This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json) Hash identifier: wGjnZHJFLb9s7zQvak7IiJAJZWR5l7DNPOPThke1Zfo= Subject key identifier: 26:D9:7A:07:BE:E4:32:A8:95:E5:13:EC:39:18:6D:E7:E5:5A:D1:F4 Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59 Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859 Certificate serial: 019B544F70D7A2A0F634D9838DB08ED9EDD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft Manifest number: 15CA Signing time: Thu 25 Dec 2025 07:00:50 +0000 Manifest this update: Thu 25 Dec 2025 07:00:50 +0000 Manifest next update: Fri 26 Dec 2025 07:00:50 +0000 Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: 7eznY42mOCqvhYDrhF6WeVYLDzM+UfszmkSqAiZTcSU=) 2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:70:d7:a2:a0:f6:34:d9:83:8d:b0:8e:d9:ed:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859 Validity Not Before: Dec 25 07:00:50 2025 GMT Not After : Dec 26 07:00:50 2025 GMT Subject: CN=26d97a07bee432a895e513ec39186de7e55ad1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:e2:2d:c3:c8:43:89:94:dc:b4:c7:aa:fb: e9:cc:4b:ba:6e:43:90:fb:1e:4e:05:32:89:46:84: 32:bb:fe:57:33:b2:3c:0e:54:9c:38:7e:6e:6e:41: 15:4c:f9:72:d9:da:6e:7b:6e:5f:a5:34:4b:15:4f: 7e:46:fe:56:e3:64:44:77:42:7d:82:dc:b8:09:e5: 6e:f4:58:1c:63:c9:32:7f:43:98:4b:52:7e:a5:4f: 90:c8:6c:9a:2b:e7:70:c7:76:e9:ba:f8:0e:a6:2f: c5:d5:7c:aa:f7:57:34:f9:3e:8c:6f:4c:e8:88:57: 8a:a0:0d:4b:e6:52:76:5e:ec:b9:1c:cf:61:c8:3d: b6:ed:62:95:44:84:ab:cf:74:c0:d9:23:b8:1e:09: d9:d0:28:02:de:7f:b0:92:a6:56:4c:41:cb:29:c6: 07:39:56:28:3b:b5:60:59:ae:d1:9e:06:cc:1d:9f: 87:20:50:7b:f3:30:65:33:b0:81:0d:db:56:51:77: ff:b2:be:11:15:31:fe:92:09:24:56:de:46:0a:7f: ba:83:4c:69:e3:27:b2:c1:5b:a8:ee:f2:10:27:a4: 20:ea:8d:0d:9d:49:f9:9d:11:6a:e4:55:41:fc:54: 8b:57:ed:64:c9:8a:d8:79:85:5f:2b:c3:3b:6b:a5: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:7A:07:BE:E4:32:A8:95:E5:13:EC:39:18:6D:E7:E5:5A:D1:F4 X509v3 Authority Key Identifier: keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3f:d1:25:ca:ee:fc:59:43:d0:e1:bb:5c:24:e0:35:55:46: 09:1f:e9:2b:b3:c8:73:a5:c0:8c:27:4c:e4:0f:bf:e8:26:83: 57:bd:8d:a7:ff:50:d5:ad:0a:60:ad:dc:e1:b6:1a:25:2e:99: 1b:82:f1:f8:63:61:38:e2:68:62:4b:75:56:7d:37:48:8e:3e: a9:c2:56:fb:ce:61:f8:78:6a:4b:57:57:13:e0:57:36:39:8a: b5:5e:52:09:11:dc:05:d4:fb:a2:86:bf:2a:bc:23:6f:75:24: 12:cf:cc:00:c7:3a:a9:88:d7:6a:ac:ad:f5:40:7e:b1:71:a2: b2:37:1c:a8:e4:58:6a:63:cb:30:2e:df:75:e4:e3:54:8a:1d: 27:ef:85:04:37:56:d9:b8:78:03:b1:91:7d:7b:f9:9b:8e:c2: 45:36:54:b9:57:3b:6f:f9:c2:d2:64:13:92:2c:1b:fb:f1:52: 52:1c:c0:fd:4b:2c:fe:b0:8e:0d:2e:38:49:22:72:eb:18:a2: 95:d2:2e:49:21:22:e8:91:64:fb:ac:91:cb:f4:ca:fc:78:26: ec:b0:55:e7:44:10:2b:a8:d4:f0:de:d5:18:10:58:e2:76:b0: 33:5e:86:f0:3d:5f:ec:d0:13:9e:b1:dc:08:91:18:b6:ff:7f: 81:ea:4d:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT3DXoqD2NNmDjbCO2e3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3 NjQ4NTkwHhcNMjUxMjI1MDcwMDUwWhcNMjUxMjI2MDcwMDUwWjAzMTEwLwYDVQQD EygyNmQ5N2EwN2JlZTQzMmE4OTVlNTEzZWMzOTE4NmRlN2U1NWFkMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFbiLcPIQ4mU3LTHqvvpzEu6bkOQ +x5OBTKJRoQyu/5XM7I8DlScOH5ubkEVTPly2dpue25fpTRLFU9+Rv5W42REd0J9 gty4CeVu9FgcY8kyf0OYS1J+pU+QyGyaK+dwx3bpuvgOpi/F1Xyq91c0+T6Mb0zo iFeKoA1L5lJ2Xuy5HM9hyD227WKVRISrz3TA2SO4HgnZ0CgC3n+wkqZWTEHLKcYH OVYoO7VgWa7RngbMHZ+HIFB78zBlM7CBDdtWUXf/sr4RFTH+kgkkVt5GCn+6g0xp 4yeywVuo7vIQJ6Qg6o0NnUn5nRFq5FVB/FSLV+1kyYrYeYVfK8M7a6XFAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbZege+5DKoleUT7DkYbeflWtH0MB8GA1UdIwQY MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD/RJcru /FlD0OG7XCTgNVVGCR/pK7PIc6XAjCdM5A+/6CaDV72Np/9Q1a0KYK3c4bYaJS6Z G4Lx+GNhOOJoYkt1Vn03SI4+qcJW+85h+HhqS1dXE+BXNjmKtV5SCRHcBdT7ooa/ Krwjb3UkEs/MAMc6qYjXaqyt9UB+sXGisjccqORYamPLMC7fdeTjVIodJ++FBDdW 2bh4A7GRfXv5m47CRTZUuVc7b/nC0mQTkiwb+/FSUhzA/Uss/rCODS44SSJy6xii ldIuSSEi6JFk+6yRy/TK/Hgm7LBV50QQK6jU8N7VGBBY4nawM16G8D1f7NATnrHc CJEYtv9/gepNGw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:05 2025 by rpki-client