This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json) Hash identifier: 9ipD8FuFMK5+T7nv/j2cob8VwDPvI8fQ4kL0zP32dFI= Subject key identifier: 8E:65:93:32:42:04:F4:73:85:60:C5:A4:A3:A8:3E:FC:6E:35:0B:F7 Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Certificate serial: 019B3DC7F407E14B4D114E0D47A2CE258609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 22:01:12 +0000 Manifest this update: Sat 20 Dec 2025 22:01:12 +0000 Manifest next update: Sun 21 Dec 2025 22:01:12 +0000 Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=) 2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: Egkl+SiWeZfvE9sn6NAa0nVG2YImVBPZw+UTyJLM4as=) 3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:f4:07:e1:4b:4d:11:4e:0d:47:a2:ce:25:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Validity Not Before: Dec 20 22:01:12 2025 GMT Not After : Dec 21 22:01:12 2025 GMT Subject: CN=8e6593324204f4738560c5a4a3a83efc6e350bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:ac:6a:7b:c6:0e:78:39:1c:7c:3a:62:d3: e1:61:65:89:b1:71:7e:07:88:50:da:57:f8:51:19: 81:35:0a:90:df:f7:dd:7f:cb:18:47:6c:d1:14:cf: 1d:e3:13:1c:ff:5f:d9:a2:f6:0e:57:76:e2:01:11: a5:21:28:56:35:78:a4:33:e5:b6:48:4f:35:ad:d5: e1:0b:a2:d8:af:95:41:f8:25:9e:95:f6:95:a6:55: 91:c2:f7:3c:51:9e:5f:b2:c6:10:89:1f:26:3c:9c: 31:c5:6c:9a:f6:86:4e:42:af:06:89:d6:31:76:67: b1:02:cd:9e:59:ab:2a:78:ac:09:07:82:55:a1:4c: 86:59:78:c2:6e:0c:5b:a8:8b:23:34:b4:ae:dd:7c: 73:f2:20:ff:d9:6d:e6:2b:e1:ca:3f:fc:3a:83:db: aa:30:bd:01:91:67:6f:28:cb:a0:b2:e7:4a:f1:75: 42:2c:e9:27:76:99:35:2e:c1:97:f1:5f:01:64:ab: 26:29:25:ef:a9:1c:fd:c4:8c:9b:36:08:eb:9a:77: b6:9e:35:f6:3e:a6:15:d3:0c:38:01:61:ef:cc:90: 0e:ea:9f:ad:f3:a9:e3:03:4c:cd:96:7c:a1:9f:db: 20:ec:62:2d:7e:2d:59:31:40:96:91:87:54:3a:87: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:93:32:42:04:F4:73:85:60:C5:A4:A3:A8:3E:FC:6E:35:0B:F7 X509v3 Authority Key Identifier: keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8a:5c:12:e4:c0:0c:35:03:8e:41:13:7e:77:d5:85:d5:e8: 14:b1:d5:7d:bb:74:10:06:1c:94:f5:c4:69:39:6a:96:72:ec: 12:2a:f8:39:77:52:3e:53:93:22:ab:a1:be:77:1d:32:f4:60: 52:08:45:6f:f3:6b:37:e7:01:9b:17:5d:69:df:4a:04:44:79: 69:bb:90:e3:84:a8:ca:a8:e5:b9:cd:90:45:e2:89:30:00:67: 1b:c8:1d:06:95:f0:b7:80:b1:cb:4c:94:f5:38:26:74:07:61: e0:35:91:e4:f3:b1:96:7e:0a:54:45:8b:a0:d0:d9:43:63:e0: b2:3e:d5:86:c6:e7:49:e4:c8:09:e6:6f:8a:c6:ce:14:d5:a2: 8e:c1:82:9a:c9:7c:c1:48:1f:35:a7:8c:e8:fc:7f:ae:a9:96: 43:4f:08:4c:d3:33:8d:6c:32:33:eb:bd:ee:d6:c2:a2:b2:59: 1a:0a:c7:5c:18:3e:90:92:3f:e9:cb:e0:fa:bb:11:7b:69:49: e0:3d:40:53:32:03:1d:d3:7d:78:bf:69:17:b1:87:04:31:09: fc:70:f6:d2:e1:b7:6e:c9:ea:ed:51:a3:e4:03:af:11:c6:f9: f6:1e:78:1e:bc:73:21:49:c0:1d:df:1e:62:71:3c:b1:d9:20: 85:93:fd:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/QH4UtNEU4NR6LOJYYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl YjliOGQwHhcNMjUxMjIwMjIwMTEyWhcNMjUxMjIxMjIwMTEyWjAzMTEwLwYDVQQD Eyg4ZTY1OTMzMjQyMDRmNDczODU2MGM1YTRhM2E4M2VmYzZlMzUwYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+isanvGDng5HHw6YtPhYWWJsXF+ B4hQ2lf4URmBNQqQ3/fdf8sYR2zRFM8d4xMc/1/ZovYOV3biARGlIShWNXikM+W2 SE81rdXhC6LYr5VB+CWelfaVplWRwvc8UZ5fssYQiR8mPJwxxWya9oZOQq8GidYx dmexAs2eWasqeKwJB4JVoUyGWXjCbgxbqIsjNLSu3Xxz8iD/2W3mK+HKP/w6g9uq ML0BkWdvKMugsudK8XVCLOkndpk1LsGX8V8BZKsmKSXvqRz9xIybNgjrmne2njX2 PqYV0ww4AWHvzJAO6p+t86njA0zNlnyhn9sg7GItfi1ZMUCWkYdUOoe5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5lkzJCBPRzhWDFpKOoPvxuNQv3MB8GA1UdIwQY MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4pcEuTA DDUDjkETfnfVhdXoFLHVfbt0EAYclPXEaTlqlnLsEir4OXdSPlOTIquhvncdMvRg UghFb/NrN+cBmxddad9KBER5abuQ44Soyqjluc2QReKJMABnG8gdBpXwt4Cxy0yU 9TgmdAdh4DWR5POxln4KVEWLoNDZQ2Pgsj7VhsbnSeTICeZvisbOFNWijsGCmsl8 wUgfNaeM6Px/rqmWQ08ITNMzjWwyM+u97tbCorJZGgrHXBg+kJI/6cvg+rsRe2lJ 4D1AUzIDHdN9eL9pF7GHBDEJ/HD20uG3bsnq7VGj5AOvEcb59h54HrxzIUnAHd8e YnE8sdkghZP9Pg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:50 2025 by rpki-client