This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft File: hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft (raw, json) Hash identifier: 2HjCqJ3tRAZJJVl9+/byT61NYjZf14CBdEUtF7mQ4eY= Subject key identifier: AF:5F:5B:9D:06:97:76:30:74:5D:E5:43:B3:94:0D:8B:1D:9F:6E:AE Authority key identifier: 87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F Certificate issuer: /CN=8738bf1cc1381678038ef5da67642398e3d9819f Certificate serial: 019B5A1AD825152FB0FD16B6DA9F4BE089A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft Manifest number: 02E3 Signing time: Fri 26 Dec 2025 10:01:07 +0000 Manifest this update: Fri 26 Dec 2025 10:01:07 +0000 Manifest next update: Sat 27 Dec 2025 10:01:07 +0000 Files and hashes: 1: hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl (hash: dugm73Wg2c5Lybru2q+jO22H2kUFsKzVTZK0GEi0VUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d8:25:15:2f:b0:fd:16:b6:da:9f:4b:e0:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8738bf1cc1381678038ef5da67642398e3d9819f Validity Not Before: Dec 26 10:01:07 2025 GMT Not After : Dec 27 10:01:07 2025 GMT Subject: CN=af5f5b9d06977630745de543b3940d8b1d9f6eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:b1:18:06:09:11:73:ea:4e:e3:44:37:e3: 1b:1b:59:7a:d7:7f:58:29:01:a9:f0:bf:14:96:02: 24:0e:bc:0e:2e:8e:00:20:db:a5:1f:4c:8f:7c:8f: 04:d8:79:f2:e2:3b:86:b4:a8:43:7d:e5:87:e9:4d: 37:b1:64:d1:47:1b:8f:3c:ac:9f:da:d1:63:60:80: 69:7d:ce:dd:52:85:a8:d7:28:8a:8c:56:90:f2:45: df:3a:31:18:c3:5f:b3:65:1b:f3:4d:1c:74:eb:58: cd:0b:d0:93:bd:c6:b7:19:fc:24:4e:90:40:0f:13: 5e:49:11:e8:f0:63:e1:0c:3c:b3:91:50:e6:0e:69: ef:3b:59:4a:39:43:63:ed:58:fc:a4:d5:87:e6:e7: 66:22:aa:5b:92:7a:bd:60:7a:31:d2:2f:90:f3:c9: 2e:3e:31:b6:05:55:cc:7f:cc:16:5b:ca:4f:af:cb: f1:3c:ba:f5:2b:35:39:f2:43:97:f8:f0:93:b5:f6: b7:ce:09:f1:c5:85:07:17:2c:4f:4a:eb:b1:d8:94: 54:b7:94:58:62:a2:aa:eb:62:18:f2:e3:35:66:ad: 15:90:fb:9c:64:98:f7:92:2b:40:40:3a:17:90:45: f9:e3:6d:35:44:25:9f:68:f7:b9:12:66:8d:52:08: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:5B:9D:06:97:76:30:74:5D:E5:43:B3:94:0D:8B:1D:9F:6E:AE X509v3 Authority Key Identifier: keyid:87:38:BF:1C:C1:38:16:78:03:8E:F5:DA:67:64:23:98:E3:D9:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzi_HME4FngDjvXaZ2QjmOPZgZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b28eb-b5ac-46fc-896b-51f73cd125bf/1/hzi_HME4FngDjvXaZ2QjmOPZgZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:dc:df:7a:8f:a2:69:2d:0e:b2:0e:4a:4e:ec:4b:86:1d:d1: d1:24:cb:b3:27:37:6b:7a:3f:39:1d:d3:73:41:69:68:f6:06: c4:51:c9:c6:dc:7a:7a:61:ef:be:d5:26:45:e1:c5:f7:f2:e8: 0b:7e:96:4a:4c:3d:31:ce:36:d7:92:4b:89:f4:94:6d:97:50: 0b:1f:20:f9:94:5e:d5:34:84:14:91:92:43:78:4e:19:30:0e: db:69:b4:10:62:4c:eb:1c:6b:86:46:ee:f0:71:d3:50:78:04: 2a:50:10:6f:9c:7e:fb:0e:88:0d:56:f1:17:89:8e:77:e8:48: 5b:9b:0e:e0:7f:c9:ee:9f:2c:f7:be:ef:47:10:e1:17:d4:53: 74:6f:a1:8f:27:a7:c2:17:50:c2:3b:40:ce:b1:43:65:fe:c8: 47:86:41:81:e3:ea:c0:ba:c1:62:62:e2:0e:b3:b0:73:6d:fa: 8d:f3:b6:07:5d:ec:7c:da:6b:2b:50:9f:28:3c:d9:af:2e:d6: 06:ee:ef:36:16:27:2b:a7:06:72:81:4a:97:de:f9:61:cc:20: 2b:b6:04:b2:8f:8a:83:ba:58:07:3f:36:cd:a4:b4:32:93:95: f0:b3:b7:c3:91:b0:35:a3:81:92:62:ee:cf:d1:c1:f2:e4:15: 6a:7c:bf:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtglFS+w/Ra22p9L4ImgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzhiZjFjYzEzODE2NzgwMzhlZjVkYTY3NjQyMzk4ZTNk OTgxOWYwHhcNMjUxMjI2MTAwMTA3WhcNMjUxMjI3MTAwMTA3WjAzMTEwLwYDVQQD EyhhZjVmNWI5ZDA2OTc3NjMwNzQ1ZGU1NDNiMzk0MGQ4YjFkOWY2ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSxGAYJEXPqTuNEN+MbG1l6139Y KQGp8L8UlgIkDrwOLo4AINulH0yPfI8E2Hny4juGtKhDfeWH6U03sWTRRxuPPKyf 2tFjYIBpfc7dUoWo1yiKjFaQ8kXfOjEYw1+zZRvzTRx061jNC9CTvca3GfwkTpBA DxNeSRHo8GPhDDyzkVDmDmnvO1lKOUNj7Vj8pNWH5udmIqpbknq9YHox0i+Q88ku PjG2BVXMf8wWW8pPr8vxPLr1KzU58kOX+PCTtfa3zgnxxYUHFyxPSuux2JRUt5RY YqKq62IY8uM1Zq0VkPucZJj3kitAQDoXkEX54201RCWfaPe5EmaNUgilZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9fW50Gl3YwdF3lQ7OUDYsdn26uMB8GA1UdIwQY MBaAFIc4vxzBOBZ4A4712mdkI5jj2YGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmIt NTFmNzNjZDEyNWJmLzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjI4ZWItYjVhYy00NmZjLTg5NmItNTFmNzNjZDEyNWJm LzEvaHppX0hNRTRGbmdEanZYYVoyUWptT1BaZ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNzfeo+i aS0Osg5KTuxLhh3R0STLsyc3a3o/OR3Tc0FpaPYGxFHJxtx6emHvvtUmReHF9/Lo C36WSkw9Mc4215JLifSUbZdQCx8g+ZRe1TSEFJGSQ3hOGTAO22m0EGJM6xxrhkbu 8HHTUHgEKlAQb5x++w6IDVbxF4mOd+hIW5sO4H/J7p8s977vRxDhF9RTdG+hjyen whdQwjtAzrFDZf7IR4ZBgePqwLrBYmLiDrOwc236jfO2B13sfNprK1CfKDzZry7W Bu7vNhYnK6cGcoFKl975YcwgK7YEso+Kg7pYBz82zaS0MpOV8LO3w5GwNaOBkmLu z9HB8uQVany/zQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:53 2025 by rpki-client