This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json) Hash identifier: 8Knq5A358JnSRPCEuVLTbPwDZWT/G+WeL1dXGLoT5Ng= Subject key identifier: 91:3B:B0:CF:62:0A:A8:EA:89:F0:DF:3B:31:63:57:86:A9:51:41:36 Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51 Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451 Certificate serial: 019B2B1D43172BBA7697E6BA84C433121624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft Manifest number: 132C Signing time: Wed 17 Dec 2025 07:01:36 +0000 Manifest this update: Wed 17 Dec 2025 07:01:36 +0000 Manifest next update: Thu 18 Dec 2025 07:01:36 +0000 Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: UD4aC6XzuBu4Q7+02nOnEim/e4ewUBqazQl7HmglnWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:43:17:2b:ba:76:97:e6:ba:84:c4:33:12:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451 Validity Not Before: Dec 17 07:01:36 2025 GMT Not After : Dec 18 07:01:36 2025 GMT Subject: CN=913bb0cf620aa8ea89f0df3b31635786a9514136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:e2:b5:d7:fb:69:f4:f1:bd:ba:47:34:84: 88:15:4d:28:84:61:3f:25:ec:4b:99:d1:b5:61:67: 29:ba:98:2f:ad:11:89:91:98:f3:0c:6a:34:b2:34: 00:3b:ff:28:a9:1f:e3:6a:51:4e:d1:25:ad:e5:f4: df:9a:bd:3e:77:3a:3e:1d:5b:a3:5b:87:4f:13:3c: c9:99:d3:2c:e2:7b:3c:8e:ec:69:59:d2:fd:9b:34: dc:a6:50:ff:ac:f1:e4:ce:7e:6f:02:ad:1e:e5:2e: 69:d7:a6:c9:1e:0b:66:1f:9c:92:3a:73:16:8e:60: 8c:c8:e7:71:f7:a5:29:3d:45:dd:01:05:ea:32:5c: 32:9f:51:8e:a8:af:75:3a:49:f5:e0:93:45:6f:f0: 19:9c:e4:c0:e4:44:5c:44:4a:b3:5f:b4:9c:3a:f3: b1:6b:0c:f5:13:b6:ad:94:b1:9e:c8:77:32:d7:02: 6e:f9:5b:1d:c8:d8:2a:b4:2f:72:93:57:30:73:09: 8b:39:00:a2:6f:f0:21:09:94:b7:f1:84:c2:78:0a: d8:e0:54:17:3e:97:05:75:df:18:65:bf:9a:e4:d6: 09:0f:d9:21:9e:1e:5e:05:c6:92:d5:20:ec:f8:2c: bf:ae:ba:9f:4c:63:5b:89:71:59:07:3e:fc:64:9b: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:B0:CF:62:0A:A8:EA:89:F0:DF:3B:31:63:57:86:A9:51:41:36 X509v3 Authority Key Identifier: keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:29:d1:05:06:d1:49:59:a2:36:b5:bb:cf:f1:f9:34:2a:47: ad:98:79:47:af:67:c0:16:28:0f:2b:43:eb:d6:46:73:f3:b8: e5:f2:de:b5:2d:85:63:81:c2:85:20:ef:9f:a2:6f:bd:83:72: 4e:b9:01:c4:35:a8:52:90:f8:e1:fa:bf:e5:ee:6e:4b:e7:8f: 4d:88:48:8f:95:25:3f:69:35:94:04:aa:7a:22:9d:e7:92:b5: 42:4a:7b:de:5c:c6:32:88:99:5c:29:12:67:a6:fa:6d:e9:a3: ca:4f:e5:5a:48:df:bb:de:53:1c:d7:9d:54:ce:97:38:4d:a0: ba:9a:f1:03:68:a9:78:44:99:b5:18:64:f8:e4:7a:02:64:82: a8:d1:0c:31:b1:19:f8:68:3a:34:30:3a:73:3f:b4:be:a7:71: c2:76:93:4f:d0:a7:c5:85:58:66:aa:85:6f:ad:5f:21:6b:bd: e7:a8:7b:20:2d:73:d5:fc:b2:34:f0:3c:02:1a:b7:dc:f7:f9: 64:b0:51:39:ae:25:f9:b6:0e:e7:2c:a5:5e:84:0b:58:ae:3e: 21:77:d1:d8:50:a1:22:7c:28:ce:64:85:a9:ab:aa:98:33:d4: 1a:fb:14:49:7c:89:1e:c5:f0:73:82:4b:07:2f:83:72:e2:cf: 9a:71:ca:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHUMXK7p2l+a6hMQzEhYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYjhlMzdmNTEzZGRjMjlmZmQ3OTFjMzhjOTY2MzIzNjlj YTU0NTEwHhcNMjUxMjE3MDcwMTM2WhcNMjUxMjE4MDcwMTM2WjAzMTEwLwYDVQQD Eyg5MTNiYjBjZjYyMGFhOGVhODlmMGRmM2IzMTYzNTc4NmE5NTE0MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rbitdf7afTxvbpHNISIFU0ohGE/ JexLmdG1YWcpupgvrRGJkZjzDGo0sjQAO/8oqR/jalFO0SWt5fTfmr0+dzo+HVuj W4dPEzzJmdMs4ns8juxpWdL9mzTcplD/rPHkzn5vAq0e5S5p16bJHgtmH5ySOnMW jmCMyOdx96UpPUXdAQXqMlwyn1GOqK91Okn14JNFb/AZnOTA5ERcREqzX7ScOvOx awz1E7atlLGeyHcy1wJu+VsdyNgqtC9yk1cwcwmLOQCib/AhCZS38YTCeArY4FQX PpcFdd8YZb+a5NYJD9khnh5eBcaS1SDs+Cy/rrqfTGNbiXFZBz78ZJvFAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE7sM9iCqjqifDfOzFjV4apUUE2MB8GA1UdIwQY MBaAFBy4439RPdwp/9eRw4yWYyNpylRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZGRmZDYtNzZkYi00MzMxLWFmZDMt ZTFjZGIyNGMxODBiLzEvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iZGRmZDYtNzZkYi00MzMxLWFmZDMtZTFjZGIyNGMxODBi LzEvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlynRBQbR SVmiNrW7z/H5NCpHrZh5R69nwBYoDytD69ZGc/O45fLetS2FY4HChSDvn6JvvYNy TrkBxDWoUpD44fq/5e5uS+ePTYhIj5UlP2k1lASqeiKd55K1Qkp73lzGMoiZXCkS Z6b6bemjyk/lWkjfu95THNedVM6XOE2guprxA2ipeESZtRhk+OR6AmSCqNEMMbEZ +Gg6NDA6cz+0vqdxwnaTT9CnxYVYZqqFb61fIWu956h7IC1z1fyyNPA8Ahq33Pf5 ZLBROa4l+bYO5yylXoQLWK4+IXfR2FChInwozmSFqauqmDPUGvsUSXyJHsXwc4JL By+DcuLPmnHKCw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:05 2025 by rpki-client