This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json) Hash identifier: j1NRdjk09drdy7YtWsz4r97MDp6EGVBozRCW1cOMCV8= Subject key identifier: D0:B0:46:E3:BA:A6:43:D4:56:A5:3C:45:A2:7D:85:78:81:63:67:41 Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Certificate serial: 019B3C1078576DB912DEDEE93E460BC96F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 14:01:10 +0000 Manifest this update: Sat 20 Dec 2025 14:01:10 +0000 Manifest next update: Sun 21 Dec 2025 14:01:10 +0000 Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=) 2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: jxMNgLBZlXOFp3kXak9awiHMsP0UNat0rm89imHIwaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:78:57:6d:b9:12:de:de:e9:3e:46:0b:c9:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Validity Not Before: Dec 20 14:01:10 2025 GMT Not After : Dec 21 14:01:10 2025 GMT Subject: CN=d0b046e3baa643d456a53c45a27d857881636741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:a0:b2:df:ac:4e:19:ca:8f:0f:a1:3e:a9: 61:9a:7d:38:01:70:22:65:83:b8:3a:09:8b:aa:c2: a1:f6:c3:65:75:03:ca:9a:ff:96:c6:87:e1:43:4c: 35:35:e7:57:46:4c:df:fd:3b:35:d3:7c:6e:85:ce: 54:09:17:3b:95:ba:c6:3c:b5:a1:5f:96:18:9c:a4: 6b:6f:4e:a2:36:ce:40:ce:36:05:a6:d7:7f:03:0d: 83:8d:04:72:39:89:51:6e:cb:74:98:c8:01:34:4f: a7:c6:bf:69:29:a8:fc:b8:44:fe:fd:c4:95:c1:6d: 68:29:8b:3f:d4:71:2b:73:df:bd:7e:14:1d:6b:85: 5d:eb:26:f7:b6:3f:71:83:87:2f:4f:12:6f:17:b8: 2e:40:51:f7:21:3f:74:ef:f8:c2:a6:3c:da:db:04: a7:02:f1:fa:ba:9e:a3:dc:c2:d0:e0:58:87:64:19: 60:93:28:65:d6:1c:f6:c2:c7:bd:36:9b:13:5d:c0: e1:a0:32:8d:1a:81:59:25:3a:40:65:ba:9e:2c:9b: d2:cf:d0:62:1f:95:50:e3:48:30:ef:d2:4d:0e:09: a9:33:45:66:09:71:d1:9d:6c:ef:52:bc:f5:ff:99: 5d:79:5f:fd:e0:46:ac:a3:c5:4c:49:71:2c:bd:da: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B0:46:E3:BA:A6:43:D4:56:A5:3C:45:A2:7D:85:78:81:63:67:41 X509v3 Authority Key Identifier: keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:26:e6:34:f0:9a:a6:45:c2:6f:8c:e6:61:d8:d7:60:17:0c: e9:65:98:36:4c:13:a2:40:da:bf:bd:70:28:c6:57:b7:6b:d6: fc:93:b9:29:1e:d6:cc:81:7b:61:ef:78:3f:4d:a7:d5:17:86: 32:13:81:8a:31:10:25:d5:5e:d4:51:12:e1:b2:40:89:0a:5c: e3:42:58:79:95:71:0b:4f:d7:86:2f:95:7c:e6:78:90:42:2f: bf:16:99:bb:4f:02:ef:61:20:1c:a5:af:ef:44:46:c8:a5:86: 46:b6:cd:61:e2:cc:45:86:a2:d0:6e:ab:1d:eb:8b:91:52:2a: 6d:b7:2e:1e:01:54:16:83:b0:0b:52:f0:68:74:c7:43:aa:25: 99:87:12:d0:ea:61:dd:e4:27:ce:3c:61:ef:49:5d:1e:0e:7f: c8:04:12:14:8e:d2:7d:60:af:d8:eb:6f:63:65:a3:1a:a4:7e: a0:6f:60:0a:d9:ff:f5:36:41:5c:9d:9c:b9:95:29:3e:56:d3: bf:83:1b:34:22:df:0d:37:00:30:f0:c9:d9:cf:a4:f8:74:2c: ce:d9:0a:8e:87:39:cb:ff:fe:ab:59:08:c6:31:7f:3e:95:ab: 68:e4:5c:5e:3f:a4:ae:fe:ae:8b:5a:fb:34:9b:23:6d:c2:85: fa:c9:e8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHhXbbkS3t7pPkYLyW+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzBhNjIyNjJkY2NiMjFhMDEwNGIzNGVkYjgyYjk1MTVj YWNkZmIwHhcNMjUxMjIwMTQwMTEwWhcNMjUxMjIxMTQwMTEwWjAzMTEwLwYDVQQD EyhkMGIwNDZlM2JhYTY0M2Q0NTZhNTNjNDVhMjdkODU3ODgxNjM2NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuGgst+sThnKjw+hPqlhmn04AXAi ZYO4OgmLqsKh9sNldQPKmv+WxofhQ0w1NedXRkzf/Ts103xuhc5UCRc7lbrGPLWh X5YYnKRrb06iNs5AzjYFptd/Aw2DjQRyOYlRbst0mMgBNE+nxr9pKaj8uET+/cSV wW1oKYs/1HErc9+9fhQda4Vd6yb3tj9xg4cvTxJvF7guQFH3IT907/jCpjza2wSn AvH6up6j3MLQ4FiHZBlgkyhl1hz2wse9NpsTXcDhoDKNGoFZJTpAZbqeLJvSz9Bi H5VQ40gw79JNDgmpM0VmCXHRnWzvUrz1/5ldeV/94Easo8VMSXEsvdoPxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCwRuO6pkPUVqU8RaJ9hXiBY2dBMB8GA1UdIwQY MBaAFB4wpiJi3MshoBBLNO24K5UVys37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMt MmEwNGQzOTIzZDIyLzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMtMmEwNGQzOTIzZDIy LzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCbmNPCa pkXCb4zmYdjXYBcM6WWYNkwTokDav71wKMZXt2vW/JO5KR7WzIF7Ye94P02n1ReG MhOBijEQJdVe1FES4bJAiQpc40JYeZVxC0/Xhi+VfOZ4kEIvvxaZu08C72EgHKWv 70RGyKWGRrbNYeLMRYai0G6rHeuLkVIqbbcuHgFUFoOwC1LwaHTHQ6olmYcS0Oph 3eQnzjxh70ldHg5/yAQSFI7SfWCv2OtvY2WjGqR+oG9gCtn/9TZBXJ2cuZUpPlbT v4MbNCLfDTcAMPDJ2c+k+HQsztkKjoc5y//+q1kIxjF/PpWraORcXj+krv6ui1r7 NJsjbcKF+snonw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:20 2025 by rpki-client