This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json) Hash identifier: i/FjHgzMjQEx8FKl87JW8Mw9oNCVkuMWwCR1xjRBWZM= Subject key identifier: 29:69:9C:4D:57:96:A9:68:0C:F4:F3:11:F1:EE:E1:84:AB:AB:58:98 Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Certificate serial: 019B405C7D051A141B51DA9CA6BA21395B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft Manifest number: 06D8 Signing time: Sun 21 Dec 2025 10:02:41 +0000 Manifest this update: Sun 21 Dec 2025 10:02:41 +0000 Manifest next update: Mon 22 Dec 2025 10:02:41 +0000 Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=) 2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: Szrwhj+od2WTsQYPYI5KuKMVR9JA6rqe+Z4oU8QYSM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:7d:05:1a:14:1b:51:da:9c:a6:ba:21:39:5b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b Validity Not Before: Dec 21 10:02:41 2025 GMT Not After : Dec 22 10:02:41 2025 GMT Subject: CN=29699c4d5796a9680cf4f311f1eee184abab5898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:b0:47:c6:d7:4d:eb:eb:de:cb:43:73:e2: 34:b8:87:9b:44:a7:7e:4a:53:ef:02:96:cf:da:ed: 4c:8d:60:ad:f7:15:06:d3:3b:0c:8a:31:65:3b:62: a2:0a:e7:f6:15:6d:92:27:87:9c:36:fc:58:6a:a8: 0c:df:b2:ca:d4:4d:e5:56:ad:9e:2e:06:3a:cd:46: 93:45:e2:f7:a1:2c:4c:2e:61:40:b3:be:ab:c1:c1: 64:b8:ad:a4:b5:d8:7b:a0:c7:98:30:dc:5c:6e:79: a3:64:7c:2a:fd:7c:4b:1f:a5:8b:90:c6:1e:84:6e: c5:02:de:91:44:03:57:89:4f:a0:ca:2b:95:52:3d: bf:c4:38:8d:95:c4:6a:fb:27:43:2a:e9:01:f2:76: 50:36:8d:98:01:83:55:76:19:cf:67:9c:95:b3:f7: b5:96:13:57:a1:43:01:54:58:30:bc:19:d6:ee:15: d7:a4:ae:20:20:eb:6c:1c:be:9e:f2:32:1b:6c:ac: 4f:da:91:97:0d:13:7b:23:88:41:2a:0a:fd:3d:0d: 84:20:99:2c:a1:94:f4:9f:8f:8a:09:59:88:61:4e: de:20:0a:5a:08:76:5e:44:e5:38:7d:3e:70:5b:d9: bb:15:e6:f5:a2:c3:78:c9:d3:ef:5f:05:a1:e1:9f: 31:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:69:9C:4D:57:96:A9:68:0C:F4:F3:11:F1:EE:E1:84:AB:AB:58:98 X509v3 Authority Key Identifier: keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d2:83:02:ae:4f:4c:27:6b:9f:a4:f3:59:2b:45:99:b9:5a: 08:a7:af:99:6a:85:f9:47:4f:25:5d:b9:1b:1f:f7:76:a0:79: 22:93:68:12:fe:41:bb:ad:0d:2a:5d:35:44:ed:22:d6:a3:c9: 64:73:0d:bf:0f:d5:03:df:af:a1:23:e9:6a:48:0d:ba:ed:70: 06:77:be:c7:4d:f4:ba:04:b7:75:ee:e5:bd:7a:2d:38:b7:89: fd:77:86:24:1f:39:01:06:1b:e1:30:b5:43:42:bd:4b:28:6e: 9f:a9:ce:0e:cd:bb:6b:53:31:4d:03:9f:c7:37:10:d1:46:84: 5d:fc:d2:eb:48:03:8c:25:24:50:be:5e:8a:f9:f4:6d:ea:52: 02:b4:ec:5f:71:57:44:77:34:14:9f:84:b1:48:81:9c:64:db: 88:07:3a:fa:a5:23:c3:df:95:2b:7d:93:00:5c:b8:b8:de:7d: b4:05:34:36:56:08:a0:f6:f3:05:03:41:50:84:78:d0:5b:65: f0:9c:27:d1:0a:62:be:5d:d8:91:05:7a:9e:e8:dd:6c:68:22: d5:21:8e:72:f6:4d:6c:31:07:a6:79:16:1d:09:f8:e6:07:bc: a7:6c:95:b0:da:99:b8:e6:1c:49:23:30:1e:83:ea:e0:7a:34: 97:c6:aa:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXH0FGhQbUdqcprohOVsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZWIzZmFhODM4ODU0OWI1NWNiM2YzYWJkNGM2YzE1MTA2 Y2Y1M2IwHhcNMjUxMjIxMTAwMjQxWhcNMjUxMjIyMTAwMjQxWjAzMTEwLwYDVQQD EygyOTY5OWM0ZDU3OTZhOTY4MGNmNGYzMTFmMWVlZTE4NGFiYWI1ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2wR8bXTevr3stDc+I0uIebRKd+ SlPvApbP2u1MjWCt9xUG0zsMijFlO2KiCuf2FW2SJ4ecNvxYaqgM37LK1E3lVq2e LgY6zUaTReL3oSxMLmFAs76rwcFkuK2ktdh7oMeYMNxcbnmjZHwq/XxLH6WLkMYe hG7FAt6RRANXiU+gyiuVUj2/xDiNlcRq+ydDKukB8nZQNo2YAYNVdhnPZ5yVs/e1 lhNXoUMBVFgwvBnW7hXXpK4gIOtsHL6e8jIbbKxP2pGXDRN7I4hBKgr9PQ2EIJks oZT0n4+KCVmIYU7eIApaCHZeROU4fT5wW9m7Feb1osN4ydPvXwWh4Z8xAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClpnE1XlqloDPTzEfHu4YSrq1iYMB8GA1UdIwQY MBaAFB3rP6qDiFSbVcs/Or1MbBUQbPU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGIt NTAyYTk1N2ZkYWY4LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGItNTAyYTk1N2ZkYWY4 LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftKDAq5P TCdrn6TzWStFmblaCKevmWqF+UdPJV25Gx/3dqB5IpNoEv5Bu60NKl01RO0i1qPJ ZHMNvw/VA9+voSPpakgNuu1wBne+x030ugS3de7lvXotOLeJ/XeGJB85AQYb4TC1 Q0K9Syhun6nODs27a1MxTQOfxzcQ0UaEXfzS60gDjCUkUL5eivn0bepSArTsX3FX RHc0FJ+EsUiBnGTbiAc6+qUjw9+VK32TAFy4uN59tAU0NlYIoPbzBQNBUIR40Ftl 8Jwn0Qpivl3YkQV6nujdbGgi1SGOcvZNbDEHpnkWHQn45ge8p2yVsNqZuOYcSSMw HoPq4Ho0l8aq6g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:24 2025 by rpki-client