This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json) Hash identifier: /choAIT4CvDAPTiYGGHh8i+Tvc6Z5Y/UiSauXf0z4OY= Subject key identifier: 32:8D:AC:35:A0:AE:7B:0F:B7:D6:58:FD:ED:4B:DF:05:AB:C2:35:7E Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Certificate serial: 019B32688C478E4183CC490D6930AD3F424C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 17:01:10 +0000 Manifest this update: Thu 18 Dec 2025 17:01:10 +0000 Manifest next update: Fri 19 Dec 2025 17:01:10 +0000 Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=) 2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: AhROd4syxGcgdeIzjOuMmKkk33fSmDNc7YA61amqyPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:8c:47:8e:41:83:cc:49:0d:69:30:ad:3f:42:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Validity Not Before: Dec 18 17:01:10 2025 GMT Not After : Dec 19 17:01:10 2025 GMT Subject: CN=328dac35a0ae7b0fb7d658fded4bdf05abc2357e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:7d:a2:90:b5:fa:c6:6c:31:9c:f2:dd:50: bd:62:12:fd:e3:f5:db:5b:6a:ec:2d:af:f6:b9:37: 74:4b:b9:da:44:e9:a8:cf:03:7b:06:0b:c7:ff:27: 0c:b9:e7:d6:40:a0:52:7f:ce:ef:b3:7c:69:b9:e0: 16:d8:20:95:89:b0:b7:c3:2b:0b:30:a7:c2:57:a8: 7c:bc:66:28:ff:92:5f:7d:76:32:98:e3:ac:6f:69: ff:28:47:91:24:63:e1:ff:79:6d:48:f9:e8:8d:4a: 69:84:84:59:72:92:b5:76:ba:97:db:62:60:e7:98: bc:6a:34:bd:64:b2:fe:02:db:62:27:c7:e9:d8:ea: b8:e9:24:46:bd:27:71:69:2b:b6:b5:75:db:86:af: cd:b9:47:f9:1f:13:79:d3:b5:20:a6:fb:fa:15:a4: b2:56:cf:47:53:a5:d0:b7:d9:70:76:62:3a:fe:f7: ba:9d:b8:2e:31:f2:69:97:a8:25:90:11:40:36:39: 33:2f:4e:5a:db:36:ec:a0:24:10:ce:ac:8b:98:d1: cf:dc:fb:2f:88:63:be:37:26:a3:08:81:8a:5d:e4: 8e:b8:87:4f:2e:70:64:f2:96:85:b5:30:55:ca:35: b7:70:fa:33:a4:fb:ab:77:6a:a6:75:57:e8:40:af: b7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8D:AC:35:A0:AE:7B:0F:B7:D6:58:FD:ED:4B:DF:05:AB:C2:35:7E X509v3 Authority Key Identifier: keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:73:d1:a3:70:4f:e3:48:80:e5:13:20:dd:10:19:e6:2a:dd: 40:6e:4f:a3:b5:bc:3a:3a:c2:f2:e3:bc:1a:76:62:50:9f:c3: 8b:ba:08:f6:a7:51:03:18:af:91:21:56:79:e9:04:90:c8:20: 57:11:18:73:4a:51:4b:34:6f:96:a1:ad:2c:16:57:00:05:4a: d6:9f:ca:ff:ca:5f:2d:12:66:8c:7c:d8:9c:f9:ef:3f:bc:b8: 52:8a:08:2c:9f:4f:1d:73:70:c6:c5:06:77:dc:88:0c:64:1f: cc:d0:cb:eb:b6:ca:ef:c2:bf:25:b1:43:f8:d3:0c:1b:18:89: 10:51:6d:84:41:a1:79:03:0d:b6:6a:b5:f2:b4:74:1c:b1:88: bb:2a:5e:3e:97:7e:84:b1:9d:ee:a2:4c:73:fe:ad:48:9a:7d: 70:a6:19:f3:03:01:72:92:18:ce:cd:83:1f:5c:46:5e:2c:78: 28:ca:71:34:da:7a:4d:f8:32:48:89:a5:a0:74:dd:f1:97:ab: 35:a9:c4:97:4e:fb:82:d2:bf:c6:8c:12:e6:78:80:b0:04:d0: 23:d8:ef:b6:c7:cd:30:53:a2:13:b4:ac:7a:21:89:13:d4:1e: 84:c7:92:46:41:fe:74:a0:c1:16:06:59:27:91:53:94:0e:8b: 34:f3:af:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaIxHjkGDzEkNaTCtP0JMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzBhNjIyNjJkY2NiMjFhMDEwNGIzNGVkYjgyYjk1MTVj YWNkZmIwHhcNMjUxMjE4MTcwMTEwWhcNMjUxMjE5MTcwMTEwWjAzMTEwLwYDVQQD EygzMjhkYWMzNWEwYWU3YjBmYjdkNjU4ZmRlZDRiZGYwNWFiYzIzNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOh9opC1+sZsMZzy3VC9YhL94/Xb W2rsLa/2uTd0S7naROmozwN7BgvH/ycMuefWQKBSf87vs3xpueAW2CCVibC3wysL MKfCV6h8vGYo/5JffXYymOOsb2n/KEeRJGPh/3ltSPnojUpphIRZcpK1drqX22Jg 55i8ajS9ZLL+AttiJ8fp2Oq46SRGvSdxaSu2tXXbhq/NuUf5HxN507Ugpvv6FaSy Vs9HU6XQt9lwdmI6/ve6nbguMfJpl6glkBFANjkzL05a2zbsoCQQzqyLmNHP3Psv iGO+NyajCIGKXeSOuIdPLnBk8paFtTBVyjW3cPozpPurd2qmdVfoQK+3vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKNrDWgrnsPt9ZY/e1L3wWrwjV+MB8GA1UdIwQY MBaAFB4wpiJi3MshoBBLNO24K5UVys37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMt MmEwNGQzOTIzZDIyLzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMtMmEwNGQzOTIzZDIy LzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHPRo3BP 40iA5RMg3RAZ5irdQG5Po7W8OjrC8uO8GnZiUJ/Di7oI9qdRAxivkSFWeekEkMgg VxEYc0pRSzRvlqGtLBZXAAVK1p/K/8pfLRJmjHzYnPnvP7y4UooILJ9PHXNwxsUG d9yIDGQfzNDL67bK78K/JbFD+NMMGxiJEFFthEGheQMNtmq18rR0HLGIuypePpd+ hLGd7qJMc/6tSJp9cKYZ8wMBcpIYzs2DH1xGXix4KMpxNNp6TfgySImloHTd8Zer NanEl077gtK/xowS5niAsATQI9jvtsfNMFOiE7SseiGJE9QehMeSRkH+dKDBFgZZ J5FTlA6LNPOvYw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:55 2025 by rpki-client