This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json) Hash identifier: Nl8gHkCmgkwKgAGdMHpornpHkmmgMILgVB5wDO8MQVM= Subject key identifier: 0E:BD:E0:48:01:C7:B4:0E:7D:9E:23:AD:C5:60:4C:B6:7B:BD:25:21 Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Certificate serial: 019B410005C0406D21670D548CB1F18279B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft Manifest number: 0B22 Signing time: Sun 21 Dec 2025 13:01:18 +0000 Manifest this update: Sun 21 Dec 2025 13:01:18 +0000 Manifest next update: Mon 22 Dec 2025 13:01:18 +0000 Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=) 2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: MoWPuapL6Nhes8SoL8ZSH4DRcthpfHRyWHSulR5a8UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:05:c0:40:6d:21:67:0d:54:8c:b1:f1:82:79:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Validity Not Before: Dec 21 13:01:18 2025 GMT Not After : Dec 22 13:01:18 2025 GMT Subject: CN=0ebde04801c7b40e7d9e23adc5604cb67bbd2521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:c3:b0:95:a8:98:39:39:0f:5a:35:79:4a: 65:16:c4:4c:e8:94:cb:74:80:00:a7:9c:ac:9b:3d: bb:c4:41:09:76:f9:3b:72:7c:26:c8:fa:6b:b0:91: 76:84:e5:ce:36:42:02:b5:98:fc:ae:d3:66:94:b2: 71:c9:3f:1b:93:ca:ae:7c:bc:28:19:0b:b7:0c:77: 65:02:f6:10:93:3f:63:e8:41:23:f7:99:a3:d6:de: 71:e8:26:83:82:17:9d:5a:3c:01:7e:d9:58:4f:ac: fd:f5:82:14:35:87:19:0f:96:28:63:bb:11:1e:72: 81:e1:01:ac:0d:62:68:1e:e4:c9:2d:d5:3a:9f:f9: e9:b0:cb:0c:f0:49:62:a3:59:e8:e3:9e:83:ce:73: 04:10:ae:eb:32:0b:5f:05:8f:04:a1:df:db:26:ca: 26:c8:dc:2f:fa:a1:fa:3a:66:a4:2e:ac:b3:ef:35: 9f:33:52:e2:0e:86:d8:a6:a7:b5:24:0c:3b:c2:3d: 16:81:12:fb:94:0f:4e:1b:7e:d9:e0:d2:11:87:f6: 80:f6:1d:8b:13:ec:6e:3c:9a:73:c9:bc:91:ac:5c: 00:1b:04:2b:b1:b4:31:2b:e5:49:2b:3a:68:ca:ad: ef:65:c7:6f:c1:fe:54:9a:f2:2b:19:5f:01:e8:07: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BD:E0:48:01:C7:B4:0E:7D:9E:23:AD:C5:60:4C:B6:7B:BD:25:21 X509v3 Authority Key Identifier: keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a0:c2:04:d9:ea:4e:23:3f:59:71:c8:51:9e:e2:c9:df:d6: 3e:fe:d8:ca:a0:52:7f:41:af:dc:08:95:72:1f:0f:7d:eb:2d: 73:96:26:c2:b5:a0:c2:57:64:71:a5:29:48:d0:5d:1d:73:b0: 84:6a:52:f6:c7:35:ef:74:ac:cc:68:b6:8d:3a:84:56:d7:2f: fc:ee:d6:a8:3f:86:2e:6b:cc:df:8b:d2:d8:2b:70:59:7c:d4: e2:53:80:86:e6:af:5c:49:be:27:9b:84:b4:fe:13:8e:95:03: c9:91:09:fb:93:ea:05:ad:b8:df:c0:51:c2:b6:c3:84:f5:96: b1:7f:33:4e:d7:d7:19:29:81:d1:2f:0b:38:07:aa:52:18:c5: 33:80:cb:61:3f:85:85:ef:32:76:a9:f1:50:18:d2:3c:71:8d: ee:a5:4b:b6:ba:e7:ae:58:e5:78:80:8e:ec:21:39:5b:29:10: ec:d3:32:f3:72:86:45:78:10:ae:6f:5c:ac:d9:37:f7:5b:dc: e6:9d:35:4b:0d:4f:69:88:e0:4d:f2:41:c3:9a:7c:d5:e7:44: 87:02:20:18:0a:6e:e7:dd:6b:b6:6a:3c:29:67:1d:bd:dc:37: 31:a1:f4:e7:4a:ac:79:0f:17:20:22:a5:bc:3d:53:6a:2d:04: 49:5d:b8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAXAQG0hZw1UjLHxgnm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMmVhYWQ3YTg3MDY2MTVkMWM4NDM2ZGNlMDE5NTQ5NWYy MTRhODcwHhcNMjUxMjIxMTMwMTE4WhcNMjUxMjIyMTMwMTE4WjAzMTEwLwYDVQQD EygwZWJkZTA0ODAxYzdiNDBlN2Q5ZTIzYWRjNTYwNGNiNjdiYmQyNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mTDsJWomDk5D1o1eUplFsRM6JTL dIAAp5ysmz27xEEJdvk7cnwmyPprsJF2hOXONkICtZj8rtNmlLJxyT8bk8qufLwo GQu3DHdlAvYQkz9j6EEj95mj1t5x6CaDghedWjwBftlYT6z99YIUNYcZD5YoY7sR HnKB4QGsDWJoHuTJLdU6n/npsMsM8Elio1no456DznMEEK7rMgtfBY8Eod/bJsom yNwv+qH6OmakLqyz7zWfM1LiDobYpqe1JAw7wj0WgRL7lA9OG37Z4NIRh/aA9h2L E+xuPJpzybyRrFwAGwQrsbQxK+VJKzpoyq3vZcdvwf5UmvIrGV8B6AeDCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA694EgBx7QOfZ4jrcVgTLZ7vSUhMB8GA1UdIwQY MBaAFB4uqteocGYV0chDbc4BlUlfIUqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYt MmM5OGYxN2I4ZWIzLzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYtMmM5OGYxN2I4ZWIz LzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaDCBNnq TiM/WXHIUZ7iyd/WPv7YyqBSf0Gv3AiVch8Pfestc5YmwrWgwldkcaUpSNBdHXOw hGpS9sc173SszGi2jTqEVtcv/O7WqD+GLmvM34vS2CtwWXzU4lOAhuavXEm+J5uE tP4TjpUDyZEJ+5PqBa2438BRwrbDhPWWsX8zTtfXGSmB0S8LOAeqUhjFM4DLYT+F he8ydqnxUBjSPHGN7qVLtrrnrljleICO7CE5WykQ7NMy83KGRXgQrm9crNk391vc 5p01Sw1PaYjgTfJBw5p81edEhwIgGApu591rtmo8KWcdvdw3MaH050qseQ8XICKl vD1Tai0ESV24hg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:45 2025 by rpki-client