This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json) Hash identifier: fhBSaO3nUzO8iHpBKZ9h/Zdg03pHtlS3T8vK6ojk8VM= Subject key identifier: EF:0E:00:62:A7:91:11:83:93:56:57:6F:07:F2:FB:BA:88:77:4F:FB Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B3DC7D26613E71504FC559487874CEE9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft Manifest number: 0D35 Signing time: Sat 20 Dec 2025 22:01:04 +0000 Manifest this update: Sat 20 Dec 2025 22:01:04 +0000 Manifest next update: Sun 21 Dec 2025 22:01:04 +0000 Files and hashes: 1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=) 2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: UHLRtSxZAM8gEvE44ytjWOw5hXwzX7OPGhym3UELXoU=) 3: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=) 4: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=) 5: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=) 6: sGh4leOiqeUbD9ETXq4INosKjgA.roa (hash: zQNus8r96YCQp+l8cgOvwchxCyXBB9NQl2BAMnnD1SE=) 7: uEJBzVK3M-XYQB_W3073suGkObo.roa (hash: vdpPJtCVEUnTylhlR6ZitULgZ+bB4+/4WOwiBodz65k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:d2:66:13:e7:15:04:fc:55:94:87:87:4c:ee:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Dec 20 22:01:04 2025 GMT Not After : Dec 21 22:01:04 2025 GMT Subject: CN=ef0e0062a79111839356576f07f2fbba88774ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:85:8e:27:92:7c:9e:c9:65:30:b4:19:d8: 42:74:4d:8c:13:ce:6b:54:28:04:b9:a6:d1:8a:66: 10:9f:09:84:50:d7:64:c3:e8:c6:30:05:a1:a8:68: 81:b2:1c:78:ca:bf:46:45:76:8e:6b:b8:f2:09:e1: b9:f8:e4:f1:e9:ae:12:c3:09:70:69:d8:e2:4f:b5: 00:20:10:b7:aa:1f:7b:e4:fe:3d:9a:f3:b9:b7:11: f4:5d:71:68:cc:aa:37:ec:dd:7f:78:a8:23:6e:d3: cb:c3:5e:3f:8a:14:b3:f4:45:8e:d8:d2:a0:1d:cc: ee:10:43:db:a9:b2:30:c0:11:05:21:f2:55:87:6c: 58:2c:88:2d:b7:d5:83:75:57:ed:d6:d6:19:18:58: b0:c3:b3:bc:24:19:68:fe:fa:26:f1:fd:7b:8d:b5: 27:5d:29:34:e0:a3:19:be:5e:b0:fd:ef:ed:c0:46: 9c:ef:5d:c5:91:d6:a2:8e:a8:10:69:62:e7:4e:8e: f6:7a:44:7b:97:cd:89:90:68:ca:0f:8e:2a:78:0a: 21:ea:d1:8c:e4:ee:76:d3:e8:fc:78:90:d2:d2:4c: 86:f8:2d:a8:fb:a4:ce:6e:f9:9b:78:71:19:97:4e: 36:92:83:c9:28:8e:00:bd:84:ff:89:63:8e:55:e1: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0E:00:62:A7:91:11:83:93:56:57:6F:07:F2:FB:BA:88:77:4F:FB X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b1:a4:c5:df:22:cc:3f:70:32:67:d5:19:f0:bf:54:15:06: 3b:34:59:1a:9a:2a:5e:b9:7e:2a:05:0b:6b:49:9d:f4:bb:76: da:8f:d4:1a:8f:1b:ac:4a:a2:db:4e:95:40:8c:1b:5f:f2:0f: 5f:dd:62:3d:c5:a3:bc:9d:b5:80:c1:56:cb:ab:b3:f0:ad:2d: 00:98:d8:7e:92:93:66:9b:93:3c:0d:8c:ff:55:9b:15:c4:a8: 3e:18:b7:80:d3:a4:6c:4a:c5:15:b9:23:ab:c7:8a:b1:34:4e: 91:89:e7:03:7a:af:cc:ce:6c:fa:c8:92:8c:7f:64:ed:e6:cd: bb:b3:e5:2c:8d:f1:7b:06:75:7a:d8:e5:d3:1a:47:b8:5d:7e: cf:a8:e1:05:27:cd:c3:4a:3b:6d:0b:da:8d:6b:1b:14:3a:85: 2c:d2:d8:3a:79:9f:f9:1a:f0:67:b2:be:00:79:98:f4:42:4a: ad:5c:ae:65:21:8d:43:cc:81:09:b3:b5:e1:3e:ce:86:48:37: e1:76:ab:a6:b8:6e:25:1e:c4:14:ed:05:c6:08:cc:6f:20:41: 60:78:b6:31:1d:3e:03:fb:ba:b8:e5:35:69:a8:23:44:27:11: b4:5a:7f:20:bc:68:c2:e4:cf:f8:67:56:fd:9a:26:b6:8a:b5: b1:bb:c0:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9JmE+cVBPxVlIeHTO6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjUxMjIwMjIwMTA0WhcNMjUxMjIxMjIwMTA0WjAzMTEwLwYDVQQD EyhlZjBlMDA2MmE3OTExMTgzOTM1NjU3NmYwN2YyZmJiYTg4Nzc0ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTGFjieSfJ7JZTC0GdhCdE2ME85r VCgEuabRimYQnwmEUNdkw+jGMAWhqGiBshx4yr9GRXaOa7jyCeG5+OTx6a4Swwlw adjiT7UAIBC3qh975P49mvO5txH0XXFozKo37N1/eKgjbtPLw14/ihSz9EWO2NKg HczuEEPbqbIwwBEFIfJVh2xYLIgtt9WDdVft1tYZGFiww7O8JBlo/vom8f17jbUn XSk04KMZvl6w/e/twEac713FkdaijqgQaWLnTo72ekR7l82JkGjKD44qeAoh6tGM 5O520+j8eJDS0kyG+C2o+6TObvmbeHEZl042koPJKI4AvYT/iWOOVeE9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8OAGKnkRGDk1ZXbwfy+7qId0/7MB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7Gkxd8i zD9wMmfVGfC/VBUGOzRZGpoqXrl+KgULa0md9Lt22o/UGo8brEqi206VQIwbX/IP X91iPcWjvJ21gMFWy6uz8K0tAJjYfpKTZpuTPA2M/1WbFcSoPhi3gNOkbErFFbkj q8eKsTROkYnnA3qvzM5s+siSjH9k7ebNu7PlLI3xewZ1etjl0xpHuF1+z6jhBSfN w0o7bQvajWsbFDqFLNLYOnmf+RrwZ7K+AHmY9EJKrVyuZSGNQ8yBCbO14T7Ohkg3 4XarprhuJR7EFO0FxgjMbyBBYHi2MR0+A/u6uOU1aagjRCcRtFp/ILxowuTP+GdW /Zomtoq1sbvA+w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:54 2025 by rpki-client