This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json) Hash identifier: PJ66HfbFLUad0u+hYoaDdaGf3b3v1WTIfzO231XuqIM= Subject key identifier: 0F:FA:69:8D:74:C3:4D:9A:AC:A5:C2:A8:93:7C:83:0D:1C:7B:AF:E3 Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Certificate serial: 019B341F8D20F74D3050C846F83B2EDEFC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 01:00:41 +0000 Manifest this update: Fri 19 Dec 2025 01:00:41 +0000 Manifest next update: Sat 20 Dec 2025 01:00:41 +0000 Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: h3mD6xvtHZKGGVweaqq8TXUU8z29T70sP8IfmJXZV44=) 2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=) 3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:8d:20:f7:4d:30:50:c8:46:f8:3b:2e:de:fc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Validity Not Before: Dec 19 01:00:41 2025 GMT Not After : Dec 20 01:00:41 2025 GMT Subject: CN=0ffa698d74c34d9aaca5c2a8937c830d1c7bafe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:9a:57:97:93:6c:c7:d3:b6:27:2e:e8:be: 28:8f:19:28:66:54:de:4a:fc:3b:b3:d3:b1:1f:88: b9:54:78:14:d5:15:d6:bf:54:ce:05:01:83:ce:4c: 35:4c:19:3e:d7:bb:02:3f:da:f0:fe:14:2e:40:6c: d2:9d:d7:a1:6c:4d:81:35:de:7c:e4:c8:a1:e6:12: f1:b8:1e:f8:bd:61:25:87:e0:d4:d8:ce:1f:26:a8: 78:bd:05:e0:5e:71:7a:dd:71:78:e1:64:2a:9a:fc: 38:d3:bf:65:87:70:cc:c4:f5:cc:bc:c6:c4:a7:ef: 01:57:40:ee:b3:78:a4:c5:ff:f3:ab:18:77:02:16: 10:be:f9:4c:0d:09:17:c5:ad:3b:00:40:d9:e8:ee: e6:f5:95:97:1b:52:9b:7d:51:af:7b:ca:02:05:8f: 37:3a:d2:9b:ba:95:66:5b:0e:5b:4c:fa:41:a7:92: 18:2b:51:e0:b5:d5:50:2a:96:ce:65:9a:ae:16:64: 39:23:f7:d1:9d:16:74:6d:07:47:62:87:90:65:6e: 4d:fa:e3:a4:15:88:55:40:16:da:42:97:90:8c:cf: 3f:cf:6e:17:9e:af:2b:c9:73:e5:c6:12:68:d4:d6: 10:c3:e5:d1:2c:6f:1c:da:58:7b:4b:cf:1c:c0:70: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:69:8D:74:C3:4D:9A:AC:A5:C2:A8:93:7C:83:0D:1C:7B:AF:E3 X509v3 Authority Key Identifier: keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5a:8d:da:3f:d5:95:dd:40:97:a1:fa:ab:81:ef:4d:60:e5: 4c:ac:db:94:d5:51:54:82:52:f6:98:86:7a:bc:63:33:0c:73: b3:07:b6:43:6e:58:41:6c:d4:49:7e:f6:ff:61:09:1d:a3:6f: 32:24:b3:65:54:2e:fe:2e:74:71:fb:13:4c:a8:37:d3:66:32: a0:9f:e1:ef:7d:d0:95:cb:e9:eb:81:67:cb:a0:ec:c5:aa:34: 44:5f:7a:b8:5a:8f:b0:43:f3:27:4c:3e:2d:3d:81:20:bf:69: 9b:d1:13:ab:82:13:c4:a2:15:5c:4d:53:e3:a3:9d:47:44:4a: 51:44:d1:60:02:19:ef:16:9c:01:d3:4c:36:84:c9:cb:40:7a: 43:05:cd:e0:95:5c:12:85:06:6e:a1:0d:a9:5d:15:70:1d:ce: 22:af:e9:93:8e:e5:55:89:25:25:d8:96:53:fa:63:bb:ef:00: fc:27:49:bb:a1:67:e2:33:62:8a:3e:3b:22:53:3b:ca:97:ae: 60:f7:8a:36:e1:bb:f9:7a:b1:bd:b4:8d:46:f5:04:f7:96:72: 4e:02:f9:1d:0e:f4:b0:ce:e6:4d:2e:dc:bb:f5:d6:d6:e0:64: 44:5d:ef:a4:89:25:21:d3:71:1f:26:5a:9f:98:04:07:c5:42: 7c:41:62:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H40g900wUMhG+Dsu3vyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh YzY2NTQwHhcNMjUxMjE5MDEwMDQxWhcNMjUxMjIwMDEwMDQxWjAzMTEwLwYDVQQD EygwZmZhNjk4ZDc0YzM0ZDlhYWNhNWMyYTg5MzdjODMwZDFjN2JhZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pSaV5eTbMfTticu6L4ojxkoZlTe Svw7s9OxH4i5VHgU1RXWv1TOBQGDzkw1TBk+17sCP9rw/hQuQGzSndehbE2BNd58 5Mih5hLxuB74vWElh+DU2M4fJqh4vQXgXnF63XF44WQqmvw4079lh3DMxPXMvMbE p+8BV0Dus3ikxf/zqxh3AhYQvvlMDQkXxa07AEDZ6O7m9ZWXG1KbfVGve8oCBY83 OtKbupVmWw5bTPpBp5IYK1HgtdVQKpbOZZquFmQ5I/fRnRZ0bQdHYoeQZW5N+uOk FYhVQBbaQpeQjM8/z24Xnq8ryXPlxhJo1NYQw+XRLG8c2lh7S88cwHCidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/6aY10w02arKXCqJN8gw0ce6/jMB8GA1UdIwQY MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0 LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVqN2j/V ld1Al6H6q4HvTWDlTKzblNVRVIJS9piGerxjMwxzswe2Q25YQWzUSX72/2EJHaNv MiSzZVQu/i50cfsTTKg302YyoJ/h733Qlcvp64Fny6Dsxao0RF96uFqPsEPzJ0w+ LT2BIL9pm9ETq4ITxKIVXE1T46OdR0RKUUTRYAIZ7xacAdNMNoTJy0B6QwXN4JVc EoUGbqENqV0VcB3OIq/pk47lVYklJdiWU/pju+8A/CdJu6Fn4jNiij47IlM7ypeu YPeKNuG7+XqxvbSNRvUE95ZyTgL5HQ70sM7mTS7cu/XW1uBkRF3vpIklIdNxHyZa n5gEB8VCfEFisw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:29:33 2025 by rpki-client