This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft File: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json) Hash identifier: aYEbUkcCLdOTQvByuKBZZUXlQ97RQVI+4pR/gzYUHio= Subject key identifier: A3:D3:A5:AB:C1:5D:8F:10:E6:32:53:F3:AF:C1:9A:53:78:F8:9A:E6 Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Certificate serial: 019B59E37D6BD3A60CE893AAA6E7454EFF81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 09:00:39 +0000 Manifest this update: Fri 26 Dec 2025 09:00:39 +0000 Manifest next update: Sat 27 Dec 2025 09:00:39 +0000 Files and hashes: 1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: 9Tou5w/PBieOiICR+9Fcfyx2cnUtxp6z4+uBrqiEGKE=) 2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:7d:6b:d3:a6:0c:e8:93:aa:a6:e7:45:4e:ff:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335 Validity Not Before: Dec 26 09:00:39 2025 GMT Not After : Dec 27 09:00:39 2025 GMT Subject: CN=a3d3a5abc15d8f10e63253f3afc19a5378f89ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:ed:c7:93:e3:1a:a0:02:f1:3a:58:ad:ad: 38:a3:5d:25:7c:bb:64:93:c9:a1:8f:01:fe:c9:55: 0f:78:68:9e:3c:e7:3d:4e:cc:c4:99:b5:a5:c5:94: bf:de:8a:8e:c8:94:fd:73:3e:86:99:fc:9f:fa:88: b2:78:e2:1e:c3:c8:89:df:29:7e:41:cc:fb:61:41: 37:43:75:f1:b6:91:dd:88:0a:64:11:17:57:1f:56: dd:18:bc:78:18:ed:63:49:a5:a9:f2:7b:6f:98:c8: 40:21:92:dc:f6:ac:1d:e8:9b:77:66:7f:e9:84:a9: c7:e5:9c:2f:5d:54:a6:7f:d0:ae:12:bf:62:af:91: 97:2b:60:bb:f4:09:00:27:08:fd:98:74:50:1c:93: 65:b2:31:03:75:83:43:37:bf:64:98:75:7e:3b:1b: b1:48:d1:fd:65:4e:0a:5a:63:e9:47:93:0d:af:47: 76:90:c6:82:26:91:a8:f8:7d:e8:18:9b:6a:f2:6c: cf:e9:6d:4e:c8:08:45:73:dc:a6:a1:ea:68:3d:c9: 7d:05:5c:25:81:53:d3:be:a0:c4:91:27:0a:ab:d1: 9e:96:5a:9a:de:f3:3f:cf:b1:de:fd:ed:5e:8b:ab: a3:ed:e2:1d:e1:4b:5a:84:60:75:0a:fa:0d:d5:1a: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D3:A5:AB:C1:5D:8F:10:E6:32:53:F3:AF:C1:9A:53:78:F8:9A:E6 X509v3 Authority Key Identifier: keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:2d:37:62:ef:18:a6:4d:a6:90:1a:65:7a:bd:8e:3b:f6: 85:75:1d:aa:0d:62:bb:54:16:fe:f7:1b:8c:c2:dd:bd:5b:a3: af:04:be:80:47:a1:9b:2e:90:fc:eb:9b:53:23:85:96:43:5c: 55:73:8c:3b:a7:97:71:37:c3:90:63:3e:21:1a:1e:87:31:dd: 56:03:77:cf:d9:08:ae:3e:be:35:46:ce:e5:d4:25:10:4b:ed: f4:f6:ba:49:02:1a:3d:c2:71:05:83:73:62:28:7f:a4:d4:f6: 8f:bd:db:41:e8:44:ea:53:ea:dd:6a:4e:b5:a1:a3:2f:70:43: 60:45:a7:1d:61:45:31:f4:c5:97:99:43:21:57:59:48:dd:97: 30:92:c6:7b:40:3f:46:b1:3f:9f:ec:bd:4e:5d:30:29:c1:f1: 13:d8:4d:01:3c:3c:15:a3:13:fb:f5:59:e7:da:8e:af:19:10: 48:f4:c5:de:f1:60:b8:6f:d3:1a:89:34:e0:1b:bb:a6:f4:2d: 52:c6:89:94:0b:c7:9b:e7:6d:67:7a:a3:5a:2e:63:60:eb:01: ae:e8:d5:71:ef:a8:d4:0e:a8:0b:fd:ef:64:1b:eb:12:f2:0b: d7:f4:fc:35:e6:9e:07:03:fa:75:20:ef:87:17:8d:c1:b8:8d: 41:e7:88:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ431r06YM6JOqpudFTv+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri ZjYzMzUwHhcNMjUxMjI2MDkwMDM5WhcNMjUxMjI3MDkwMDM5WjAzMTEwLwYDVQQD EyhhM2QzYTVhYmMxNWQ4ZjEwZTYzMjUzZjNhZmMxOWE1Mzc4Zjg5YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dftx5PjGqAC8TpYra04o10lfLtk k8mhjwH+yVUPeGiePOc9TszEmbWlxZS/3oqOyJT9cz6Gmfyf+oiyeOIew8iJ3yl+ Qcz7YUE3Q3XxtpHdiApkERdXH1bdGLx4GO1jSaWp8ntvmMhAIZLc9qwd6Jt3Zn/p hKnH5ZwvXVSmf9CuEr9ir5GXK2C79AkAJwj9mHRQHJNlsjEDdYNDN79kmHV+Oxux SNH9ZU4KWmPpR5MNr0d2kMaCJpGo+H3oGJtq8mzP6W1OyAhFc9ymoepoPcl9BVwl gVPTvqDEkScKq9Gellqa3vM/z7He/e1ei6uj7eId4UtahGB1CvoN1Rp+AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPTpavBXY8Q5jJT86/BmlN4+JrmMB8GA1UdIwQY MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt NDZkZDEyMDVkY2ZmLzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHwtN2Lv GKZNppAaZXq9jjv2hXUdqg1iu1QW/vcbjMLdvVujrwS+gEehmy6Q/OubUyOFlkNc VXOMO6eXcTfDkGM+IRoehzHdVgN3z9kIrj6+NUbO5dQlEEvt9Pa6SQIaPcJxBYNz Yih/pNT2j73bQehE6lPq3WpOtaGjL3BDYEWnHWFFMfTFl5lDIVdZSN2XMJLGe0A/ RrE/n+y9Tl0wKcHxE9hNATw8FaMT+/VZ59qOrxkQSPTF3vFguG/TGok04Bu7pvQt UsaJlAvHm+dtZ3qjWi5jYOsBrujVce+o1A6oC/3vZBvrEvIL1/T8NeaeBwP6dSDv hxeNwbiNQeeIhg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client