This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json) Hash identifier: 3MGp3aSRfK8ebo4iQ+kyuRjwJeB4s1yQvq2alYyJsbA= Subject key identifier: 56:C4:53:56:11:8A:17:FE:16:54:76:CF:D8:AF:F6:0C:D4:5E:38:F1 Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Certificate serial: 019B24ACD5B8C5B5D8ECCC3B92B0DD728023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft Manifest number: 120A Signing time: Tue 16 Dec 2025 01:01:04 +0000 Manifest this update: Tue 16 Dec 2025 01:01:04 +0000 Manifest next update: Wed 17 Dec 2025 01:01:04 +0000 Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=) 2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: BQCOeP1OEG6cBaWcpcs71uGwsanEgSmDRhxAp+r80V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:d5:b8:c5:b5:d8:ec:cc:3b:92:b0:dd:72:80:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5 Validity Not Before: Dec 16 01:01:04 2025 GMT Not After : Dec 17 01:01:04 2025 GMT Subject: CN=56c45356118a17fe165476cfd8aff60cd45e38f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:e3:4e:93:dc:8d:4b:ff:49:7e:96:b7:e6: 77:8c:f8:b0:59:30:98:fc:2f:27:a1:67:33:22:2e: 24:56:42:96:c9:db:46:93:05:36:78:79:ad:0f:d5: 63:95:c7:b5:ac:fb:30:59:5f:4b:44:92:81:8d:3c: 1c:d6:f9:a0:32:29:fb:39:ac:41:01:01:5a:30:41: 5a:85:9d:76:dd:01:3b:1d:bc:3e:85:cb:3f:13:b1: 87:61:44:16:5e:8c:77:14:21:24:d6:73:22:7d:00: 7d:aa:dd:a6:1f:b3:67:69:92:fb:c6:31:8c:17:aa: dc:18:a9:d3:20:b4:73:dd:c9:a9:01:bf:72:06:10: 21:df:dd:82:a2:00:cb:0a:95:95:5e:6c:42:fb:f3: 4d:8e:73:10:c7:82:0a:20:1a:15:65:ac:31:ff:6d: cf:1f:82:e6:7f:6b:6a:b9:1e:82:75:c3:f2:40:97: e1:19:0f:15:b1:b9:ff:aa:23:0e:a2:dd:e9:68:a9: f1:fe:6e:29:1f:f7:a6:09:24:ce:d9:ef:3e:2c:63: 7e:5e:de:2c:3d:83:c1:17:6c:90:51:73:b8:16:6b: bd:5e:a4:1a:39:96:89:20:29:c6:86:12:fd:82:32: 73:bc:68:23:95:a3:d0:21:07:f9:78:d8:0e:aa:dd: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C4:53:56:11:8A:17:FE:16:54:76:CF:D8:AF:F6:0C:D4:5E:38:F1 X509v3 Authority Key Identifier: keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:13:0b:b5:9c:78:b6:5e:f1:6a:b7:38:05:10:50:2f:00:28: 61:c8:ed:71:88:e7:82:ae:a1:af:8c:db:dc:3d:ab:ac:b1:6e: 6a:cb:82:bc:69:a6:5c:05:2c:94:5b:7d:27:8f:c7:c0:14:93: 39:3f:7a:66:d3:80:db:74:b6:90:e4:7c:7e:d8:aa:b5:b6:33: 5b:0d:ad:9d:d3:ea:ce:27:db:81:1c:bd:f4:68:dd:c5:70:e9: 7e:2c:d9:f4:69:85:22:86:28:32:54:bd:bf:92:e8:b1:63:ec: 42:a8:8d:0d:1d:0d:84:fa:c0:ff:11:51:93:7a:9d:e6:12:f9: 65:2d:c7:6b:28:dc:92:4d:55:96:2e:1c:fc:ad:16:f9:a5:12: 88:1f:9b:26:43:32:9c:61:5e:46:4a:bd:1f:40:20:61:3d:b3: fd:9f:5f:23:11:e1:cf:16:6d:b3:6c:43:ca:8b:e6:d8:83:c3: 04:60:dc:e9:fa:33:a7:1b:09:bc:6c:b0:26:02:77:39:57:08: 08:9c:32:04:51:bb:97:74:7a:94:1a:d8:18:93:cc:f3:8f:48: 36:c9:be:86:33:c8:57:fe:9e:e6:94:a7:96:0d:91:74:6d:c2: 1b:7e:0c:41:eb:d5:da:1a:be:09:bc:c9:dc:a0:21:c2:0e:70: 05:03:2b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrNW4xbXY7Mw7krDdcoAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMzExMzlmODllODI1OTYyYTdlMzM4MGFkZTc1YjU2YWI1 YmFhZDUwHhcNMjUxMjE2MDEwMTA0WhcNMjUxMjE3MDEwMTA0WjAzMTEwLwYDVQQD Eyg1NmM0NTM1NjExOGExN2ZlMTY1NDc2Y2ZkOGFmZjYwY2Q0NWUzOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncPjTpPcjUv/SX6Wt+Z3jPiwWTCY /C8noWczIi4kVkKWydtGkwU2eHmtD9Vjlce1rPswWV9LRJKBjTwc1vmgMin7OaxB AQFaMEFahZ123QE7Hbw+hcs/E7GHYUQWXox3FCEk1nMifQB9qt2mH7NnaZL7xjGM F6rcGKnTILRz3cmpAb9yBhAh392CogDLCpWVXmxC+/NNjnMQx4IKIBoVZawx/23P H4Lmf2tquR6CdcPyQJfhGQ8Vsbn/qiMOot3paKnx/m4pH/emCSTO2e8+LGN+Xt4s PYPBF2yQUXO4Fmu9XqQaOZaJICnGhhL9gjJzvGgjlaPQIQf5eNgOqt1dVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbEU1YRihf+FlR2z9iv9gzUXjjxMB8GA1UdIwQY MBaAFB8xE5+J6CWWKn4zgK3nW1arW6rVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2Yt YmUxN2I4YWFkNTU0LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2YtYmUxN2I4YWFkNTU0 LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBMLtZx4 tl7xarc4BRBQLwAoYcjtcYjngq6hr4zb3D2rrLFuasuCvGmmXAUslFt9J4/HwBST OT96ZtOA23S2kOR8ftiqtbYzWw2tndPqzifbgRy99GjdxXDpfizZ9GmFIoYoMlS9 v5LosWPsQqiNDR0NhPrA/xFRk3qd5hL5ZS3Hayjckk1Vli4c/K0W+aUSiB+bJkMy nGFeRkq9H0AgYT2z/Z9fIxHhzxZts2xDyovm2IPDBGDc6fozpxsJvGywJgJ3OVcI CJwyBFG7l3R6lBrYGJPM849INsm+hjPIV/6e5pSnlg2RdG3CG34MQevV2hq+CbzJ 3KAhwg5wBQMrlg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:45:18 2025 by rpki-client