This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json) Hash identifier: 6il33Pcnz4v+hvtdZm2SwT+9DmNa5XiA1UZgPs39+VM= Subject key identifier: CC:98:25:2E:1A:97:3B:31:45:44:4E:80:90:71:CF:29:FB:9E:6C:CD Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Certificate serial: 019B1125C4433BA2E702D566187672287B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft Manifest number: 0E12 Signing time: Fri 12 Dec 2025 06:00:46 +0000 Manifest this update: Fri 12 Dec 2025 06:00:46 +0000 Manifest next update: Sat 13 Dec 2025 06:00:46 +0000 Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: wTPh20fUpuHc1fFApCLEkLikfceqKHWW6bnGOKXi140=) 2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:c4:43:3b:a2:e7:02:d5:66:18:76:72:28:7b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Validity Not Before: Dec 12 06:00:46 2025 GMT Not After : Dec 13 06:00:46 2025 GMT Subject: CN=cc98252e1a973b3145444e809071cf29fb9e6ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:71:b9:60:c4:7e:14:23:3c:17:7f:0b:fa: 4c:dd:07:ac:5b:c9:6c:08:3c:69:f2:21:9e:e2:3e: 63:f4:19:f8:68:0e:8f:a2:a8:ca:32:0b:f1:31:2f: 5f:25:28:1a:6c:7f:89:bd:bb:55:8e:8e:bf:7c:e7: c1:8b:77:8e:66:7f:bc:8d:74:a3:d6:74:a7:1a:48: 69:85:9c:32:89:08:3b:c0:9b:0c:12:fc:4e:cb:57: 7b:9b:fd:43:39:bf:26:5f:b0:60:21:7b:4b:16:e7: 4e:5e:ac:05:24:61:7e:a6:7f:a5:ce:53:e8:1c:6a: 71:33:32:d3:38:72:19:2f:82:95:1d:78:6d:15:9c: 67:61:9c:ab:9f:08:1d:bc:0c:00:54:ac:a0:4e:c7: 17:14:b6:52:83:b6:31:dd:3e:e5:d9:d9:cf:68:d9: 15:ed:0c:23:b1:0c:9c:26:aa:5f:1d:ff:f6:c4:81: 68:25:d4:5e:4c:15:68:aa:d2:c9:3b:04:0b:b1:f7: 8a:32:c4:e5:ae:e0:b2:24:3b:82:d6:76:2f:df:83: 68:e9:e3:91:b3:db:d5:c2:4b:9a:55:40:a4:02:9b: 94:cc:2f:01:93:46:6c:a2:63:4f:45:c0:4b:e5:83: b6:62:64:19:80:f0:e8:bf:04:cb:ab:8f:88:22:41: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:25:2E:1A:97:3B:31:45:44:4E:80:90:71:CF:29:FB:9E:6C:CD X509v3 Authority Key Identifier: keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ed:3b:42:86:03:93:f6:f7:7b:e0:52:40:ee:db:cc:59:02: 2e:d9:8d:1b:42:64:99:97:2d:8c:7b:c4:a0:96:e0:f9:ad:fe: ff:fb:60:04:14:a4:a0:16:94:ae:d9:85:e6:0a:56:a2:09:11: 14:09:71:0f:5e:ee:b7:02:11:e4:f3:7e:c5:79:cb:33:7d:04: 9c:25:e7:03:7d:66:29:fa:b7:dc:f7:23:95:a5:a2:bc:bb:59: 9d:7f:86:77:30:35:c9:83:19:dc:21:c2:c0:88:71:1d:11:a8: b2:30:b7:a8:92:be:65:54:b6:37:bd:55:1f:91:7d:4d:d9:3b: ae:89:62:e1:26:55:74:f6:a0:e8:52:43:b4:e5:1f:47:f2:50: 43:ed:71:5c:b0:ab:e6:51:b4:1b:5a:90:fa:a0:4e:2b:b5:51: 87:60:e8:46:45:8d:69:ae:a7:2c:66:67:f1:49:b4:ab:77:e2: 24:01:d7:be:df:7e:35:1a:a1:61:48:ff:12:9e:d1:93:ff:9d: 2e:0c:9a:62:f8:72:c0:13:f3:75:9f:37:b1:e7:11:cf:4c:f2: 6a:d9:5d:37:30:8e:9c:ef:d4:3d:50:5a:14:75:32:ac:91:20: 3a:1a:a7:05:f4:f2:82:db:d4:aa:26:9c:49:36:a6:4c:ab:80: 07:26:89:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJcRDO6LnAtVmGHZyKHuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz NDQ4YTAwHhcNMjUxMjEyMDYwMDQ2WhcNMjUxMjEzMDYwMDQ2WjAzMTEwLwYDVQQD EyhjYzk4MjUyZTFhOTczYjMxNDU0NDRlODA5MDcxY2YyOWZiOWU2Y2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d5xuWDEfhQjPBd/C/pM3QesW8ls CDxp8iGe4j5j9Bn4aA6PoqjKMgvxMS9fJSgabH+JvbtVjo6/fOfBi3eOZn+8jXSj 1nSnGkhphZwyiQg7wJsMEvxOy1d7m/1DOb8mX7BgIXtLFudOXqwFJGF+pn+lzlPo HGpxMzLTOHIZL4KVHXhtFZxnYZyrnwgdvAwAVKygTscXFLZSg7Yx3T7l2dnPaNkV 7QwjsQycJqpfHf/2xIFoJdReTBVoqtLJOwQLsfeKMsTlruCyJDuC1nYv34No6eOR s9vVwkuaVUCkApuUzC8Bk0ZsomNPRcBL5YO2YmQZgPDovwTLq4+IIkHSnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyYJS4alzsxRUROgJBxzyn7nmzNMB8GA1UdIwQY MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3 LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu07QoYD k/b3e+BSQO7bzFkCLtmNG0JkmZctjHvEoJbg+a3+//tgBBSkoBaUrtmF5gpWogkR FAlxD17utwIR5PN+xXnLM30EnCXnA31mKfq33PcjlaWivLtZnX+GdzA1yYMZ3CHC wIhxHRGosjC3qJK+ZVS2N71VH5F9Tdk7roli4SZVdPag6FJDtOUfR/JQQ+1xXLCr 5lG0G1qQ+qBOK7VRh2DoRkWNaa6nLGZn8Um0q3fiJAHXvt9+NRqhYUj/Ep7Rk/+d LgyaYvhywBPzdZ83secRz0zyatldNzCOnO/UPVBaFHUyrJEgOhqnBfTygtvUqiac STamTKuAByaJ+g== -----END CERTIFICATE-----Generated at Fri Dec 12 08:42:46 2025 by rpki-client