This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json) Hash identifier: Fr6D/pTV9JxuoQmPchglopS1N4opmjDjwY/VXJtOUB4= Subject key identifier: 91:C2:80:51:04:45:0C:16:D8:8E:DE:5B:62:79:4D:E7:D6:BF:82:D2 Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Certificate serial: 019B281BD32A6A8419E9C25353F23C8719FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft Manifest number: 0EA3 Signing time: Tue 16 Dec 2025 17:01:10 +0000 Manifest this update: Tue 16 Dec 2025 17:01:10 +0000 Manifest next update: Wed 17 Dec 2025 17:01:10 +0000 Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=) 2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: /qzndZ3qBNDymtChp6Ae+CuaTVgAcd26wK7JHYuCzpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:d3:2a:6a:84:19:e9:c2:53:53:f2:3c:87:19:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084 Validity Not Before: Dec 16 17:01:10 2025 GMT Not After : Dec 17 17:01:10 2025 GMT Subject: CN=91c2805104450c16d88ede5b62794de7d6bf82d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:16:63:cd:2a:d5:51:e6:43:62:21:d9:35: fe:69:10:f0:06:c9:94:a3:fe:92:9b:81:4d:2a:05: 8e:cd:78:ab:81:e6:74:2c:80:39:cd:89:f1:08:87: ad:5d:d9:b0:94:85:f8:a2:83:73:bb:89:32:43:aa: 3d:11:68:d5:c3:7b:1d:c7:62:51:99:1b:a0:86:0a: a5:6d:69:74:13:fa:e5:63:57:2d:f0:35:5e:5f:df: b8:42:69:b5:88:ec:c4:3c:9c:92:5a:c6:d2:46:7e: 09:89:22:be:f6:32:29:3b:f8:d7:4d:29:e1:1e:51: 9d:d7:e0:5b:96:4c:a0:59:d6:c0:07:ab:df:a2:93: d9:d6:53:87:dd:15:00:12:e6:d1:47:e5:37:6b:fc: da:d4:49:a3:f4:2a:3e:64:ba:38:f0:8e:f9:09:c0: 60:2a:d4:45:92:cb:2d:07:9e:5a:ad:46:3e:03:87: 7d:7d:d5:8c:a9:52:f5:43:25:f6:ca:eb:23:dc:ef: f1:06:48:b9:db:45:ec:1c:70:ca:15:6c:b9:96:9b: e8:01:93:66:f7:54:e0:18:a2:a2:c6:0a:f8:2a:92: 18:9f:f0:f4:39:11:da:2b:55:d4:93:ac:9a:94:de: 46:2e:7d:f2:ef:51:58:6b:09:06:03:ba:d9:aa:fe: eb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C2:80:51:04:45:0C:16:D8:8E:DE:5B:62:79:4D:E7:D6:BF:82:D2 X509v3 Authority Key Identifier: keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2f:72:f7:b4:d6:3a:95:c9:b3:13:b0:47:d9:b9:41:38:b8: 99:28:43:4a:f5:d2:69:e9:63:85:42:9a:72:8b:d1:25:c6:8f: b8:72:c0:77:8d:9f:8c:25:14:fb:68:33:0a:47:c2:05:59:cf: ec:6d:0f:c9:80:61:f1:25:21:52:10:7c:08:e4:08:ba:2e:1e: b0:3c:57:b3:0e:4d:51:3d:b0:e5:3e:0f:74:7b:01:78:7f:84: 9a:3d:68:73:a7:b6:60:c7:26:7c:d2:9d:04:b0:3f:42:35:e4: e0:86:46:a4:7e:1a:a7:92:07:a9:8a:92:06:06:7a:61:cf:17: f2:a4:d3:d6:c3:c5:f8:4e:ea:5f:20:d3:a0:73:e5:09:cb:71: 99:33:a9:20:96:20:52:fc:71:7b:e2:b5:c4:ac:39:ac:ab:22: 08:b6:fe:5f:02:c3:52:c9:16:e2:96:94:a4:57:33:fa:30:0a: 74:3f:eb:46:12:52:2e:5b:0c:6d:6c:61:06:4a:31:47:a0:7e: 87:3b:a7:f2:f3:b7:f4:dd:2f:d3:59:77:b6:2a:39:0a:bf:05: 42:6d:38:a6:1e:ef:15:42:14:a0:65:b6:c8:ab:81:40:13:4a: 30:69:e7:89:1b:55:a6:5a:64:9f:a7:7b:cc:91:ec:7e:fd:71: c4:95:56:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG9MqaoQZ6cJTU/I8hxn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDA1ZTAxN2UzMzNkMTdiM2FlYjhjNWQ0OTQzYmU4ZGM2 N2MwODQwHhcNMjUxMjE2MTcwMTEwWhcNMjUxMjE3MTcwMTEwWjAzMTEwLwYDVQQD Eyg5MWMyODA1MTA0NDUwYzE2ZDg4ZWRlNWI2Mjc5NGRlN2Q2YmY4MmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZkWY80q1VHmQ2Ih2TX+aRDwBsmU o/6Sm4FNKgWOzXirgeZ0LIA5zYnxCIetXdmwlIX4ooNzu4kyQ6o9EWjVw3sdx2JR mRughgqlbWl0E/rlY1ct8DVeX9+4Qmm1iOzEPJySWsbSRn4JiSK+9jIpO/jXTSnh HlGd1+BblkygWdbAB6vfopPZ1lOH3RUAEubRR+U3a/za1Emj9Co+ZLo48I75CcBg KtRFksstB55arUY+A4d9fdWMqVL1QyX2yusj3O/xBki520XsHHDKFWy5lpvoAZNm 91TgGKKixgr4KpIYn/D0ORHaK1XUk6yalN5GLn3y71FYawkGA7rZqv7rxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHCgFEERQwW2I7eW2J5TefWv4LSMB8GA1UdIwQY MBaAFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQt NDdjOTUwMzM2ZTJmLzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQtNDdjOTUwMzM2ZTJm LzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsy9y97TW OpXJsxOwR9m5QTi4mShDSvXSaeljhUKacovRJcaPuHLAd42fjCUU+2gzCkfCBVnP 7G0PyYBh8SUhUhB8COQIui4esDxXsw5NUT2w5T4PdHsBeH+Emj1oc6e2YMcmfNKd BLA/QjXk4IZGpH4ap5IHqYqSBgZ6Yc8X8qTT1sPF+E7qXyDToHPlCctxmTOpIJYg Uvxxe+K1xKw5rKsiCLb+XwLDUskW4paUpFcz+jAKdD/rRhJSLlsMbWxhBkoxR6B+ hzun8vO39N0v01l3tio5Cr8FQm04ph7vFUIUoGW2yKuBQBNKMGnniRtVplpkn6d7 zJHsfv1xxJVWlA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:18 2025 by rpki-client