This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json) Hash identifier: EsPzSzHaZsjg8DTsKEvSHiQkh3u5KTniqeBXHTgltrw= Subject key identifier: 6E:D7:38:3A:E0:3E:40:3F:F8:46:AE:1A:A2:77:41:D3:91:47:0E:A6 Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Certificate serial: 019B3EDA11335D3743A9D4B7D9B4F11157A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft Manifest number: 0749 Signing time: Sun 21 Dec 2025 03:00:37 +0000 Manifest this update: Sun 21 Dec 2025 03:00:37 +0000 Manifest next update: Mon 22 Dec 2025 03:00:37 +0000 Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: 4x3zfOsBAczkZ7FvLCH1phZI8/BxVG78reEqLMX3lrM=) 2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:11:33:5d:37:43:a9:d4:b7:d9:b4:f1:11:57:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Validity Not Before: Dec 21 03:00:37 2025 GMT Not After : Dec 22 03:00:37 2025 GMT Subject: CN=6ed7383ae03e403ff846ae1aa27741d391470ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:d9:41:06:3e:06:be:74:8a:c3:10:92:51: dd:92:4f:de:5b:48:74:f2:c4:af:19:db:2a:87:b6: cc:c3:d5:07:00:b5:ec:77:bd:79:c6:90:8c:36:40: 1d:6f:77:41:42:5d:62:02:fb:1b:56:42:89:27:8c: 1f:af:be:73:5d:60:b4:4c:05:c9:73:ba:69:1e:50: d5:b8:5d:80:56:38:f5:0f:1c:6a:61:8b:8e:c0:e3: 47:1b:7f:2c:aa:d9:a3:57:e4:ce:f5:1e:6d:f8:11: 3e:e2:cb:09:46:fc:79:7a:98:56:82:26:11:04:6b: 0a:93:89:3c:35:cc:f7:40:a0:9a:f5:ec:9f:a3:0f: 70:9c:f6:b6:94:fb:1c:47:f9:8a:c9:52:ed:9e:29: 9c:d1:44:92:ed:51:45:5e:63:06:43:9b:a9:0f:9c: 3e:4e:3d:40:cd:d9:f6:2a:d7:33:0d:12:63:c7:c1: 32:0c:d0:22:6a:98:90:a3:b1:9f:2a:7c:bd:91:12: 0e:1c:91:19:91:ae:05:1c:8a:6a:13:2c:7b:ab:aa: 9d:60:41:13:8e:78:3c:a6:a0:f5:11:a9:28:02:93: 5e:e0:13:df:bb:dc:b2:5e:a1:7a:0f:5d:ff:7b:03: 2d:e7:2c:c8:38:1b:4d:a8:be:3c:da:03:7e:e8:ab: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D7:38:3A:E0:3E:40:3F:F8:46:AE:1A:A2:77:41:D3:91:47:0E:A6 X509v3 Authority Key Identifier: keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9e:7c:d1:79:43:5e:40:b0:4f:e7:7f:86:8f:99:ce:fd:be: 97:ce:ee:0a:14:dc:d6:6f:e9:90:2d:fe:4d:20:4a:d8:d4:11: 3e:d3:0d:6b:35:76:f9:bb:db:2e:b6:72:ae:27:4b:27:41:4c: 18:d0:fd:cf:58:e0:88:61:5c:5d:90:19:bf:ba:d2:3f:64:15: 49:ea:97:38:ef:00:b9:4f:bf:c8:7f:cc:ab:92:d3:03:95:ae: 28:29:d8:45:ae:dd:2d:41:c2:22:10:43:19:b2:a5:27:c1:67: 64:4a:4f:c0:7a:46:f0:94:4b:69:9e:ab:7c:fb:a6:42:dc:d9: 39:4d:c0:72:f1:65:87:cc:b7:79:e7:59:af:cf:f9:9d:61:0e: 2b:66:2b:c6:4f:b2:e9:4d:fd:fb:c9:f6:14:4e:74:11:2e:12: 4c:21:96:07:9a:82:76:d0:58:82:be:21:43:a0:74:b7:0e:f3: e4:ec:4c:e9:88:f5:a4:8e:88:3b:5f:bb:7d:a4:95:78:d2:31: 0f:27:7f:40:a3:71:4a:b7:16:ef:7b:55:8f:a0:bc:b0:12:68: e6:87:bf:a0:8b:d4:90:24:3a:24:84:df:94:7f:ba:52:4d:3f: 6b:47:17:5e:e6:f4:b2:8f:c0:cf:57:d1:12:81:a6:86:f6:7e: 68:fc:59:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2hEzXTdDqdS32bTxEVejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh NzY2OTMwHhcNMjUxMjIxMDMwMDM3WhcNMjUxMjIyMDMwMDM3WjAzMTEwLwYDVQQD Eyg2ZWQ3MzgzYWUwM2U0MDNmZjg0NmFlMWFhMjc3NDFkMzkxNDcwZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP7ZQQY+Br50isMQklHdkk/eW0h0 8sSvGdsqh7bMw9UHALXsd715xpCMNkAdb3dBQl1iAvsbVkKJJ4wfr75zXWC0TAXJ c7ppHlDVuF2AVjj1DxxqYYuOwONHG38sqtmjV+TO9R5t+BE+4ssJRvx5ephWgiYR BGsKk4k8Ncz3QKCa9eyfow9wnPa2lPscR/mKyVLtnimc0USS7VFFXmMGQ5upD5w+ Tj1Azdn2KtczDRJjx8EyDNAiapiQo7GfKny9kRIOHJEZka4FHIpqEyx7q6qdYEET jng8pqD1EakoApNe4BPfu9yyXqF6D13/ewMt5yzIOBtNqL482gN+6KubqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7XODrgPkA/+EauGqJ3QdORRw6mMB8GA1UdIwQY MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5580XlD XkCwT+d/ho+Zzv2+l87uChTc1m/pkC3+TSBK2NQRPtMNazV2+bvbLrZyridLJ0FM GND9z1jgiGFcXZAZv7rSP2QVSeqXOO8AuU+/yH/Mq5LTA5WuKCnYRa7dLUHCIhBD GbKlJ8FnZEpPwHpG8JRLaZ6rfPumQtzZOU3AcvFlh8y3eedZr8/5nWEOK2Yrxk+y 6U39+8n2FE50ES4STCGWB5qCdtBYgr4hQ6B0tw7z5OxM6Yj1pI6IO1+7faSVeNIx Dyd/QKNxSrcW73tVj6C8sBJo5oe/oIvUkCQ6JITflH+6Uk0/a0cXXub0so/Az1fR EoGmhvZ+aPxZvw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:04:11 2025 by rpki-client