This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json) Hash identifier: u3S2tD3rnY9NfCf2RvRwWTP7Wo8D9zlBrbMZ1+SGnvo= Subject key identifier: 5D:2F:D4:A0:63:0C:05:AE:2B:F1:98:B5:7F:56:28:86:16:D2:69:E1 Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f Certificate serial: 019B42B74A0A9187E10D053BD74A066CC14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 21:01:06 +0000 Manifest this update: Sun 21 Dec 2025 21:01:06 +0000 Manifest next update: Mon 22 Dec 2025 21:01:06 +0000 Files and hashes: 1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: K7QFnGjmUwvBLjHV/SKDykt73/YvVFATuSJFfBDYko0=) 2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:4a:0a:91:87:e1:0d:05:3b:d7:4a:06:6c:c1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f Validity Not Before: Dec 21 21:01:06 2025 GMT Not After : Dec 22 21:01:06 2025 GMT Subject: CN=5d2fd4a0630c05ae2bf198b57f56288616d269e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:a4:c8:87:0f:73:fb:9a:05:c5:97:40:4a: 44:ce:69:2e:5c:60:26:a8:c2:49:3c:06:50:3b:c6: 2c:99:03:1f:0d:8f:ed:61:29:ad:ad:cc:64:dc:10: 68:36:1d:04:65:48:d0:f1:2e:15:8f:16:41:1b:24: 92:d0:d6:75:45:67:02:57:77:ae:93:72:98:65:12: f7:07:c1:f8:ab:1c:60:af:08:2b:9d:7c:ac:fc:84: fc:b5:e4:84:4d:00:be:d2:3a:11:45:b5:d2:96:4a: 39:85:30:03:b8:cf:f3:82:9d:d1:51:c3:94:63:fd: 13:42:f2:6b:f4:1f:13:f9:e3:4f:05:a9:3d:1e:f6: 21:fb:86:3a:e2:2c:b8:cd:9e:36:23:9b:4b:ba:e0: b3:91:51:db:6d:a8:9b:4a:9c:be:f5:22:6f:31:92: 6d:99:7e:9c:83:d3:fe:fc:9e:d0:0c:9c:77:f1:0b: 11:c1:f7:3b:09:83:d6:af:ff:d6:97:dd:8d:58:fe: e9:33:f7:72:a6:60:42:53:0e:39:50:7b:35:ad:d8: e9:3c:d6:54:a1:87:07:ac:bd:ba:3f:7a:4e:44:8a: 66:50:3b:a5:19:c8:59:c3:10:d8:03:80:28:5e:89: 48:d3:fc:81:6f:02:ea:6a:e9:09:7b:00:67:5f:72: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2F:D4:A0:63:0C:05:AE:2B:F1:98:B5:7F:56:28:86:16:D2:69:E1 X509v3 Authority Key Identifier: keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:24:06:22:37:31:74:1f:74:92:e4:d5:61:83:37:dc:52:c2: d8:38:24:29:1c:46:83:12:70:6a:54:96:dc:78:c3:1e:7a:66: 43:07:3c:3c:f1:27:b7:02:57:43:c6:9f:45:e3:c6:51:a5:5f: 8d:c0:4d:dd:0b:b5:3c:1e:4e:5a:4f:d0:b9:ab:76:39:de:77: dd:d9:6a:8f:26:88:63:d0:66:21:7d:56:44:64:2c:85:94:be: 03:20:01:01:24:02:be:59:38:66:3c:54:f2:80:1e:34:ee:6d: 26:a0:86:eb:a8:21:6d:50:5a:6f:32:c9:b2:02:11:5e:3c:0e: 03:d5:d6:32:24:bd:62:45:c1:31:0c:14:de:c4:bd:99:96:ab: ef:e0:9a:23:86:ce:4c:cc:f7:cc:58:61:2b:48:bc:eb:15:b2: 82:86:bc:f4:9e:d5:be:5a:43:2f:cb:af:9e:e0:6b:d5:15:16: 2b:13:a6:de:19:12:15:34:25:e0:18:79:d8:11:1b:e8:1f:aa: ec:46:0e:fd:63:42:1b:5a:74:0b:59:7f:1e:4c:ca:ed:ea:7c: 2c:7a:11:ac:a1:3b:76:24:87:6b:a4:8a:5a:fb:fc:6c:d6:12: 35:bc:dc:76:e6:5b:c5:9d:27:23:03:2f:6f:f7:5a:39:e7:73: d1:bb:58:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0oKkYfhDQU710oGbMFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw OWIxN2YwHhcNMjUxMjIxMjEwMTA2WhcNMjUxMjIyMjEwMTA2WjAzMTEwLwYDVQQD Eyg1ZDJmZDRhMDYzMGMwNWFlMmJmMTk4YjU3ZjU2Mjg4NjE2ZDI2OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC6kyIcPc/uaBcWXQEpEzmkuXGAm qMJJPAZQO8YsmQMfDY/tYSmtrcxk3BBoNh0EZUjQ8S4VjxZBGySS0NZ1RWcCV3eu k3KYZRL3B8H4qxxgrwgrnXys/IT8teSETQC+0joRRbXSlko5hTADuM/zgp3RUcOU Y/0TQvJr9B8T+eNPBak9HvYh+4Y64iy4zZ42I5tLuuCzkVHbbaibSpy+9SJvMZJt mX6cg9P+/J7QDJx38QsRwfc7CYPWr//Wl92NWP7pM/dypmBCUw45UHs1rdjpPNZU oYcHrL26P3pORIpmUDulGchZwxDYA4AoXolI0/yBbwLqaukJewBnX3I3gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0v1KBjDAWuK/GYtX9WKIYW0mnhMB8GA1UdIwQY MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCQGIjcx dB90kuTVYYM33FLC2DgkKRxGgxJwalSW3HjDHnpmQwc8PPEntwJXQ8afRePGUaVf jcBN3Qu1PB5OWk/Quat2Od533dlqjyaIY9BmIX1WRGQshZS+AyABASQCvlk4ZjxU 8oAeNO5tJqCG66ghbVBabzLJsgIRXjwOA9XWMiS9YkXBMQwU3sS9mZar7+CaI4bO TMz3zFhhK0i86xWygoa89J7VvlpDL8uvnuBr1RUWKxOm3hkSFTQl4Bh52BEb6B+q 7EYO/WNCG1p0C1l/HkzK7ep8LHoRrKE7diSHa6SKWvv8bNYSNbzcduZbxZ0nIwMv b/daOedz0btY7Q== -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:18 2025 by rpki-client