This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json) Hash identifier: YRsTGuPuPVB4M0c1pqC78XGvPffNpouBIN6qbYnlYbk= Subject key identifier: C2:5A:DC:33:69:FD:48:72:1C:AD:C8:6C:FB:95:4F:D1:06:46:8B:B4 Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Certificate serial: 019B2A0A1BE04C1BE58B17EF38CDF871174B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft Manifest number: 3B Signing time: Wed 17 Dec 2025 02:01:04 +0000 Manifest this update: Wed 17 Dec 2025 02:01:04 +0000 Manifest next update: Thu 18 Dec 2025 02:01:04 +0000 Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: 9mBkikggzg5n9zGva1NWGiwZrSB3UCBlEyMrJBKYiyY=) 2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:0a:1b:e0:4c:1b:e5:8b:17:ef:38:cd:f8:71:17:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66 Validity Not Before: Dec 17 02:01:04 2025 GMT Not After : Dec 18 02:01:04 2025 GMT Subject: CN=c25adc3369fd48721cadc86cfb954fd106468bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:c9:81:1d:ee:09:27:5a:bd:89:6c:b8:97: f4:cb:28:f9:d8:fd:ef:8d:43:7b:c2:47:1f:58:cb: 6c:aa:45:12:41:22:df:45:6e:cc:51:6a:be:15:1f: 43:21:e1:00:ea:d6:67:7a:76:1d:66:8c:1b:d2:b1: b8:a5:73:6f:07:e9:a5:16:3b:76:77:76:61:90:75: 72:9f:1e:06:62:cb:7c:bc:fb:2d:6e:22:4c:60:8e: 1f:72:bf:2a:5d:0e:cc:12:56:d3:8b:94:b9:8a:52: 54:e7:f9:03:28:67:47:0c:8f:b1:03:27:46:93:03: 76:1c:ed:f7:fd:b9:3f:2b:64:06:f6:48:61:dd:e0: cf:8a:1d:60:cf:60:90:0a:a6:de:be:01:11:4c:8a: bc:5e:41:00:62:8f:b8:7d:40:ff:e2:59:b2:66:93: 9d:55:15:79:18:e9:4e:cb:ed:54:d5:96:32:43:67: a0:53:2c:7e:f1:a3:3c:5c:c6:c4:92:04:a1:74:9c: eb:f9:13:5c:a1:de:e7:13:d7:c2:ae:e0:27:44:4a: 3f:ca:b3:9c:61:55:a9:fa:74:29:21:9f:53:a6:22: 36:fc:6f:ec:96:c0:58:2e:40:eb:55:25:83:f4:3a: 43:34:a5:00:04:ad:12:7c:61:33:0f:6d:19:e5:dd: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5A:DC:33:69:FD:48:72:1C:AD:C8:6C:FB:95:4F:D1:06:46:8B:B4 X509v3 Authority Key Identifier: keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:bc:32:74:bc:5a:03:c7:f5:e8:45:e7:59:53:34:cc:a7:43: c0:89:f0:c3:5a:c0:f9:2b:c1:c3:d9:b3:50:9b:51:5e:e6:37: 2d:95:a7:e3:95:42:ff:c9:39:b9:05:6b:c4:8c:18:04:31:94: b9:1a:21:85:5d:21:b7:c9:d4:0c:f1:d9:38:01:48:cd:80:eb: fa:55:c0:2a:a8:61:7f:c6:3c:db:8c:66:d1:fd:24:76:00:1d: 70:b9:8a:6f:a4:88:61:3b:1d:ab:d7:b2:0e:03:82:59:19:9b: c7:28:d3:fd:66:b4:fe:dd:18:71:31:66:56:a6:dc:20:d2:e2: d5:fc:d0:90:51:6e:d1:9c:27:2b:6d:fb:61:9e:40:ef:96:65: c8:28:b7:e9:60:7a:6b:75:cf:84:02:28:80:6a:19:aa:6e:a1: e5:4b:9d:e8:c8:2c:62:d5:6d:45:25:d7:8e:56:42:82:d5:19: c7:1a:f0:66:0c:18:1a:08:16:54:dc:c9:ca:2e:53:91:13:7a: cf:9c:48:cd:6a:06:7b:88:8c:65:49:6a:20:8c:82:45:bb:f2: c1:92:9f:22:c8:fe:e2:7b:5a:ba:cb:af:6b:51:a4:ab:38:81: 65:40:0f:3a:df:90:81:ef:a9:4c:66:b5:f1:f4:2b:96:24:a2: cf:01:ff:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqChvgTBvlixfvOM34cRdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYzZiMzFmOWRlOWQzNTk0OTU5ZDFlNTlkNjZjOWI3ZTkz ZmVkNjYwHhcNMjUxMjE3MDIwMTA0WhcNMjUxMjE4MDIwMTA0WjAzMTEwLwYDVQQD EyhjMjVhZGMzMzY5ZmQ0ODcyMWNhZGM4NmNmYjk1NGZkMTA2NDY4YmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHnJgR3uCSdavYlsuJf0yyj52P3v jUN7wkcfWMtsqkUSQSLfRW7MUWq+FR9DIeEA6tZnenYdZowb0rG4pXNvB+mlFjt2 d3ZhkHVynx4GYst8vPstbiJMYI4fcr8qXQ7MElbTi5S5ilJU5/kDKGdHDI+xAydG kwN2HO33/bk/K2QG9khh3eDPih1gz2CQCqbevgERTIq8XkEAYo+4fUD/4lmyZpOd VRV5GOlOy+1U1ZYyQ2egUyx+8aM8XMbEkgShdJzr+RNcod7nE9fCruAnREo/yrOc YVWp+nQpIZ9TpiI2/G/slsBYLkDrVSWD9DpDNKUABK0SfGEzD20Z5d1Q2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJa3DNp/UhyHK3IbPuVT9EGRou0MB8GA1UdIwQY MBaAFB7Gsx+d6dNZSVnR5Z1mybfpP+1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDct ODU3ODM4OGE1N2ZmLzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDctODU3ODM4OGE1N2Zm LzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrwydLxa A8f16EXnWVM0zKdDwInww1rA+SvBw9mzUJtRXuY3LZWn45VC/8k5uQVrxIwYBDGU uRohhV0ht8nUDPHZOAFIzYDr+lXAKqhhf8Y824xm0f0kdgAdcLmKb6SIYTsdq9ey DgOCWRmbxyjT/Wa0/t0YcTFmVqbcINLi1fzQkFFu0ZwnK237YZ5A75ZlyCi36WB6 a3XPhAIogGoZqm6h5Uud6MgsYtVtRSXXjlZCgtUZxxrwZgwYGggWVNzJyi5TkRN6 z5xIzWoGe4iMZUlqIIyCRbvywZKfIsj+4ntausuva1GkqziBZUAPOt+Qge+pTGa1 8fQrliSizwH/SA== -----END CERTIFICATE-----Generated at Wed Dec 17 06:38:39 2025 by rpki-client