This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json) Hash identifier: yf6AMZbP9AAdI6ZDl3ZrEbYfmxDTKQlwqaDOwQxtrgA= Subject key identifier: 08:D3:3B:59:43:A9:98:0A:2C:60:63:91:9D:75:A7:5B:DC:14:2B:07 Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab Certificate serial: 019B5A1A92B2A1BD22457ED2B1A2F1E4ED8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft Manifest number: 1197 Signing time: Fri 26 Dec 2025 10:00:49 +0000 Manifest this update: Fri 26 Dec 2025 10:00:49 +0000 Manifest next update: Sat 27 Dec 2025 10:00:49 +0000 Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: kGGrvOv74X1U03EmObNCzzJ5CqDGg/z7+F0snZMHtNI=) 2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:92:b2:a1:bd:22:45:7e:d2:b1:a2:f1:e4:ed:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab Validity Not Before: Dec 26 10:00:49 2025 GMT Not After : Dec 27 10:00:49 2025 GMT Subject: CN=08d33b5943a9980a2c6063919d75a75bdc142b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:1f:e7:56:f0:7c:ee:b8:01:be:2a:6a:53: 5b:17:06:f1:d6:89:16:d8:d6:83:74:af:f2:b6:07: 23:a2:f8:0f:0f:55:97:7d:e5:7a:fc:35:5a:28:05: 54:38:8d:d5:fa:eb:8e:dc:d3:46:2a:9c:8e:be:7b: cc:32:ac:a6:fa:2d:fd:ed:e1:26:b7:e0:cc:61:50: b2:f2:be:5f:40:a6:63:49:45:b6:b9:99:4d:87:d9: ea:7d:a0:56:2e:0f:da:19:fb:88:bc:52:fd:01:29: 15:e8:97:2d:35:f3:36:d6:75:74:10:a4:54:7b:dd: ba:1f:6e:86:a6:f1:3a:9c:57:03:88:a3:a7:bd:35: a8:0c:4e:1f:ae:eb:67:ab:da:b9:ad:6d:c2:28:3d: a1:d0:85:85:b9:67:ac:2e:b0:2c:b8:de:9a:b4:3a: 27:1b:50:bd:51:1b:14:66:47:72:d7:61:22:ec:a4: 5e:a9:4f:4e:11:ec:ce:23:61:69:ec:45:09:18:f0: 7f:ee:cf:07:db:7d:36:94:41:3b:fc:e2:21:17:dd: 85:40:6f:66:ef:da:57:ed:4c:8b:5c:e5:1e:d1:f3: 83:0c:4b:08:e6:cb:d2:bb:13:b6:62:d6:50:15:07: fe:95:e8:8e:e7:b4:33:9c:4e:c0:1b:07:a8:ee:22: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D3:3B:59:43:A9:98:0A:2C:60:63:91:9D:75:A7:5B:DC:14:2B:07 X509v3 Authority Key Identifier: keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:62:a7:c7:c5:82:ad:5a:3d:93:1c:8c:80:83:81:52:80:8c: 79:51:87:79:16:de:a4:d4:0b:bc:43:22:b5:e5:52:a4:a6:eb: 32:cc:7d:04:f1:53:a1:0b:61:09:38:08:9d:7e:52:8e:29:16: 39:09:43:8b:26:77:be:b0:2a:2f:b9:d9:71:64:dc:2a:ca:3d: f5:b4:ba:d1:fc:17:8c:1d:7e:d4:83:0d:89:33:ae:f8:08:a7: 5f:4d:e0:16:12:be:7a:2e:02:6e:9e:fc:29:7a:64:b8:dc:dd: a4:ee:16:e3:c6:a3:9f:1a:8e:6c:14:9b:8f:e5:b5:97:e1:8c: 4e:0a:25:1c:8d:ca:2f:35:1a:8b:9b:27:2b:ef:1a:46:c9:be: d0:75:e3:2e:25:67:1d:cd:13:9d:34:b4:72:6d:6a:ad:c8:bb: f6:50:67:28:65:c4:9a:95:0e:ac:9e:d0:12:79:9b:17:c5:be: dc:de:00:4f:84:9f:c9:bd:22:e4:ab:d3:0c:ca:a1:9c:02:75: 52:40:59:52:7d:5e:46:04:57:68:5c:ab:6f:b5:61:5f:a7:bd: e9:6a:5a:c0:58:d3:48:4e:3c:c3:53:1e:62:d4:1f:be:91:f0: fe:58:c1:bd:16:ab:4f:f7:2a:bc:a9:97:f0:14:83:26:c1:32: 7d:76:7f:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpKyob0iRX7SsaLx5O2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1 NmMxYWIwHhcNMjUxMjI2MTAwMDQ5WhcNMjUxMjI3MTAwMDQ5WjAzMTEwLwYDVQQD EygwOGQzM2I1OTQzYTk5ODBhMmM2MDYzOTE5ZDc1YTc1YmRjMTQyYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoosf51bwfO64Ab4qalNbFwbx1okW 2NaDdK/ytgcjovgPD1WXfeV6/DVaKAVUOI3V+uuO3NNGKpyOvnvMMqym+i397eEm t+DMYVCy8r5fQKZjSUW2uZlNh9nqfaBWLg/aGfuIvFL9ASkV6JctNfM21nV0EKRU e926H26GpvE6nFcDiKOnvTWoDE4frutnq9q5rW3CKD2h0IWFuWesLrAsuN6atDon G1C9URsUZkdy12Ei7KReqU9OEezOI2Fp7EUJGPB/7s8H2302lEE7/OIhF92FQG9m 79pX7UyLXOUe0fODDEsI5svSuxO2YtZQFQf+leiO57QznE7AGweo7iLF0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjTO1lDqZgKLGBjkZ11p1vcFCsHMB8GA1UdIwQY MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3 LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGKnx8WC rVo9kxyMgIOBUoCMeVGHeRbepNQLvEMiteVSpKbrMsx9BPFToQthCTgInX5SjikW OQlDiyZ3vrAqL7nZcWTcKso99bS60fwXjB1+1IMNiTOu+AinX03gFhK+ei4Cbp78 KXpkuNzdpO4W48ajnxqObBSbj+W1l+GMTgolHI3KLzUai5snK+8aRsm+0HXjLiVn Hc0TnTS0cm1qrci79lBnKGXEmpUOrJ7QEnmbF8W+3N4AT4Sfyb0i5KvTDMqhnAJ1 UkBZUn1eRgRXaFyrb7VhX6e96WpawFjTSE48w1MeYtQfvpHw/ljBvRarT/cqvKmX 8BSDJsEyfXZ/rQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:20 2025 by rpki-client