This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json) Hash identifier: /QJyREvzNCtxIWNxPjD54eItDLwBoK3FYUPMbLvdjwc= Subject key identifier: 8D:57:90:5B:07:9B:DE:B7:CA:A6:2D:5C:18:F9:EC:3C:84:1D:DF:36 Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f Certificate serial: 019B35A0B657A58F33C739DA7B1AAAE4A8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft Manifest number: 0F9A Signing time: Fri 19 Dec 2025 08:01:23 +0000 Manifest this update: Fri 19 Dec 2025 08:01:23 +0000 Manifest next update: Sat 20 Dec 2025 08:01:23 +0000 Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: XRP5BUMS0dKMqOF4qZZf1G1Be7aL7w8AZbSZtVjYers=) 2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:b6:57:a5:8f:33:c7:39:da:7b:1a:aa:e4:a8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f Validity Not Before: Dec 19 08:01:23 2025 GMT Not After : Dec 20 08:01:23 2025 GMT Subject: CN=8d57905b079bdeb7caa62d5c18f9ec3c841ddf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:49:41:81:28:2f:53:da:e0:ad:ed:fb:ec: 81:76:7c:e2:20:ff:45:d8:f6:7d:dc:b5:86:cc:b4: f5:bc:9c:d5:3e:a3:b6:6a:5a:4a:28:2c:12:45:7c: 36:d0:f9:39:0c:dc:de:1d:8f:4a:ed:40:08:df:19: 88:b8:80:32:f1:b2:83:f9:ad:29:d4:ba:6a:bc:76: 0e:04:b1:37:4b:95:b2:0a:8f:9c:2d:16:91:59:ec: e6:cc:6d:9a:41:9b:40:44:67:1d:b7:78:ba:14:25: 4e:8a:ec:ce:71:27:9a:78:09:db:17:44:96:2a:a8: 04:c3:04:60:9c:d6:4c:27:a6:c1:da:90:35:f3:1b: 63:2d:7a:dc:8d:f8:b1:a9:e8:07:b7:13:f9:17:62: 69:63:62:18:9a:9e:75:88:cc:fe:be:f6:3a:ad:a5: 76:8b:8b:6f:25:a8:5d:48:d5:df:f6:3a:b2:bf:4e: f8:0a:e7:99:2d:90:c5:8a:64:43:18:05:af:3c:04: 81:3c:ee:c4:e6:36:85:c6:aa:d7:4d:fa:38:fc:5b: b8:e0:35:61:ed:55:f2:99:2b:14:cc:36:bf:dc:00: 95:ab:dd:0d:1f:25:64:f4:e6:31:aa:5d:b6:e1:a2: 21:76:d1:c8:5f:12:08:c7:a7:db:8e:6a:b1:38:fd: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:57:90:5B:07:9B:DE:B7:CA:A6:2D:5C:18:F9:EC:3C:84:1D:DF:36 X509v3 Authority Key Identifier: keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:98:e1:52:72:37:73:c8:9e:41:7d:05:e8:fa:5f:38:40:e5: 90:cf:fb:ff:b0:90:01:29:ba:18:15:eb:ca:0b:9e:5b:d1:30: 53:45:19:85:e3:6e:f3:88:fa:b7:f5:91:f8:64:e9:d0:2e:26: f2:9f:92:23:6c:47:d0:a3:ef:7f:00:68:bf:e7:6e:b5:60:2e: 97:ce:d5:f1:47:11:74:28:46:e9:0c:dd:c0:51:f7:35:c0:81: d3:81:7d:7f:96:ec:6c:38:1f:35:65:03:80:18:dc:a8:19:43: 85:c0:38:28:2e:92:b5:eb:d9:1b:53:1b:62:b4:ba:5d:a9:c6: ae:dd:f9:83:ed:05:86:c9:b3:2a:08:9e:79:6b:4d:9e:37:39: e0:95:f3:fa:6f:11:5b:be:25:96:92:04:bf:f2:4a:68:23:db: d2:6c:70:79:d0:7f:30:98:92:27:67:2f:81:2e:41:ac:de:c2: d6:2a:a1:cd:40:68:1a:de:05:d8:3a:8d:0b:fe:3e:02:3c:74: c9:d4:97:ef:6c:90:7b:4e:7f:32:31:5e:59:5e:d2:88:e7:f9: a7:cf:14:3b:2b:80:00:41:c2:96:ac:63:c8:a7:78:2a:96:19: e5:17:c8:90:7d:3e:d6:37:9e:2c:7d:fb:7b:5d:10:fa:44:67: 90:a6:71:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oLZXpY8zxznaexqq5Ki8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzhiMTgzNmRlY2FiNGZmNWJkZmE1ZTM3N2EzZGY4N2Yx OGZjMGYwHhcNMjUxMjE5MDgwMTIzWhcNMjUxMjIwMDgwMTIzWjAzMTEwLwYDVQQD Eyg4ZDU3OTA1YjA3OWJkZWI3Y2FhNjJkNWMxOGY5ZWMzYzg0MWRkZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV1JQYEoL1Pa4K3t++yBdnziIP9F 2PZ93LWGzLT1vJzVPqO2alpKKCwSRXw20Pk5DNzeHY9K7UAI3xmIuIAy8bKD+a0p 1LpqvHYOBLE3S5WyCo+cLRaRWezmzG2aQZtARGcdt3i6FCVOiuzOcSeaeAnbF0SW KqgEwwRgnNZMJ6bB2pA18xtjLXrcjfixqegHtxP5F2JpY2IYmp51iMz+vvY6raV2 i4tvJahdSNXf9jqyv074CueZLZDFimRDGAWvPASBPO7E5jaFxqrXTfo4/Fu44DVh 7VXymSsUzDa/3ACVq90NHyVk9OYxql224aIhdtHIXxIIx6fbjmqxOP0ehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1XkFsHm963yqYtXBj57DyEHd82MB8GA1UdIwQY MBaAFBx4sYNt7KtP9b36Xjd6Pfh/GPwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYt ZWMzY2IzNmQxMDI2LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jNjE1MmQtMWM5MC00MGNjLWEyMDYtZWMzY2IzNmQxMDI2 LzEvSEhpeGcyM3NxMF8xdmZwZU4zbzktSDhZX0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJjhUnI3 c8ieQX0F6PpfOEDlkM/7/7CQASm6GBXrygueW9EwU0UZheNu84j6t/WR+GTp0C4m 8p+SI2xH0KPvfwBov+dutWAul87V8UcRdChG6QzdwFH3NcCB04F9f5bsbDgfNWUD gBjcqBlDhcA4KC6StevZG1MbYrS6XanGrt35g+0FhsmzKgieeWtNnjc54JXz+m8R W74llpIEv/JKaCPb0mxwedB/MJiSJ2cvgS5BrN7C1iqhzUBoGt4F2DqNC/4+Ajx0 ydSX72yQe05/MjFeWV7SiOf5p88UOyuAAEHClqxjyKd4KpYZ5RfIkH0+1jeeLH37 e10Q+kRnkKZxCA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:14 2025 by rpki-client