This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json) Hash identifier: SBy4VuAuYzKXXZI74oueZec9c6tnYsMxyLBHxnxBt6U= Subject key identifier: 8D:2C:C7:30:11:D5:A1:3D:91:2D:8C:22:0B:64:ED:EE:52:9F:A9:0B Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3 Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3 Certificate serial: 019B37FC43405AB3CC7CE439C3778E5E6535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft Manifest number: 1718 Signing time: Fri 19 Dec 2025 19:00:37 +0000 Manifest this update: Fri 19 Dec 2025 19:00:37 +0000 Manifest next update: Sat 20 Dec 2025 19:00:37 +0000 Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: YSObFvNJDv7+KJUYJ5cijoZqq42DdH7S/T3+Uvy7xsc=) 2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:43:40:5a:b3:cc:7c:e4:39:c3:77:8e:5e:65:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3 Validity Not Before: Dec 19 19:00:37 2025 GMT Not After : Dec 20 19:00:37 2025 GMT Subject: CN=8d2cc73011d5a13d912d8c220b64edee529fa90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:b7:89:79:c8:a1:e0:e8:32:48:46:b0:d2: 84:a6:8d:cb:18:67:cf:e9:08:3e:22:a9:d4:59:de: 45:59:5b:ed:0b:68:e7:16:d0:ba:2e:53:68:18:21: 5c:3c:e0:65:ff:31:fa:fd:d7:d7:ca:ae:97:f6:6b: 33:87:41:fb:20:71:b9:3c:68:a2:9e:6c:eb:64:97: cd:48:ee:88:56:63:25:05:ad:27:6f:9f:4a:26:b6: ca:c2:b1:f2:ce:c4:20:0f:4b:b8:15:70:28:38:4d: 35:45:ca:dc:01:3e:1b:a4:ba:5d:5a:63:01:62:8c: f6:87:c7:ef:11:18:66:24:db:cc:7d:ac:4d:d5:fd: ce:c0:89:dd:5c:b3:96:95:ea:49:de:7a:ab:ff:ce: 77:78:78:10:05:28:ed:ba:02:85:fe:9c:47:3d:28: 33:63:21:e9:ad:39:b4:fe:bc:91:15:f0:3b:fa:b9: 8d:fc:b8:ea:64:2d:81:76:db:49:44:e7:68:5f:dd: f5:92:a6:e3:e1:65:e6:cc:6e:aa:2e:7a:f2:a8:a6: cb:45:ca:7a:1b:0e:d0:80:8a:03:26:15:ff:f0:78: ac:94:9f:3f:99:e2:71:44:50:3f:8e:ba:21:ba:40: 29:02:21:28:b1:93:3c:65:3e:23:e2:76:77:81:5e: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:C7:30:11:D5:A1:3D:91:2D:8C:22:0B:64:ED:EE:52:9F:A9:0B X509v3 Authority Key Identifier: keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2e:42:c3:73:6c:9b:9c:13:fa:a5:3e:5b:75:28:4e:e0:16: 2c:58:87:4b:b2:3b:b1:f0:db:cf:99:35:24:d2:59:f5:75:11: 87:f9:43:35:75:2f:37:7c:d8:7a:9e:60:45:de:9d:12:60:e3: e3:ab:6d:30:5f:29:8d:02:b3:86:cf:18:9b:3f:f1:b8:61:66: c3:42:bb:31:11:51:2a:e7:f0:a1:2e:ad:42:9e:9c:e4:29:ba: 77:94:c8:a9:d1:59:80:f4:86:c1:14:be:11:7a:5a:d6:15:e0: a0:03:18:dd:ec:e2:9b:44:ba:a0:7f:d3:96:1b:5d:5d:6c:c1: cb:b2:4f:8e:f0:10:f2:68:90:1b:4c:38:e1:8c:96:6d:8e:e5: ea:94:1b:48:c5:1d:42:9c:f9:ec:46:77:f6:00:43:4e:8e:62: 60:fa:03:79:e0:16:6a:6a:3d:61:d6:4d:d8:b2:f3:75:38:86: 2c:fc:6e:54:f8:5b:a8:61:c8:09:33:eb:e0:e6:d9:25:52:f2: e3:37:04:5e:53:f6:60:46:d7:b5:a6:8c:da:89:97:41:e3:72: 6a:dd:0c:a3:3c:02:09:9f:eb:35:b1:fb:5a:93:ea:52:ff:44: e9:dc:63:8a:e5:92:af:f6:12:56:3e:08:b7:e2:5c:58:3c:3e: fa:21:34:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/ENAWrPMfOQ5w3eOXmU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOTAzNDRkY2FmZmJkMzNlNjhkODQ4OTVkODdkOGFiZjUz Yzc0YTMwHhcNMjUxMjE5MTkwMDM3WhcNMjUxMjIwMTkwMDM3WjAzMTEwLwYDVQQD Eyg4ZDJjYzczMDExZDVhMTNkOTEyZDhjMjIwYjY0ZWRlZTUyOWZhOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSi3iXnIoeDoMkhGsNKEpo3LGGfP 6Qg+IqnUWd5FWVvtC2jnFtC6LlNoGCFcPOBl/zH6/dfXyq6X9mszh0H7IHG5PGii nmzrZJfNSO6IVmMlBa0nb59KJrbKwrHyzsQgD0u4FXAoOE01RcrcAT4bpLpdWmMB Yoz2h8fvERhmJNvMfaxN1f3OwIndXLOWlepJ3nqr/853eHgQBSjtugKF/pxHPSgz YyHprTm0/ryRFfA7+rmN/LjqZC2BdttJROdoX931kqbj4WXmzG6qLnryqKbLRcp6 Gw7QgIoDJhX/8HislJ8/meJxRFA/jrohukApAiEosZM8ZT4j4nZ3gV46UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0sxzAR1aE9kS2MIgtk7e5Sn6kLMB8GA1UdIwQY MBaAFB2QNE3K/70z5o2EiV2H2Kv1PHSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYt ZTUwNjRkYjIxYjIwLzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYtZTUwNjRkYjIxYjIw LzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABS5Cw3Ns m5wT+qU+W3UoTuAWLFiHS7I7sfDbz5k1JNJZ9XURh/lDNXUvN3zYep5gRd6dEmDj 46ttMF8pjQKzhs8Ymz/xuGFmw0K7MRFRKufwoS6tQp6c5Cm6d5TIqdFZgPSGwRS+ EXpa1hXgoAMY3ezim0S6oH/TlhtdXWzBy7JPjvAQ8miQG0w44YyWbY7l6pQbSMUd Qpz57EZ39gBDTo5iYPoDeeAWamo9YdZN2LLzdTiGLPxuVPhbqGHICTPr4ObZJVLy 4zcEXlP2YEbXtaaM2omXQeNyat0MozwCCZ/rNbH7WpPqUv9E6dxjiuWSr/YSVj4I t+JcWDw++iE0yA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:47:14 2025 by rpki-client