This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json) Hash identifier: PKqNAGcl2hBL6ii0ZBH7nBWMU/OCuHH+BZ932m0GsCU= Subject key identifier: B5:F9:09:FD:53:1B:AC:F9:C6:A8:25:FE:FA:A2:42:DE:39:73:9F:55 Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Certificate serial: 019B37C5E704A968D7BC9E9C7C86B7CFD935 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft Manifest number: 0534 Signing time: Fri 19 Dec 2025 18:01:15 +0000 Manifest this update: Fri 19 Dec 2025 18:01:15 +0000 Manifest next update: Sat 20 Dec 2025 18:01:15 +0000 Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: 1wIbO8QxaZUsvdxOm/bYosMO9P27BzAXuxLhMrZvl9w=) 2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:e7:04:a9:68:d7:bc:9e:9c:7c:86:b7:cf:d9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949 Validity Not Before: Dec 19 18:01:15 2025 GMT Not After : Dec 20 18:01:15 2025 GMT Subject: CN=b5f909fd531bacf9c6a825fefaa242de39739f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:77:b6:e6:67:f0:c4:ed:4b:7f:d1:3c:fd: 98:82:16:e5:be:59:6e:9c:6b:fc:f7:82:44:a9:0a: c1:1a:7b:10:71:24:d6:44:a1:99:b9:34:e4:2c:eb: fd:55:03:68:92:72:8d:b9:e1:22:bf:6e:9d:65:96: 8d:72:54:e0:a1:1c:2c:a0:c6:b8:60:19:f1:c0:40: 2c:de:6f:ef:22:01:d4:3c:b4:08:3a:3e:42:c1:94: dd:12:69:71:72:17:c6:8b:99:6c:51:b9:ce:18:ce: ef:c7:61:be:10:34:6a:bf:d6:a0:d3:33:ce:00:4c: f2:71:78:fa:49:0d:c9:92:61:c6:f5:7f:1d:ac:88: a3:21:2a:e6:9e:16:3b:32:0a:d3:0b:5f:e6:e8:0a: 45:aa:e2:ae:4a:35:69:47:4a:8c:d4:e6:c6:af:07: 0e:7c:8a:23:97:92:bc:be:c2:69:07:7a:67:0c:b6: 86:3b:01:25:77:c0:1c:1a:e4:17:8d:c7:ed:6e:6e: d9:6d:42:b2:28:20:91:64:0b:b8:4a:c0:1d:e2:1e: 51:e9:49:31:64:da:19:64:ed:89:d5:ed:fd:08:d5: e0:f4:75:39:46:f4:91:06:23:cb:a0:bb:69:b3:66: d6:c9:f0:b5:8c:0d:5b:fa:f2:e7:95:f5:39:60:6c: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:09:FD:53:1B:AC:F9:C6:A8:25:FE:FA:A2:42:DE:39:73:9F:55 X509v3 Authority Key Identifier: keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c9:65:16:eb:93:8b:9a:db:b7:71:cb:b1:19:f9:62:f4:38: d4:10:cb:4f:22:3f:42:f9:0a:8e:02:6c:3a:7c:54:c0:d6:a1: 22:66:ac:0b:03:4b:83:51:05:32:1b:08:03:0e:d5:02:27:f4: 6f:ff:38:15:dc:f3:21:a1:e4:83:f6:39:f9:0b:f4:6c:32:72: 48:06:0b:fe:27:2f:0a:35:ea:31:fe:c9:e6:31:57:23:cf:df: ff:0f:96:fa:2f:54:39:0d:88:44:22:d1:ed:73:a8:79:76:98: c4:5c:5e:0d:52:ee:8c:03:91:2a:f6:30:20:ca:72:9b:c6:cb: ea:72:e9:24:e7:c0:e4:c2:e0:aa:82:1d:ec:a5:1a:ce:17:00: ad:35:7e:dd:dc:06:72:e4:58:10:63:6d:28:d5:6f:ab:53:d5: 79:44:de:8a:82:4e:bc:2b:b6:77:5e:19:8e:bb:40:64:c8:00: ac:94:10:32:a5:c9:65:58:30:dd:7d:83:f4:70:c3:61:d4:28: 5f:77:20:f9:7f:9a:39:66:bf:9c:69:1a:34:b8:f9:f5:a7:90: b9:e0:99:21:5c:cc:71:86:c7:2f:ac:0b:72:27:0b:4a:2c:3f: 14:3e:f1:4a:e5:6e:e9:15:78:c5:bc:1f:91:09:07:fa:3c:6a: 53:6a:c5:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xecEqWjXvJ6cfIa3z9k1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzZlOWIxZDAxNDc0YWYyYzNlNGY4YzIwZjQ2MWQxMzY4 MDE5NDkwHhcNMjUxMjE5MTgwMTE1WhcNMjUxMjIwMTgwMTE1WjAzMTEwLwYDVQQD EyhiNWY5MDlmZDUzMWJhY2Y5YzZhODI1ZmVmYWEyNDJkZTM5NzM5ZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA93tuZn8MTtS3/RPP2Yghblvllu nGv894JEqQrBGnsQcSTWRKGZuTTkLOv9VQNoknKNueEiv26dZZaNclTgoRwsoMa4 YBnxwEAs3m/vIgHUPLQIOj5CwZTdEmlxchfGi5lsUbnOGM7vx2G+EDRqv9ag0zPO AEzycXj6SQ3JkmHG9X8drIijISrmnhY7MgrTC1/m6ApFquKuSjVpR0qM1ObGrwcO fIojl5K8vsJpB3pnDLaGOwEld8AcGuQXjcftbm7ZbUKyKCCRZAu4SsAd4h5R6Ukx ZNoZZO2J1e39CNXg9HU5RvSRBiPLoLtps2bWyfC1jA1b+vLnlfU5YGyy4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX5Cf1TG6z5xqgl/vqiQt45c59VMB8GA1UdIwQY MBaAFIc26bHQFHSvLD5PjCD0YdE2gBlJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt M2IwNjhkYjQxMTQwLzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw LzEvaHpicHNkQVVkSzhzUGstTUlQUmgwVGFBR1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMllFuuT i5rbt3HLsRn5YvQ41BDLTyI/QvkKjgJsOnxUwNahImasCwNLg1EFMhsIAw7VAif0 b/84FdzzIaHkg/Y5+Qv0bDJySAYL/icvCjXqMf7J5jFXI8/f/w+W+i9UOQ2IRCLR 7XOoeXaYxFxeDVLujAORKvYwIMpym8bL6nLpJOfA5MLgqoId7KUazhcArTV+3dwG cuRYEGNtKNVvq1PVeUTeioJOvCu2d14ZjrtAZMgArJQQMqXJZVgw3X2D9HDDYdQo X3cg+X+aOWa/nGkaNLj59aeQueCZIVzMcYbHL6wLcicLSiw/FD7xSuVu6RV4xbwf kQkH+jxqU2rFDw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:19:38 2025 by rpki-client