This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json) Hash identifier: zqAy9Ho/daj/WV+OfuWGrJp40y9cPvjS4sNd1l5pryc= Subject key identifier: 47:0E:36:54:CE:71:55:0A:0C:06:E7:3B:C3:50:47:C4:7E:C8:B9:25 Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Certificate serial: 019B3AC6A43CD657B54FAAB155AA16974DE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft Manifest number: 09C5 Signing time: Sat 20 Dec 2025 08:00:55 +0000 Manifest this update: Sat 20 Dec 2025 08:00:55 +0000 Manifest next update: Sun 21 Dec 2025 08:00:55 +0000 Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: VH4lWME7OQC+jiH2ajmt/wb99RvehfLTaQGtAm/UD2w=) 2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:a4:3c:d6:57:b5:4f:aa:b1:55:aa:16:97:4d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c Validity Not Before: Dec 20 08:00:55 2025 GMT Not After : Dec 21 08:00:55 2025 GMT Subject: CN=470e3654ce71550a0c06e73bc35047c47ec8b925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:8e:c0:be:40:8a:09:58:b4:29:3a:c9:34: fd:22:0f:8f:22:fc:75:2e:fc:cc:fe:a9:51:a3:80: a6:7e:46:8f:40:f6:b7:04:72:8e:c1:d9:5d:ab:b2: 85:4d:c2:aa:07:11:b0:47:4d:79:f8:3a:c1:f0:ba: 41:20:0b:4d:e9:9e:74:8b:d1:6c:52:a5:12:0f:b9: 2e:81:f0:13:ae:a5:db:6a:dd:06:51:e0:2e:6d:ec: 6b:53:07:87:6b:ff:d7:04:af:91:bd:44:a4:fd:b7: 4f:b6:85:8f:f8:09:f0:03:66:f2:1f:73:1c:12:a0: fa:f9:39:b4:95:6b:88:33:66:c5:a2:6d:18:51:54: d4:a5:90:e5:b1:ad:aa:37:c5:83:4d:77:04:c8:a1: a7:62:77:37:4d:8f:6b:66:9e:e8:44:21:81:d6:83: 56:69:49:59:05:2e:8e:ac:0c:56:eb:f9:b4:28:d2: 0f:47:d6:50:ca:64:e0:ae:39:4a:cc:8b:53:c7:96: 14:53:65:cc:26:c4:e7:03:90:a4:34:87:55:44:d6: 1a:db:94:a1:40:ec:8b:52:02:2e:af:b3:d0:0c:c6: 03:04:97:53:d5:3d:b1:ae:b8:7b:b2:6e:bd:10:01: 95:49:9d:17:5f:12:65:5c:ee:ea:51:a3:e3:de:dc: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0E:36:54:CE:71:55:0A:0C:06:E7:3B:C3:50:47:C4:7E:C8:B9:25 X509v3 Authority Key Identifier: keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:74:37:6e:54:4a:9a:39:9b:73:03:8b:49:18:73:c5:6a:fa: 99:83:e6:88:df:8c:d7:9b:82:f5:bb:52:b9:e5:8f:e8:53:76: 13:07:eb:ea:1f:7d:60:62:9c:dd:23:e9:63:ac:b7:1d:82:89: f5:df:93:98:ad:6c:66:b7:44:a7:4c:75:e1:35:7f:1e:c4:aa: c8:5b:c9:6d:71:fd:be:c3:e0:2c:2b:0d:85:a6:42:01:77:9c: ad:16:53:db:e8:bb:fc:9e:c1:09:27:a5:24:fb:c9:7e:3a:9f: 70:ac:82:c6:15:c5:92:10:3e:66:0c:7a:52:10:ef:80:65:dd: ac:4f:b3:d9:b3:be:1c:31:03:ea:e0:0d:24:7c:4e:f4:a1:78: aa:b7:a1:a9:cb:bc:12:be:e0:3a:7f:e5:2c:08:37:ce:1c:dc: 4c:0d:0a:3a:81:b0:53:98:e9:90:6f:4d:f4:15:1c:2f:58:00: 42:d1:81:34:8e:63:79:76:1c:6d:06:f2:85:ac:da:64:a3:c6: b5:e8:6e:84:fa:f9:3e:97:0c:90:76:0a:2b:eb:3b:fb:d1:55: e5:7c:38:5e:a9:fa:b9:87:20:88:67:9c:38:5d:b9:c6:78:99: 27:7a:ba:c6:46:81:de:86:d9:94:43:24:3b:95:00:0c:1b:d1: f9:9f:db:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xqQ81le1T6qxVaoWl03iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk NWZmNWMwHhcNMjUxMjIwMDgwMDU1WhcNMjUxMjIxMDgwMDU1WjAzMTEwLwYDVQQD Eyg0NzBlMzY1NGNlNzE1NTBhMGMwNmU3M2JjMzUwNDdjNDdlYzhiOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp46OwL5AiglYtCk6yTT9Ig+PIvx1 LvzM/qlRo4CmfkaPQPa3BHKOwdldq7KFTcKqBxGwR015+DrB8LpBIAtN6Z50i9Fs UqUSD7kugfATrqXbat0GUeAubexrUweHa//XBK+RvUSk/bdPtoWP+AnwA2byH3Mc EqD6+Tm0lWuIM2bFom0YUVTUpZDlsa2qN8WDTXcEyKGnYnc3TY9rZp7oRCGB1oNW aUlZBS6OrAxW6/m0KNIPR9ZQymTgrjlKzItTx5YUU2XMJsTnA5CkNIdVRNYa25Sh QOyLUgIur7PQDMYDBJdT1T2xrrh7sm69EAGVSZ0XXxJlXO7qUaPj3txB3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcONlTOcVUKDAbnO8NQR8R+yLklMB8GA1UdIwQY MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3 LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1XQ3blRK mjmbcwOLSRhzxWr6mYPmiN+M15uC9btSueWP6FN2Ewfr6h99YGKc3SPpY6y3HYKJ 9d+TmK1sZrdEp0x14TV/HsSqyFvJbXH9vsPgLCsNhaZCAXecrRZT2+i7/J7BCSel JPvJfjqfcKyCxhXFkhA+Zgx6UhDvgGXdrE+z2bO+HDED6uANJHxO9KF4qrehqcu8 Er7gOn/lLAg3zhzcTA0KOoGwU5jpkG9N9BUcL1gAQtGBNI5jeXYcbQbyhazaZKPG tehuhPr5PpcMkHYKK+s7+9FV5Xw4Xqn6uYcgiGecOF25xniZJ3q6xkaB3obZlEMk O5UADBvR+Z/bDw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:53 2025 by rpki-client