This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json) Hash identifier: kNElhH4f4BSaNo/ZSVieTb568nW7Ke0k54wVMj3IgGM= Subject key identifier: 69:5F:B0:BF:C7:8C:57:29:D2:75:80:F9:58:59:F2:C1:F6:61:73:C2 Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Certificate serial: 019B53ABBAAD7094AF56809EF45C7AAFA85C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft Manifest number: 15FB Signing time: Thu 25 Dec 2025 04:02:01 +0000 Manifest this update: Thu 25 Dec 2025 04:02:01 +0000 Manifest next update: Fri 26 Dec 2025 04:02:01 +0000 Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: CvUXGq9Io0RUTXAAy36c55vjITHA0BNbFQBmxZo8h98=) 2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:ba:ad:70:94:af:56:80:9e:f4:5c:7a:af:a8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Validity Not Before: Dec 25 04:02:01 2025 GMT Not After : Dec 26 04:02:01 2025 GMT Subject: CN=695fb0bfc78c5729d27580f95859f2c1f66173c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:fb:09:f6:bd:15:37:eb:ce:0d:c0:9b:47: 9e:b8:ee:71:60:b8:38:6a:3e:19:1c:77:2e:c3:cd: 2c:46:94:32:ac:e9:2a:02:b8:fc:09:d2:fd:c3:c8: 07:45:ca:69:0c:52:fb:1c:ef:ea:36:77:2e:b0:89: c9:02:44:cf:98:89:d6:a0:f4:a3:41:3b:a6:48:1a: 9f:59:37:15:ce:f4:eb:4c:c9:04:7d:40:73:aa:ef: 1c:66:2f:8a:28:4a:62:96:48:b3:3a:db:2f:1d:f3: 33:c6:19:72:03:8c:64:fd:23:31:b6:c4:d9:68:b3: ac:c1:87:a4:e3:4a:6e:3d:a7:54:28:04:5a:6a:7e: ce:26:2e:87:6d:fc:1d:d3:72:ad:28:f7:2f:3f:d1: 3a:bf:2f:45:ff:81:83:95:17:53:76:77:40:be:d4: 2a:85:93:dc:8a:10:a2:05:1a:bc:83:1e:ac:91:84: 0f:7a:65:16:39:c7:ba:48:48:42:c7:88:e5:d7:3a: ab:a6:35:be:dd:22:7f:74:da:22:1e:ef:49:80:74: dc:c1:6e:26:a7:2b:3a:6b:b6:70:32:b2:cd:06:78: a2:84:cd:b9:58:5b:88:2d:ee:ff:59:75:e5:59:58: c5:25:d0:b3:81:0b:d9:ef:5f:a7:02:92:ec:de:2d: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5F:B0:BF:C7:8C:57:29:D2:75:80:F9:58:59:F2:C1:F6:61:73:C2 X509v3 Authority Key Identifier: keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7f:c8:da:36:2b:34:c4:b1:77:43:03:76:9f:0a:ff:9f:47: 34:b5:33:90:9a:a5:90:e6:93:7d:51:44:1b:5f:29:77:81:b2: 09:70:e1:5b:56:c9:98:56:87:fa:1f:77:7b:bc:82:13:f4:69: b9:52:52:06:17:02:97:df:66:14:af:c9:42:b3:44:21:84:71: e4:4e:15:1c:43:33:e2:11:1a:13:19:bc:d2:85:eb:36:cb:4f: 5f:b1:ad:ea:a2:93:77:1d:aa:e6:f3:e2:3c:ff:6f:31:92:53: 11:61:07:7f:6b:f7:47:03:02:86:28:d8:61:3a:97:1d:ae:d4: f0:6d:0f:7a:d6:ef:70:59:5b:67:b1:53:59:81:be:6e:e5:9c: 29:71:9a:20:1d:78:ec:5d:a8:2a:ca:53:b2:44:92:21:66:5b: 74:ec:33:bd:f3:54:84:a7:ef:6e:31:86:3f:c1:d7:66:44:28: 49:aa:2b:cd:3e:2b:ba:66:35:7a:de:b5:0e:be:db:e1:68:7e: 7e:2b:31:a7:05:e1:82:74:90:0d:d1:39:89:83:97:70:10:e9: 4f:29:88:62:ab:64:86:88:74:8a:ba:1a:d1:63:3b:48:b6:06: 36:a8:43:e6:fe:c3:c4:a8:80:24:b5:65:eb:77:64:0c:6c:e6: e4:d8:10:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq7qtcJSvVoCe9Fx6r6hcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk ZDMxMWEwHhcNMjUxMjI1MDQwMjAxWhcNMjUxMjI2MDQwMjAxWjAzMTEwLwYDVQQD Eyg2OTVmYjBiZmM3OGM1NzI5ZDI3NTgwZjk1ODU5ZjJjMWY2NjE3M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHX7Cfa9FTfrzg3Am0eeuO5xYLg4 aj4ZHHcuw80sRpQyrOkqArj8CdL9w8gHRcppDFL7HO/qNncusInJAkTPmInWoPSj QTumSBqfWTcVzvTrTMkEfUBzqu8cZi+KKEpilkizOtsvHfMzxhlyA4xk/SMxtsTZ aLOswYek40puPadUKARaan7OJi6Hbfwd03KtKPcvP9E6vy9F/4GDlRdTdndAvtQq hZPcihCiBRq8gx6skYQPemUWOce6SEhCx4jl1zqrpjW+3SJ/dNoiHu9JgHTcwW4m pys6a7ZwMrLNBniihM25WFuILe7/WXXlWVjFJdCzgQvZ71+nApLs3i3HvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlfsL/HjFcp0nWA+VhZ8sH2YXPCMB8GA1UdIwQY MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct NjMyMGEzNTZlNDM0LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0 LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX/I2jYr NMSxd0MDdp8K/59HNLUzkJqlkOaTfVFEG18pd4GyCXDhW1bJmFaH+h93e7yCE/Rp uVJSBhcCl99mFK/JQrNEIYRx5E4VHEMz4hEaExm80oXrNstPX7Gt6qKTdx2q5vPi PP9vMZJTEWEHf2v3RwMChijYYTqXHa7U8G0PetbvcFlbZ7FTWYG+buWcKXGaIB14 7F2oKspTskSSIWZbdOwzvfNUhKfvbjGGP8HXZkQoSaorzT4rumY1et61Dr7b4Wh+ fisxpwXhgnSQDdE5iYOXcBDpTymIYqtkhoh0iroa0WM7SLYGNqhD5v7DxKiAJLVl 63dkDGzm5NgQZA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:08 2025 by rpki-client