This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json) Hash identifier: /oWsmgHrgT+ASy1NRMRkh9/xiRBhEtx5UtR4HKb/+gk= Subject key identifier: AE:7D:31:C5:EE:19:00:E1:15:30:4D:05:19:0F:44:6F:2D:40:D4:0B Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Certificate serial: 019B24E3CA3E2AF886DFBD8B6EFE4F51B500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 02:01:06 +0000 Manifest this update: Tue 16 Dec 2025 02:01:06 +0000 Manifest next update: Wed 17 Dec 2025 02:01:06 +0000 Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=) 2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: QoC+rdpWoUay+mRTSBud+vfiPMsmbNp4BWYTf1OiTIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:ca:3e:2a:f8:86:df:bd:8b:6e:fe:4f:51:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Validity Not Before: Dec 16 02:01:06 2025 GMT Not After : Dec 17 02:01:06 2025 GMT Subject: CN=ae7d31c5ee1900e115304d05190f446f2d40d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:0d:f6:c2:47:a5:d4:3e:f5:94:18:61:c6: 7c:10:57:f2:8c:1a:8b:de:9c:6e:8f:65:c7:28:f3: 5d:4f:9d:50:8a:80:fc:77:32:af:0f:1a:8d:54:8f: 02:14:2b:ed:e3:bd:5f:db:dc:85:cc:84:6a:8a:4c: 81:52:69:14:43:d7:50:17:a4:88:70:e7:96:d4:fa: 9f:c3:f7:6f:b7:70:55:ee:fa:7c:c7:f7:d2:39:ac: 2e:75:e5:25:12:24:18:15:91:f5:d9:8c:ec:54:83: b0:c9:42:ab:72:a2:28:ce:6a:79:1c:fe:3c:38:72: d0:55:4a:47:02:03:08:c9:c6:19:d5:c4:25:d4:d4: aa:0c:df:fc:87:54:74:f0:c7:91:2b:e9:21:20:c5: 53:d5:d5:1a:f7:91:86:cf:29:51:87:68:d2:dd:8a: c1:71:50:67:28:75:90:c2:f1:5e:29:fc:c6:57:02: c8:41:8d:fc:2c:07:9e:04:d8:9f:8c:d1:ce:da:52: eb:d5:e9:7a:cb:a7:26:ba:d7:61:75:b0:c3:f0:a6: 59:fd:63:98:18:fd:4a:84:82:08:b1:30:35:93:c5: 33:c9:49:26:12:d8:1c:38:0b:76:19:6b:f2:fa:1a: c7:b6:e8:dc:d2:5a:3b:0f:27:ca:7d:54:a5:71:5e: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7D:31:C5:EE:19:00:E1:15:30:4D:05:19:0F:44:6F:2D:40:D4:0B X509v3 Authority Key Identifier: keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:81:8a:f1:ea:6f:cb:6a:e5:b2:61:f1:90:47:b8:ec:25: 9f:39:d5:9b:4b:8e:40:8a:a5:65:1d:2c:33:64:2e:aa:89:4d: 00:6a:1d:1a:cd:c3:a7:e8:5b:9a:1b:9b:bf:4f:a9:3b:e1:4a: e2:bd:c5:57:27:54:97:36:44:1a:36:24:b7:67:a2:92:59:50: 52:6d:60:c1:ee:eb:97:36:a1:d9:12:5d:10:53:8a:06:5e:a1: b8:15:67:f2:d4:31:8a:10:d4:f0:06:13:5f:48:40:93:12:eb: ab:03:d0:5b:a9:17:77:9d:8d:8c:62:4b:fc:8a:18:28:a3:fb: ce:5a:26:9d:4d:19:f3:5b:e3:4b:89:ba:9a:8c:32:d0:5b:6c: a9:3f:a8:e8:b5:39:b9:29:84:cf:3a:71:cd:71:ed:fc:23:dc: cf:ef:82:0c:10:e5:91:ac:07:79:ed:79:25:28:01:2d:5a:b6: 51:1c:c9:09:91:c2:ba:43:55:12:0c:b2:58:15:a8:e2:d2:45: f4:f9:51:b7:04:cb:61:d5:ef:b5:97:08:77:e9:a3:71:8d:fe: 3e:f5:9d:33:0e:82:67:f1:09:b8:eb:d1:16:80:57:3f:29:7a: 3a:bc:4b:37:3c:4e:db:2d:ca:a1:88:01:dc:00:68:3d:10:34: 6a:ef:8a:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk48o+KviG372Lbv5PUbUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzBhNjIyNjJkY2NiMjFhMDEwNGIzNGVkYjgyYjk1MTVj YWNkZmIwHhcNMjUxMjE2MDIwMTA2WhcNMjUxMjE3MDIwMTA2WjAzMTEwLwYDVQQD EyhhZTdkMzFjNWVlMTkwMGUxMTUzMDRkMDUxOTBmNDQ2ZjJkNDBkNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot4N9sJHpdQ+9ZQYYcZ8EFfyjBqL 3pxuj2XHKPNdT51QioD8dzKvDxqNVI8CFCvt471f29yFzIRqikyBUmkUQ9dQF6SI cOeW1Pqfw/dvt3BV7vp8x/fSOawudeUlEiQYFZH12YzsVIOwyUKrcqIozmp5HP48 OHLQVUpHAgMIycYZ1cQl1NSqDN/8h1R08MeRK+khIMVT1dUa95GGzylRh2jS3YrB cVBnKHWQwvFeKfzGVwLIQY38LAeeBNifjNHO2lLr1el6y6cmutdhdbDD8KZZ/WOY GP1KhIIIsTA1k8UzyUkmEtgcOAt2GWvy+hrHtujc0lo7DyfKfVSlcV6XkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK59McXuGQDhFTBNBRkPRG8tQNQLMB8GA1UdIwQY MBaAFB4wpiJi3MshoBBLNO24K5UVys37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMt MmEwNGQzOTIzZDIyLzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMtMmEwNGQzOTIzZDIy LzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfyBivHq b8tq5bJh8ZBHuOwlnznVm0uOQIqlZR0sM2QuqolNAGodGs3Dp+hbmhubv0+pO+FK 4r3FVydUlzZEGjYkt2eikllQUm1gwe7rlzah2RJdEFOKBl6huBVn8tQxihDU8AYT X0hAkxLrqwPQW6kXd52NjGJL/IoYKKP7zlomnU0Z81vjS4m6mowy0FtsqT+o6LU5 uSmEzzpxzXHt/CPcz++CDBDlkawHee15JSgBLVq2URzJCZHCukNVEgyyWBWo4tJF 9PlRtwTLYdXvtZcId+mjcY3+PvWdMw6CZ/EJuOvRFoBXPyl6OrxLNzxO2y3KoYgB 3ABoPRA0au+KwQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:36:44 2025 by rpki-client