This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft File: HeL84IWat-AbhRy2Buvb1cAzgSU.mft (raw, json) Hash identifier: 5qLNL++8dZbEAEo8d8cy/GHWcBd/s9CDqXGnnA+pvlo= Subject key identifier: 00:36:07:13:27:74:09:5D:FF:E7:70:44:09:6D:06:DD:C7:53:02:2D Authority key identifier: 1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25 Certificate issuer: /CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125 Certificate serial: 019B5AF66B604F76697B00E6269D8F7B45EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft Manifest number: 20 Signing time: Fri 26 Dec 2025 14:00:57 +0000 Manifest this update: Fri 26 Dec 2025 14:00:57 +0000 Manifest next update: Sat 27 Dec 2025 14:00:57 +0000 Files and hashes: 1: 4KV8lpniR8UxE5ZzouJqiraVYdU.roa (hash: 2DsJOVXnej+D8A8DI149UPDkM6EL2VAPk54dRCZJTH8=) 2: HeL84IWat-AbhRy2Buvb1cAzgSU.crl (hash: xT3hRNscwCVsitMZzw0oNsgAO29KVWZHlBIRoE5ZX2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:6b:60:4f:76:69:7b:00:e6:26:9d:8f:7b:45:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125 Validity Not Before: Dec 26 14:00:57 2025 GMT Not After : Dec 27 14:00:57 2025 GMT Subject: CN=003607132774095dffe77044096d06ddc753022d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:e4:45:c8:0f:69:7e:8e:b9:e2:a0:16:08: c1:a2:91:5e:87:54:f6:cc:ba:03:05:b4:3b:89:40: c7:80:a9:df:1f:92:c2:ec:6a:45:a2:fe:19:43:f1: 31:51:ad:c2:2b:be:45:43:88:50:b1:d9:64:82:da: 46:71:30:e2:e6:4d:95:21:96:78:41:75:07:af:00: 22:90:3c:d0:e8:83:ac:fd:b1:10:d4:a2:41:0a:8c: 9c:2b:b2:e2:c4:54:fe:d8:1c:e4:71:03:9b:37:66: 64:fe:95:af:f7:74:ca:fd:24:00:39:e4:93:45:e4: ee:34:e6:b7:12:78:55:79:3b:59:d1:bd:db:fd:c8: ba:66:fe:f5:e5:63:ee:46:48:a5:ec:75:15:dc:9c: 66:a5:1d:67:90:62:98:d8:41:9a:0a:f9:41:31:7e: 83:98:cc:d3:ca:93:97:0d:71:a7:2d:9c:79:30:b6: 9d:a6:2f:b1:a7:c8:c1:e0:74:16:3f:c1:b9:b9:39: ab:6b:0f:64:5c:5e:43:da:64:7a:a5:47:c7:63:54: 65:71:0c:42:cb:d2:85:00:c7:4e:12:74:f5:4d:27: 29:ba:18:ff:eb:33:49:59:cc:21:cf:3f:57:a1:dc: f8:e5:8a:bc:57:15:1e:20:0f:08:6f:52:e3:20:96: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:07:13:27:74:09:5D:FF:E7:70:44:09:6D:06:DD:C7:53:02:2D X509v3 Authority Key Identifier: keyid:1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:92:c2:47:fa:07:97:48:e6:e2:7d:83:ae:ad:79:af:1c: 94:b3:4a:a7:96:e4:5f:35:4b:8e:b6:16:1d:64:66:20:b4:04: 41:65:36:a1:9d:d8:b6:e9:7c:ef:54:39:a1:ad:5d:fb:a7:f2: f7:42:17:4f:28:2f:9b:24:58:f6:e2:ef:dc:26:6c:9f:38:c0: 7e:a1:48:59:ed:90:8a:37:d8:f1:4f:1d:9e:9c:55:4f:af:42: 42:00:08:5d:46:3f:ad:8a:b7:60:65:f3:ae:e8:bb:b6:5f:37: 94:45:14:47:e0:ea:7c:40:4f:55:bb:8c:84:9c:d5:63:5b:b0: 3c:99:f6:72:c1:df:82:aa:bf:ed:c4:a9:c7:e1:35:bc:77:c9: 7d:7d:a1:42:43:73:42:d0:ea:4f:d9:51:b1:41:1e:ad:92:da: ff:fd:df:7c:98:f8:a6:e8:a4:1a:86:48:1c:3d:34:44:73:c5: 96:50:cf:d8:d1:d5:89:9c:4b:e5:4c:af:e8:e3:e4:ef:07:c1: 55:d8:86:68:46:56:c8:fa:ac:0a:53:18:bc:ff:c0:2e:44:84: 96:cd:91:5d:cb:41:76:b6:cd:ff:c3:72:5e:03:a3:47:ab:32: da:cf:c8:f5:dd:a7:6e:3f:a3:71:d0:8e:6c:8f:7e:ae:05:f3: 53:b7:bd:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9mtgT3ZpewDmJp2Pe0XvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZTJmY2UwODU5YWI3ZTAxYjg1MWNiNjA2ZWJkYmQ1YzAz MzgxMjUwHhcNMjUxMjI2MTQwMDU3WhcNMjUxMjI3MTQwMDU3WjAzMTEwLwYDVQQD EygwMDM2MDcxMzI3NzQwOTVkZmZlNzcwNDQwOTZkMDZkZGM3NTMwMjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1rkRcgPaX6OueKgFgjBopFeh1T2 zLoDBbQ7iUDHgKnfH5LC7GpFov4ZQ/ExUa3CK75FQ4hQsdlkgtpGcTDi5k2VIZZ4 QXUHrwAikDzQ6IOs/bEQ1KJBCoycK7LixFT+2BzkcQObN2Zk/pWv93TK/SQAOeST ReTuNOa3EnhVeTtZ0b3b/ci6Zv715WPuRkil7HUV3JxmpR1nkGKY2EGaCvlBMX6D mMzTypOXDXGnLZx5MLadpi+xp8jB4HQWP8G5uTmraw9kXF5D2mR6pUfHY1RlcQxC y9KFAMdOEnT1TScpuhj/6zNJWcwhzz9Xodz45Yq8VxUeIA8Ib1LjIJZX+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA2BxMndAld/+dwRAltBt3HUwItMB8GA1UdIwQY MBaAFB3i/OCFmrfgG4Uctgbr29XAM4ElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVMODRJV2F0LUFiaFJ5MkJ1dmIxY0F6Z1NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iNjY1NjktMzNkYi00ZDg5LTlhNjct ZjA2OTM0NWU0MjhjLzEvSGVMODRJV2F0LUFiaFJ5MkJ1dmIxY0F6Z1NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iNjY1NjktMzNkYi00ZDg5LTlhNjctZjA2OTM0NWU0Mjhj LzEvSGVMODRJV2F0LUFiaFJ5MkJ1dmIxY0F6Z1NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFqSwkf6 B5dI5uJ9g66tea8clLNKp5bkXzVLjrYWHWRmILQEQWU2oZ3Ytul871Q5oa1d+6fy 90IXTygvmyRY9uLv3CZsnzjAfqFIWe2QijfY8U8dnpxVT69CQgAIXUY/rYq3YGXz rui7tl83lEUUR+DqfEBPVbuMhJzVY1uwPJn2csHfgqq/7cSpx+E1vHfJfX2hQkNz QtDqT9lRsUEerZLa//3ffJj4puikGoZIHD00RHPFllDP2NHViZxL5Uyv6OPk7wfB VdiGaEZWyPqsClMYvP/ALkSEls2RXctBdrbN/8NyXgOjR6sy2s/I9d2nbj+jcdCO bI9+rgXzU7e9wQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:48 2025 by rpki-client