This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft File: HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json) Hash identifier: Ylgk0YQNQYAxSidR3zVGT7zfysuBWY+LippkoIyzj1I= Subject key identifier: AC:40:CC:7A:36:27:A6:C4:07:37:74:6E:DB:8B:1D:C4:FF:54:60:A4 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B0F6E8EE6B962670C53726D465815A468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft Manifest number: 0D1D Signing time: Thu 11 Dec 2025 22:01:02 +0000 Manifest this update: Thu 11 Dec 2025 22:01:02 +0000 Manifest next update: Fri 12 Dec 2025 22:01:02 +0000 Files and hashes: 1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=) 2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: Z+ICAq+8iPF0IdkZ7zN9wW90TYENpRc25z6jjsur6Kc=) 3: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=) 4: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=) 5: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=) 6: sGh4leOiqeUbD9ETXq4INosKjgA.roa (hash: zQNus8r96YCQp+l8cgOvwchxCyXBB9NQl2BAMnnD1SE=) 7: uEJBzVK3M-XYQB_W3073suGkObo.roa (hash: vdpPJtCVEUnTylhlR6ZitULgZ+bB4+/4WOwiBodz65k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:8e:e6:b9:62:67:0c:53:72:6d:46:58:15:a4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Dec 11 22:01:02 2025 GMT Not After : Dec 12 22:01:02 2025 GMT Subject: CN=ac40cc7a3627a6c40737746edb8b1dc4ff5460a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:66:1b:97:8c:3e:9f:52:b5:21:e9:37:f8: 2e:d0:01:2e:56:e2:5b:d7:3f:e7:92:54:09:fe:68: 54:49:5a:12:75:ef:aa:9f:db:5b:be:1f:57:cb:37: 7f:b3:34:77:8d:32:31:99:93:47:d9:ed:8d:be:96: fe:b6:8c:dc:f9:63:07:8a:de:8a:94:01:6e:ed:9e: 1e:1d:e5:f0:bc:d9:6f:1b:8d:d8:dc:51:d2:0c:fc: 23:a6:00:cc:da:d6:65:54:cc:e6:75:6a:b7:06:ca: 32:34:8e:c6:61:e6:a5:a4:c9:ce:fe:74:ec:bd:ec: 70:e5:56:1a:03:d4:f0:79:1e:f0:95:94:74:3e:da: 7f:d2:bb:59:e0:07:b1:af:b7:9f:aa:42:f3:16:07: d0:1d:c9:f0:1d:81:30:9b:ee:95:88:f4:5d:d5:de: 0f:a8:23:dc:b6:48:93:a8:15:bd:8d:36:b8:ee:bc: b1:bd:16:11:c7:bc:28:a4:ae:4c:b5:a2:c6:8d:86: 08:9e:26:9f:56:c3:bb:95:c5:5a:72:76:cd:d4:b4: 9c:d4:8a:5c:dd:2e:16:9b:b3:3c:d6:63:b7:7b:19: 13:95:ed:29:c8:58:ff:3d:3e:cd:a2:61:21:5d:b6: f9:3d:ef:04:3d:90:45:4a:b3:f1:52:5b:f5:a7:21: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:CC:7A:36:27:A6:C4:07:37:74:6E:DB:8B:1D:C4:FF:54:60:A4 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:11:6d:c1:9f:bf:8a:69:9f:a2:b2:51:8f:92:b0:5e:53:67: d0:51:a4:92:75:66:ce:fd:ca:c6:c3:6c:c0:0a:d9:9e:38:a2: 1e:02:2b:e5:17:3b:86:a3:6b:0b:e8:0e:b9:1d:d8:5b:11:e1: b8:7c:6b:57:ea:2c:26:fc:d7:2c:30:e7:55:0e:9e:0e:82:91: 69:e7:34:0f:9d:c2:b0:44:d0:66:f7:66:65:b4:1c:80:66:db: e3:88:1c:c6:18:12:a1:94:84:4c:dd:86:af:51:97:ab:db:39: 29:08:77:3f:8d:bc:6b:af:b2:f6:f7:34:ec:5c:74:43:8b:18: c0:bb:c4:fc:33:d9:19:66:ff:1b:93:d3:c8:51:1d:55:c6:8a: 21:5c:fb:5a:04:a7:81:98:2a:0b:b0:ca:f9:c5:73:4d:62:ed: b0:f4:aa:45:5a:58:bf:47:68:8d:ac:69:f1:b6:d5:5f:ef:10: d7:6c:a3:40:b2:cd:8b:46:30:ad:c3:25:e6:d3:40:f5:01:60: ba:65:6c:6b:b7:8d:97:aa:7a:4c:af:b0:46:6b:e1:86:df:34: bc:48:d6:df:67:ef:6b:b6:bf:10:5b:b9:92:f9:9a:f9:4c:ec: 80:07:ec:69:55:02:20:13:5f:98:7c:4f:92:d0:a4:0c:2a:93: 16:49:e2:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbo7muWJnDFNybUZYFaRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjUxMjExMjIwMTAyWhcNMjUxMjEyMjIwMTAyWjAzMTEwLwYDVQQD EyhhYzQwY2M3YTM2MjdhNmM0MDczNzc0NmVkYjhiMWRjNGZmNTQ2MGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQpmG5eMPp9StSHpN/gu0AEuVuJb 1z/nklQJ/mhUSVoSde+qn9tbvh9Xyzd/szR3jTIxmZNH2e2Nvpb+tozc+WMHit6K lAFu7Z4eHeXwvNlvG43Y3FHSDPwjpgDM2tZlVMzmdWq3BsoyNI7GYealpMnO/nTs vexw5VYaA9TweR7wlZR0Ptp/0rtZ4Aexr7efqkLzFgfQHcnwHYEwm+6ViPRd1d4P qCPctkiTqBW9jTa47ryxvRYRx7wopK5MtaLGjYYIniafVsO7lcVacnbN1LSc1Ipc 3S4Wm7M81mO3exkTle0pyFj/PT7NomEhXbb5Pe8EPZBFSrPxUlv1pyFu0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxAzHo2J6bEBzd0btuLHcT/VGCkMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxFtwZ+/ immforJRj5KwXlNn0FGkknVmzv3KxsNswArZnjiiHgIr5Rc7hqNrC+gOuR3YWxHh uHxrV+osJvzXLDDnVQ6eDoKRaec0D53CsETQZvdmZbQcgGbb44gcxhgSoZSETN2G r1GXq9s5KQh3P428a6+y9vc07Fx0Q4sYwLvE/DPZGWb/G5PTyFEdVcaKIVz7WgSn gZgqC7DK+cVzTWLtsPSqRVpYv0dojaxp8bbVX+8Q12yjQLLNi0YwrcMl5tNA9QFg umVsa7eNl6p6TK+wRmvhht80vEjW32fva7a/EFu5kvma+UzsgAfsaVUCIBNfmHxP ktCkDCqTFknigA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:31:56 2025 by rpki-client