This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json) Hash identifier: FS3vm4ZVLMAo/mLlNNkU0BSBgcXzOA/9w3Z2pUckM8w= Subject key identifier: 6E:4C:A0:DD:38:33:F5:56:F9:0E:26:6D:7C:03:DF:3A:5B:D6:24:31 Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f Certificate serial: 019B19BAFFDC1DCB494FC8B7AF55D2677BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 22:00:44 +0000 Manifest this update: Sat 13 Dec 2025 22:00:44 +0000 Manifest next update: Sun 14 Dec 2025 22:00:44 +0000 Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: m9oc5p5ZgmMaeSRxDMT0Bm5Djzd3CvLHVOtCEWJGYKY=) 2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:ff:dc:1d:cb:49:4f:c8:b7:af:55:d2:67:7b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f Validity Not Before: Dec 13 22:00:44 2025 GMT Not After : Dec 14 22:00:44 2025 GMT Subject: CN=6e4ca0dd3833f556f90e266d7c03df3a5bd62431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:78:dc:e6:af:4c:c8:2a:58:99:be:ab:b0: 10:85:ae:ca:59:32:4d:e5:20:d3:2f:0b:4d:30:81: 73:27:d0:57:20:27:18:2e:91:13:4c:17:ba:bb:ca: f5:5a:d5:e3:ae:e8:cc:5e:0f:d4:f6:c1:3d:9b:85: e9:99:79:31:22:53:31:f6:34:6f:54:51:e5:0b:f0: b9:9f:d2:8f:66:88:83:7d:a3:73:65:e9:0b:04:a4: 58:1e:e9:f1:e6:6e:64:ed:9b:11:e1:58:96:fd:3f: 97:36:fd:9f:f4:ed:2a:b2:b5:2b:81:a0:50:c1:c9: 13:2f:71:7c:a1:e1:dc:f1:8b:7a:ca:1e:9d:66:74: 75:19:1b:a8:4b:c6:42:91:24:ad:3c:10:3b:9a:b0: bb:5b:99:0e:b0:78:d8:4b:9a:ea:96:28:44:f9:75: a4:28:b0:59:38:08:c3:ad:b3:86:98:e9:9c:a2:d4: 8b:d8:0d:0d:c3:dd:58:be:92:e4:d2:21:ae:d6:bb: 84:8e:47:46:9c:5a:32:d5:29:8e:ef:29:71:cf:12: 8d:92:5b:f7:70:5e:da:0f:f1:fe:4c:2a:78:62:8d: 28:ff:8a:79:5c:50:62:75:0a:10:67:5e:64:5e:09: 2c:89:6c:dc:68:d7:cd:95:04:13:97:0f:59:30:ce: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:A0:DD:38:33:F5:56:F9:0E:26:6D:7C:03:DF:3A:5B:D6:24:31 X509v3 Authority Key Identifier: keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:24:98:f0:cb:91:e8:c5:68:dd:0a:54:7b:d3:16:e2:29:23: 26:60:da:71:7d:f9:0b:58:45:06:20:31:d3:d5:12:5e:c0:22: 27:1a:a5:ef:b1:0c:84:f5:bd:76:7c:d2:27:a4:0a:be:f0:83: c2:59:e8:bc:02:28:fb:38:40:14:3c:62:22:72:fa:41:bc:dd: 25:2c:3a:cc:ff:8b:3a:b5:29:59:f1:3a:b8:0b:58:af:ac:a6: 70:c1:5b:81:7d:34:74:1a:10:4d:d0:c2:13:ae:f7:44:0f:12: be:8e:cb:68:2a:45:a2:5b:38:ac:77:26:f3:78:81:76:55:b2: e5:e6:0f:0b:6c:62:dd:52:ee:6d:b1:2c:db:a9:c2:95:96:f5: 55:da:af:e1:ab:99:1e:16:c7:f8:ff:c0:08:c0:5e:39:bb:0f: 6c:05:23:e4:fc:40:ad:43:dc:4a:5d:16:7d:9a:5c:80:9e:74: 13:71:0b:a0:d6:0b:0d:d8:94:6f:14:0d:44:d6:23:fa:94:58: 36:bd:9a:f8:71:07:1a:bb:28:96:5e:99:b3:a7:94:10:bb:42: bd:2d:26:07:d1:17:bf:22:c3:e9:03:d9:23:7b:8f:ab:2e:ad: c0:d4:bf:75:de:6c:c3:c3:62:31:18:b7:18:ae:cc:4a:91:a5: 63:87:6a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuv/cHctJT8i3r1XSZ3vCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMjhiMThkZjI0NGRiODlmMmI5N2E2YzcyNjI5NzMzYjM4 ODYwMmYwHhcNMjUxMjEzMjIwMDQ0WhcNMjUxMjE0MjIwMDQ0WjAzMTEwLwYDVQQD Eyg2ZTRjYTBkZDM4MzNmNTU2ZjkwZTI2NmQ3YzAzZGYzYTViZDYyNDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7x43OavTMgqWJm+q7AQha7KWTJN 5SDTLwtNMIFzJ9BXICcYLpETTBe6u8r1WtXjrujMXg/U9sE9m4XpmXkxIlMx9jRv VFHlC/C5n9KPZoiDfaNzZekLBKRYHunx5m5k7ZsR4ViW/T+XNv2f9O0qsrUrgaBQ wckTL3F8oeHc8Yt6yh6dZnR1GRuoS8ZCkSStPBA7mrC7W5kOsHjYS5rqlihE+XWk KLBZOAjDrbOGmOmcotSL2A0Nw91YvpLk0iGu1ruEjkdGnFoy1SmO7ylxzxKNklv3 cF7aD/H+TCp4Yo0o/4p5XFBidQoQZ15kXgksiWzcaNfNlQQTlw9ZMM6D9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5MoN04M/VW+Q4mbXwD3zpb1iQxMB8GA1UdIwQY MBaAFB0osY3yRNuJ8rl6bHJilzOziGAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTIt YTk5YzM5MDkwZGI0LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTItYTk5YzM5MDkwZGI0 LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbySY8MuR 6MVo3QpUe9MW4ikjJmDacX35C1hFBiAx09USXsAiJxql77EMhPW9dnzSJ6QKvvCD wlnovAIo+zhAFDxiInL6QbzdJSw6zP+LOrUpWfE6uAtYr6ymcMFbgX00dBoQTdDC E673RA8Svo7LaCpFols4rHcm83iBdlWy5eYPC2xi3VLubbEs26nClZb1Vdqv4auZ HhbH+P/ACMBeObsPbAUj5PxArUPcSl0WfZpcgJ50E3ELoNYLDdiUbxQNRNYj+pRY Nr2a+HEHGrsoll6Zs6eUELtCvS0mB9EXvyLD6QPZI3uPqy6twNS/dd5sw8NiMRi3 GK7MSpGlY4dqdA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:00 2025 by rpki-client