This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json) Hash identifier: RWS32Gcw/viY2KoCeAJEZSExELC1c4lh2e6U44sJEqM= Subject key identifier: FA:33:8E:0D:7C:1B:CA:C9:AD:DE:A1:AB:75:0A:87:B9:87:D4:1C:F0 Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93 Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593 Certificate serial: 019B378EE07CFCC91D94D5BD16E18A53C0CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft Manifest number: 0591 Signing time: Fri 19 Dec 2025 17:01:09 +0000 Manifest this update: Fri 19 Dec 2025 17:01:09 +0000 Manifest next update: Sat 20 Dec 2025 17:01:09 +0000 Files and hashes: 1: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: uSNfyBMvPIQhX+yVlaLpI5JiyAVnO3DuPU8319e56Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:e0:7c:fc:c9:1d:94:d5:bd:16:e1:8a:53:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593 Validity Not Before: Dec 19 17:01:09 2025 GMT Not After : Dec 20 17:01:09 2025 GMT Subject: CN=fa338e0d7c1bcac9addea1ab750a87b987d41cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a0:78:ad:66:05:8d:04:94:3f:16:21:c9:8c: 8e:6b:ec:f1:9f:d0:3c:4f:02:fc:bc:43:a5:93:b9: df:f1:e4:8c:d1:4b:c5:8a:9a:9b:3f:51:ae:a6:dc: e3:db:54:a8:71:82:08:f6:d7:ad:98:d7:67:71:2c: 1c:1a:1f:13:6f:09:f2:ff:32:13:be:5a:2c:b6:d7: 2c:fc:be:72:30:10:ae:ca:a8:7b:03:ca:f8:96:f8: 6c:de:a4:ca:c9:5f:24:b9:3d:8d:ae:ff:1c:25:0a: 6d:d1:70:10:ae:4c:41:01:7f:9c:3f:85:df:f0:85: 15:be:c0:74:dd:82:67:1c:89:9e:6e:85:1b:b7:27: 17:01:ef:9d:33:1a:a5:55:a2:e6:b1:2c:c6:6b:3a: f0:5f:98:bd:6b:e8:80:4d:80:64:5f:27:94:51:d7: 08:0c:8b:13:0f:cd:a9:2a:05:af:d1:5d:90:d4:be: da:0b:04:80:e2:ee:76:f5:ea:e6:f1:87:b2:7f:c8: 5d:bf:7d:91:4d:4f:56:33:55:a1:ae:29:bb:68:7e: f2:94:36:ee:ce:3b:42:cc:ec:d3:03:a6:1b:fc:8a: 01:c6:7a:38:ce:fa:be:0f:ad:03:be:fd:63:a1:99: e6:b7:99:f9:bb:c7:e5:37:53:98:c6:dc:0b:9c:d2: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:33:8E:0D:7C:1B:CA:C9:AD:DE:A1:AB:75:0A:87:B9:87:D4:1C:F0 X509v3 Authority Key Identifier: keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:62:7e:83:2c:be:97:89:d3:22:90:eb:1f:89:83:70:7c:83: 59:45:91:8f:17:55:4f:97:8c:db:cc:62:94:d7:3a:a3:be:e0: 89:da:e1:6f:55:de:6f:9d:67:b3:fa:17:a6:f1:de:f7:0e:b3: c1:c9:2b:da:fe:ad:af:18:31:a3:30:ed:06:0b:93:8e:39:3e: f3:f5:2e:42:c9:91:db:96:ae:cc:2e:8f:c4:64:72:d7:c0:0d: d7:57:76:40:69:d6:ee:5a:a7:8a:3c:0b:3f:9f:d0:33:c5:84: af:11:c2:58:35:be:17:f1:07:58:1b:53:59:09:19:af:37:9f: 0a:cb:66:a4:07:dc:37:00:01:68:a2:ca:a4:1f:48:09:0d:67: c2:a7:ea:7c:a6:0d:2e:be:6b:fb:12:35:5c:af:35:31:2a:5b: d6:ed:05:90:21:dd:dc:78:ce:b7:4e:cf:97:a3:65:c4:3c:8d: 0e:3e:af:d5:8a:3d:82:62:eb:85:dd:a1:9a:43:0c:c5:40:2b: e4:27:1c:be:aa:46:b2:27:23:38:90:2d:ba:fb:09:f4:e0:0b: 54:dc:24:b7:91:5b:a0:8c:e0:28:9c:a4:1f:63:cd:6b:d6:c4: 74:04:9e:a2:a7:2c:b2:c7:0c:f8:77:13:21:93:de:1c:bd:9b: 16:a4:4a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3juB8/MkdlNW9FuGKU8DLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MjIwODJiODUzNGJkN2FlNjNmYTgwMDhhNjg1YjY1ZjRj ZDI1OTMwHhcNMjUxMjE5MTcwMTA5WhcNMjUxMjIwMTcwMTA5WjAzMTEwLwYDVQQD EyhmYTMzOGUwZDdjMWJjYWM5YWRkZWExYWI3NTBhODdiOTg3ZDQxY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+KB4rWYFjQSUPxYhyYyOa+zxn9A8 TwL8vEOlk7nf8eSM0UvFipqbP1Guptzj21SocYII9tetmNdncSwcGh8Tbwny/zIT vlosttcs/L5yMBCuyqh7A8r4lvhs3qTKyV8kuT2Nrv8cJQpt0XAQrkxBAX+cP4Xf 8IUVvsB03YJnHImeboUbtycXAe+dMxqlVaLmsSzGazrwX5i9a+iATYBkXyeUUdcI DIsTD82pKgWv0V2Q1L7aCwSA4u529erm8Yeyf8hdv32RTU9WM1Whrim7aH7ylDbu zjtCzOzTA6Yb/IoBxno4zvq+D60Dvv1joZnmt5n5u8flN1OYxtwLnNIWnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPozjg18G8rJrd6hq3UKh7mH1BzwMB8GA1UdIwQY MBaAFIQiCCuFNL165j+oAIpoW2X0zSWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTRkYjMtZTM4OS00NDYxLWI1MGUt NTgxNjlmYmVjZGZhLzEvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wOTRkYjMtZTM4OS00NDYxLWI1MGUtNTgxNjlmYmVjZGZh LzEvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGJ+gyy+ l4nTIpDrH4mDcHyDWUWRjxdVT5eM28xilNc6o77gidrhb1Xeb51ns/oXpvHe9w6z wckr2v6trxgxozDtBguTjjk+8/UuQsmR25auzC6PxGRy18AN11d2QGnW7lqnijwL P5/QM8WErxHCWDW+F/EHWBtTWQkZrzefCstmpAfcNwABaKLKpB9ICQ1nwqfqfKYN Lr5r+xI1XK81MSpb1u0FkCHd3HjOt07Pl6NlxDyNDj6v1Yo9gmLrhd2hmkMMxUAr 5CccvqpGsicjOJAtuvsJ9OALVNwkt5FboIzgKJykH2PNa9bEdASeoqcssscM+HcT IZPeHL2bFqRKaA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:32:27 2025 by rpki-client