This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json) Hash identifier: mfyRKwY6EQOmjPBSjSGQWSD0kvAlWXR3Co2lBiGYqrg= Subject key identifier: BB:B9:6A:77:46:D0:D8:86:C2:56:8C:DC:8A:6E:61:95:AA:35:86:A0 Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500 Certificate serial: 019B3F7F4CC5F2948BF077AC434A702FCEC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft Manifest number: 1416 Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 06:01:05 +0000 Manifest next update: Mon 22 Dec 2025 06:01:05 +0000 Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: tPyhLJ+8O9XAxUSFtXM9E0B8CKujMOh+rHdqkgQ/jBE=) 2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4c:c5:f2:94:8b:f0:77:ac:43:4a:70:2f:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500 Validity Not Before: Dec 21 06:01:05 2025 GMT Not After : Dec 22 06:01:05 2025 GMT Subject: CN=bbb96a7746d0d886c2568cdc8a6e6195aa3586a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:23:3b:3f:42:15:8b:62:de:02:52:a4:89: a5:7b:1a:67:7f:46:63:4b:54:41:3d:75:82:db:cb: d2:23:dd:76:4b:33:1b:b0:1d:2c:df:76:9c:d1:63: 15:78:f3:52:fa:c6:fe:2e:ff:2b:16:48:ae:46:41: 5f:8a:38:33:59:8e:54:67:d4:1e:93:d1:15:e1:85: 45:9d:10:dc:f7:b7:9c:8c:6b:7c:07:cf:5f:72:8b: 14:43:11:5b:36:43:34:05:4b:6f:3b:13:fb:ea:ee: 1a:88:2c:c2:fd:6e:a6:ca:39:7c:e1:d6:4e:b0:5c: 09:fc:a7:e4:fa:64:fe:2a:57:66:dc:06:c1:1b:90: a8:c3:f9:ae:8c:f9:71:57:1f:de:b1:ad:9c:cd:5d: d9:f5:d1:d7:38:f9:78:37:46:84:c1:06:ee:d8:3f: 78:1d:cd:70:eb:af:c0:4f:ef:4f:3c:1b:f6:4f:46: a4:a3:3e:c5:6d:72:ca:8b:e2:d1:90:80:01:ae:2e: 3c:88:a1:e5:1e:3e:51:57:c2:78:a3:39:97:32:ad: 69:e2:03:7f:85:15:33:dc:ca:29:cb:cf:a3:74:97: c0:b4:0f:f5:fe:79:4c:6b:fa:6e:fa:34:b8:a5:84: f9:c2:97:11:b4:4e:61:0c:be:e2:18:7f:92:7f:2d: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:6A:77:46:D0:D8:86:C2:56:8C:DC:8A:6E:61:95:AA:35:86:A0 X509v3 Authority Key Identifier: keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f3:5e:f1:9d:32:40:9d:f6:f0:ed:30:3e:df:06:ab:8b:d8: 2e:07:cb:c3:9f:58:7a:f6:74:c7:d4:61:ef:fc:14:68:34:97: 61:fa:e6:1a:69:eb:b0:2d:03:79:d3:b1:8f:34:fa:c2:9d:cb: fd:c3:20:35:c9:92:13:db:80:05:cd:7a:92:1d:a7:18:80:e9: 4b:cc:81:64:e0:dd:14:a4:c1:04:46:72:6e:47:7b:ac:39:bc: fa:46:6d:f9:96:fd:13:2e:90:15:3f:b3:a6:fd:65:0c:d0:14: 56:6c:2a:9b:78:13:3d:c8:3f:50:f1:b7:dc:40:86:cf:86:13: 2d:bf:34:54:8b:0c:bf:70:d5:c6:d5:ea:98:63:2b:c5:98:03: a8:3b:e5:95:af:47:2d:e1:a0:11:0c:db:77:c9:89:1d:93:2a: f3:8e:bb:8b:1a:8c:95:86:e7:8a:0d:fa:93:f4:99:57:94:8d: 1c:3c:2b:49:94:74:88:07:13:a3:08:45:cb:8b:15:3a:1f:54: 5b:cb:4a:4e:40:58:e3:97:cd:33:9b:93:34:e7:e3:d9:03:70: d4:f6:ab:11:ba:82:92:c6:8e:86:f6:02:f3:04:71:e1:1d:b7: b4:1b:f4:a6:67:73:bd:49:aa:71:2d:07:4f:4a:f7:38:3b:3d: 8d:98:5b:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0zF8pSL8HesQ0pwL87AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz OTM1MDAwHhcNMjUxMjIxMDYwMTA1WhcNMjUxMjIyMDYwMTA1WjAzMTEwLwYDVQQD EyhiYmI5NmE3NzQ2ZDBkODg2YzI1NjhjZGM4YTZlNjE5NWFhMzU4NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JQjOz9CFYti3gJSpImlexpnf0Zj S1RBPXWC28vSI912SzMbsB0s33ac0WMVePNS+sb+Lv8rFkiuRkFfijgzWY5UZ9Qe k9EV4YVFnRDc97ecjGt8B89fcosUQxFbNkM0BUtvOxP76u4aiCzC/W6myjl84dZO sFwJ/Kfk+mT+Kldm3AbBG5Cow/mujPlxVx/esa2czV3Z9dHXOPl4N0aEwQbu2D94 Hc1w66/AT+9PPBv2T0akoz7FbXLKi+LRkIABri48iKHlHj5RV8J4ozmXMq1p4gN/ hRUz3Mopy8+jdJfAtA/1/nlMa/pu+jS4pYT5wpcRtE5hDL7iGH+Sfy1KuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu5andG0NiGwlaM3IpuYZWqNYagMB8GA1UdIwQY MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0 LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPNe8Z0y QJ328O0wPt8Gq4vYLgfLw59YevZ0x9Rh7/wUaDSXYfrmGmnrsC0DedOxjzT6wp3L /cMgNcmSE9uABc16kh2nGIDpS8yBZODdFKTBBEZybkd7rDm8+kZt+Zb9Ey6QFT+z pv1lDNAUVmwqm3gTPcg/UPG33ECGz4YTLb80VIsMv3DVxtXqmGMrxZgDqDvlla9H LeGgEQzbd8mJHZMq8467ixqMlYbnig36k/SZV5SNHDwrSZR0iAcTowhFy4sVOh9U W8tKTkBY45fNM5uTNOfj2QNw1ParEbqCksaOhvYC8wRx4R23tBv0pmdzvUmqcS0H T0r3ODs9jZhb4w== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:39 2025 by rpki-client