This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json) Hash identifier: Q6QasF7V67K2X+rRRa1wvhtr/n61TiCVPY8YzZalRCQ= Subject key identifier: C3:96:3A:AB:AF:5A:27:FE:33:C2:5A:53:47:9D:8E:BE:8E:FA:C7:85 Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Certificate serial: 019B0ECA0621A2B01182E2C7B5BEC9ADB703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft Manifest number: 0B08 Signing time: Thu 11 Dec 2025 19:01:19 +0000 Manifest this update: Thu 11 Dec 2025 19:01:19 +0000 Manifest next update: Fri 12 Dec 2025 19:01:19 +0000 Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=) 2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: khh2vITH3ztLqR8cyJnrf68j0qAkQpMelimv5DoQRfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:06:21:a2:b0:11:82:e2:c7:b5:be:c9:ad:b7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Validity Not Before: Dec 11 19:01:19 2025 GMT Not After : Dec 12 19:01:19 2025 GMT Subject: CN=c3963aabaf5a27fe33c25a53479d8ebe8efac785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1d:31:c8:1e:25:88:4e:9f:1c:32:8c:98:cb: 09:ae:8b:d6:4c:62:0f:1d:3d:50:c2:54:7a:73:77: 67:09:3c:47:77:1d:2f:b0:99:62:87:f9:a1:41:13: 48:6f:6f:52:f1:ff:2b:53:d6:fe:b5:80:65:93:3f: 0e:9e:f8:19:52:a4:fa:39:f7:0e:aa:31:3e:65:6c: 46:89:d5:3c:d1:86:6c:2d:44:d5:c1:96:ff:ef:23: 70:7c:fa:10:f0:ae:ac:dc:3d:b8:3c:9f:43:db:92: e3:39:5e:06:36:0e:93:69:1c:25:f4:77:a5:2b:f3: db:82:7d:f0:62:69:a1:75:e7:ca:0a:58:6e:05:71: 79:55:cb:e5:bf:cf:d2:49:87:d1:34:7d:6b:2c:bd: a0:aa:dc:db:07:5e:5d:aa:11:25:18:a8:76:6f:14: fe:be:b8:ff:84:12:46:04:42:c6:60:2c:07:07:dd: 8c:12:81:45:e2:f3:43:36:04:bc:64:bd:33:87:15: a7:f2:e7:bd:73:f4:16:d6:88:e7:d0:4d:40:6c:63: 35:db:aa:8a:6f:96:a5:ed:4a:84:61:ae:67:5f:37: c5:9d:f4:9b:77:14:a4:f3:73:93:6e:20:c1:f7:58: 49:36:97:3b:1a:b2:94:9b:f8:7a:60:11:4e:b5:e2: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:96:3A:AB:AF:5A:27:FE:33:C2:5A:53:47:9D:8E:BE:8E:FA:C7:85 X509v3 Authority Key Identifier: keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:32:81:99:1b:95:4c:ee:26:95:83:c7:01:7e:d2:1b:8e:45: d5:4c:7f:9c:fc:2a:9b:a7:74:63:38:b3:24:bf:00:0c:9f:37: 02:0c:36:4e:db:6c:b9:6f:43:01:28:17:d7:da:9e:55:fe:de: 8f:43:93:68:a4:81:03:34:9c:e0:04:3a:f8:cb:bb:25:47:f2: d4:b6:5d:fb:47:50:28:c8:4b:41:d9:81:76:ed:dd:2a:27:38: fe:69:73:dd:74:cb:07:7f:ef:ba:d5:3e:ac:1d:2a:0e:f8:21: 8b:8f:76:d0:f3:8b:8e:2f:94:d0:04:8b:11:e3:5d:4a:89:ad: 30:85:1a:c8:55:5d:2b:85:f7:d6:d9:36:f5:7b:c4:77:9a:45: bc:94:1c:05:2e:07:79:ad:e1:37:ba:8f:3e:7d:55:77:b8:af: cd:a5:d2:91:5f:05:55:9a:8c:28:87:93:f9:9b:8f:7f:fc:cd: cc:23:72:43:01:8a:70:ab:6d:50:39:52:58:61:c6:ad:0a:4c: b8:b0:42:b5:d8:ce:fe:1e:66:a3:35:0a:97:7b:59:54:08:a8: 3c:d0:b4:56:c9:f3:37:3e:be:a5:9c:1d:a5:aa:b9:cf:ba:26: 61:55:ad:cf:ff:06:39:a8:df:49:3f:43:d4:68:74:36:da:9b: 73:60:79:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOygYhorARguLHtb7JrbcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMmVhYWQ3YTg3MDY2MTVkMWM4NDM2ZGNlMDE5NTQ5NWYy MTRhODcwHhcNMjUxMjExMTkwMTE5WhcNMjUxMjEyMTkwMTE5WjAzMTEwLwYDVQQD EyhjMzk2M2FhYmFmNWEyN2ZlMzNjMjVhNTM0NzlkOGViZThlZmFjNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R0xyB4liE6fHDKMmMsJrovWTGIP HT1QwlR6c3dnCTxHdx0vsJlih/mhQRNIb29S8f8rU9b+tYBlkz8OnvgZUqT6OfcO qjE+ZWxGidU80YZsLUTVwZb/7yNwfPoQ8K6s3D24PJ9D25LjOV4GNg6TaRwl9Hel K/Pbgn3wYmmhdefKClhuBXF5Vcvlv8/SSYfRNH1rLL2gqtzbB15dqhElGKh2bxT+ vrj/hBJGBELGYCwHB92MEoFF4vNDNgS8ZL0zhxWn8ue9c/QW1ojn0E1AbGM126qK b5al7UqEYa5nXzfFnfSbdxSk83OTbiDB91hJNpc7GrKUm/h6YBFOteL5gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOWOquvWif+M8JaU0edjr6O+seFMB8GA1UdIwQY MBaAFB4uqteocGYV0chDbc4BlUlfIUqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYt MmM5OGYxN2I4ZWIzLzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYtMmM5OGYxN2I4ZWIz LzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzKBmRuV TO4mlYPHAX7SG45F1Ux/nPwqm6d0YzizJL8ADJ83Agw2TttsuW9DASgX19qeVf7e j0OTaKSBAzSc4AQ6+Mu7JUfy1LZd+0dQKMhLQdmBdu3dKic4/mlz3XTLB3/vutU+ rB0qDvghi4920POLji+U0ASLEeNdSomtMIUayFVdK4X31tk29XvEd5pFvJQcBS4H ea3hN7qPPn1Vd7ivzaXSkV8FVZqMKIeT+ZuPf/zNzCNyQwGKcKttUDlSWGHGrQpM uLBCtdjO/h5mozUKl3tZVAioPNC0VsnzNz6+pZwdpaq5z7omYVWtz/8GOajfST9D 1Gh0Ntqbc2B5qQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:31 2025 by rpki-client