This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json) Hash identifier: wwxfD3PP2eJrxo6w4387NCzr/7MDv78vw/v0AFmzZnc= Subject key identifier: E9:B0:01:BC:8A:B2:0D:AB:A6:E9:2E:3F:C9:FC:B7:4C:2F:37:B8:8C Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab Certificate serial: 019B5ABF858B3FD37D5DE6C626047E5941E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 13:00:59 +0000 Manifest this update: Fri 26 Dec 2025 13:00:59 +0000 Manifest next update: Sat 27 Dec 2025 13:00:59 +0000 Files and hashes: 1: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=) 2: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: Ao0CS4sfevoWGzh9xBb68uso+ygxKgJXKDK+Yq6SkiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:85:8b:3f:d3:7d:5d:e6:c6:26:04:7e:59:41:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab Validity Not Before: Dec 26 13:00:59 2025 GMT Not After : Dec 27 13:00:59 2025 GMT Subject: CN=e9b001bc8ab20daba6e92e3fc9fcb74c2f37b88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:74:04:f0:06:39:bc:11:21:8f:57:d6:ed: 65:61:39:db:ac:a1:b0:9f:7b:85:0a:cd:03:01:bb: a8:f3:be:58:10:53:d3:02:40:ec:df:b1:fa:06:23: c1:06:cd:ad:45:cb:d9:87:69:4e:61:ba:03:23:c2: a1:a1:91:9f:00:39:4e:e3:3a:2b:33:46:bd:c9:02: b5:70:17:30:28:c6:cf:ac:1b:26:23:cb:c0:3e:b8: 02:c6:66:6b:10:ca:34:06:bc:26:fc:72:94:f2:38: 96:91:d5:af:89:65:62:f1:df:42:d9:5a:1b:2c:47: f1:3e:49:b2:0d:ef:b2:c9:65:c4:72:12:c2:1f:dc: 6c:5b:50:a4:d3:c5:bc:34:70:a8:43:13:7b:a1:c8: 25:34:cd:4e:87:d1:eb:ed:c7:a6:23:1a:84:23:0b: 35:26:69:f9:72:77:67:ef:db:38:3a:a3:65:06:79: c6:97:07:49:53:e2:2d:e5:2c:5d:ac:1c:05:08:99: 85:15:03:98:39:cd:09:6a:e9:0d:74:13:f3:84:bd: f5:28:ec:90:ad:85:e0:62:f2:3d:dd:85:8c:ce:97: 74:a2:bc:ad:f5:c1:eb:67:fd:ac:bd:21:88:e7:34: 6f:54:3d:01:92:a8:26:ff:22:99:c3:03:ac:d1:d0: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:01:BC:8A:B2:0D:AB:A6:E9:2E:3F:C9:FC:B7:4C:2F:37:B8:8C X509v3 Authority Key Identifier: keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e9:5e:b3:be:f2:02:45:23:77:9c:a0:d3:61:11:18:6a:63: fb:33:51:29:af:5a:db:26:7d:c7:cc:87:d3:cf:b3:f9:38:d1: 72:91:51:76:4c:02:e1:27:30:a9:59:8f:fc:3f:f5:90:46:60: 46:b0:cb:19:3a:62:9e:80:58:2d:25:84:f2:8b:e7:e5:a4:6c: dd:34:f9:74:e5:0d:6a:7c:0e:82:bf:c5:8f:6f:1d:96:f0:9a: c0:1f:ec:1c:cc:a7:5e:b4:80:3b:b0:10:af:1c:6a:e2:57:e8: 6c:67:32:5d:c7:88:aa:d0:46:ab:b8:32:a2:c0:6c:a3:b3:4e: 28:9c:26:bd:3b:5c:d0:23:75:7b:00:bd:ed:e4:e9:a6:b9:5d: 40:8c:dd:8c:74:a5:d9:5b:30:f5:b8:74:c6:f0:37:75:a4:93: da:57:34:bc:56:ac:5b:5a:f9:c9:8c:f8:d7:d7:ed:55:a2:66: 7a:74:61:3c:3c:10:5e:e5:74:a9:fc:8b:75:62:38:d1:01:39: 5a:89:d7:ac:f1:d9:c6:db:c3:06:da:df:97:38:aa:da:34:2d: 8c:75:92:82:51:e5:2f:02:53:64:59:c4:e6:11:a2:83:63:34: 53:fe:a4:b0:ba:69:42:61:36:93:58:ed:32:d1:ce:94:06:20: 70:6f:d7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4WLP9N9XebGJgR+WUHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk OTlhYWIwHhcNMjUxMjI2MTMwMDU5WhcNMjUxMjI3MTMwMDU5WjAzMTEwLwYDVQQD EyhlOWIwMDFiYzhhYjIwZGFiYTZlOTJlM2ZjOWZjYjc0YzJmMzdiODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRd0BPAGObwRIY9X1u1lYTnbrKGw n3uFCs0DAbuo875YEFPTAkDs37H6BiPBBs2tRcvZh2lOYboDI8KhoZGfADlO4zor M0a9yQK1cBcwKMbPrBsmI8vAPrgCxmZrEMo0Brwm/HKU8jiWkdWviWVi8d9C2Vob LEfxPkmyDe+yyWXEchLCH9xsW1Ck08W8NHCoQxN7ocglNM1Oh9Hr7cemIxqEIws1 Jmn5cndn79s4OqNlBnnGlwdJU+It5SxdrBwFCJmFFQOYOc0JaukNdBPzhL31KOyQ rYXgYvI93YWMzpd0oryt9cHrZ/2svSGI5zRvVD0Bkqgm/yKZwwOs0dBrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmwAbyKsg2rpukuP8n8t0wvN7iMMB8GA1UdIwQY MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt ZGRlMGQxMjczNWM2LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2 LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+les77y AkUjd5yg02ERGGpj+zNRKa9a2yZ9x8yH08+z+TjRcpFRdkwC4ScwqVmP/D/1kEZg RrDLGTpinoBYLSWE8ovn5aRs3TT5dOUNanwOgr/Fj28dlvCawB/sHMynXrSAO7AQ rxxq4lfobGcyXceIqtBGq7gyosBso7NOKJwmvTtc0CN1ewC97eTpprldQIzdjHSl 2Vsw9bh0xvA3daST2lc0vFasW1r5yYz419ftVaJmenRhPDwQXuV0qfyLdWI40QE5 WonXrPHZxtvDBtrflziq2jQtjHWSglHlLwJTZFnE5hGig2M0U/6ksLppQmE2k1jt MtHOlAYgcG/Xsg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:37 2025 by rpki-client