This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json) Hash identifier: GFRSAzPEDiXekwJ8UAfE5V1eCAUJZKd4OnmaSJamrnk= Subject key identifier: 75:F0:F7:77:B6:83:C7:05:92:35:66:EF:9F:78:82:89:8C:FF:ED:7C Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59 Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859 Certificate serial: 019B5A1A9B6D745E2166D72A135C9CA9111E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft Manifest number: 15CD Signing time: Fri 26 Dec 2025 10:00:51 +0000 Manifest this update: Fri 26 Dec 2025 10:00:51 +0000 Manifest next update: Sat 27 Dec 2025 10:00:51 +0000 Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: Yi9sMqDZnoR3ikdJQZek4772Fc/n7D06kaS1UbLByBE=) 2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:9b:6d:74:5e:21:66:d7:2a:13:5c:9c:a9:11:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859 Validity Not Before: Dec 26 10:00:51 2025 GMT Not After : Dec 27 10:00:51 2025 GMT Subject: CN=75f0f777b683c705923566ef9f7882898cffed7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:36:b5:3d:2d:c1:99:a4:0b:ec:4b:7f:18: 56:b3:f6:c3:49:b5:93:58:59:8f:e3:98:11:c6:72: 8b:f5:a1:09:43:97:5b:c1:b4:a8:01:86:d8:39:08: b5:c1:9d:ab:64:98:02:5c:62:1b:72:2e:09:38:65: 8c:8c:7e:f8:fa:57:0a:3f:b5:ea:ce:8b:34:d3:b9: 1f:bd:58:ab:40:01:d9:88:69:c3:bd:b4:a0:1e:a8: 2d:49:18:ad:bf:1b:22:65:aa:11:11:b6:20:c5:6a: 5d:8f:e6:b6:00:61:e7:3b:c8:ad:3d:c9:11:49:ce: 96:62:b2:da:cf:16:02:61:3c:24:c9:69:c3:15:1b: bc:01:6c:66:6d:45:4a:99:d7:4f:3e:8f:4d:98:34: c8:67:9d:6f:ac:01:3e:c3:8c:51:da:7c:4d:ae:d5: 4b:7c:a3:1d:a1:de:70:ec:f8:e3:bb:05:34:ab:78: ac:db:9c:4d:e6:e3:fc:58:be:71:ee:1e:73:bf:21: cd:bc:56:fe:32:7c:4c:df:60:39:41:9e:14:22:0e: 19:c7:26:ed:be:87:5a:ab:c4:a8:60:ca:be:2b:8f: 81:13:64:3f:7d:83:67:c8:84:1b:0f:22:20:d0:f8: 55:22:9b:b4:dd:ab:6f:34:ea:5b:b5:63:05:48:46: 5b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F0:F7:77:B6:83:C7:05:92:35:66:EF:9F:78:82:89:8C:FF:ED:7C X509v3 Authority Key Identifier: keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8c:71:6d:32:ff:2c:df:19:3d:44:ff:26:73:f9:aa:8d:85: d9:9c:58:1b:c4:41:c6:e8:ad:cb:f6:87:d5:3e:01:57:58:79: 31:47:00:12:95:f5:2f:be:ce:f2:b8:4e:88:57:ca:d7:bb:51: 2b:d7:12:37:6a:84:08:97:40:de:aa:f9:fd:43:51:40:0f:86: d3:a6:e8:01:70:74:1b:39:50:1e:1b:1d:57:79:d6:28:cd:00: cf:e4:72:3a:52:1c:71:5a:a0:0d:b2:96:b6:6a:cb:15:e3:1c: b6:cf:bb:f3:80:61:8b:c0:30:f7:d0:2e:fc:42:4b:21:b1:c7: c3:25:91:8a:d2:50:37:ab:ee:ac:d4:9c:d3:06:1e:60:1a:bb: 52:08:3c:ce:44:ac:fb:e9:de:71:73:b5:ae:aa:65:ae:e6:cd: 32:0a:ec:1e:79:d2:ef:15:ce:88:84:a7:ea:17:f2:56:cd:11: 27:ea:4d:03:38:90:8c:69:03:1e:ac:26:2a:b9:2a:29:2e:4e: 0c:df:15:d0:e2:97:14:8c:c1:ca:5c:9f:f7:a4:43:bf:50:cf: 9e:fc:35:25:1a:6b:a1:fa:e8:6f:6d:78:2a:1b:39:5f:3d:6d: 09:7f:c7:7e:b2:2c:a9:75:47:82:9f:12:fa:1b:86:1c:19:de: 76:0b:43:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpttdF4hZtcqE1ycqREeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3 NjQ4NTkwHhcNMjUxMjI2MTAwMDUxWhcNMjUxMjI3MTAwMDUxWjAzMTEwLwYDVQQD Eyg3NWYwZjc3N2I2ODNjNzA1OTIzNTY2ZWY5Zjc4ODI4OThjZmZlZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth02tT0twZmkC+xLfxhWs/bDSbWT WFmP45gRxnKL9aEJQ5dbwbSoAYbYOQi1wZ2rZJgCXGIbci4JOGWMjH74+lcKP7Xq zos007kfvVirQAHZiGnDvbSgHqgtSRitvxsiZaoREbYgxWpdj+a2AGHnO8itPckR Sc6WYrLazxYCYTwkyWnDFRu8AWxmbUVKmddPPo9NmDTIZ51vrAE+w4xR2nxNrtVL fKMdod5w7PjjuwU0q3is25xN5uP8WL5x7h5zvyHNvFb+MnxM32A5QZ4UIg4Zxybt vodaq8SoYMq+K4+BE2Q/fYNnyIQbDyIg0PhVIpu03atvNOpbtWMFSEZbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXw93e2g8cFkjVm7594gomM/+18MB8GA1UdIwQY MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYxxbTL/ LN8ZPUT/JnP5qo2F2ZxYG8RBxuity/aH1T4BV1h5MUcAEpX1L77O8rhOiFfK17tR K9cSN2qECJdA3qr5/UNRQA+G06boAXB0GzlQHhsdV3nWKM0Az+RyOlIccVqgDbKW tmrLFeMcts+784Bhi8Aw99Au/EJLIbHHwyWRitJQN6vurNSc0wYeYBq7Ugg8zkSs ++necXO1rqplrubNMgrsHnnS7xXOiISn6hfyVs0RJ+pNAziQjGkDHqwmKrkqKS5O DN8V0OKXFIzBylyf96RDv1DPnvw1JRprofrob214Khs5Xz1tCX/HfrIsqXVHgp8S +huGHBnedgtD4w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client