This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json) Hash identifier: k8jPIMGeQOjaZU4MXW4bTAyrEPXBoUMPBRUm5nkO+N0= Subject key identifier: 3B:C2:D3:95:43:05:F2:63:5E:8B:24:2B:C5:38:2B:3C:50:E1:F6:D1 Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Certificate serial: 019B6FFD40EC86D1FC89E60C1DBF337941C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft Manifest number: 1231 Signing time: Tue 30 Dec 2025 16:00:26 +0000 Manifest this update: Tue 30 Dec 2025 16:00:26 +0000 Manifest next update: Wed 31 Dec 2025 16:00:26 +0000 Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=) 2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: 39tUqoi89S6EJxqNX7H7TR+CCX1YQg0aZx+3akyA5Io=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:40:ec:86:d1:fc:89:e6:0c:1d:bf:33:79:41:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Validity Not Before: Dec 30 16:00:26 2025 GMT Not After : Dec 31 16:00:26 2025 GMT Subject: CN=3bc2d3954305f2635e8b242bc5382b3c50e1f6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:5e:d1:fe:b4:46:1e:c4:ca:de:6b:65:bd: cf:f3:8e:c7:0f:d9:cd:f7:01:f2:c0:dd:fc:6d:bc: 22:cf:0e:da:3c:fb:58:d2:6a:e4:3b:61:47:0b:62: e4:54:1a:54:a5:78:42:4f:10:ae:0f:a9:ae:e5:85: fa:2f:88:f6:7f:eb:f9:3d:d9:d1:bd:67:59:5b:f3: d3:29:8c:6e:29:6b:4f:fd:ee:67:3c:1f:fe:b3:7d: 84:b8:e7:92:6b:8f:48:f0:36:20:da:93:33:45:fc: 0c:01:4b:04:72:b3:f0:1f:b2:d3:1e:c6:0c:75:25: cf:7a:53:f9:a2:14:99:16:be:98:42:96:f0:90:0c: 6f:64:7d:8a:ed:28:dc:c0:83:2c:b5:e3:3f:d1:b9: fb:f6:77:32:29:db:75:20:8b:08:0e:9c:31:d0:b7: 74:cd:ae:2f:a3:9a:84:86:74:03:c4:6c:23:de:b5: d9:a7:41:ea:87:f0:19:fa:f8:69:91:e6:fa:a6:60: 70:89:05:be:cd:b0:e4:18:e5:11:2c:4a:49:9c:b3: 1e:e4:ca:ab:1b:43:4a:6d:3a:a0:5b:45:68:6e:55: f5:c2:3a:93:16:c9:ed:05:e0:71:d5:bc:1b:79:b1: 8a:98:f0:0a:55:aa:11:2c:7e:33:d2:0d:5b:a9:02: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:D3:95:43:05:F2:63:5E:8B:24:2B:C5:38:2B:3C:50:E1:F6:D1 X509v3 Authority Key Identifier: keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:58:d5:38:67:1a:0c:03:9d:34:ea:1c:4a:7e:24:a4:34:81: 4f:10:7e:fc:05:27:0b:4f:46:25:11:ae:7b:60:ce:a8:17:2d: 6e:8f:cc:e7:f8:8e:ab:41:ea:34:ab:a1:66:b0:d1:b5:b5:75: e5:ae:6e:c5:03:44:91:76:88:fe:8f:65:9d:a2:d1:11:44:9f: f4:99:b7:b5:40:0a:f1:c3:63:2b:18:67:5b:4e:19:ff:f8:af: 78:ad:8d:79:c6:13:c0:2f:4c:12:03:cf:21:d3:fb:e6:b8:54: a4:12:dd:5b:5c:34:8b:41:b5:37:0f:0d:01:9a:f2:88:1c:0a: 25:f5:7e:67:96:ff:10:5c:c0:84:71:02:56:bd:fe:cc:df:56: 14:67:5e:d3:bc:cc:c9:af:df:c2:55:c0:8d:96:8a:bc:df:80: 99:14:22:76:cc:50:95:aa:fc:0a:bc:c0:0d:7e:ce:71:a6:62: 06:5c:cd:4d:58:41:26:bc:47:74:f8:83:d1:e5:8a:5d:64:e4: 1a:ee:fc:65:5c:ba:e4:af:ff:fa:73:2b:a4:7d:9d:a3:71:d4: 08:a2:23:8b:be:72:f4:66:74:55:b1:52:ce:cb:4b:3e:3e:6e: fe:a0:b3:89:8c:65:15:dc:1d:72:f9:90:6b:5e:c6:f2:a6:75: c7:86:08:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/UDshtH8ieYMHb8zeUHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMzExMzlmODllODI1OTYyYTdlMzM4MGFkZTc1YjU2YWI1 YmFhZDUwHhcNMjUxMjMwMTYwMDI2WhcNMjUxMjMxMTYwMDI2WjAzMTEwLwYDVQQD EygzYmMyZDM5NTQzMDVmMjYzNWU4YjI0MmJjNTM4MmIzYzUwZTFmNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBhe0f60Rh7Eyt5rZb3P847HD9nN 9wHywN38bbwizw7aPPtY0mrkO2FHC2LkVBpUpXhCTxCuD6mu5YX6L4j2f+v5PdnR vWdZW/PTKYxuKWtP/e5nPB/+s32EuOeSa49I8DYg2pMzRfwMAUsEcrPwH7LTHsYM dSXPelP5ohSZFr6YQpbwkAxvZH2K7SjcwIMsteM/0bn79ncyKdt1IIsIDpwx0Ld0 za4vo5qEhnQDxGwj3rXZp0Hqh/AZ+vhpkeb6pmBwiQW+zbDkGOURLEpJnLMe5Mqr G0NKbTqgW0VoblX1wjqTFsntBeBx1bwbebGKmPAKVaoRLH4z0g1bqQJK0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvC05VDBfJjXoskK8U4KzxQ4fbRMB8GA1UdIwQY MBaAFB8xE5+J6CWWKn4zgK3nW1arW6rVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2Yt YmUxN2I4YWFkNTU0LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2YtYmUxN2I4YWFkNTU0 LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbljVOGca DAOdNOocSn4kpDSBTxB+/AUnC09GJRGue2DOqBctbo/M5/iOq0HqNKuhZrDRtbV1 5a5uxQNEkXaI/o9lnaLREUSf9Jm3tUAK8cNjKxhnW04Z//iveK2NecYTwC9MEgPP IdP75rhUpBLdW1w0i0G1Nw8NAZryiBwKJfV+Z5b/EFzAhHECVr3+zN9WFGde07zM ya/fwlXAjZaKvN+AmRQidsxQlar8CrzADX7OcaZiBlzNTVhBJrxHdPiD0eWKXWTk Gu78ZVy65K//+nMrpH2do3HUCKIji75y9GZ0VbFSzstLPj5u/qCziYxlFdwdcvmQ a17G8qZ1x4YIjQ== -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:14 2025 by rpki-client