This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft File: hebJukv_0bW6FFCrXdaderdAEGA.mft (raw, json) Hash identifier: 7BQD3p4XWTGKGOH9AVlUQfFMi07J0qd2apcVv9uvobE= Subject key identifier: FB:1D:E6:D7:1D:71:F7:AE:4B:17:67:9D:EB:22:56:92:06:97:89:B7 Authority key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60 Certificate issuer: /CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060 Certificate serial: 019B59E3927A8C04AD2F2770BD1AB32E8745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft Manifest number: 0111 Signing time: Fri 26 Dec 2025 09:00:44 +0000 Manifest this update: Fri 26 Dec 2025 09:00:44 +0000 Manifest next update: Sat 27 Dec 2025 09:00:44 +0000 Files and hashes: 1: hebJukv_0bW6FFCrXdaderdAEGA.crl (hash: /9EOUd9JbOIKvf2+sIjd/Tc0hUDJk1BcHLGYDO6AfIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:92:7a:8c:04:ad:2f:27:70:bd:1a:b3:2e:87:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060 Validity Not Before: Dec 26 09:00:44 2025 GMT Not After : Dec 27 09:00:44 2025 GMT Subject: CN=fb1de6d71d71f7ae4b17679deb225692069789b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:9f:6b:ef:bf:c1:f4:09:18:8d:71:30:98: 84:ad:b3:23:3c:67:56:c9:5c:dd:fa:c1:00:07:b2: c5:21:73:00:e3:70:b1:e8:6f:0a:d8:2e:a8:ac:bc: 6e:c6:da:2e:4e:9b:e4:db:9b:d6:18:34:cb:ce:c6: 47:8d:32:aa:51:12:c7:71:66:08:a4:a2:5e:46:57: fb:f9:12:56:96:05:05:cb:1b:cc:b8:0f:50:71:d5: dc:52:94:7c:c0:e3:f3:00:98:fc:88:41:83:39:dc: e5:9b:84:04:bd:61:15:45:24:67:fc:2d:c0:52:16: 1e:2f:2d:10:fe:a8:2f:04:05:34:90:60:b5:0c:23: ba:0d:40:71:6c:3b:05:69:f9:e7:ec:8f:c2:43:b6: 98:44:5a:dd:14:6c:d6:63:d7:ef:65:47:49:8e:31: 3f:47:d9:12:3e:56:30:70:73:e4:c2:e8:1d:2d:f2: 56:bc:ea:d5:86:d0:8e:70:3e:b5:1e:11:ae:19:e0: c4:f6:90:00:e2:83:e2:7a:f0:72:33:f8:35:77:28: bd:68:c8:ca:a7:a7:fd:b6:6d:7d:13:25:f1:f0:dd: 4c:9d:20:78:23:ab:1c:8b:01:fd:11:d9:b6:03:72: b2:89:f5:90:c3:5f:98:34:e0:8b:18:d1:d1:66:a0: 42:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1D:E6:D7:1D:71:F7:AE:4B:17:67:9D:EB:22:56:92:06:97:89:B7 X509v3 Authority Key Identifier: keyid:85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:a1:8f:d2:86:33:ec:73:7f:69:b1:03:b5:21:7b:0e:3c: cc:e4:88:8c:24:06:91:f5:ec:19:5a:31:2e:31:7f:60:eb:5e: 39:bc:30:b0:9f:b6:2b:ef:8d:c7:7e:65:3c:c5:ac:6a:0e:b7: 01:af:48:d9:b6:ee:35:1e:5f:74:d3:9b:2b:66:0f:a3:10:34: bb:50:7b:4c:e8:71:31:3e:e2:60:c1:ec:fc:33:8a:23:cd:65: aa:88:e5:12:71:d3:05:5e:ba:0b:67:b1:7c:e3:44:7c:f6:10: fa:0e:e9:9e:be:0e:17:75:af:dd:9a:97:36:11:97:90:05:43: 6e:31:65:d8:31:b3:b3:4a:ef:9a:e7:83:a3:f2:fc:a7:d9:07: a7:06:94:4e:b5:bf:df:65:cf:3e:83:2d:27:2b:df:fa:f5:93: 76:42:70:be:e6:61:aa:05:6f:42:65:48:89:33:c5:cc:3f:90: 37:fd:68:48:e9:d1:e7:b6:96:7c:77:78:c0:6b:53:6d:bf:d6: db:a9:30:d3:30:40:5e:d2:9e:b9:5f:47:a7:f9:25:08:3e:39: ea:f7:10:5e:f5:27:81:bd:2a:65:88:ab:8a:bc:3f:4b:05:9b: c9:fd:34:9a:a4:ce:cc:e1:d5:5b:87:a1:94:75:c5:ed:3f:0d: 6e:27:b2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45J6jAStLydwvRqzLodFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZTZjOWJhNGJmZmQxYjViYTE0NTBhYjVkZDY5ZDdhYjc0 MDEwNjAwHhcNMjUxMjI2MDkwMDQ0WhcNMjUxMjI3MDkwMDQ0WjAzMTEwLwYDVQQD EyhmYjFkZTZkNzFkNzFmN2FlNGIxNzY3OWRlYjIyNTY5MjA2OTc4OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyWfa++/wfQJGI1xMJiErbMjPGdW yVzd+sEAB7LFIXMA43Cx6G8K2C6orLxuxtouTpvk25vWGDTLzsZHjTKqURLHcWYI pKJeRlf7+RJWlgUFyxvMuA9QcdXcUpR8wOPzAJj8iEGDOdzlm4QEvWEVRSRn/C3A UhYeLy0Q/qgvBAU0kGC1DCO6DUBxbDsFafnn7I/CQ7aYRFrdFGzWY9fvZUdJjjE/ R9kSPlYwcHPkwugdLfJWvOrVhtCOcD61HhGuGeDE9pAA4oPievByM/g1dyi9aMjK p6f9tm19EyXx8N1MnSB4I6sciwH9Edm2A3KyifWQw1+YNOCLGNHRZqBCKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsd5tcdcfeuSxdnnesiVpIGl4m3MB8GA1UdIwQY MBaAFIXmybpL/9G1uhRQq13WnXq3QBBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGViSnVrdl8wYlc2RkZDclhkYWRlcmRBRUdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83YjMxZGItODY0My00ODE1LTgwN2Qt NGU0MjNjYTUwNDg5LzEvaGViSnVrdl8wYlc2RkZDclhkYWRlcmRBRUdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83YjMxZGItODY0My00ODE1LTgwN2QtNGU0MjNjYTUwNDg5 LzEvaGViSnVrdl8wYlc2RkZDclhkYWRlcmRBRUdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT+hj9KG M+xzf2mxA7Uhew48zOSIjCQGkfXsGVoxLjF/YOteObwwsJ+2K++Nx35lPMWsag63 Aa9I2bbuNR5fdNObK2YPoxA0u1B7TOhxMT7iYMHs/DOKI81lqojlEnHTBV66C2ex fONEfPYQ+g7pnr4OF3Wv3ZqXNhGXkAVDbjFl2DGzs0rvmueDo/L8p9kHpwaUTrW/ 32XPPoMtJyvf+vWTdkJwvuZhqgVvQmVIiTPFzD+QN/1oSOnR57aWfHd4wGtTbb/W 26kw0zBAXtKeuV9Hp/klCD456vcQXvUngb0qZYirirw/SwWbyf00mqTOzOHVW4eh lHXF7T8Nbiey4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:27 2025 by rpki-client