This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json) Hash identifier: zQ5qcildKs6YvXrXJKAHWZyFAxFlDqccyZji0rMkTuk= Subject key identifier: 52:BF:90:1A:51:75:9B:25:9A:2E:7D:ED:2B:58:87:6E:8C:D7:3A:FA Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f Certificate serial: 019B1C1755173B1289F0E0FFA3C10BB91354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 09:00:49 +0000 Manifest this update: Sun 14 Dec 2025 09:00:49 +0000 Manifest next update: Mon 15 Dec 2025 09:00:49 +0000 Files and hashes: 1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: ffgN8yWEkdJs3qmIXV9RyLNxi44v1z2C0oZM/G3pWBw=) 2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:55:17:3b:12:89:f0:e0:ff:a3:c1:0b:b9:13:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f Validity Not Before: Dec 14 09:00:49 2025 GMT Not After : Dec 15 09:00:49 2025 GMT Subject: CN=52bf901a51759b259a2e7ded2b58876e8cd73afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:18:5c:9d:6b:44:a4:ee:b3:a7:c9:63:7e: 54:21:c0:66:90:73:ed:7b:82:88:f7:6c:f7:2d:0a: b3:90:59:d2:2e:d0:53:8a:79:d4:b3:c5:cb:f8:3f: 49:05:91:4d:fa:3c:97:4c:de:8b:24:d2:5b:3a:8d: af:39:f1:6e:55:4e:10:03:39:ef:7b:97:1e:20:9d: 57:74:7f:e6:01:70:e5:21:08:79:78:83:cf:03:79: 05:53:92:80:a0:c3:60:e4:85:eb:b4:1a:f4:86:f4: fd:88:4e:da:8a:f6:10:e6:59:37:9c:ff:fb:ef:bf: 46:8a:c4:02:5f:a8:22:d9:05:37:83:93:28:b6:b6: 3c:6c:1c:1d:15:4e:91:76:16:cf:85:89:0d:4e:9b: 66:9c:ca:6d:40:58:1b:a7:7b:3d:17:40:e5:af:da: 5f:1c:79:5e:a9:c5:64:04:26:0e:4e:36:39:03:79: ee:c3:75:80:4e:f8:c7:7d:40:95:16:33:53:aa:34: c6:c1:12:d6:8b:91:36:a4:59:fd:33:f1:e4:ed:91: 24:95:cb:a8:d9:41:9f:dd:70:e9:a5:89:8e:ec:b1: 0a:e1:75:83:61:5a:2c:b5:0b:ce:1e:5f:1c:bd:49: 70:48:51:8d:07:3b:eb:af:2f:ad:4d:40:fd:60:ff: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:90:1A:51:75:9B:25:9A:2E:7D:ED:2B:58:87:6E:8C:D7:3A:FA X509v3 Authority Key Identifier: keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:91:bd:5b:63:15:d0:f8:96:27:f6:77:8d:05:f5:ef:37:6c: 78:de:01:d6:48:d6:14:6f:4a:e0:d2:df:37:ef:65:37:ea:bb: 99:c4:d0:9c:13:3a:ff:ea:aa:a8:17:02:46:d9:8e:0e:fa:ce: f5:97:e5:ff:a5:6b:24:6c:9b:96:3d:a7:21:0d:36:40:e4:1c: 14:15:f5:c6:36:c4:94:a8:09:bc:e4:bb:73:53:9c:e6:06:2f: 9e:9f:54:cf:f5:f0:c9:17:f7:99:94:bb:ca:f8:6e:cb:20:35: 92:37:cf:81:14:f2:9f:15:13:62:1b:eb:67:96:3e:1a:ef:82: 8f:25:e2:5a:82:8c:82:27:db:0d:4b:7e:7a:5f:0b:42:13:f5: 8e:94:be:16:8b:0b:a4:63:0c:9f:52:81:b2:96:f8:52:09:cf: be:91:77:a1:df:af:4a:6d:16:ba:27:4e:85:54:a6:b4:5e:4f: 8f:ee:03:c4:d6:37:a9:31:dd:b3:6d:b9:44:78:76:6e:64:e5: 3a:e4:ce:9c:46:5a:9a:29:5d:0f:ba:09:18:c3:07:e1:82:17: ef:e5:b9:45:cc:05:fe:08:4c:4e:a6:63:13:f9:09:d0:a4:7a: d3:2a:ba:4d:5e:76:c2:3e:a4:74:da:65:f9:e2:64:6d:8c:fa: b8:8d:fe:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF1UXOxKJ8OD/o8ELuRNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw OWIxN2YwHhcNMjUxMjE0MDkwMDQ5WhcNMjUxMjE1MDkwMDQ5WjAzMTEwLwYDVQQD Eyg1MmJmOTAxYTUxNzU5YjI1OWEyZTdkZWQyYjU4ODc2ZThjZDczYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd4YXJ1rRKTus6fJY35UIcBmkHPt e4KI92z3LQqzkFnSLtBTinnUs8XL+D9JBZFN+jyXTN6LJNJbOo2vOfFuVU4QAznv e5ceIJ1XdH/mAXDlIQh5eIPPA3kFU5KAoMNg5IXrtBr0hvT9iE7aivYQ5lk3nP/7 779GisQCX6gi2QU3g5MotrY8bBwdFU6RdhbPhYkNTptmnMptQFgbp3s9F0Dlr9pf HHleqcVkBCYOTjY5A3nuw3WATvjHfUCVFjNTqjTGwRLWi5E2pFn9M/Hk7ZEklcuo 2UGf3XDppYmO7LEK4XWDYVostQvOHl8cvUlwSFGNBzvrry+tTUD9YP/RBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK/kBpRdZslmi597StYh26M1zr6MB8GA1UdIwQY MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZG9W2MV 0PiWJ/Z3jQX17zdseN4B1kjWFG9K4NLfN+9lN+q7mcTQnBM6/+qqqBcCRtmODvrO 9Zfl/6VrJGyblj2nIQ02QOQcFBX1xjbElKgJvOS7c1Oc5gYvnp9Uz/XwyRf3mZS7 yvhuyyA1kjfPgRTynxUTYhvrZ5Y+Gu+CjyXiWoKMgifbDUt+el8LQhP1jpS+FosL pGMMn1KBspb4UgnPvpF3od+vSm0WuidOhVSmtF5Pj+4DxNY3qTHds225RHh2bmTl OuTOnEZamildD7oJGMMH4YIX7+W5RcwF/ghMTqZjE/kJ0KR60yq6TV52wj6kdNpl +eJkbYz6uI3+fA== -----END CERTIFICATE-----Generated at Sun Dec 14 18:53:12 2025 by rpki-client