This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json) Hash identifier: 2Brf/C7GUUqxMl9CT4MVGZ3CBFxmh2JW3hGkt4rsdK0= Subject key identifier: 07:5C:9E:7C:A4:B9:BF:2A:5A:A4:79:33:CE:F7:34:B1:21:8A:10:8B Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52 Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552 Certificate serial: 019B476F44A2357543BCBF6126F822D03300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft Manifest number: 16F3 Signing time: Mon 22 Dec 2025 19:00:32 +0000 Manifest this update: Mon 22 Dec 2025 19:00:32 +0000 Manifest next update: Tue 23 Dec 2025 19:00:32 +0000 Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: kJfQZVo52/O9mRwJFKmedKnkiJSYOvS/vahhUE6j4es=) 2: fPSZP8slBnM3nSGAFaRQqfblguQ.roa (hash: blLgu2v1K5L5bFcrSgTETqeQaxD8GwJMq27CaonXujI=) 3: qcI0xgzGH7hMBr0NX1qxJT5Yq20.roa (hash: NMb9DDG1I4uoDnTSNrOwSazV1iEG7Jn5atQjCvyrEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:44:a2:35:75:43:bc:bf:61:26:f8:22:d0:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552 Validity Not Before: Dec 22 19:00:32 2025 GMT Not After : Dec 23 19:00:32 2025 GMT Subject: CN=075c9e7ca4b9bf2a5aa47933cef734b1218a108b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:58:50:55:34:58:aa:39:c6:a2:59:f7:20: b2:a1:c6:8f:1e:0f:80:c3:71:62:36:fc:86:7c:80: c3:20:27:20:85:e4:ab:d3:5d:ba:df:ed:41:8b:2f: e9:da:4a:68:0c:ea:6d:1d:2c:93:d2:1e:a8:f2:2a: af:eb:f5:e0:2b:df:69:8f:47:d6:e8:b3:71:33:53: f6:2e:d6:ae:f6:68:88:bc:53:3f:52:52:7c:d8:81: 66:a2:05:5f:1f:9d:b9:5b:f3:c5:13:cf:e8:6b:36: 03:9c:7c:f0:8e:f5:57:2f:e7:a5:aa:6c:a4:86:69: dd:9f:2d:d1:04:7a:54:bc:ce:f7:17:19:0c:cd:88: 33:a2:85:4f:21:cd:f5:f6:b5:28:f7:b8:b6:84:ca: ec:76:78:ab:b1:bc:2b:86:4c:5c:70:18:0f:47:80: 4d:c8:28:bd:bd:4d:44:d2:69:c2:1c:3a:7e:3c:25: 67:fa:e5:2a:b1:52:e0:f1:31:9b:f5:ca:9c:c6:9c: 4b:78:5e:62:37:7e:a0:c2:77:46:ac:7b:ee:89:df: 86:88:b2:a8:d3:ec:7b:55:b7:ca:ba:b0:6c:42:8a: ad:5a:9b:24:0b:7c:30:21:8a:d0:c7:e9:6b:18:f6: 0d:18:f6:11:d2:29:af:38:4f:61:dd:5f:11:95:83: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5C:9E:7C:A4:B9:BF:2A:5A:A4:79:33:CE:F7:34:B1:21:8A:10:8B X509v3 Authority Key Identifier: keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b7:a1:68:40:5f:57:27:00:79:7f:27:e3:61:37:ce:de:29: 07:4c:bf:de:38:24:78:a1:26:60:b6:72:59:7a:d7:c7:5c:08: bf:9a:16:66:d2:01:0a:97:48:12:99:f8:1d:ec:af:5b:a2:75: b4:b2:fe:45:6b:35:2f:f1:ff:5f:1a:d4:c1:ee:74:03:37:1f: 71:aa:a4:be:e4:14:c1:25:a6:87:7c:f3:25:2c:dc:d4:c4:5d: 17:fe:8c:20:be:15:7a:ca:3b:0e:46:ff:17:5f:2d:e3:a5:b3: b1:f8:a0:18:76:32:74:18:fa:67:d5:b6:dc:60:a9:13:11:64: 6f:41:d1:e9:04:c5:9a:82:ac:e3:41:40:2c:3a:a9:ad:89:e7: 36:c8:e7:e1:9a:dc:9f:7f:c8:d1:3b:24:f4:1a:68:86:31:1c: a7:e8:b2:37:bc:e1:ed:56:e2:97:88:0a:50:75:b9:20:e8:fd: 89:73:58:16:fe:c5:5a:71:de:29:ab:00:66:3e:1e:26:8c:cb: 3d:e4:33:30:8a:45:cb:9d:41:05:8f:cc:62:17:2f:07:2d:56: b2:fd:8d:b3:c3:6e:93:65:58:0b:07:a5:a2:2f:d7:40:ab:43: 94:67:c2:c4:49:fd:cc:1a:a7:69:67:0b:a1:6f:a7:22:1c:c7: ea:2d:b4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb0SiNXVDvL9hJvgi0DMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYmUzZTUyMTQwN2Y1OTdmMjU1ZjNmYjRlMGI1NjljMzIw ODM1NTIwHhcNMjUxMjIyMTkwMDMyWhcNMjUxMjIzMTkwMDMyWjAzMTEwLwYDVQQD EygwNzVjOWU3Y2E0YjliZjJhNWFhNDc5MzNjZWY3MzRiMTIxOGExMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42dYUFU0WKo5xqJZ9yCyocaPHg+A w3FiNvyGfIDDICcgheSr01263+1Biy/p2kpoDOptHSyT0h6o8iqv6/XgK99pj0fW 6LNxM1P2Ltau9miIvFM/UlJ82IFmogVfH525W/PFE8/oazYDnHzwjvVXL+elqmyk hmndny3RBHpUvM73FxkMzYgzooVPIc319rUo97i2hMrsdnirsbwrhkxccBgPR4BN yCi9vU1E0mnCHDp+PCVn+uUqsVLg8TGb9cqcxpxLeF5iN36gwndGrHvuid+GiLKo 0+x7VbfKurBsQoqtWpskC3wwIYrQx+lrGPYNGPYR0imvOE9h3V8RlYPb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdcnnykub8qWqR5M873NLEhihCLMB8GA1UdIwQY MBaAFB6+PlIUB/WX8lXz+04LVpwyCDVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjIt NWI0YWZmN2E2Mzk4LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjItNWI0YWZmN2E2Mzk4 LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrehaEBf VycAeX8n42E3zt4pB0y/3jgkeKEmYLZyWXrXx1wIv5oWZtIBCpdIEpn4HeyvW6J1 tLL+RWs1L/H/XxrUwe50AzcfcaqkvuQUwSWmh3zzJSzc1MRdF/6MIL4Veso7Dkb/ F18t46WzsfigGHYydBj6Z9W23GCpExFkb0HR6QTFmoKs40FALDqprYnnNsjn4Zrc n3/I0Tsk9BpohjEcp+iyN7zh7Vbil4gKUHW5IOj9iXNYFv7FWnHeKasAZj4eJozL PeQzMIpFy51BBY/MYhcvBy1Wsv2Ns8Nuk2VYCweloi/XQKtDlGfCxEn9zBqnaWcL oW+nIhzH6i20aw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:15:45 2025 by rpki-client