This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json) Hash identifier: 86GEha2aOUFvtKBMsspuGM0JbjhEFZNhZzFQTsAvdGE= Subject key identifier: C3:90:80:8D:17:97:0D:F6:D3:9D:EF:43:69:49:05:F1:10:D5:AB:94 Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Certificate serial: 019B2C2F25A7027ED8742AEF5E72D4B3720C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft Manifest number: 0E20 Signing time: Wed 17 Dec 2025 12:00:45 +0000 Manifest this update: Wed 17 Dec 2025 12:00:45 +0000 Manifest next update: Thu 18 Dec 2025 12:00:45 +0000 Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: 0APxz75458OJisIIAIB7K8Xk8fT9WdO0MLO1qGwA8Eo=) 2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:25:a7:02:7e:d8:74:2a:ef:5e:72:d4:b3:72:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Validity Not Before: Dec 17 12:00:45 2025 GMT Not After : Dec 18 12:00:45 2025 GMT Subject: CN=c390808d17970df6d39def43694905f110d5ab94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:70:50:46:34:56:16:73:73:36:73:96:96: 90:14:66:a4:8c:e1:d0:a5:3e:2c:29:7d:f3:6f:a5: 8b:a9:0f:1e:bc:d5:bd:e7:55:b1:1f:e1:e1:cd:9c: a7:50:3f:f1:21:b6:3e:03:93:3f:48:29:67:5e:34: 7d:2e:3d:f1:06:78:81:3f:b2:82:1a:ee:84:eb:b5: fd:f4:6e:50:50:e7:1b:4d:4b:43:a1:82:fe:61:b2: 89:2a:35:3e:7b:ef:12:04:d7:f2:fe:96:a2:85:05: 31:92:1e:cc:ef:8d:07:56:d7:47:d1:5a:2e:f7:33: 31:02:aa:ff:78:7e:2d:b6:e1:a0:22:8e:8d:e8:3c: 12:f0:a3:49:07:85:99:ad:56:17:b5:13:37:90:ef: 9b:e7:8c:1a:c5:86:ee:97:21:83:7b:b4:a5:a4:fc: d6:4c:34:fe:ec:96:cd:0f:4c:df:8d:98:44:5f:81: 6e:d2:0e:3b:e5:fe:ce:00:73:4f:0a:66:34:d6:80: d8:24:ad:61:f0:32:31:d8:4f:bc:d7:3b:ad:8e:ba: 67:a4:cc:56:d7:c9:5c:48:f9:13:a5:ab:0d:5d:1f: 76:18:db:3a:ca:ed:02:76:96:7f:d9:8c:15:f7:cd: 54:d8:6a:ee:62:dc:7f:2f:11:d6:43:db:c4:e7:c9: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:90:80:8D:17:97:0D:F6:D3:9D:EF:43:69:49:05:F1:10:D5:AB:94 X509v3 Authority Key Identifier: keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:72:7b:85:f4:8b:17:78:b0:8f:5f:ed:16:7b:02:ea:3a:0b: 4a:7c:32:ec:e2:be:8e:f6:45:c2:8a:be:86:d5:c0:bc:2c:94: cb:63:64:b6:4e:ec:2d:13:8e:6a:47:4f:a2:57:a7:dc:31:32: 09:9e:db:23:e7:81:16:9e:44:38:5c:76:c4:19:05:0d:eb:ae: a2:37:da:ca:b5:2d:c0:19:18:7c:e8:21:e2:4a:d6:84:40:0b: a5:5e:e3:9e:d8:70:21:1e:2a:2e:e4:3f:57:23:1c:5b:7f:5d: 82:78:4b:dd:ac:97:48:51:f6:20:aa:7c:38:8c:c7:5f:b3:33: 0c:b5:26:bc:18:f7:42:6b:23:5e:47:9a:f1:e2:d1:54:b6:ac: db:17:f5:1d:89:a2:3d:98:0e:3c:45:1d:b1:f9:91:c6:f0:31: 06:a4:ed:80:f6:7f:ad:6d:b1:24:aa:61:81:bf:cc:ad:bc:d0: 97:ff:22:b8:89:0a:d1:a5:35:76:12:f2:3f:e5:af:f0:c8:66: 4a:cc:97:fa:23:05:87:c0:3c:82:95:a9:84:16:1c:12:7b:1b: 7e:6d:87:a0:ee:b4:a6:74:0b:e8:5c:5d:be:57:10:1b:8a:18: 65:bc:cd:40:aa:cd:66:86:23:6f:55:56:35:34:c6:b3:45:f8: 47:dc:83:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLyWnAn7YdCrvXnLUs3IMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz NDQ4YTAwHhcNMjUxMjE3MTIwMDQ1WhcNMjUxMjE4MTIwMDQ1WjAzMTEwLwYDVQQD EyhjMzkwODA4ZDE3OTcwZGY2ZDM5ZGVmNDM2OTQ5MDVmMTEwZDVhYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsJwUEY0VhZzczZzlpaQFGakjOHQ pT4sKX3zb6WLqQ8evNW951WxH+HhzZynUD/xIbY+A5M/SClnXjR9Lj3xBniBP7KC Gu6E67X99G5QUOcbTUtDoYL+YbKJKjU+e+8SBNfy/paihQUxkh7M740HVtdH0Vou 9zMxAqr/eH4ttuGgIo6N6DwS8KNJB4WZrVYXtRM3kO+b54waxYbulyGDe7SlpPzW TDT+7JbND0zfjZhEX4Fu0g475f7OAHNPCmY01oDYJK1h8DIx2E+81zutjrpnpMxW 18lcSPkTpasNXR92GNs6yu0CdpZ/2YwV981U2GruYtx/LxHWQ9vE58kwpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOQgI0Xlw32053vQ2lJBfEQ1auUMB8GA1UdIwQY MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3 LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3J7hfSL F3iwj1/tFnsC6joLSnwy7OK+jvZFwoq+htXAvCyUy2Nktk7sLROOakdPolen3DEy CZ7bI+eBFp5EOFx2xBkFDeuuojfayrUtwBkYfOgh4krWhEALpV7jnthwIR4qLuQ/ VyMcW39dgnhL3ayXSFH2IKp8OIzHX7MzDLUmvBj3QmsjXkea8eLRVLas2xf1HYmi PZgOPEUdsfmRxvAxBqTtgPZ/rW2xJKphgb/MrbzQl/8iuIkK0aU1dhLyP+Wv8Mhm SsyX+iMFh8A8gpWphBYcEnsbfm2HoO60pnQL6FxdvlcQG4oYZbzNQKrNZoYjb1VW NTTGs0X4R9yDoA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:46 2025 by rpki-client