This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json) Hash identifier: R4RA8hE5/8EX+ZR8Kt7W/7hYM90aDN5z2T8vPjBTW6U= Subject key identifier: 56:2C:06:6F:91:8F:99:8E:4B:3B:22:F8:EB:0C:E3:B4:E6:E9:6F:FE Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Certificate serial: 019B39B44A3385AC7BEA860016106B03E6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft Manifest number: 0382 Signing time: Sat 20 Dec 2025 03:01:15 +0000 Manifest this update: Sat 20 Dec 2025 03:01:15 +0000 Manifest next update: Sun 21 Dec 2025 03:01:15 +0000 Files and hashes: 1: 3412M_EtpZn6LWYcU4f3oIK6xWg.roa (hash: 0CHNt2RVOJ0fr7rsHxwpKCupnQAvdSeftNGlZDlJ/Ag=) 2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: AYAnLPQ7mJjzs3XoWEqqT1dl8Kk627LsRKoHqA7EBpA=) 3: kh3br9io16kmw-7oicNKEQZ-s1U.roa (hash: KMo3OoyX+kQWR2ToLgUVj9Uww/2q4pq0J+EYnmu4w/I=) 4: vkFd4xJmSIJd3JXc4hy9xBnTUgo.roa (hash: EZ8noFz8pUG/Mp84LZG9CdH2CpZHNivjG9K+XxXNqrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:4a:33:85:ac:7b:ea:86:00:16:10:6b:03:e6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739 Validity Not Before: Dec 20 03:01:15 2025 GMT Not After : Dec 21 03:01:15 2025 GMT Subject: CN=562c066f918f998e4b3b22f8eb0ce3b4e6e96ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:84:62:bb:fb:15:f7:7b:c5:ef:9c:ad:ca: 5d:f4:15:eb:63:9e:b3:dc:c7:fa:65:22:5f:2d:a3: cb:07:18:b3:a3:40:76:3b:55:6c:56:10:ef:5d:af: ae:c6:3e:bc:cc:be:d9:46:cd:ce:ec:b0:91:33:87: 10:b1:2d:18:46:c4:ce:6b:b1:83:ee:a9:3f:06:81: a7:58:76:2f:ef:35:0f:65:dd:43:ee:1c:85:30:6d: e5:68:20:35:db:d7:8f:74:c6:6e:5a:6f:b7:04:b2: 54:4b:6b:56:9d:8d:57:c8:b5:84:af:5f:d7:8a:9f: 23:b9:59:12:46:7c:e5:3f:da:c9:14:c0:15:76:02: a9:18:2d:ff:0a:5e:82:91:ab:35:d5:e4:ea:5b:d7: 6f:8f:23:11:4b:6a:08:bb:f7:23:ef:6b:9b:d5:04: 19:cb:43:ac:1f:67:37:26:da:6b:cc:29:05:52:60: 4f:81:13:9d:fd:e2:52:e8:1a:93:e1:36:fa:42:38: a5:cf:2b:3d:db:7f:a7:80:23:7e:05:6a:ea:82:d7: 76:a9:f0:ba:97:a6:fc:61:1a:19:d0:6b:58:85:78: 2c:c8:84:cf:5a:7a:d0:91:42:59:0d:5f:6b:21:54: 28:69:c3:8e:cc:15:0b:0b:14:c5:67:39:e5:37:a9: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2C:06:6F:91:8F:99:8E:4B:3B:22:F8:EB:0C:E3:B4:E6:E9:6F:FE X509v3 Authority Key Identifier: keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fc:29:11:39:fa:4c:47:a4:d9:ef:b3:87:e9:66:07:bc:64: 5b:87:01:38:8e:70:b6:5d:df:58:dc:c3:69:fc:a4:3b:75:1a: ac:31:3e:cd:e7:b8:b1:09:58:c3:ea:f0:a8:bb:04:cb:61:da: 50:63:78:af:e2:64:9f:b3:32:0e:9d:36:6d:d8:24:b9:9f:19: e8:d9:33:42:0a:b6:1b:f2:50:c4:35:66:49:df:f3:ca:cb:30: 8e:88:3b:51:5b:4b:34:fe:f9:52:91:be:6d:80:a3:8b:8a:db: 07:18:41:f1:47:39:35:e2:7f:eb:de:70:d2:75:da:fe:fc:e2: 03:1d:92:27:c1:e1:62:5e:1e:e0:0c:ed:c9:15:7f:d0:11:1c: a6:d5:80:7c:c3:20:4e:d9:5f:1d:94:38:4d:c9:90:1f:04:a2: 73:c5:b3:a2:c2:90:7c:33:42:d2:c7:c2:1e:77:09:57:45:f2: da:6d:1f:b9:ff:97:8c:cf:da:93:f6:1f:be:01:57:1d:26:1a: b2:f8:e6:98:76:51:0c:b9:03:e6:0e:ed:28:72:7e:9a:26:45: da:fc:44:86:8a:03:36:55:2b:a8:48:86:0f:86:17:e7:88:6c: b4:fe:13:39:60:06:a2:3c:1e:dc:af:2e:79:5b:61:e3:e5:46: be:7e:4a:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tEozhax76oYAFhBrA+bCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5 MWQ3MzkwHhcNMjUxMjIwMDMwMTE1WhcNMjUxMjIxMDMwMTE1WjAzMTEwLwYDVQQD Eyg1NjJjMDY2ZjkxOGY5OThlNGIzYjIyZjhlYjBjZTNiNGU2ZTk2ZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRqEYrv7Ffd7xe+crcpd9BXrY56z 3Mf6ZSJfLaPLBxizo0B2O1VsVhDvXa+uxj68zL7ZRs3O7LCRM4cQsS0YRsTOa7GD 7qk/BoGnWHYv7zUPZd1D7hyFMG3laCA129ePdMZuWm+3BLJUS2tWnY1XyLWEr1/X ip8juVkSRnzlP9rJFMAVdgKpGC3/Cl6Ckas11eTqW9dvjyMRS2oIu/cj72ub1QQZ y0OsH2c3JtprzCkFUmBPgROd/eJS6BqT4Tb6Qjilzys923+ngCN+BWrqgtd2qfC6 l6b8YRoZ0GtYhXgsyITPWnrQkUJZDV9rIVQoacOOzBULCxTFZznlN6mPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYsBm+Rj5mOSzsi+OsM47Tm6W/+MB8GA1UdIwQY MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1 LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfwpETn6 TEek2e+zh+lmB7xkW4cBOI5wtl3fWNzDafykO3UarDE+zee4sQlYw+rwqLsEy2Ha UGN4r+Jkn7MyDp02bdgkuZ8Z6NkzQgq2G/JQxDVmSd/zysswjog7UVtLNP75UpG+ bYCji4rbBxhB8Uc5NeJ/695w0nXa/vziAx2SJ8HhYl4e4AztyRV/0BEcptWAfMMg TtlfHZQ4TcmQHwSic8WzosKQfDNC0sfCHncJV0Xy2m0fuf+XjM/ak/YfvgFXHSYa svjmmHZRDLkD5g7tKHJ+miZF2vxEhooDNlUrqEiGD4YX54hstP4TOWAGojwe3K8u eVth4+VGvn5KGg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:15:03 2025 by rpki-client