This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json) Hash identifier: /QfC12q1pj/c5Lwp59mh15uC4c24ZrK0WCx97N7X3FA= Subject key identifier: C9:1F:ED:AB:58:4B:D8:49:A3:D7:47:5E:8B:0B:E9:03:88:6C:25:38 Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Certificate serial: 019B4FCF20B93B150BDF434957735EB80808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft Manifest number: 15F9 Signing time: Wed 24 Dec 2025 10:02:12 +0000 Manifest this update: Wed 24 Dec 2025 10:02:12 +0000 Manifest next update: Thu 25 Dec 2025 10:02:12 +0000 Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: Psj8n/1HgTsBnaexMsnfvM0EkF12LINhZe9uNjCxQjw=) 2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:20:b9:3b:15:0b:df:43:49:57:73:5e:b8:08:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a Validity Not Before: Dec 24 10:02:12 2025 GMT Not After : Dec 25 10:02:12 2025 GMT Subject: CN=c91fedab584bd849a3d7475e8b0be903886c2538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:44:3c:dc:e9:12:01:98:cf:c4:bd:9d:c7: 8c:71:dc:96:6a:dd:96:d3:b8:f7:ec:19:fe:50:7e: 60:f9:6c:71:6f:fb:a5:95:42:20:dd:9e:de:e8:1a: e0:20:19:c3:ca:26:89:1b:14:8f:17:98:54:a6:0e: e2:4b:12:1d:64:76:07:b1:61:22:96:a7:58:4d:50: 66:b2:c6:b3:37:85:d3:9a:2a:40:ac:b0:3d:81:6c: ee:c1:c1:54:54:fb:09:9f:73:e0:3a:2d:e3:a0:48: ef:e7:6f:b4:df:d6:e5:e9:d8:26:ce:33:bf:9e:7f: 4c:1e:b4:c8:ab:0d:1c:bb:b3:bb:74:ec:7c:a8:68: 15:e5:63:d4:ef:85:82:16:d8:d4:ad:05:24:35:a7: dd:11:76:a0:1c:2f:df:cd:10:19:57:db:2c:25:d9: c8:6b:3f:5a:c7:47:43:0b:60:f3:09:20:74:2b:7c: 97:35:4d:07:8d:16:b5:0b:04:9b:63:27:41:3c:f3: cb:f9:68:7c:d0:d9:6e:06:41:84:1f:3d:fb:44:59: 5a:82:04:ff:bb:63:27:28:8e:fb:1d:e4:a2:38:30: df:12:fa:4b:29:fe:ee:e2:cf:ee:72:11:e8:22:74: 1b:50:ed:ca:59:69:4b:1c:1b:55:34:b9:90:c1:9d: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1F:ED:AB:58:4B:D8:49:A3:D7:47:5E:8B:0B:E9:03:88:6C:25:38 X509v3 Authority Key Identifier: keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:27:a8:a5:0f:1d:d9:07:6e:a0:1a:51:31:48:8f:fa:26:09: c3:d4:46:76:a3:9d:7b:52:c1:01:97:2a:0e:81:34:27:60:48: ff:db:85:47:13:10:a3:bd:2c:10:ec:87:81:45:f6:82:ad:14: 09:3c:f5:32:ae:f3:ce:ce:60:89:28:90:b0:f9:c9:64:41:fc: 90:39:5c:38:de:43:d9:d4:aa:04:f2:00:ae:54:cd:97:90:36: 76:66:f2:da:36:d6:f7:a2:c2:5c:31:25:2c:c9:99:9d:8c:fc: 8b:3b:e3:94:f6:e9:00:61:e4:e8:46:83:cc:39:60:7f:d5:dd: 8d:ec:22:15:35:41:cf:95:69:f8:a4:cd:26:80:93:37:2a:c8: 1b:1f:37:73:0a:4f:be:25:29:0f:e1:b6:9e:c0:2d:50:da:88: 80:91:71:c9:7a:9f:ed:75:fe:8a:26:9b:1f:8f:9d:f7:89:74: 07:1e:27:8e:89:37:f0:44:3d:90:9a:41:36:57:08:a9:51:5a: fa:15:d0:9a:ef:78:47:ed:db:23:6d:4f:f4:33:93:3a:97:51: fa:2b:69:36:b5:89:c4:2c:8f:3b:c0:4f:9f:c8:f2:d3:4c:5a: 28:04:59:9e:97:aa:6d:f9:aa:21:f8:44:64:19:3e:25:3d:21: eb:7b:39:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzyC5OxUL30NJV3NeuAgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOWEwOWM1MTA3ZTdlNDRjYTc4ZGM3MmQ1MTk3MzdlZDNk ZDMxMWEwHhcNMjUxMjI0MTAwMjEyWhcNMjUxMjI1MTAwMjEyWjAzMTEwLwYDVQQD EyhjOTFmZWRhYjU4NGJkODQ5YTNkNzQ3NWU4YjBiZTkwMzg4NmMyNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaVEPNzpEgGYz8S9nceMcdyWat2W 07j37Bn+UH5g+Wxxb/ullUIg3Z7e6BrgIBnDyiaJGxSPF5hUpg7iSxIdZHYHsWEi lqdYTVBmssazN4XTmipArLA9gWzuwcFUVPsJn3PgOi3joEjv52+039bl6dgmzjO/ nn9MHrTIqw0cu7O7dOx8qGgV5WPU74WCFtjUrQUkNafdEXagHC/fzRAZV9ssJdnI az9ax0dDC2DzCSB0K3yXNU0HjRa1CwSbYydBPPPL+Wh80NluBkGEHz37RFlaggT/ u2MnKI77HeSiODDfEvpLKf7u4s/uchHoInQbUO3KWWlLHBtVNLmQwZ0DbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkf7atYS9hJo9dHXosL6QOIbCU4MB8GA1UdIwQY MBaAFB2aCcUQfn5EynjcctUZc37T3TEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTct NjMyMGEzNTZlNDM0LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xZjMyNWUtNGRlNy00NzdlLThiNTctNjMyMGEzNTZlNDM0 LzEvSFpvSnhSQi1ma1RLZU54eTFSbHpmdFBkTVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwCeopQ8d 2QduoBpRMUiP+iYJw9RGdqOde1LBAZcqDoE0J2BI/9uFRxMQo70sEOyHgUX2gq0U CTz1Mq7zzs5giSiQsPnJZEH8kDlcON5D2dSqBPIArlTNl5A2dmby2jbW96LCXDEl LMmZnYz8izvjlPbpAGHk6EaDzDlgf9XdjewiFTVBz5Vp+KTNJoCTNyrIGx83cwpP viUpD+G2nsAtUNqIgJFxyXqf7XX+iiabH4+d94l0Bx4njok38EQ9kJpBNlcIqVFa +hXQmu94R+3bI21P9DOTOpdR+itpNrWJxCyPO8BPn8jy00xaKARZnpeqbfmqIfhE ZBk+JT0h63s5hg== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:53 2025 by rpki-client