This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json) Hash identifier: mMB5Raxdekr9eRpoT1vLix3SGV6bBuCpzGNoTlISQ14= Subject key identifier: 98:E4:0D:47:FF:4C:9F:57:2A:AD:E7:95:97:D1:EB:8B:E4:7B:6A:AC Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66 Certificate issuer: /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66 Certificate serial: 019B6CFC72E11FB458E8BA0CD0669146393A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft Manifest number: 1733 Signing time: Tue 30 Dec 2025 02:00:42 +0000 Manifest this update: Tue 30 Dec 2025 02:00:42 +0000 Manifest next update: Wed 31 Dec 2025 02:00:42 +0000 Files and hashes: 1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: 7BHejBKZCp4R2EvGH0aDGTeG7CrfGsLIjBkdQtpdpzM=) 2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:72:e1:1f:b4:58:e8:ba:0c:d0:66:91:46:39:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66 Validity Not Before: Dec 30 02:00:42 2025 GMT Not After : Dec 31 02:00:42 2025 GMT Subject: CN=98e40d47ff4c9f572aade79597d1eb8be47b6aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:9f:ae:24:e3:fb:f2:d7:26:8c:47:3a:34: c4:81:30:d7:a8:a9:b4:15:44:f6:06:a2:62:ab:44: 63:04:50:15:d8:9d:06:9c:c2:9b:75:43:13:e3:54: c5:fc:ed:a4:b4:fa:8d:d2:7f:8f:2e:9b:16:5d:43: 54:bc:76:8a:fe:73:83:fa:ee:fc:ca:49:a5:a0:6a: 20:ec:80:ca:05:bb:c9:3f:d1:92:e0:60:aa:e4:d3: f7:d0:a2:bb:26:0a:e3:bb:ec:75:3b:b6:d5:87:97: b1:59:14:bb:b4:0e:df:3b:b7:a8:1c:a8:03:0c:b1: b6:57:35:2c:66:e0:5f:a1:b1:a5:fa:6b:c6:be:ef: f7:b8:18:a6:81:11:6c:27:3e:35:a3:14:b4:a6:47: d9:c4:5f:97:ac:57:d0:ae:b0:6d:0b:04:de:e9:e5: ae:c5:26:90:f4:0d:08:af:10:7f:b8:e3:e1:f0:93: a8:5d:fc:82:80:49:03:d4:26:0f:12:97:d4:83:ce: 0c:32:5e:60:15:41:87:b9:c3:2b:fe:45:a7:b2:77: 1e:2f:db:78:67:58:54:a9:46:a2:da:92:1c:c7:9b: e2:f8:9a:db:f3:e0:7e:bf:fe:15:be:9f:c3:64:87: 8e:3f:a3:51:a1:b5:a6:31:a2:90:0e:8e:e9:b4:2e: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E4:0D:47:FF:4C:9F:57:2A:AD:E7:95:97:D1:EB:8B:E4:7B:6A:AC X509v3 Authority Key Identifier: keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d8:81:7a:48:30:3d:ea:99:09:90:28:87:2d:0f:62:1d:a5: 5b:7c:a0:5b:18:76:e6:29:24:a3:45:78:1f:63:98:2c:a9:56: bf:2d:75:4b:f4:87:cd:e9:c9:7d:58:d4:c8:2f:48:e4:89:e3: f3:cf:80:a3:d8:aa:14:5e:a1:4e:38:6e:4b:b6:d7:b1:e7:d1: dc:46:46:f7:22:2b:b4:ab:ae:a8:c7:82:c3:76:a9:57:71:a9: 50:00:24:73:be:7d:a0:dc:a7:d0:46:ee:ef:45:33:3e:bb:aa: 3c:21:44:02:06:e9:9e:3d:91:32:62:3b:84:47:84:64:db:2d: 35:0a:6e:d1:24:a4:83:90:a4:c6:87:65:0e:c3:8d:08:d5:ae: e6:d8:ef:e0:66:25:93:bd:ee:21:4c:14:b2:a5:61:27:5a:b9: 91:21:cb:79:9e:a8:46:2f:21:e1:1f:48:9d:56:7d:fa:a9:92: 01:7c:f9:9b:02:0c:cb:db:c7:74:37:6b:33:58:c4:b9:25:91: 88:6b:e1:2f:01:17:57:f7:36:d8:66:5d:57:e7:d5:81:64:9b: 34:c4:d7:94:70:07:71:4e:a0:f0:de:31:7d:bd:cc:b9:29:cc: 1b:68:ef:8d:b0:8e:da:0b:f7:ab:5c:79:5e:20:4d:0a:31:e1: a6:00:89:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/HLhH7RY6LoM0GaRRjk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlM2JhNGRiYmE1MjNkNWIwZGM5ODkyMDNiZmQ2OTY0OGQx ZDRlNjYwHhcNMjUxMjMwMDIwMDQyWhcNMjUxMjMxMDIwMDQyWjAzMTEwLwYDVQQD Eyg5OGU0MGQ0N2ZmNGM5ZjU3MmFhZGU3OTU5N2QxZWI4YmU0N2I2YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0SfriTj+/LXJoxHOjTEgTDXqKm0 FUT2BqJiq0RjBFAV2J0GnMKbdUMT41TF/O2ktPqN0n+PLpsWXUNUvHaK/nOD+u78 ykmloGog7IDKBbvJP9GS4GCq5NP30KK7Jgrju+x1O7bVh5exWRS7tA7fO7eoHKgD DLG2VzUsZuBfobGl+mvGvu/3uBimgRFsJz41oxS0pkfZxF+XrFfQrrBtCwTe6eWu xSaQ9A0IrxB/uOPh8JOoXfyCgEkD1CYPEpfUg84MMl5gFUGHucMr/kWnsnceL9t4 Z1hUqUai2pIcx5vi+Jrb8+B+v/4Vvp/DZIeOP6NRobWmMaKQDo7ptC4TEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjkDUf/TJ9XKq3nlZfR64vke2qsMB8GA1UdIwQY MBaAFB47pNu6Uj1bDcmJIDv9aWSNHU5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmIt MTJlMjBjODc1YzUzLzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmItMTJlMjBjODc1YzUz LzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtiBekgw PeqZCZAohy0PYh2lW3ygWxh25ikko0V4H2OYLKlWvy11S/SHzenJfVjUyC9I5Inj 88+Ao9iqFF6hTjhuS7bXsefR3EZG9yIrtKuuqMeCw3apV3GpUAAkc759oNyn0Ebu 70UzPruqPCFEAgbpnj2RMmI7hEeEZNstNQpu0SSkg5CkxodlDsONCNWu5tjv4GYl k73uIUwUsqVhJ1q5kSHLeZ6oRi8h4R9InVZ9+qmSAXz5mwIMy9vHdDdrM1jEuSWR iGvhLwEXV/c22GZdV+fVgWSbNMTXlHAHcU6g8N4xfb3MuSnMG2jvjbCO2gv3q1x5 XiBNCjHhpgCJgw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:15:11 2025 by rpki-client