This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json) Hash identifier: LrbDIX3PMUFvRh7IKQ71BwK6V5nBzSXuWVsZ+9MIvSM= Subject key identifier: C3:15:F5:09:61:73:21:4A:5A:F2:B1:1C:BF:61:1A:64:F5:AD:F4:08 Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12 Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612 Certificate serial: 019B4E162B1FB513F5588283968B91A220FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 02:00:34 +0000 Manifest this update: Wed 24 Dec 2025 02:00:34 +0000 Manifest next update: Thu 25 Dec 2025 02:00:34 +0000 Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: Y7LOC4+C7sZaPm4f5cbza+wb2rMHJsn6CKtq3jomvG8=) 2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:2b:1f:b5:13:f5:58:82:83:96:8b:91:a2:20:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612 Validity Not Before: Dec 24 02:00:34 2025 GMT Not After : Dec 25 02:00:34 2025 GMT Subject: CN=c315f5096173214a5af2b11cbf611a64f5adf408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:25:0d:a7:90:1a:65:98:72:3c:fb:38:86: e5:66:6e:a8:59:e4:c1:19:7f:49:a3:ef:ea:db:ad: 73:8c:4b:7e:3d:b5:e2:76:07:ab:5d:32:1e:d7:29: e7:4b:df:7d:07:14:2b:67:db:c8:d2:27:e3:f4:91: d1:00:7d:f2:ef:fa:12:f9:a4:b1:d4:bd:1d:ba:a1: 54:80:98:a0:54:f8:0c:98:1b:c1:a7:e6:b4:23:4a: fc:29:16:ab:75:62:6a:c2:4a:a1:56:51:27:b7:b8: 24:0a:be:34:a6:07:78:6e:a8:49:73:87:aa:c5:34: 1a:80:10:93:f5:a5:48:ee:88:77:bb:ea:7e:d4:78: 04:8b:ce:c6:ec:bd:71:47:c2:7d:6f:f6:41:86:cb: b8:19:d3:8b:c6:7b:32:87:92:b4:94:74:c8:6d:61: fd:bd:c0:6d:ae:91:48:a7:73:4c:f4:c8:9e:7b:d6: 43:9e:46:18:0f:f6:0e:8d:53:8a:4d:43:86:88:f0: 5a:12:d9:11:7e:32:74:62:2b:5a:0b:56:36:df:34: d0:cc:25:be:1b:28:1f:35:f4:e4:40:58:cb:80:fe: f7:25:63:4c:2d:b9:3e:70:c5:a8:b4:0b:64:f7:31: 7c:90:56:de:b2:6d:93:e0:2c:84:26:93:9a:17:6d: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:15:F5:09:61:73:21:4A:5A:F2:B1:1C:BF:61:1A:64:F5:AD:F4:08 X509v3 Authority Key Identifier: keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5e:50:19:77:91:2e:bf:4c:f5:b4:5e:a4:02:af:68:bf:34: e2:47:2b:01:15:d2:f5:8a:3d:d4:cc:25:ab:87:d2:26:c6:da: 15:ea:fc:9e:79:d1:4f:f9:02:38:52:d9:db:92:9e:f0:b9:71: 14:cd:11:2f:c9:72:15:eb:43:42:6e:2f:c5:2b:ec:85:3d:bd: 24:87:29:29:36:fa:99:05:66:94:02:a8:7b:c8:f1:6a:8c:f9: f3:42:66:00:48:c1:15:fc:15:4c:2a:a9:d5:85:a7:b6:22:39: 87:17:1e:bc:c4:51:5f:96:86:b9:77:0b:8a:8c:5a:f3:2e:37: 53:1e:36:57:66:95:99:b2:a1:e7:54:be:03:1d:e9:e8:73:b6: 9f:5f:e0:a7:ee:1d:53:2c:75:e1:79:63:43:e7:65:e5:6b:30: 51:dd:2c:9c:72:b2:fd:32:84:cc:bb:cb:17:91:02:ee:dd:34: a5:db:4d:cf:25:2a:b6:0b:6b:74:3f:c8:de:ac:51:71:86:34: 55:95:4b:19:d2:1b:73:ee:0d:30:ac:44:bc:19:c1:75:e9:5c: 30:32:58:52:13:66:7b:ca:50:41:2a:44:5e:e6:77:53:da:fb: 21:70:16:c0:6f:b6:95:09:9c:cf:a9:95:09:e0:d0:66:a4:fa: 2c:39:98:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFisftRP1WIKDlouRoiD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0 YmU2MTIwHhcNMjUxMjI0MDIwMDM0WhcNMjUxMjI1MDIwMDM0WjAzMTEwLwYDVQQD EyhjMzE1ZjUwOTYxNzMyMTRhNWFmMmIxMWNiZjYxMWE2NGY1YWRmNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl0lDaeQGmWYcjz7OIblZm6oWeTB GX9Jo+/q261zjEt+PbXidgerXTIe1ynnS999BxQrZ9vI0ifj9JHRAH3y7/oS+aSx 1L0duqFUgJigVPgMmBvBp+a0I0r8KRardWJqwkqhVlEnt7gkCr40pgd4bqhJc4eq xTQagBCT9aVI7oh3u+p+1HgEi87G7L1xR8J9b/ZBhsu4GdOLxnsyh5K0lHTIbWH9 vcBtrpFIp3NM9Miee9ZDnkYYD/YOjVOKTUOGiPBaEtkRfjJ0YitaC1Y23zTQzCW+ GygfNfTkQFjLgP73JWNMLbk+cMWotAtk9zF8kFbesm2T4CyEJpOaF22qAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMV9QlhcyFKWvKxHL9hGmT1rfQIMB8GA1UdIwQY MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt ZTkwOWU0MWEwN2U1LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1 LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe15QGXeR Lr9M9bRepAKvaL804kcrARXS9Yo91Mwlq4fSJsbaFer8nnnRT/kCOFLZ25Ke8Llx FM0RL8lyFetDQm4vxSvshT29JIcpKTb6mQVmlAKoe8jxaoz580JmAEjBFfwVTCqp 1YWntiI5hxcevMRRX5aGuXcLioxa8y43Ux42V2aVmbKh51S+Ax3p6HO2n1/gp+4d Uyx14XljQ+dl5WswUd0snHKy/TKEzLvLF5EC7t00pdtNzyUqtgtrdD/I3qxRcYY0 VZVLGdIbc+4NMKxEvBnBdelcMDJYUhNme8pQQSpEXuZ3U9r7IXAWwG+2lQmcz6mV CeDQZqT6LDmYEQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:32:29 2025 by rpki-client