This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json) Hash identifier: GpguCGzdWAwGJIo6C1oZfY2/aSK8LPLVaZKM2oALlVE= Subject key identifier: E8:0C:B3:35:78:8F:09:5E:92:B2:F7:2D:C5:E5:3F:45:52:73:3F:BC Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Certificate serial: 019B4625CE6D8B6A1830A19C23FB15C3157A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft Manifest number: 109A Signing time: Mon 22 Dec 2025 13:00:41 +0000 Manifest this update: Mon 22 Dec 2025 13:00:41 +0000 Manifest next update: Tue 23 Dec 2025 13:00:41 +0000 Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=) 2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: K9nrLZOfA0zH227RYM1DYvIoMEsngsltwyDUMi8VqHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:ce:6d:8b:6a:18:30:a1:9c:23:fb:15:c3:15:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Validity Not Before: Dec 22 13:00:41 2025 GMT Not After : Dec 23 13:00:41 2025 GMT Subject: CN=e80cb335788f095e92b2f72dc5e53f4552733fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:4c:78:3c:18:50:aa:8f:52:eb:bd:2f:97: 95:42:25:a2:23:ac:52:7c:36:e1:a4:16:f2:3a:13: 7b:10:5f:79:d9:5b:e5:81:f9:43:55:c3:ab:d1:14: 92:cc:08:96:8d:72:3e:df:23:3f:3a:9a:e8:e0:b5: e1:91:df:7e:40:d6:93:e1:ed:51:f7:04:49:1f:08: 52:28:56:d3:00:be:ec:cf:8c:25:df:04:d0:56:e0: 33:c6:61:50:1f:70:fa:c0:57:64:ec:b7:9f:28:e4: 35:63:8e:c3:79:e1:6c:93:13:4d:81:21:39:6e:6f: e9:30:55:44:f9:cb:3e:9f:3a:f3:e1:2b:95:30:4d: c8:59:5a:0a:b4:a4:c9:4f:32:59:c8:d5:8c:e2:20: ce:7f:dc:58:08:15:33:80:26:ae:59:5b:63:fd:ce: 37:82:3d:d7:82:b6:66:60:2b:07:1a:44:1b:3e:40: 05:2c:25:91:99:77:bc:f7:6e:d0:90:5e:a0:c5:ab: 6e:bf:c5:9c:2a:3a:fb:66:cc:4f:3b:8b:0f:06:99: 2a:e8:38:60:b8:a0:45:ca:46:6b:71:fb:ea:10:38: 03:70:89:f0:98:84:b6:f0:70:ec:20:0a:e1:6b:f4: ff:f9:f6:71:b8:86:7b:c9:ba:d5:a6:46:62:a5:8e: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:B3:35:78:8F:09:5E:92:B2:F7:2D:C5:E5:3F:45:52:73:3F:BC X509v3 Authority Key Identifier: keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:33:41:3b:5a:52:a9:7b:67:e7:50:f3:f7:e9:d4:64:31:48: 8b:cb:77:51:c3:60:d2:85:b2:03:27:9f:03:72:f1:58:bd:e1: ec:60:d7:39:e8:d0:54:e8:38:b9:a7:cc:00:50:90:10:c5:72: 8d:e9:2d:f7:2e:89:1b:26:99:60:ef:c1:3b:a0:c7:7f:21:a2: d5:de:06:4a:cf:2f:0e:15:44:43:d7:a8:18:3c:12:06:a3:7d: 6e:36:a8:ae:37:91:f4:be:6f:3b:e5:36:5f:b2:cf:36:dd:1f: ff:88:84:ed:50:ef:4e:3c:b6:45:86:d6:f9:0d:12:b3:91:fd: b8:c8:90:4f:34:14:26:74:bf:7c:69:62:f0:35:45:10:07:10: 7c:8a:a5:85:24:86:60:b3:7e:29:10:c1:2d:6e:38:da:84:61: 03:49:f1:10:42:fa:85:48:ed:04:10:8b:f2:90:d8:f9:1f:3c: e8:3b:e1:ec:50:18:aa:b9:e8:eb:cf:d5:a5:f7:69:ae:92:0f: ca:04:f4:55:d6:e4:c4:b3:70:f9:51:a6:3a:db:0c:34:2e:0d: 80:d2:95:3a:3e:3a:bd:94:f4:7a:15:30:bc:88:6e:95:e5:d3: 49:b7:37:f0:df:0b:ac:48:4d:da:97:ba:47:56:e3:8d:bf:87: 6c:09:80:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJc5ti2oYMKGcI/sVwxV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy M2U1YmYwHhcNMjUxMjIyMTMwMDQxWhcNMjUxMjIzMTMwMDQxWjAzMTEwLwYDVQQD EyhlODBjYjMzNTc4OGYwOTVlOTJiMmY3MmRjNWU1M2Y0NTUyNzMzZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ZMeDwYUKqPUuu9L5eVQiWiI6xS fDbhpBbyOhN7EF952VvlgflDVcOr0RSSzAiWjXI+3yM/Opro4LXhkd9+QNaT4e1R 9wRJHwhSKFbTAL7sz4wl3wTQVuAzxmFQH3D6wFdk7LefKOQ1Y47DeeFskxNNgSE5 bm/pMFVE+cs+nzrz4SuVME3IWVoKtKTJTzJZyNWM4iDOf9xYCBUzgCauWVtj/c43 gj3XgrZmYCsHGkQbPkAFLCWRmXe8927QkF6gxatuv8WcKjr7ZsxPO4sPBpkq6Dhg uKBFykZrcfvqEDgDcInwmIS28HDsIArha/T/+fZxuIZ7ybrVpkZipY7JZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgMszV4jwlekrL3LcXlP0VScz+8MB8GA1UdIwQY MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzNBO1pS qXtn51Dz9+nUZDFIi8t3UcNg0oWyAyefA3LxWL3h7GDXOejQVOg4uafMAFCQEMVy jekt9y6JGyaZYO/BO6DHfyGi1d4GSs8vDhVEQ9eoGDwSBqN9bjaorjeR9L5vO+U2 X7LPNt0f/4iE7VDvTjy2RYbW+Q0Ss5H9uMiQTzQUJnS/fGli8DVFEAcQfIqlhSSG YLN+KRDBLW442oRhA0nxEEL6hUjtBBCL8pDY+R886Dvh7FAYqrno68/VpfdprpIP ygT0VdbkxLNw+VGmOtsMNC4NgNKVOj46vZT0ehUwvIhuleXTSbc38N8LrEhN2pe6 R1bjjb+HbAmA9g== -----END CERTIFICATE-----Generated at Mon Dec 22 18:18:41 2025 by rpki-client