This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json) Hash identifier: nFsMOgR/dL9lQ56qYM8i99lO0xdKFGaAg247pKTMai4= Subject key identifier: 11:44:75:18:18:43:7B:C7:11:8A:B0:12:07:FD:7E:B6:EB:D4:2C:6B Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52 Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552 Certificate serial: 019B4392F9464E26ED33F70B056B71E7CA1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft Manifest number: 16F1 Signing time: Mon 22 Dec 2025 01:01:04 +0000 Manifest this update: Mon 22 Dec 2025 01:01:04 +0000 Manifest next update: Tue 23 Dec 2025 01:01:04 +0000 Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: LoYbOZ3qb9xV+E1WDtZl9dDZPf7Z0EcZOE23hzJMWbQ=) 2: fPSZP8slBnM3nSGAFaRQqfblguQ.roa (hash: blLgu2v1K5L5bFcrSgTETqeQaxD8GwJMq27CaonXujI=) 3: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:f9:46:4e:26:ed:33:f7:0b:05:6b:71:e7:ca:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552 Validity Not Before: Dec 22 01:01:04 2025 GMT Not After : Dec 23 01:01:04 2025 GMT Subject: CN=1144751818437bc7118ab01207fd7eb6ebd42c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:39:40:cb:47:15:4a:15:43:d8:dc:ff:89: 0c:8d:74:92:32:72:6e:bd:25:e1:c4:0f:c4:b8:47: 90:84:65:00:a6:83:c7:db:4a:57:6f:b5:c4:1b:ad: 48:f1:59:2f:9e:ae:db:28:ba:d9:06:f0:3b:cf:72: 2a:a6:26:61:98:37:10:28:14:7b:54:b9:08:f5:06: d3:65:8c:e9:b9:93:bd:cd:a5:07:36:0d:1c:1c:64: 76:d5:e7:02:db:41:82:9e:d9:6d:75:73:ff:43:72: ce:99:e4:2f:b2:a5:83:22:94:0c:da:11:d0:4f:8e: b8:5e:52:33:ea:15:72:97:b1:9f:8c:22:5e:fa:d2: cd:c0:86:c6:22:cc:5a:ea:08:97:f1:53:1f:d3:6b: 90:1f:5a:49:d8:85:05:57:f2:3a:b6:66:b4:90:38: aa:f4:25:bc:bd:9a:6a:c4:67:ba:d2:c9:84:ea:77: 8f:5a:f8:af:d9:fc:f9:81:36:09:ee:94:c9:b2:63: f2:c9:2a:cc:3d:a0:26:1b:a7:73:cc:aa:55:e6:6f: 96:2c:98:aa:17:28:c1:37:09:01:65:3d:81:86:2a: d5:77:33:59:a6:c9:00:02:f7:91:a6:ef:31:e1:54: 17:3a:8c:68:d6:3a:47:6e:92:be:69:ae:11:b5:91: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:44:75:18:18:43:7B:C7:11:8A:B0:12:07:FD:7E:B6:EB:D4:2C:6B X509v3 Authority Key Identifier: keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:41:5d:78:ed:46:81:f8:41:00:6e:62:18:68:d3:8c:81:23: 78:58:16:81:12:5b:8b:7e:8e:dd:71:1b:9c:06:58:02:65:ae: 42:41:bc:ee:18:38:05:23:1a:cf:5e:68:08:43:73:a6:ef:23: 61:e9:81:89:86:ff:1f:3e:ee:6d:75:f3:84:d6:0d:34:77:ad: c7:c8:5f:dc:11:84:ac:75:fd:1e:86:02:4a:c8:45:83:4c:38: 32:24:e4:89:f7:14:25:30:13:75:b5:10:34:67:19:e2:ed:b8: eb:68:6a:6a:8a:6f:7d:b2:55:0e:11:53:76:c5:f9:ac:10:58: c8:6d:10:90:ef:1e:0c:5e:2e:71:1a:28:7a:2a:06:0d:c4:12: 05:bf:ad:f0:4e:9a:26:b1:9a:e0:eb:12:2a:b8:b5:47:2a:c6: 5d:fd:c0:66:59:74:5a:00:96:f6:ac:3c:c1:8b:5e:41:62:a9: 15:1d:41:34:46:57:a0:ee:22:8e:ba:2a:38:3b:9c:8f:5f:53: a0:9b:a8:8f:11:36:14:38:82:ad:75:fb:80:66:e2:b5:b2:e3: ea:24:be:1f:b9:66:9c:c9:2e:14:a7:c5:aa:39:fb:9c:66:e9: 04:f6:25:2c:1d:4f:7b:52:2a:ea:27:b9:b4:dc:a1:71:e3:bc: 6c:09:68:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkvlGTibtM/cLBWtx58oaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYmUzZTUyMTQwN2Y1OTdmMjU1ZjNmYjRlMGI1NjljMzIw ODM1NTIwHhcNMjUxMjIyMDEwMTA0WhcNMjUxMjIzMDEwMTA0WjAzMTEwLwYDVQQD EygxMTQ0NzUxODE4NDM3YmM3MTE4YWIwMTIwN2ZkN2ViNmViZDQyYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbA5QMtHFUoVQ9jc/4kMjXSSMnJu vSXhxA/EuEeQhGUApoPH20pXb7XEG61I8Vkvnq7bKLrZBvA7z3IqpiZhmDcQKBR7 VLkI9QbTZYzpuZO9zaUHNg0cHGR21ecC20GCntltdXP/Q3LOmeQvsqWDIpQM2hHQ T464XlIz6hVyl7GfjCJe+tLNwIbGIsxa6giX8VMf02uQH1pJ2IUFV/I6tma0kDiq 9CW8vZpqxGe60smE6nePWviv2fz5gTYJ7pTJsmPyySrMPaAmG6dzzKpV5m+WLJiq FyjBNwkBZT2BhirVdzNZpskAAveRpu8x4VQXOoxo1jpHbpK+aa4RtZEoGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFEdRgYQ3vHEYqwEgf9frbr1CxrMB8GA1UdIwQY MBaAFB6+PlIUB/WX8lXz+04LVpwyCDVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjIt NWI0YWZmN2E2Mzk4LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjItNWI0YWZmN2E2Mzk4 LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkFdeO1G gfhBAG5iGGjTjIEjeFgWgRJbi36O3XEbnAZYAmWuQkG87hg4BSMaz15oCENzpu8j YemBiYb/Hz7ubXXzhNYNNHetx8hf3BGErHX9HoYCSshFg0w4MiTkifcUJTATdbUQ NGcZ4u2462hqaopvfbJVDhFTdsX5rBBYyG0QkO8eDF4ucRooeioGDcQSBb+t8E6a JrGa4OsSKri1RyrGXf3AZll0WgCW9qw8wYteQWKpFR1BNEZXoO4ijroqODucj19T oJuojxE2FDiCrXX7gGbitbLj6iS+H7lmnMkuFKfFqjn7nGbpBPYlLB1Pe1Iq6ie5 tNyhceO8bAloew== -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:24 2025 by rpki-client