This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft File: HzJorQbzq480bQ3jm9SuqztlhNk.mft (raw, json) Hash identifier: JJn+ymNHNCG50sByCjX7TPn4KJne2QXScftyELxANTE= Subject key identifier: A0:FE:5D:C9:DC:68:2F:F0:F2:1C:C0:F5:3A:83:74:85:FF:2E:D0:46 Authority key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9 Certificate issuer: /CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9 Certificate serial: 019B4BF29505CF244CC491F339977595B6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft Manifest number: 098A Signing time: Tue 23 Dec 2025 16:02:27 +0000 Manifest this update: Tue 23 Dec 2025 16:02:27 +0000 Manifest next update: Wed 24 Dec 2025 16:02:27 +0000 Files and hashes: 1: HzJorQbzq480bQ3jm9SuqztlhNk.crl (hash: 28CzDuoCkv/r18exOoSzXq6tjCaWrtELOnqDOx4l63E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:95:05:cf:24:4c:c4:91:f3:39:97:75:95:b6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9 Validity Not Before: Dec 23 16:02:27 2025 GMT Not After : Dec 24 16:02:27 2025 GMT Subject: CN=a0fe5dc9dc682ff0f21cc0f53a837485ff2ed046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:8b:a9:8f:35:94:51:07:14:28:4d:57:7a: 27:03:9f:11:5d:3d:b0:67:87:34:70:70:11:ae:32: 1e:df:8b:10:6d:e8:07:90:10:be:86:f3:28:28:e2: d2:49:79:a3:22:bc:30:f2:7d:94:60:d4:0d:a6:31: 40:42:43:be:65:55:fe:6c:2b:9b:01:9b:0c:af:2e: 50:ae:a9:45:02:e3:2f:2c:27:65:bd:aa:ce:6e:7e: 21:f3:26:29:c5:4a:1c:49:de:c4:05:16:c5:f1:ba: d5:6f:11:80:0d:b4:95:66:3d:75:d9:68:4c:a7:9b: f7:e6:27:f1:4f:8d:de:26:0a:eb:0d:80:19:31:04: c7:4e:64:89:30:56:c5:5e:8a:49:c7:76:33:17:ea: e3:b6:1a:c9:de:4c:f0:01:ae:f4:ff:72:9d:c0:0d: 22:22:84:c0:34:80:e6:e7:32:4d:64:1e:6d:1d:98: 51:46:c9:da:3e:cb:cd:4e:9a:3c:c2:df:c3:ab:ab: ee:bd:50:7b:ef:ac:43:7e:8c:83:1d:c7:d6:9a:f4: 00:7f:09:6f:47:75:15:72:bb:b0:e4:13:f6:c1:9a: cf:f5:45:81:c5:ac:51:63:8f:89:e4:88:12:ae:b7: 88:e5:a5:84:fa:f7:a9:97:89:10:99:52:42:77:05: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FE:5D:C9:DC:68:2F:F0:F2:1C:C0:F5:3A:83:74:85:FF:2E:D0:46 X509v3 Authority Key Identifier: keyid:1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:57:17:a6:69:12:1e:cd:59:ed:ef:e7:46:7f:aa:64:b4:d9: 8e:71:52:2e:73:34:28:d9:da:25:22:df:8e:9f:e4:9f:7f:eb: 35:1c:fd:6a:7d:5c:55:bc:cb:e2:01:67:8b:85:5b:87:1b:84: 1b:34:87:a0:d7:28:56:47:8a:31:a5:14:88:0b:fd:a0:6f:1b: 19:3b:51:47:bd:21:15:b5:fb:3d:26:36:64:3b:a1:91:94:b6: e5:a3:d8:24:cc:b7:90:98:62:22:3c:b7:d2:b1:59:df:6a:f2: 19:96:ea:ca:24:b5:b2:92:39:fb:19:51:d9:19:93:64:ad:5e: 91:a3:dc:3a:f5:69:c6:93:81:d5:97:d8:5d:fe:62:0c:ab:9e: d6:23:5c:16:3f:5f:8a:8f:d3:59:34:0e:3a:13:71:ad:eb:62: 9d:44:38:ca:27:98:04:63:98:9b:b0:52:8d:f6:d6:ca:92:f9: 21:9a:f3:be:af:f2:be:da:89:f0:4e:5b:db:34:09:3e:0c:e1: 88:ad:b9:6c:2f:f4:ab:f5:c3:17:2e:5d:6a:4d:40:3a:17:be: 0b:44:a6:64:18:e7:1c:00:03:df:3a:42:2e:10:cc:4c:38:4c: ce:7a:ed:4f:3f:8a:ff:2d:c8:5d:03:67:c8:c2:17:81:99:9a: 31:94:ae:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8pUFzyRMxJHzOZd1lbb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMzI2OGFkMDZmM2FiOGYzNDZkMGRlMzliZDRhZWFiM2I2 NTg0ZDkwHhcNMjUxMjIzMTYwMjI3WhcNMjUxMjI0MTYwMjI3WjAzMTEwLwYDVQQD EyhhMGZlNWRjOWRjNjgyZmYwZjIxY2MwZjUzYTgzNzQ4NWZmMmVkMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfiLqY81lFEHFChNV3onA58RXT2w Z4c0cHARrjIe34sQbegHkBC+hvMoKOLSSXmjIrww8n2UYNQNpjFAQkO+ZVX+bCub AZsMry5QrqlFAuMvLCdlvarObn4h8yYpxUocSd7EBRbF8brVbxGADbSVZj112WhM p5v35ifxT43eJgrrDYAZMQTHTmSJMFbFXopJx3YzF+rjthrJ3kzwAa70/3KdwA0i IoTANIDm5zJNZB5tHZhRRsnaPsvNTpo8wt/Dq6vuvVB776xDfoyDHcfWmvQAfwlv R3UVcruw5BP2wZrP9UWBxaxRY4+J5IgSrreI5aWE+vepl4kQmVJCdwXb1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD+XcncaC/w8hzA9TqDdIX/LtBGMB8GA1UdIwQY MBaAFB8yaK0G86uPNG0N45vUrqs7ZYTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHpKb3JRYnpxNDgwYlEzam05U3VxenRsaE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOTE5ZDMtMjEzOS00YzQyLWI3ZDQt OGEwYzcyOTg5M2JhLzEvSHpKb3JRYnpxNDgwYlEzam05U3VxenRsaE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zOTE5ZDMtMjEzOS00YzQyLWI3ZDQtOGEwYzcyOTg5M2Jh LzEvSHpKb3JRYnpxNDgwYlEzam05U3VxenRsaE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1cXpmkS Hs1Z7e/nRn+qZLTZjnFSLnM0KNnaJSLfjp/kn3/rNRz9an1cVbzL4gFni4VbhxuE GzSHoNcoVkeKMaUUiAv9oG8bGTtRR70hFbX7PSY2ZDuhkZS25aPYJMy3kJhiIjy3 0rFZ32ryGZbqyiS1spI5+xlR2RmTZK1ekaPcOvVpxpOB1ZfYXf5iDKue1iNcFj9f io/TWTQOOhNxretinUQ4yieYBGOYm7BSjfbWypL5IZrzvq/yvtqJ8E5b2zQJPgzh iK25bC/0q/XDFy5dak1AOhe+C0SmZBjnHAAD3zpCLhDMTDhMznrtTz+K/y3IXQNn yMIXgZmaMZSuDg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:56:17 2025 by rpki-client