 59:e9:26:16:e4:01:6f:70:3a:ba:e6:21:5c:63:a9: 89:06:d1:e2:9f:c0:92:46:33:63:5a:85:35:c6:30: 34:61:7d:f0:f8:9e:ea:84:94:e3:ca:21:a8:29:58: 7d:6f:74:f0:01:ce:e2:68:45:23:f4:a7:62:52:8f: 0f:62:2b:01:9d:59:9e:f3:f9:3c:98:ed:65:da:64: 5f:c7:80:37:c6:fe:c2:3e:7f:1d:04:8c:12:e0:59: aa:25:0a:49:c3:66:7e:e4:d0:11:f5:79:e8:c8:dc: 65:7a:6b:f6:34:03:2e:9e:dd:14:62:af:cf:11:74: 96:32:46:72:ed:b6:47:ad:5b:21:75:21:bf:fe:b0: 30:9f:6c:b7:ef:07:1e:0d:3c:e4:5e:5d:2c:a1:78: 08:de:5a:f1:74:18:e6:86:c7:70:4f:96:db:0a:c3: 56:79:cc:8e:d5:8a:3b:81:77:fe:c0:ba:e3:cc:43: c3:90:11:e2:3f:c8:68:a2:8f:b7:65:26:16:ae:f4: aa:aa:cf:bc:20:dc:a5:40:1f:88:7a:01:13:e8:11: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:58:8D:59:4F:31:E2:87:A0:93:65:00:94:1E:00:95:3A:54:C9:B5 X509v3 Authority Key Identifier: keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:c9:e9:7f:66:6a:89:ea:2b:d2:85:2b:c6:74:a1:35:44:6d: 37:aa:c5:e0:70:4c:3f:2d:73:75:89:de:2d:3d:2f:d3:f7:b6: 47:be:b9:e9:bb:ed:40:da:6d:32:1f:5c:b3:36:78:6d:22:fe: 2b:ba:00:af:ad:af:1f:9a:5c:9e:39:26:45:b4:58:04:a2:42: 0b:b1:ca:9e:0e:d4:97:b6:04:9e:59:23:1a:4a:f2:98:7f:97: ef:10:7c:8a:59:81:33:ac:55:7d:ef:d6:db:77:28:8b:da:c7: d4:46:35:28:04:c4:7f:46:e0:b6:d7:af:f5:fb:1e:48:64:88: 96:dd:61:15:58:4c:b1:ed:46:71:9e:59:4d:62:71:5d:df:ea: 7d:00:e7:9a:7e:22:c0:eb:03:0f:51:47:7d:b1:d0:31:46:42: 44:75:73:ad:04:02:a4:d7:e6:f2:4c:52:17:dc:d2:02:cb:50: fe:c0:b4:46:04:a4:a3:ee:70:8d:b9:80:b2:b6:a1:e1:e4:07: f8:0b:b9:07:5b:2b:26:79:e7:ab:30:d1:56:8d:26:30:4f:ba: 2b:a7:30:97:53:4a:db:15:0a:38:ee:66:06:08:d5:73:19:e1: 69:20:6c:03:b1:e7:a7:1e:02:df:43:c4:c2:87:b5:3b:72:aa: f9:6a:eb:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWv9gy6bqJPjqZF+bSsuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl ZTMzMmUwHhcNMjUxMjEwMTMwMjE5WhcNMjUxMjExMTMwMjE5WjAzMTEwLwYDVQQD EyhhNTU4OGQ1OTRmMzFlMjg3YTA5MzY1MDA5NDFlMDA5NTNhNTRjOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi/wyPzR0PBYZNxJasTmcKBzOfYk 5rKCshZpfnt3DNuYBaNvQMNU/u0YTb5Z6SYW5AFvcDq65iFcY6mJBtHin8CSRjNj WoU1xjA0YX3w+J7qhJTjyiGoKVh9b3TwAc7iaEUj9KdiUo8PYisBnVme8/k8mO1l 2mRfx4A3xv7CPn8dBIwS4FmqJQpJw2Z+5NAR9XnoyNxlemv2NAMunt0UYq/PEXSW MkZy7bZHrVshdSG//rAwn2y37wceDTzkXl0soXgI3lrxdBjmhsdwT5bbCsNWecyO 1Yo7gXf+wLrjzEPDkBHiP8hooo+3ZSYWrvSqqs+8INylQB+IegET6BE28wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVYjVlPMeKHoJNlAJQeAJU6VMm1MB8GA1UdIwQY MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3 LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5snpf2Zq ieor0oUrxnShNURtN6rF4HBMPy1zdYneLT0v0/e2R7656bvtQNptMh9cszZ4bSL+ K7oAr62vH5pcnjkmRbRYBKJCC7HKng7Ul7YEnlkjGkrymH+X7xB8ilmBM6xVfe/W 23coi9rH1EY1KATEf0bgttev9fseSGSIlt1hFVhMse1GcZ5ZTWJxXd/qfQDnmn4i wOsDD1FHfbHQMUZCRHVzrQQCpNfm8kxSF9zSAstQ/sC0RgSko+5wjbmAsrah4eQH +Au5B1srJnnnqzDRVo0mME+6K6cwl1NK2xUKOO5mBgjVcxnhaSBsA7Hnpx4C30PE woe1O3Kq+WrrHQ== -----END CERTIFICATE-----Generated at Wed Dec 10 18:23:47 2025 by rpki-client