This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json) Hash identifier: cPhE4j4wWiG1WdPbSfExZQXZ+uOYUu0UMkRszV/y9uw= Subject key identifier: EC:2B:0D:DD:F0:40:A0:CC:5B:8D:9B:CD:92:F1:B2:64:2F:E7:28:8D Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d Certificate serial: 019B5AF66E35B6D3DDCF374715425124EBF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft Manifest number: 1023 Signing time: Fri 26 Dec 2025 14:00:57 +0000 Manifest this update: Fri 26 Dec 2025 14:00:57 +0000 Manifest next update: Sat 27 Dec 2025 14:00:57 +0000 Files and hashes: 1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: f+qRBmROLpH0r8i0D/v7SuUYc5r8ogHTsSmf/wivP9o=) 2: ninSWYVRxBIemI94j-PYMUSu2YA.roa (hash: QrrWAcI9XBwetBsmpQPw5YCVH1U9RR0mswsdxCxACug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:6e:35:b6:d3:dd:cf:37:47:15:42:51:24:eb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865786c75fc16584b0271ff27b971d723416618d Validity Not Before: Dec 26 14:00:57 2025 GMT Not After : Dec 27 14:00:57 2025 GMT Subject: CN=ec2b0dddf040a0cc5b8d9bcd92f1b2642fe7288d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:ae:6e:ca:19:38:af:65:fc:e6:0f:5c:83: f1:0a:c8:8d:02:89:8b:84:1f:97:04:9f:a4:7f:2c: fa:8f:98:eb:21:dd:e1:b0:4d:0e:52:a8:49:1b:06: 86:ea:a3:f1:4a:13:3e:df:e1:9d:35:9d:07:6d:e2: 73:1e:9a:f5:89:7e:43:01:42:02:35:70:ba:4a:b4: b4:8f:cf:ea:7c:40:71:3d:5a:a0:6c:3a:78:07:9a: 03:dd:7e:cd:37:2c:cc:e2:9c:0c:46:ff:dc:4c:25: 8e:a3:40:41:a4:97:fe:a8:ea:83:b4:21:f8:2d:0e: 09:d9:d0:92:d8:cd:a6:ad:11:60:c4:ce:16:b0:06: 4c:59:dc:8f:0a:a0:7c:f2:ad:c6:44:40:d7:bd:2d: a3:37:7b:ec:9c:72:35:fa:df:93:ec:62:37:08:0b: b7:34:f4:f4:ae:c5:db:cb:c9:45:df:e6:84:b6:72: 34:1e:4a:31:84:02:43:85:1f:c2:3e:d8:26:22:c9: e6:19:41:b8:6b:6d:5e:58:9a:3a:16:63:84:99:b9: a9:41:06:0d:3a:da:4a:d9:fb:e9:26:f6:72:25:c0: 2e:db:59:ea:0f:01:d4:88:d0:c1:50:32:f2:d7:f6: 05:16:1a:fb:c9:ce:79:b9:0a:e9:f0:3a:96:54:ba: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2B:0D:DD:F0:40:A0:CC:5B:8D:9B:CD:92:F1:B2:64:2F:E7:28:8D X509v3 Authority Key Identifier: keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d9:e1:ca:d6:49:92:03:a0:91:af:87:b9:e0:38:1c:32:36: 99:ee:fb:20:7b:4a:3c:e6:09:c8:b4:36:5c:d6:ff:61:02:b0: 13:f1:b3:a1:d2:31:97:92:da:39:76:3c:0c:e2:30:ea:38:2a: 22:12:ba:62:c5:99:e8:14:9d:3a:f5:7d:a4:f9:df:9c:74:f3: 24:45:e2:17:d5:30:4c:d1:df:8d:2a:ec:d0:49:9b:1b:65:68: db:56:2b:c5:d4:ed:87:62:ac:98:1d:01:2b:33:c8:c4:2b:9e: b8:92:b8:f3:a5:65:dc:f6:31:1a:85:00:df:55:4c:6c:63:26: 6e:c5:99:c3:f3:e1:26:f6:01:9f:d8:47:29:69:38:e7:8d:8a: e3:bc:b5:93:9b:b1:b0:6e:4d:a5:97:56:58:46:0f:14:e7:90: c9:9c:81:63:34:9b:bc:8f:a6:51:b7:53:a4:47:24:55:00:b9: 4b:86:5a:dc:58:d6:05:d1:3f:00:ae:28:50:47:09:90:c5:93: 12:b9:4b:c3:a7:d6:4b:89:7c:a3:6f:ff:55:8f:6f:21:32:10: 90:e0:41:02:3e:e6:dc:3c:03:1b:b6:df:81:fa:af:3b:88:82: de:0f:83:87:b6:50:7b:e2:a3:7b:5e:2b:b2:17:33:88:2c:94: c2:0f:3b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9m41ttPdzzdHFUJRJOvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx NjYxOGQwHhcNMjUxMjI2MTQwMDU3WhcNMjUxMjI3MTQwMDU3WjAzMTEwLwYDVQQD EyhlYzJiMGRkZGYwNDBhMGNjNWI4ZDliY2Q5MmYxYjI2NDJmZTcyODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTeubsoZOK9l/OYPXIPxCsiNAomL hB+XBJ+kfyz6j5jrId3hsE0OUqhJGwaG6qPxShM+3+GdNZ0HbeJzHpr1iX5DAUIC NXC6SrS0j8/qfEBxPVqgbDp4B5oD3X7NNyzM4pwMRv/cTCWOo0BBpJf+qOqDtCH4 LQ4J2dCS2M2mrRFgxM4WsAZMWdyPCqB88q3GREDXvS2jN3vsnHI1+t+T7GI3CAu3 NPT0rsXby8lF3+aEtnI0HkoxhAJDhR/CPtgmIsnmGUG4a21eWJo6FmOEmbmpQQYN OtpK2fvpJvZyJcAu21nqDwHUiNDBUDLy1/YFFhr7yc55uQrp8DqWVLobwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwrDd3wQKDMW42bzZLxsmQv5yiNMB8GA1UdIwQY MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt OGNmOWQ1MGFkZjI5LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5 LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdnhytZJ kgOgka+HueA4HDI2me77IHtKPOYJyLQ2XNb/YQKwE/GzodIxl5LaOXY8DOIw6jgq IhK6YsWZ6BSdOvV9pPnfnHTzJEXiF9UwTNHfjSrs0EmbG2Vo21YrxdTth2KsmB0B KzPIxCueuJK486Vl3PYxGoUA31VMbGMmbsWZw/PhJvYBn9hHKWk4542K47y1k5ux sG5NpZdWWEYPFOeQyZyBYzSbvI+mUbdTpEckVQC5S4Za3FjWBdE/AK4oUEcJkMWT ErlLw6fWS4l8o2//VY9vITIQkOBBAj7m3DwDG7bfgfqvO4iC3g+Dh7ZQe+Kje14r shcziCyUwg87kA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:36 2025 by rpki-client