This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft File: Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft (raw, json) Hash identifier: uVbBHfECBeRTswmjyK9VU49BDS/wNoPuR0fPFGrteKM= Subject key identifier: DC:ED:4B:1D:25:29:CD:83:7F:9B:19:15:55:3A:00:D9:04:21:2E:95 Authority key identifier: 1F:3D:9D:D4:AA:1F:F2:EB:50:DA:0D:40:CA:EC:5B:FD:A6:8E:73:37 Certificate issuer: /CN=1f3d9dd4aa1ff2eb50da0d40caec5bfda68e7337 Certificate serial: 019B5A1ABDD4D79FDD8FBE45273FF49342BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft Manifest number: EF Signing time: Fri 26 Dec 2025 10:01:00 +0000 Manifest this update: Fri 26 Dec 2025 10:01:00 +0000 Manifest next update: Sat 27 Dec 2025 10:01:00 +0000 Files and hashes: 1: Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl (hash: jwWz4WiK/MhSYTeGdIIlX5QLH7B45VSvZxfTgsU4ihA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:bd:d4:d7:9f:dd:8f:be:45:27:3f:f4:93:42:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3d9dd4aa1ff2eb50da0d40caec5bfda68e7337 Validity Not Before: Dec 26 10:01:00 2025 GMT Not After : Dec 27 10:01:00 2025 GMT Subject: CN=dced4b1d2529cd837f9b1915553a00d904212e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:71:db:52:24:27:46:18:51:14:a8:6c:72:54: f2:94:b1:6b:28:15:bf:eb:fd:69:83:6a:ec:b7:be: 3e:b6:1d:ad:32:1d:24:b7:35:80:f6:5b:b2:09:a2: b4:18:36:2b:eb:d0:db:ad:03:42:eb:50:12:92:bb: 45:ec:36:da:9a:f8:44:69:bb:2c:13:e1:3e:93:7b: fe:15:f0:d3:34:7b:72:ec:f9:88:91:ac:bb:70:c9: f9:fc:2a:1a:15:66:60:06:39:36:c9:f3:cd:21:fc: b9:9b:3d:51:34:a6:fa:28:07:29:d2:fd:af:2d:40: 4f:96:18:0a:ac:72:ba:10:dc:f3:58:2e:cf:db:d1: c6:3f:d8:93:da:63:b1:74:18:54:86:8d:d3:27:cb: 13:b5:f4:3c:2e:aa:52:64:64:eb:b2:1e:1c:71:03: 63:45:b7:86:4f:4d:6d:a4:1e:c9:09:4d:31:57:be: 58:51:b6:8b:8b:b1:24:6b:4f:81:71:b8:a7:c2:2b: 42:ab:51:bf:d6:aa:23:a9:7f:f4:ff:a7:2a:97:40: c4:8f:d2:e3:d3:28:58:dc:50:36:f4:9b:cc:87:da: a4:b6:86:87:6d:2a:e4:8c:70:21:1c:32:15:c1:12: 31:7e:7e:b1:bf:d1:86:52:a5:d5:75:55:02:8d:90: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:4B:1D:25:29:CD:83:7F:9B:19:15:55:3A:00:D9:04:21:2E:95 X509v3 Authority Key Identifier: keyid:1F:3D:9D:D4:AA:1F:F2:EB:50:DA:0D:40:CA:EC:5B:FD:A6:8E:73:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2a:1c:3f:85:fb:4e:af:e1:b4:0e:e5:74:03:f4:c7:34:eb: ef:60:75:81:86:60:20:24:8b:8c:e8:63:d7:2f:d6:07:22:80: e2:3b:41:1e:1a:79:dc:17:e5:12:82:92:f7:eb:40:4e:21:e8: 67:df:6b:2c:77:87:13:c7:b8:1e:35:95:47:ee:72:f7:2d:21: e3:dc:7d:0d:90:af:f4:cd:fd:60:f3:f3:a8:25:a2:06:4f:6e: 60:ae:10:48:bf:5e:7c:ac:9c:d5:74:85:0c:18:f5:11:77:ce: b3:b7:32:d9:79:cc:70:30:62:f1:f4:06:53:8a:6a:91:48:98: 6d:7a:a8:12:4e:c8:4e:57:b6:f8:f1:66:6e:9d:01:41:9a:99: fd:b9:c9:d0:8b:f4:be:db:db:e4:7e:22:9e:a4:be:36:9b:eb: 9e:93:d2:3a:19:ff:92:94:12:53:26:e7:0c:82:0c:5a:ca:34: 13:7f:ee:59:e0:2a:1c:60:fa:d7:2b:99:4b:eb:27:40:4d:10: 39:f6:92:20:a1:83:5a:28:ed:cd:cd:60:0e:67:56:35:5f:e9: f4:fe:dd:7f:af:5f:ad:13:b3:f5:52:c8:d1:bd:83:bd:84:1d: 57:30:f9:30:95:fa:02:b7:4a:2b:d1:14:4f:93:27:b5:b1:a4: a0:7e:d3:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGr3U15/dj75FJz/0k0K6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmM2Q5ZGQ0YWExZmYyZWI1MGRhMGQ0MGNhZWM1YmZkYTY4 ZTczMzcwHhcNMjUxMjI2MTAwMTAwWhcNMjUxMjI3MTAwMTAwWjAzMTEwLwYDVQQD EyhkY2VkNGIxZDI1MjljZDgzN2Y5YjE5MTU1NTNhMDBkOTA0MjEyZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HHbUiQnRhhRFKhsclTylLFrKBW/ 6/1pg2rst74+th2tMh0ktzWA9luyCaK0GDYr69DbrQNC61ASkrtF7DbamvhEabss E+E+k3v+FfDTNHty7PmIkay7cMn5/CoaFWZgBjk2yfPNIfy5mz1RNKb6KAcp0v2v LUBPlhgKrHK6ENzzWC7P29HGP9iT2mOxdBhUho3TJ8sTtfQ8LqpSZGTrsh4ccQNj RbeGT01tpB7JCU0xV75YUbaLi7Eka0+BcbinwitCq1G/1qojqX/0/6cql0DEj9Lj 0yhY3FA29JvMh9qktoaHbSrkjHAhHDIVwRIxfn6xv9GGUqXVdVUCjZCPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNztSx0lKc2Df5sZFVU6ANkEIS6VMB8GA1UdIwQY MBaAFB89ndSqH/LrUNoNQMrsW/2mjnM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHoyZDFLb2Y4dXRRMmcxQXl1eGJfYWFPY3pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82ZjY3OWUtNjJiZS00ZTIyLThiMmMt MjQwMDE5MTllYWRlLzEvSHoyZDFLb2Y4dXRRMmcxQXl1eGJfYWFPY3pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82ZjY3OWUtNjJiZS00ZTIyLThiMmMtMjQwMDE5MTllYWRl LzEvSHoyZDFLb2Y4dXRRMmcxQXl1eGJfYWFPY3pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyocP4X7 Tq/htA7ldAP0xzTr72B1gYZgICSLjOhj1y/WByKA4jtBHhp53BflEoKS9+tATiHo Z99rLHeHE8e4HjWVR+5y9y0h49x9DZCv9M39YPPzqCWiBk9uYK4QSL9efKyc1XSF DBj1EXfOs7cy2XnMcDBi8fQGU4pqkUiYbXqoEk7ITle2+PFmbp0BQZqZ/bnJ0Iv0 vtvb5H4inqS+NpvrnpPSOhn/kpQSUybnDIIMWso0E3/uWeAqHGD61yuZS+snQE0Q OfaSIKGDWijtzc1gDmdWNV/p9P7df69frROz9VLI0b2DvYQdVzD5MJX6ArdKK9EU T5MntbGkoH7Tcg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:48 2025 by rpki-client