This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json) Hash identifier: xHcYeSKXSWQOsFxJsl5J44hg1bfZVutLDEdDS1DyPG0= Subject key identifier: 36:8B:D7:57:A9:96:A8:62:E5:80:C1:D1:0C:84:E5:80:82:96:FD:79 Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe Certificate serial: 019B183A74BF028FB3E36D8699D33062CB50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft Manifest number: 1367 Signing time: Sat 13 Dec 2025 15:00:42 +0000 Manifest this update: Sat 13 Dec 2025 15:00:42 +0000 Manifest next update: Sun 14 Dec 2025 15:00:42 +0000 Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: B9feFxUr2lQX4RC84rwTa7dInkOzazrLfalKJruVdQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:74:bf:02:8f:b3:e3:6d:86:99:d3:30:62:cb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe Validity Not Before: Dec 13 15:00:42 2025 GMT Not After : Dec 14 15:00:42 2025 GMT Subject: CN=368bd757a996a862e580c1d10c84e5808296fd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:66:eb:2b:84:87:77:9c:d0:f3:b4:85:be: 79:72:c6:10:57:70:d5:67:fb:84:37:32:45:17:fb: e0:fa:24:bf:d9:82:43:ee:93:d9:b9:6d:01:7f:93: 38:a1:63:c9:50:ab:ae:ad:99:be:98:6a:8b:1b:28: 1d:82:14:84:cb:bb:f1:06:15:79:cd:90:95:0f:d6: 64:ac:bc:34:00:b2:e2:26:a2:a7:eb:ce:cf:89:94: 55:d8:90:30:5a:a4:87:5f:40:5f:68:d9:3f:8d:44: 50:72:f1:f6:0a:30:dd:d6:62:f2:db:19:b0:72:73: 3e:9e:c0:ce:c7:eb:3f:1b:8d:22:5b:7f:df:bf:c1: 1a:9a:fe:e6:1f:96:c6:a0:31:f1:b3:0f:79:32:3d: 87:fb:54:2b:6f:a3:af:bf:e2:e2:70:5f:b3:f0:c4: 74:c6:89:16:5c:1d:8d:91:74:0d:34:75:cf:56:60: f3:41:d8:98:45:e5:f6:cb:41:75:78:9d:dc:9a:78: 14:55:ab:c9:33:8a:42:24:7a:ef:9a:b6:58:60:15: 51:22:22:d2:53:1a:94:1e:f0:6c:9c:02:05:8e:f7: ba:58:d9:e5:e1:a9:de:e6:75:6c:9c:5b:96:49:7f: 5c:6c:49:1a:27:26:67:ba:82:20:82:17:83:ca:8d: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8B:D7:57:A9:96:A8:62:E5:80:C1:D1:0C:84:E5:80:82:96:FD:79 X509v3 Authority Key Identifier: keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b6:0f:15:a4:37:f3:84:3e:e4:04:5c:49:b9:de:f2:fc:d5: b3:89:63:5d:c4:54:df:0b:34:cf:48:55:23:72:de:c7:8c:6a: c2:3a:14:87:b5:0e:40:fe:bb:da:01:88:8f:28:c2:51:ba:b2: f6:ff:d1:1b:93:2b:49:5e:fc:60:96:cf:88:dc:13:3d:c2:1c: b1:2d:95:84:ad:df:fb:bb:b7:45:18:94:bb:4a:32:01:d9:4b: 8e:ed:0a:1c:41:41:ec:0a:4f:2f:94:2f:1c:e1:c6:55:35:23: 3d:98:15:1a:dd:f5:b4:5e:a9:84:68:9b:54:a9:d7:ea:f9:0c: 8c:ce:cc:73:f4:a3:5f:59:32:82:d2:0a:71:77:61:2c:92:92: db:eb:f9:a0:e2:07:45:e6:0c:0a:b9:57:cd:bb:4c:b9:85:dc: 51:be:69:54:ac:47:4b:f8:14:d0:36:44:2c:e5:ba:1e:75:55: 95:67:b5:26:14:6d:76:47:5f:05:9a:42:b7:2e:02:d0:9a:e7: 05:cb:28:7e:cd:0a:88:77:ba:24:89:26:fe:0e:da:5c:99:9a: 75:a6:80:b3:59:6b:4d:5b:77:29:04:f5:5b:68:bb:32:b1:8a: 5c:3e:46:2d:fb:50:8e:26:00:d4:29:53:7c:ff:fb:a5:05:e4: 0d:e7:09:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOnS/Ao+z422GmdMwYstQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZjQ3YjY1YTUyNTMzMjY5YmQyMTk4MTNhNTIwM2FmZGQ5 ZTVkYmUwHhcNMjUxMjEzMTUwMDQyWhcNMjUxMjE0MTUwMDQyWjAzMTEwLwYDVQQD EygzNjhiZDc1N2E5OTZhODYyZTU4MGMxZDEwYzg0ZTU4MDgyOTZmZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D9m6yuEh3ec0PO0hb55csYQV3DV Z/uENzJFF/vg+iS/2YJD7pPZuW0Bf5M4oWPJUKuurZm+mGqLGygdghSEy7vxBhV5 zZCVD9ZkrLw0ALLiJqKn687PiZRV2JAwWqSHX0BfaNk/jURQcvH2CjDd1mLy2xmw cnM+nsDOx+s/G40iW3/fv8Eamv7mH5bGoDHxsw95Mj2H+1Qrb6Ovv+LicF+z8MR0 xokWXB2NkXQNNHXPVmDzQdiYReX2y0F1eJ3cmngUVavJM4pCJHrvmrZYYBVRIiLS UxqUHvBsnAIFjve6WNnl4ane5nVsnFuWSX9cbEkaJyZnuoIggheDyo3XAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaL11eplqhi5YDB0QyE5YCClv15MB8GA1UdIwQY MBaAFIX0e2WlJTMmm9IZgTpSA6/dnl2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYt MjQxMzc4MmM3MTY2LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYtMjQxMzc4MmM3MTY2 LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirYPFaQ3 84Q+5ARcSbne8vzVs4ljXcRU3ws0z0hVI3Lex4xqwjoUh7UOQP672gGIjyjCUbqy 9v/RG5MrSV78YJbPiNwTPcIcsS2VhK3f+7u3RRiUu0oyAdlLju0KHEFB7ApPL5Qv HOHGVTUjPZgVGt31tF6phGibVKnX6vkMjM7Mc/SjX1kygtIKcXdhLJKS2+v5oOIH ReYMCrlXzbtMuYXcUb5pVKxHS/gU0DZELOW6HnVVlWe1JhRtdkdfBZpCty4C0Jrn Bcsofs0KiHe6JIkm/g7aXJmadaaAs1lrTVt3KQT1W2i7MrGKXD5GLftQjiYA1ClT fP/7pQXkDecJJw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:18 2025 by rpki-client