This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft File: Hn19JBnxEYqsXJktKt_2l7A-mns.mft (raw, json) Hash identifier: +GNn0mFxfZdLTAF3n8mIEgB0743YRqI5YvEi3DY3jt0= Subject key identifier: 9E:45:7C:3E:CC:9B:CA:DE:E8:66:54:EE:F2:BF:50:AE:24:30:48:7F Authority key identifier: 1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B Certificate issuer: /CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b Certificate serial: 019B2A78069390A40852CC9B989B5C335B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft Manifest number: 0957 Signing time: Wed 17 Dec 2025 04:01:07 +0000 Manifest this update: Wed 17 Dec 2025 04:01:07 +0000 Manifest next update: Thu 18 Dec 2025 04:01:07 +0000 Files and hashes: 1: Hn19JBnxEYqsXJktKt_2l7A-mns.crl (hash: Xb1J6MfHmlsywDzUIPFOBhShDSNNsoAjKWLXORz6PM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:06:93:90:a4:08:52:cc:9b:98:9b:5c:33:5b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7d7d2419f1118aac5c992d2adff697b03e9a7b Validity Not Before: Dec 17 04:01:07 2025 GMT Not After : Dec 18 04:01:07 2025 GMT Subject: CN=9e457c3ecc9bcadee86654eef2bf50ae2430487f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:3b:b9:00:df:7d:20:bd:7a:dc:67:fc:64: 03:fe:fa:fd:82:39:2a:35:45:c5:4b:6b:16:da:6a: 4f:d4:9c:4d:f0:14:6f:73:4b:c7:22:10:67:76:9d: 75:64:dc:2a:bd:40:43:9f:bd:4d:a4:f9:0d:0e:a4: 68:f9:75:11:49:a9:82:ae:cb:5a:d1:42:23:8e:c0: 72:d2:b5:09:91:f3:05:77:fd:ae:f1:26:47:9d:50: 92:a0:12:ee:81:95:3a:cb:a1:78:fa:1b:09:c4:bc: b1:1e:28:ab:18:f0:a5:bf:23:f0:ec:3f:7a:ab:b8: 85:a3:d8:a4:be:eb:c4:06:65:18:5a:60:8f:6d:6e: b1:6b:09:e5:4a:4a:64:f4:fe:22:eb:19:59:dc:3a: 85:ec:90:7f:73:2d:51:8f:79:d6:e5:eb:d8:69:af: a7:5f:d2:da:c3:bc:09:ff:77:05:05:f0:46:ca:e3: e9:6d:ec:03:35:ca:a4:46:38:fd:5e:88:e3:cd:25: d6:18:2e:9f:92:78:ea:85:c9:dc:e3:5b:cc:f5:7c: ec:2e:49:ac:f8:11:11:6b:78:65:ff:5a:46:12:a4: 61:21:ee:19:6e:6e:2a:a5:63:9b:a3:55:7c:f5:c8: 1d:c6:b8:34:73:98:37:38:7c:b9:3a:2b:77:06:7e: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:7C:3E:CC:9B:CA:DE:E8:66:54:EE:F2:BF:50:AE:24:30:48:7F X509v3 Authority Key Identifier: keyid:1E:7D:7D:24:19:F1:11:8A:AC:5C:99:2D:2A:DF:F6:97:B0:3E:9A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn19JBnxEYqsXJktKt_2l7A-mns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c8d78f-c28c-4116-a3a2-5bf998e27fc0/1/Hn19JBnxEYqsXJktKt_2l7A-mns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:84:47:1d:60:4a:b0:b4:4a:4d:e5:be:ec:04:98:b3:fc:b8: 63:59:b6:a4:30:67:9e:ac:fe:5c:d8:de:71:bd:c5:eb:7c:4c: 6f:e4:fb:7c:37:29:fe:1f:84:c4:57:94:d9:f2:8d:d3:fe:3d: 40:21:e9:8a:b7:7b:a2:ac:ea:a6:9d:4a:28:99:ef:58:ab:14: b3:e1:8e:4a:b2:38:4c:20:e6:66:58:6e:4d:81:9d:b3:15:a8: 6e:5a:13:43:a6:4c:57:72:03:d3:77:1b:32:82:ba:7b:b8:c4: 4c:68:8f:4b:73:6a:0a:fa:7f:da:43:a3:d5:0c:f9:c2:5f:ed: d8:d9:78:7f:1a:8e:53:82:fc:80:55:76:f0:ff:c0:0c:9d:d9: 84:c0:34:60:6a:72:05:c9:62:c0:bf:98:5f:b6:9d:8e:34:59: 30:80:d7:db:5f:f0:2f:3b:b9:37:ff:9a:78:1e:45:05:b7:2d: cb:e2:90:40:7b:97:f1:f5:69:38:71:cd:c5:37:fc:e7:e5:f9: 37:f2:b4:d3:f3:c7:02:34:49:ad:6b:0b:e7:3d:a5:c7:47:a1: 19:38:e5:26:8c:37:66:fd:52:19:80:46:fd:79:7d:23:17:7d: 30:9f:61:28:a5:85:a6:40:ac:c6:f0:8f:4e:ad:1d:99:fe:c4: 91:22:f4:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeAaTkKQIUsybmJtcM1tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlN2Q3ZDI0MTlmMTExOGFhYzVjOTkyZDJhZGZmNjk3YjAz ZTlhN2IwHhcNMjUxMjE3MDQwMTA3WhcNMjUxMjE4MDQwMTA3WjAzMTEwLwYDVQQD Eyg5ZTQ1N2MzZWNjOWJjYWRlZTg2NjU0ZWVmMmJmNTBhZTI0MzA0ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNM7uQDffSC9etxn/GQD/vr9gjkq NUXFS2sW2mpP1JxN8BRvc0vHIhBndp11ZNwqvUBDn71NpPkNDqRo+XURSamCrsta 0UIjjsBy0rUJkfMFd/2u8SZHnVCSoBLugZU6y6F4+hsJxLyxHiirGPClvyPw7D96 q7iFo9ikvuvEBmUYWmCPbW6xawnlSkpk9P4i6xlZ3DqF7JB/cy1Rj3nW5evYaa+n X9Law7wJ/3cFBfBGyuPpbewDNcqkRjj9XojjzSXWGC6fknjqhcnc41vM9XzsLkms +BERa3hl/1pGEqRhIe4Zbm4qpWObo1V89cgdxrg0c5g3OHy5Oit3Bn5bPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5FfD7Mm8re6GZU7vK/UK4kMEh/MB8GA1UdIwQY MBaAFB59fSQZ8RGKrFyZLSrf9pewPpp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG4xOUpCbnhFWXFzWEprdEt0XzJsN0EtbW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jOGQ3OGYtYzI4Yy00MTE2LWEzYTIt NWJmOTk4ZTI3ZmMwLzEvSG4xOUpCbnhFWXFzWEprdEt0XzJsN0EtbW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9jOGQ3OGYtYzI4Yy00MTE2LWEzYTItNWJmOTk4ZTI3ZmMw LzEvSG4xOUpCbnhFWXFzWEprdEt0XzJsN0EtbW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoRHHWBK sLRKTeW+7ASYs/y4Y1m2pDBnnqz+XNjecb3F63xMb+T7fDcp/h+ExFeU2fKN0/49 QCHpird7oqzqpp1KKJnvWKsUs+GOSrI4TCDmZlhuTYGdsxWobloTQ6ZMV3ID03cb MoK6e7jETGiPS3NqCvp/2kOj1Qz5wl/t2Nl4fxqOU4L8gFV28P/ADJ3ZhMA0YGpy BcliwL+YX7adjjRZMIDX21/wLzu5N/+aeB5FBbcty+KQQHuX8fVpOHHNxTf85+X5 N/K00/PHAjRJrWsL5z2lx0ehGTjlJow3Zv1SGYBG/Xl9Ixd9MJ9hKKWFpkCsxvCP Tq0dmf7EkSL0sw== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:37 2025 by rpki-client