This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json) Hash identifier: sge3O2g1tPCEeETxJMhj18tCdFp1yDx/mUvEVOvrBls= Subject key identifier: B8:DD:BB:6A:4D:A9:5C:F3:D5:48:27:3F:83:D2:A4:AC:BD:29:19:99 Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Certificate serial: 019B3D90A4471351A69B8D1181BA64914CBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft Manifest number: 0E29 Signing time: Sat 20 Dec 2025 21:00:47 +0000 Manifest this update: Sat 20 Dec 2025 21:00:47 +0000 Manifest next update: Sun 21 Dec 2025 21:00:47 +0000 Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: zjUnd86mh7/gRW06c+0kwks8QxPQVbF2FwElaU+aGL4=) 2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a4:47:13:51:a6:9b:8d:11:81:ba:64:91:4c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Validity Not Before: Dec 20 21:00:47 2025 GMT Not After : Dec 21 21:00:47 2025 GMT Subject: CN=b8ddbb6a4da95cf3d548273f83d2a4acbd291999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:b5:cc:c5:9f:38:54:95:f2:89:b9:b7:8b: 01:20:b1:fb:45:23:91:13:a8:af:32:10:de:1a:8a: 44:50:c3:41:a7:f2:4e:44:69:c0:cb:f5:11:29:15: 70:79:6d:82:0e:74:a1:e8:fe:a9:17:6a:5f:4a:ff: 13:64:56:f8:3e:e6:e5:a8:d8:d6:c1:ee:38:fd:88: 77:c5:d6:88:27:da:c1:5d:26:46:5f:e0:61:33:0e: c0:0c:66:88:d1:10:9e:09:f9:a4:f3:7c:69:33:78: 4d:f6:eb:29:67:4f:d6:0f:d6:07:29:3e:2e:55:45: d5:26:17:74:e3:0f:0c:da:9c:94:95:f7:a7:b8:9b: 32:ae:b3:63:28:3f:90:aa:a5:09:ed:be:66:c9:c1: be:54:e1:54:b6:de:ad:b2:f2:a3:6d:92:fe:3b:28: 20:6d:c1:3e:d6:b9:05:30:4a:85:73:1c:a2:1f:95: 79:3e:bf:cf:2e:0d:c2:7e:35:01:b0:39:f9:35:d3: 43:33:c3:f9:4f:18:8d:96:2c:ee:ab:a0:05:c2:f5: 0f:0d:ca:68:cb:bf:2d:2c:15:a8:53:cc:68:94:e3: 76:b3:00:70:eb:68:2e:5d:bb:07:7e:c8:6b:f3:2d: b3:c7:b6:83:74:27:11:34:a7:51:bc:e9:65:68:51: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:BB:6A:4D:A9:5C:F3:D5:48:27:3F:83:D2:A4:AC:BD:29:19:99 X509v3 Authority Key Identifier: keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:93:93:fa:95:bd:d3:4c:5a:ee:80:ab:e6:e6:16:49:4c:1a: 85:a3:89:e3:a6:6b:ab:7b:51:5c:b6:d2:10:7a:f9:d2:ba:92: a5:e7:73:3f:e2:52:6d:6c:e9:be:a9:f4:5e:53:2c:47:7b:8c: cc:19:83:5c:e4:c8:b1:e6:b4:67:d8:92:b5:06:69:e8:86:41: 10:95:94:44:c7:19:79:2f:52:a8:b0:78:e8:e6:15:5e:c4:f3: 36:2d:05:4b:b1:32:ba:9c:89:28:14:5a:30:33:0e:b0:ec:df: 68:a4:37:fe:b2:e7:36:0a:83:e0:b9:92:98:e8:ff:d6:75:22: 97:5d:11:b0:b5:4d:6d:c6:c7:53:5f:30:0d:f4:17:9c:83:b2: d2:87:5f:4d:72:10:30:5e:d5:f6:a9:33:fb:88:d2:7a:90:5c: ac:5d:ef:33:12:33:c4:62:31:9e:6b:92:b2:12:82:dc:3d:67: a4:ac:2d:9a:ad:ae:9c:b2:de:4f:f6:7e:e4:ac:a1:31:28:c6: c8:f4:e5:b3:db:50:83:7f:63:34:db:c7:dd:a1:67:8d:73:c4: 40:0e:cc:e4:02:28:89:f0:8d:7f:06:68:50:d2:b3:c8:b7:ed: fb:98:d6:3a:2b:03:c5:4f:b0:7f:3e:a3:ce:9f:14:c2:d0:d6: 5f:b7:6b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKRHE1Gmm40RgbpkkUy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz NDQ4YTAwHhcNMjUxMjIwMjEwMDQ3WhcNMjUxMjIxMjEwMDQ3WjAzMTEwLwYDVQQD EyhiOGRkYmI2YTRkYTk1Y2YzZDU0ODI3M2Y4M2QyYTRhY2JkMjkxOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkG1zMWfOFSV8om5t4sBILH7RSOR E6ivMhDeGopEUMNBp/JORGnAy/URKRVweW2CDnSh6P6pF2pfSv8TZFb4PublqNjW we44/Yh3xdaIJ9rBXSZGX+BhMw7ADGaI0RCeCfmk83xpM3hN9uspZ0/WD9YHKT4u VUXVJhd04w8M2pyUlfenuJsyrrNjKD+QqqUJ7b5mycG+VOFUtt6tsvKjbZL+Oygg bcE+1rkFMEqFcxyiH5V5Pr/PLg3CfjUBsDn5NdNDM8P5TxiNlizuq6AFwvUPDcpo y78tLBWoU8xolON2swBw62guXbsHfshr8y2zx7aDdCcRNKdRvOllaFHWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjdu2pNqVzz1UgnP4PSpKy9KRmZMB8GA1UdIwQY MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3 LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZOT+pW9 00xa7oCr5uYWSUwahaOJ46Zrq3tRXLbSEHr50rqSpedzP+JSbWzpvqn0XlMsR3uM zBmDXOTIsea0Z9iStQZp6IZBEJWURMcZeS9SqLB46OYVXsTzNi0FS7EyupyJKBRa MDMOsOzfaKQ3/rLnNgqD4LmSmOj/1nUil10RsLVNbcbHU18wDfQXnIOy0odfTXIQ MF7V9qkz+4jSepBcrF3vMxIzxGIxnmuSshKC3D1npKwtmq2unLLeT/Z+5KyhMSjG yPTls9tQg39jNNvH3aFnjXPEQA7M5AIoifCNfwZoUNKzyLft+5jWOisDxU+wfz6j zp8UwtDWX7drVw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:06:24 2025 by rpki-client