This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json) Hash identifier: kz+kKb1Sy9je54bCvZ+lG1U9T0sFXCcmPFyQaiacVmA= Subject key identifier: 21:11:4D:F2:2B:9E:9F:AF:D2:77:8B:E0:54:31:EA:3A:0D:5C:B2:3F Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f Certificate serial: 019B2B1D895F73F5C75357F8484021AEA323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 07:01:54 +0000 Manifest this update: Wed 17 Dec 2025 07:01:54 +0000 Manifest next update: Thu 18 Dec 2025 07:01:54 +0000 Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: Lp/5q1NkyyyQXn6ZZlbdx5lLcFlqjoinEX/Xklu1wIg=) 2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:89:5f:73:f5:c7:53:57:f8:48:40:21:ae:a3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f Validity Not Before: Dec 17 07:01:54 2025 GMT Not After : Dec 18 07:01:54 2025 GMT Subject: CN=21114df22b9e9fafd2778be05431ea3a0d5cb23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:21:c7:71:cd:a8:2f:08:c5:35:50:3e:3a: 97:df:f3:41:9c:6f:d1:95:07:6b:4a:09:b5:38:92: eb:14:f9:5b:c0:29:5d:96:dd:82:49:94:d2:ef:0c: 1d:29:ce:eb:58:7e:94:84:60:a1:77:18:a4:a4:1c: 39:af:0c:3a:5a:67:61:e5:35:f9:2d:1d:4f:ee:22: f5:35:c2:fc:59:7f:a1:a0:81:08:32:e8:5f:23:ae: bd:16:70:ff:e4:40:81:6b:47:7d:4b:4d:57:fd:b0: 02:47:b5:2d:ce:3c:c1:f2:93:ac:c9:88:30:8b:79: b3:7c:b7:e2:63:6c:b7:74:ff:8a:dc:dc:7d:af:bd: 51:98:e3:95:3e:b4:c0:d0:75:6a:19:75:7b:c5:ab: 30:e5:ae:49:15:97:ed:df:e2:5a:dc:a8:28:95:a4: d8:30:09:7e:e1:c8:20:84:9c:ce:ff:77:98:67:39: 3a:70:2e:48:c9:ee:38:5e:d4:07:c5:10:a7:55:77: 01:b8:f8:35:a9:e5:41:a0:e6:8b:a7:72:ae:39:db: 3c:bf:25:37:86:45:e5:e7:f1:44:f1:51:44:24:80: 20:48:89:96:7a:92:92:cd:04:92:7e:88:17:fb:93: a7:6e:cf:de:0c:2f:78:32:39:98:06:df:10:dd:2f: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:4D:F2:2B:9E:9F:AF:D2:77:8B:E0:54:31:EA:3A:0D:5C:B2:3F X509v3 Authority Key Identifier: keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5b:3b:fc:34:12:49:e7:48:c2:cf:e8:8c:ff:45:f3:8e:6f: d5:f1:ec:3d:fd:05:8f:85:2d:11:a5:8c:81:ca:1d:e0:0b:bd: 01:3b:9f:92:75:b7:3e:a1:42:e1:05:12:b4:e9:e7:89:16:7e: 7a:09:31:5c:96:c4:cd:90:0a:0d:d6:c7:bf:af:72:02:f0:cc: 7d:ec:52:a2:a4:0e:2d:ec:81:39:f8:b2:2e:73:83:5b:d6:cd: cb:20:7d:4a:b3:88:f2:80:94:04:e5:9d:9e:9d:a3:21:dc:76: d6:8c:ed:56:ca:3a:98:25:43:84:d1:08:fb:cf:5c:d1:51:fe: 30:c5:63:84:67:a3:9e:a1:fe:00:00:b6:8d:04:be:d9:02:bd: dd:a7:7b:44:ae:94:29:09:64:a8:c7:13:50:d9:c9:e3:e3:c1: 5f:d1:c3:bc:47:8b:f3:2a:f5:a6:48:53:02:3e:a5:a0:b3:be: 2f:c2:28:0f:d4:74:27:9d:0a:0d:a8:e4:34:70:d0:ee:59:5b: 59:e7:73:1d:08:da:30:b4:b5:e6:72:03:19:49:ad:a4:bf:87: f8:b7:6c:5c:18:8c:97:c9:19:ea:6f:b8:e6:3f:89:13:75:9f: 9f:58:e9:dd:6e:12:cf:10:9d:26:63:81:3d:48:19:fc:21:44: 94:01:ca:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHYlfc/XHU1f4SEAhrqMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMjhiMThkZjI0NGRiODlmMmI5N2E2YzcyNjI5NzMzYjM4 ODYwMmYwHhcNMjUxMjE3MDcwMTU0WhcNMjUxMjE4MDcwMTU0WjAzMTEwLwYDVQQD EygyMTExNGRmMjJiOWU5ZmFmZDI3NzhiZTA1NDMxZWEzYTBkNWNiMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQhx3HNqC8IxTVQPjqX3/NBnG/R lQdrSgm1OJLrFPlbwCldlt2CSZTS7wwdKc7rWH6UhGChdxikpBw5rww6Wmdh5TX5 LR1P7iL1NcL8WX+hoIEIMuhfI669FnD/5ECBa0d9S01X/bACR7UtzjzB8pOsyYgw i3mzfLfiY2y3dP+K3Nx9r71RmOOVPrTA0HVqGXV7xasw5a5JFZft3+Ja3KgolaTY MAl+4cgghJzO/3eYZzk6cC5Iye44XtQHxRCnVXcBuPg1qeVBoOaLp3KuOds8vyU3 hkXl5/FE8VFEJIAgSImWepKSzQSSfogX+5Onbs/eDC94MjmYBt8Q3S8BGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCERTfIrnp+v0neL4FQx6joNXLI/MB8GA1UdIwQY MBaAFB0osY3yRNuJ8rl6bHJilzOziGAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTIt YTk5YzM5MDkwZGI0LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTItYTk5YzM5MDkwZGI0 LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVs7/DQS SedIws/ojP9F845v1fHsPf0Fj4UtEaWMgcod4Au9ATufknW3PqFC4QUStOnniRZ+ egkxXJbEzZAKDdbHv69yAvDMfexSoqQOLeyBOfiyLnODW9bNyyB9SrOI8oCUBOWd np2jIdx21oztVso6mCVDhNEI+89c0VH+MMVjhGejnqH+AAC2jQS+2QK93ad7RK6U KQlkqMcTUNnJ4+PBX9HDvEeL8yr1pkhTAj6loLO+L8IoD9R0J50KDajkNHDQ7llb WedzHQjaMLS15nIDGUmtpL+H+LdsXBiMl8kZ6m+45j+JE3Wfn1jp3W4SzxCdJmOB PUgZ/CFElAHKyQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:25:08 2025 by rpki-client