This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json) Hash identifier: Uk5xtwpOlwPtLFSQylePKjHf7PRCoJae0xKZ847IfFI= Subject key identifier: 1D:98:D6:EB:E7:69:19:34:5E:7F:E7:2E:7A:77:25:53:0F:5A:20:E5 Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Certificate serial: 019B3DC81A88D238B5FC723605D2DA092FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 22:01:22 +0000 Manifest this update: Sat 20 Dec 2025 22:01:22 +0000 Manifest next update: Sun 21 Dec 2025 22:01:22 +0000 Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: i2JccQCBGxOr3rYQtUXOlCRfU/d2OsAbubeTNCo7OnU=) 2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=) 3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1a:88:d2:38:b5:fc:72:36:05:d2:da:09:2f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Validity Not Before: Dec 20 22:01:22 2025 GMT Not After : Dec 21 22:01:22 2025 GMT Subject: CN=1d98d6ebe76919345e7fe72e7a7725530f5a20e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:52:51:7f:17:2f:17:52:1a:c8:14:e1:9f: 38:ea:6a:5d:73:b2:7a:07:24:07:2c:02:68:57:29: 81:a1:e5:2d:05:c9:51:eb:e3:43:fb:65:5b:16:57: b6:77:8f:4f:2d:58:a6:da:18:d0:f3:c0:d2:42:19: 14:4a:3d:cb:9d:ff:ca:f9:75:a4:2b:7b:54:2b:52: ce:74:e1:20:0e:17:3d:f6:66:95:de:82:07:29:24: cb:58:90:c2:90:e3:fb:9d:35:87:a1:f6:61:73:ae: 85:38:19:2d:11:61:57:54:9f:77:04:94:1b:3a:1c: 7a:1f:10:8e:ae:c5:e7:01:96:49:2a:59:bf:b7:b1: d7:7c:14:c9:fe:59:4a:94:c6:8c:97:ee:31:a8:a7: 65:82:7a:6a:31:e0:a5:50:69:7e:05:16:31:6a:d5: 36:13:06:95:07:ac:91:af:7e:b5:df:88:0b:a6:b6: 53:2f:53:c7:91:f8:c5:02:48:2c:20:8d:71:f7:5b: dc:09:e3:4f:d2:78:d2:b5:26:5c:a4:37:29:5e:6a: b9:69:a6:c7:96:a6:be:cc:34:a0:4c:86:df:7a:1b: ab:f0:21:e0:0f:dc:6e:6d:3c:09:4c:96:42:9f:11: 7f:49:cd:51:73:f0:fa:e3:5d:35:f5:fa:ea:c2:60: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:98:D6:EB:E7:69:19:34:5E:7F:E7:2E:7A:77:25:53:0F:5A:20:E5 X509v3 Authority Key Identifier: keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b6:f4:63:9b:26:71:aa:93:89:d4:61:9c:ac:7e:1a:e8:da: ad:f8:27:0d:0d:8a:06:be:5e:84:fd:f1:0b:07:5f:82:2c:0e: f9:c9:06:d5:60:12:ae:af:15:83:5c:04:12:e7:fe:31:61:ca: 30:86:e1:20:a3:1a:01:b1:6f:0e:5d:95:fe:d3:a5:37:85:1f: d6:af:d2:08:8d:af:e7:ad:39:34:6a:1f:5c:31:b6:d2:8d:b2: 34:1b:33:b0:0d:c8:af:fe:95:01:84:52:82:4d:fa:d2:14:9c: 11:f2:64:39:5f:55:29:bf:80:67:0e:ad:6c:ac:b5:52:1a:fc: 3e:1d:6d:f5:66:3f:a0:2e:49:1f:39:b8:4b:3d:99:6f:03:f7: c1:38:a6:99:18:b8:44:8a:8c:7e:e7:53:b4:4a:a3:19:e4:29: 01:3e:14:16:b2:f3:4e:8c:05:3a:aa:9d:24:3b:99:ee:f0:ab: cd:3d:25:94:c6:0f:da:02:e1:28:19:d1:ce:09:61:b6:0c:fd: 8f:18:70:93:97:a1:5c:ac:cb:6b:84:0c:68:2d:44:0d:0b:70: 6b:34:84:42:0b:fd:0c:6e:39:43:f8:13:fa:ab:0b:69:42:12: 00:3f:08:18:ea:2d:5b:8e:09:f3:10:2e:c3:22:63:58:98:f6: a0:69:f9:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBqI0ji1/HI2BdLaCS+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh YzY2NTQwHhcNMjUxMjIwMjIwMTIyWhcNMjUxMjIxMjIwMTIyWjAzMTEwLwYDVQQD EygxZDk4ZDZlYmU3NjkxOTM0NWU3ZmU3MmU3YTc3MjU1MzBmNWEyMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG1SUX8XLxdSGsgU4Z846mpdc7J6 ByQHLAJoVymBoeUtBclR6+ND+2VbFle2d49PLVim2hjQ88DSQhkUSj3Lnf/K+XWk K3tUK1LOdOEgDhc99maV3oIHKSTLWJDCkOP7nTWHofZhc66FOBktEWFXVJ93BJQb Ohx6HxCOrsXnAZZJKlm/t7HXfBTJ/llKlMaMl+4xqKdlgnpqMeClUGl+BRYxatU2 EwaVB6yRr36134gLprZTL1PHkfjFAkgsII1x91vcCeNP0njStSZcpDcpXmq5aabH lqa+zDSgTIbfehur8CHgD9xubTwJTJZCnxF/Sc1Rc/D641019frqwmBjlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2Y1uvnaRk0Xn/nLnp3JVMPWiDlMB8GA1UdIwQY MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0 LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrb0Y5sm caqTidRhnKx+GujarfgnDQ2KBr5ehP3xCwdfgiwO+ckG1WASrq8Vg1wEEuf+MWHK MIbhIKMaAbFvDl2V/tOlN4Uf1q/SCI2v5605NGofXDG20o2yNBszsA3Ir/6VAYRS gk360hScEfJkOV9VKb+AZw6tbKy1Uhr8Ph1t9WY/oC5JHzm4Sz2ZbwP3wTimmRi4 RIqMfudTtEqjGeQpAT4UFrLzTowFOqqdJDuZ7vCrzT0llMYP2gLhKBnRzglhtgz9 jxhwk5ehXKzLa4QMaC1EDQtwazSEQgv9DG45Q/gT+qsLaUISAD8IGOotW44J8xAu wyJjWJj2oGn5Eg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:44:33 2025 by rpki-client