This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json) Hash identifier: ERVdeeZTC02LYSk3Qu3x6W2ljryYV9q4wOoFrBdyp5g= Subject key identifier: 80:0F:EC:EA:97:CA:B3:9D:76:F7:D6:A2:30:8A:95:87:38:ED:3B:5B Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Certificate serial: 019B1B3C2E2C2D0A53810A9D1759BA2D44C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft Manifest number: 177C Signing time: Sun 14 Dec 2025 05:01:27 +0000 Manifest this update: Sun 14 Dec 2025 05:01:27 +0000 Manifest next update: Mon 15 Dec 2025 05:01:27 +0000 Files and hashes: 1: SJWhB7kWgTlTbR2flWrmQ2wlKOY.roa (hash: p8++Hz/3lRer+jzGUuklhwrO6NIeyYEbaz4oXToL4+U=) 2: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: OZx11NFZ/hUw+5GrW87gHjvoiIFMS/eMntNtkKtNgQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:2e:2c:2d:0a:53:81:0a:9d:17:59:ba:2d:44:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda Validity Not Before: Dec 14 05:01:27 2025 GMT Not After : Dec 15 05:01:27 2025 GMT Subject: CN=800fecea97cab39d76f7d6a2308a958738ed3b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:bf:28:6d:e9:f0:34:95:d9:9f:24:90:a6: 78:3b:73:6c:93:c3:d3:3f:85:85:5b:50:9c:5c:5c: f8:b0:0c:fd:27:72:86:9b:57:b4:86:f1:d8:cf:ea: ef:cf:d5:62:36:e5:d4:62:12:fe:01:bb:2c:93:07: 66:d3:41:ba:7c:6d:19:5e:ba:6e:54:1a:64:6d:c2: 5e:8e:d1:fc:79:86:b9:d8:2b:d8:25:7c:99:9f:95: dc:4f:51:e5:bc:21:55:6f:6a:ef:c3:74:52:c7:8f: de:80:16:38:18:73:f9:e1:5c:c0:8b:d3:c2:49:2c: 4d:13:a9:77:d9:dc:c9:51:e6:33:93:26:c0:7b:3b: 52:e9:72:bb:ae:29:8d:a1:00:62:d7:d4:ec:b1:5d: e7:f2:c8:8e:b3:db:8e:a2:7a:94:ff:8c:43:42:64: 34:2d:62:a8:b9:83:42:5d:f3:81:f8:9a:f1:28:a1: 46:f7:5c:bd:64:d4:fc:6b:27:fc:74:d6:39:ba:27: 82:7e:d8:12:50:6b:3d:57:43:ac:0d:0b:3d:4f:00: dc:91:38:b9:a5:b5:0e:6d:46:4b:de:6d:36:b2:7e: 75:fb:ca:88:f9:b2:eb:55:fd:01:81:e0:ee:c5:7e: 66:51:bc:e3:c3:25:b1:58:7b:17:b7:f0:97:f1:4d: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0F:EC:EA:97:CA:B3:9D:76:F7:D6:A2:30:8A:95:87:38:ED:3B:5B X509v3 Authority Key Identifier: keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4a:cc:b7:00:34:5d:fc:9c:eb:b6:6a:a7:8e:cd:43:61:1f: d4:3d:17:fd:19:29:ad:88:81:8c:12:72:6b:a0:ee:c2:59:5f: 69:36:75:1b:74:c5:dc:43:b6:c4:2a:0c:65:8e:bb:7d:d7:fd: 1c:ca:c4:1f:35:e1:e2:cc:5d:d3:15:f6:7c:8b:37:63:80:48: c5:1a:55:e4:0d:57:14:db:54:7b:e3:35:38:b9:2f:73:f5:42: 43:de:25:83:15:4d:4c:2e:95:d2:cc:14:e7:4f:d9:38:57:c2: a8:cf:90:b8:70:69:15:c5:f0:b4:d5:23:b7:62:0b:d7:d5:b4: a6:34:79:68:66:c0:82:39:c3:02:be:75:63:d7:4e:0a:59:65: e4:dc:5b:e3:f1:62:7f:30:68:4f:4e:9c:e0:7e:f4:97:11:9f: ac:c9:14:4b:56:04:cb:08:b1:9f:b4:14:1e:90:85:e0:12:55: e8:7e:34:81:78:bc:fd:ac:2d:2d:f2:af:a4:49:41:5b:65:87: a9:a7:60:8e:59:4b:e1:a2:d7:c2:e8:00:89:a2:e8:2c:2f:2e: bd:84:41:42:97:20:ce:c0:61:f4:72:04:e2:0b:21:74:59:67: 0a:2a:10:b7:f9:12:d9:2d:07:42:a3:e0:ba:5a:6f:e9:eb:a1: 51:b4:8e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPC4sLQpTgQqdF1m6LUTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OTE2YmU3ZTYzY2ZkOGM4Yjc3YzA1ODhkMTI2OTRmMTZi MTRjZGEwHhcNMjUxMjE0MDUwMTI3WhcNMjUxMjE1MDUwMTI3WjAzMTEwLwYDVQQD Eyg4MDBmZWNlYTk3Y2FiMzlkNzZmN2Q2YTIzMDhhOTU4NzM4ZWQzYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOC/KG3p8DSV2Z8kkKZ4O3Nsk8PT P4WFW1CcXFz4sAz9J3KGm1e0hvHYz+rvz9ViNuXUYhL+Absskwdm00G6fG0ZXrpu VBpkbcJejtH8eYa52CvYJXyZn5XcT1HlvCFVb2rvw3RSx4/egBY4GHP54VzAi9PC SSxNE6l32dzJUeYzkybAeztS6XK7rimNoQBi19TssV3n8siOs9uOonqU/4xDQmQ0 LWKouYNCXfOB+JrxKKFG91y9ZNT8ayf8dNY5uieCftgSUGs9V0OsDQs9TwDckTi5 pbUObUZL3m02sn51+8qI+bLrVf0BgeDuxX5mUbzjwyWxWHsXt/CX8U05FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAP7OqXyrOddvfWojCKlYc47TtbMB8GA1UdIwQY MBaAFIWRa+fmPP2Mi3fAWI0SaU8WsUzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUt YmNhMjM0ODI5ZjQ4LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81N2ZiMTQtZDcwNS00MDU1LTgwNDUtYmNhMjM0ODI5ZjQ4 LzEvaFpGcjUtWThfWXlMZDhCWWpSSnBUeGF4VE5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUrMtwA0 Xfyc67Zqp47NQ2Ef1D0X/RkprYiBjBJya6DuwllfaTZ1G3TF3EO2xCoMZY67fdf9 HMrEHzXh4sxd0xX2fIs3Y4BIxRpV5A1XFNtUe+M1OLkvc/VCQ94lgxVNTC6V0swU 50/ZOFfCqM+QuHBpFcXwtNUjt2IL19W0pjR5aGbAgjnDAr51Y9dOClll5Nxb4/Fi fzBoT06c4H70lxGfrMkUS1YEywixn7QUHpCF4BJV6H40gXi8/awtLfKvpElBW2WH qadgjllL4aLXwugAiaLoLC8uvYRBQpcgzsBh9HIE4gshdFlnCioQt/kS2S0HQqPg ulpv6euhUbSOEw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:45:47 2025 by rpki-client