This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json) Hash identifier: SQcRRKbOY0X29TwrJX8/pjqPx6z63RubC6nLjXsmRPo= Subject key identifier: 38:A6:D7:98:E4:95:E7:5A:19:6F:8E:B9:EC:D9:43:DF:AF:CD:27:53 Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0 Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0 Certificate serial: 019B70D9084CB5C715DE802970134D3ECEC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 20:00:30 +0000 Manifest this update: Tue 30 Dec 2025 20:00:30 +0000 Manifest next update: Wed 31 Dec 2025 20:00:30 +0000 Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=) 2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: UtjERuiylstfJqmEv0pI+vZmlrZGCyZWLxTR4CRm5d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:08:4c:b5:c7:15:de:80:29:70:13:4d:3e:ce:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0 Validity Not Before: Dec 30 20:00:30 2025 GMT Not After : Dec 31 20:00:30 2025 GMT Subject: CN=38a6d798e495e75a196f8eb9ecd943dfafcd2753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:ac:65:a4:0e:3b:de:8d:08:44:67:f9:7f: ce:77:d5:86:6b:76:94:cf:5c:51:cb:f2:c5:79:c3: a6:8c:df:ec:69:08:42:e2:a0:7c:a4:d4:48:f9:93: 04:8d:5a:f3:95:a4:54:37:5c:ee:68:6f:76:37:ca: 34:2c:42:50:3f:6f:8e:08:d6:88:70:40:1c:77:03: 29:18:60:78:01:0e:cd:66:fc:69:90:bd:80:5a:aa: a3:13:f9:a9:14:0f:a0:8c:35:ad:b9:22:dd:b4:b6: 46:bd:03:8d:bf:6f:82:7a:8c:bb:e2:e8:8a:db:dc: 74:a3:e9:ae:d5:a2:84:f3:b6:60:b8:f7:82:a3:98: 17:31:9c:4d:9f:bf:2e:94:65:59:cf:81:31:14:90: 90:b9:13:3d:93:d9:61:52:9a:d3:3e:fa:84:77:65: e0:b2:79:47:1d:e9:e9:03:61:62:c3:13:03:23:54: e8:5c:9b:d5:eb:d0:fa:c5:c8:b0:6f:32:ba:94:39: 12:d0:bb:75:46:82:9c:84:8a:45:42:52:bc:95:7e: 23:82:05:c1:a0:02:7d:ac:6a:3c:f7:d1:9f:29:f1: 60:02:f3:b7:db:7a:44:85:b2:64:62:c3:2a:e6:2d: 4d:fd:eb:fb:2d:e5:dc:17:56:07:30:cd:33:64:29: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A6:D7:98:E4:95:E7:5A:19:6F:8E:B9:EC:D9:43:DF:AF:CD:27:53 X509v3 Authority Key Identifier: keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:82:30:3a:d0:a0:b8:37:0a:5e:c0:aa:30:b2:af:8a:0a:72: 19:ef:bb:bf:cf:d5:01:ad:04:fe:73:45:96:1b:21:56:be:82: 8d:f2:1b:06:e9:09:c7:28:3c:4b:51:f9:db:f6:6b:ea:5a:49: 93:65:2c:19:dc:c3:2e:de:1a:03:38:c9:70:38:54:77:a7:ae: bc:86:a0:37:4c:fe:a5:ea:05:b1:e5:cf:44:31:d9:d9:8b:7e: 87:b1:1e:3d:1b:62:92:8c:43:16:c9:a3:11:6c:d1:a5:65:85: a6:c1:0f:a8:44:03:ec:cd:16:e2:d7:a4:c7:0f:89:37:ee:d1: 33:a0:7d:a5:1a:04:04:c5:c9:c7:c9:79:6e:73:b5:3a:5f:9c: b5:51:b0:f3:d8:74:33:bf:fa:0f:a1:bf:df:de:b3:3b:90:5f: 72:55:3f:fc:d0:ae:6c:25:b4:cd:9c:ae:83:b0:88:8e:b3:88: a0:68:1b:37:0f:08:53:07:44:2d:e6:b9:19:61:67:1e:f6:2d: 07:38:9c:5e:0a:5f:96:65:e3:dd:a6:ea:f9:71:7a:fd:70:33: 1e:5d:76:0e:74:39:b1:14:55:4e:75:01:69:eb:53:e6:cd:46: 3b:73:c1:bf:77:13:b7:c0:90:17:56:19:fa:98:40:8a:a4:b8: 85:20:b3:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2QhMtccV3oApcBNNPs7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNzk0ODhhYjRlMWFjMGY0YmQ0NjdkMmI0ZDM2MjFjNmIx OGVlYTAwHhcNMjUxMjMwMjAwMDMwWhcNMjUxMjMxMjAwMDMwWjAzMTEwLwYDVQQD EygzOGE2ZDc5OGU0OTVlNzVhMTk2ZjhlYjllY2Q5NDNkZmFmY2QyNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqesZaQOO96NCERn+X/Od9WGa3aU z1xRy/LFecOmjN/saQhC4qB8pNRI+ZMEjVrzlaRUN1zuaG92N8o0LEJQP2+OCNaI cEAcdwMpGGB4AQ7NZvxpkL2AWqqjE/mpFA+gjDWtuSLdtLZGvQONv2+Ceoy74uiK 29x0o+mu1aKE87ZguPeCo5gXMZxNn78ulGVZz4ExFJCQuRM9k9lhUprTPvqEd2Xg snlHHenpA2FiwxMDI1ToXJvV69D6xciwbzK6lDkS0Lt1RoKchIpFQlK8lX4jggXB oAJ9rGo899GfKfFgAvO323pEhbJkYsMq5i1N/ev7LeXcF1YHMM0zZClH/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDim15jkledaGW+OuezZQ9+vzSdTMB8GA1UdIwQY MBaAFPx5SIq04awPS9Rn0rTTYhxrGO6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMt ODZhYTAwZTEzNzQ2LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hOTBkYmYtODZkNi00OGNlLThhNmMtODZhYTAwZTEzNzQ2 LzEvX0hsSWlyVGhyQTlMMUdmU3ROTmlIR3NZN3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoIwOtCg uDcKXsCqMLKvigpyGe+7v8/VAa0E/nNFlhshVr6CjfIbBukJxyg8S1H52/Zr6lpJ k2UsGdzDLt4aAzjJcDhUd6euvIagN0z+peoFseXPRDHZ2Yt+h7EePRtikoxDFsmj EWzRpWWFpsEPqEQD7M0W4tekxw+JN+7RM6B9pRoEBMXJx8l5bnO1Ol+ctVGw89h0 M7/6D6G/396zO5BfclU//NCubCW0zZyug7CIjrOIoGgbNw8IUwdELea5GWFnHvYt BzicXgpflmXj3abq+XF6/XAzHl12DnQ5sRRVTnUBaetT5s1GO3PBv3cTt8CQF1YZ +phAiqS4hSCzxw== -----END CERTIFICATE-----Generated at Wed Dec 31 04:51:39 2025 by rpki-client