This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json) Hash identifier: wOCG4mMOtj0tXyeyIQ/pffL5aRohB4Kz5N7huO9EIfo= Subject key identifier: 28:71:87:16:18:1F:FE:7C:36:89:F9:57:C3:DB:D5:A1:5A:EB:52:28 Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Certificate serial: 019B0E92B4199B4E807D2F4D2CB899644887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft Manifest number: 0730 Signing time: Thu 11 Dec 2025 18:00:53 +0000 Manifest this update: Thu 11 Dec 2025 18:00:53 +0000 Manifest next update: Fri 12 Dec 2025 18:00:53 +0000 Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: CuI1e3L9jnNwH5vVHAb9mjuZeqJDu6g9j7idMrzXFJ8=) 2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:b4:19:9b:4e:80:7d:2f:4d:2c:b8:99:64:48:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Validity Not Before: Dec 11 18:00:53 2025 GMT Not After : Dec 12 18:00:53 2025 GMT Subject: CN=28718716181ffe7c3689f957c3dbd5a15aeb5228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:19:2a:2b:4f:5b:72:2b:64:71:ae:ba:58:29: 59:6c:17:10:37:ad:ef:8c:1c:7c:a5:3c:15:f3:d9: d7:11:77:1d:4e:05:df:04:89:26:cf:30:1a:fb:bd: a5:85:51:5a:00:2c:91:90:c7:e4:1c:55:67:3a:bf: 7f:0b:e5:8e:35:22:3b:b7:d5:05:4c:45:ac:d9:9b: 06:c0:f6:ce:2a:f3:f1:20:f8:4b:f4:d8:5c:bd:61: 45:23:38:af:49:03:aa:c9:1d:b5:d0:b4:4c:73:5a: f3:d6:55:3d:12:12:4d:b0:f8:df:63:68:42:57:b8: fd:1d:15:c4:98:4a:aa:6f:77:c8:9a:b5:ff:e8:51: aa:9c:09:14:1f:3b:b3:b3:4c:f1:5e:ed:d1:e4:93: 7a:fd:07:67:0f:41:19:c2:21:fb:81:54:a4:cf:20: 6a:3e:1e:1d:6e:d4:08:05:e5:93:fe:1c:a5:17:31: 52:c1:79:5e:15:7f:83:47:78:93:40:d1:84:3f:8b: a2:a6:64:a2:56:57:53:b5:e0:29:cf:14:c6:1a:c7: 0d:6c:fc:87:4c:9e:d4:5e:e5:cd:f1:9d:58:f5:0a: d5:89:47:90:91:5c:fe:f4:20:cb:f6:50:ef:cd:a1: 94:b7:8f:1b:b1:4e:c7:48:94:7a:d2:ca:83:4c:c2: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:71:87:16:18:1F:FE:7C:36:89:F9:57:C3:DB:D5:A1:5A:EB:52:28 X509v3 Authority Key Identifier: keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a1:5c:db:9f:58:67:2f:d8:6d:27:b4:db:06:e8:16:be:d5: 97:3f:4d:34:ae:9d:ca:ad:87:00:9d:8a:41:78:b0:9a:39:10: 3d:6b:4d:70:51:f6:61:7f:4e:8e:f5:3f:21:ba:22:8b:c5:8c: e0:0b:b8:95:71:1b:4e:41:ee:19:6e:5f:49:63:23:f4:f8:5a: c5:85:27:92:f4:da:79:4d:8f:bc:f0:0d:1f:09:b2:ac:52:a5: b8:98:c2:04:ef:c4:13:f3:4e:3d:50:33:23:38:6e:6a:ec:77: 80:d0:b6:00:fb:da:60:3c:26:b0:dc:27:db:32:4b:84:08:71: 9a:e4:77:bc:f1:ff:0c:31:23:7e:95:91:24:fe:73:40:ac:7d: a9:89:ef:5c:a9:6d:8f:08:13:71:fd:d3:c3:e2:92:f6:d3:31: 69:eb:28:d4:85:54:06:90:00:28:31:87:93:24:a8:3e:1f:fe: 56:ab:9f:bd:50:66:c8:0e:49:43:51:00:90:27:e7:ba:95:92: 7a:ab:e6:22:93:5b:e8:c9:7a:38:d4:e6:1c:c8:7f:34:eb:13: d6:f7:b8:66:50:20:b1:65:52:e0:ba:cb:9e:4e:11:a3:8e:90: d4:0c:e7:dc:eb:97:ff:52:ad:51:5a:2d:c2:ee:78:e4:1e:6e: 62:9e:ba:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkrQZm06AfS9NLLiZZEiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh NzY2OTMwHhcNMjUxMjExMTgwMDUzWhcNMjUxMjEyMTgwMDUzWjAzMTEwLwYDVQQD EygyODcxODcxNjE4MWZmZTdjMzY4OWY5NTdjM2RiZDVhMTVhZWI1MjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RkqK09bcitkca66WClZbBcQN63v jBx8pTwV89nXEXcdTgXfBIkmzzAa+72lhVFaACyRkMfkHFVnOr9/C+WONSI7t9UF TEWs2ZsGwPbOKvPxIPhL9NhcvWFFIzivSQOqyR210LRMc1rz1lU9EhJNsPjfY2hC V7j9HRXEmEqqb3fImrX/6FGqnAkUHzuzs0zxXu3R5JN6/QdnD0EZwiH7gVSkzyBq Ph4dbtQIBeWT/hylFzFSwXleFX+DR3iTQNGEP4uipmSiVldTteApzxTGGscNbPyH TJ7UXuXN8Z1Y9QrViUeQkVz+9CDL9lDvzaGUt48bsU7HSJR60sqDTMIsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChxhxYYH/58Non5V8Pb1aFa61IoMB8GA1UdIwQY MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKFc259Y Zy/YbSe02wboFr7Vlz9NNK6dyq2HAJ2KQXiwmjkQPWtNcFH2YX9OjvU/Iboii8WM 4Au4lXEbTkHuGW5fSWMj9PhaxYUnkvTaeU2PvPANHwmyrFKluJjCBO/EE/NOPVAz Izhuaux3gNC2APvaYDwmsNwn2zJLhAhxmuR3vPH/DDEjfpWRJP5zQKx9qYnvXKlt jwgTcf3Tw+KS9tMxaeso1IVUBpAAKDGHkySoPh/+VqufvVBmyA5JQ1EAkCfnupWS eqvmIpNb6Ml6ONTmHMh/NOsT1ve4ZlAgsWVS4LrLnk4Ro46Q1Azn3OuX/1KtUVot wu545B5uYp66WA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:19:42 2025 by rpki-client