This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json) Hash identifier: EZe+k+iqcPwzwIsOPJOBNDxjI/illlbxFaZiWsQOU34= Subject key identifier: FD:2C:21:29:F1:62:B1:2D:E9:AD:C4:B2:96:55:FA:86:6D:74:F9:15 Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Certificate serial: 019B32D7E4761FA7A8D1ABDB0A85DC7E2DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft Manifest number: 1090 Signing time: Thu 18 Dec 2025 19:02:48 +0000 Manifest this update: Thu 18 Dec 2025 19:02:48 +0000 Manifest next update: Fri 19 Dec 2025 19:02:48 +0000 Files and hashes: 1: GtM4pSsiK5eSfyxXfFff62QmvIQ.roa (hash: d17WNX33kwLBGAgNh9bS/nIhg2dh/WqffpjSyAJ5+FM=) 2: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: JcEKFDtufKKOKacRyMSbGK2ouzDh5NZ2n/4iS6/P0+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:e4:76:1f:a7:a8:d1:ab:db:0a:85:dc:7e:2d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf Validity Not Before: Dec 18 19:02:48 2025 GMT Not After : Dec 19 19:02:48 2025 GMT Subject: CN=fd2c2129f162b12de9adc4b29655fa866d74f915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:dc:67:f9:a4:60:40:84:00:27:7b:b6:36: d9:2d:cd:49:ad:45:65:52:88:0c:5c:58:7c:c0:ba: 26:3d:87:4b:5a:ec:cc:f5:9d:9f:d7:98:72:15:ad: 14:42:f3:e2:d7:e5:92:dd:86:7c:9b:a3:eb:a5:23: a1:cb:98:0b:55:27:11:87:b2:b8:c1:f8:4e:3d:2a: 90:ef:73:2e:d4:0c:59:a2:27:22:b2:04:dc:76:a4: 1b:81:8e:e3:20:c1:9c:db:be:df:30:64:92:2c:68: fc:5b:f5:f6:25:7d:83:37:33:ac:07:9c:bf:ee:6c: 65:b8:23:2d:10:5d:c8:3c:19:34:d9:8f:88:90:c1: 97:9b:c8:1b:7e:96:69:a0:ba:5f:c2:c2:1a:1d:16: 64:e3:26:01:16:29:ae:c9:13:4a:69:40:d1:03:c2: 9f:56:92:50:e2:40:54:08:de:ca:92:ff:b8:bb:32: a6:ae:ea:65:f0:6e:f3:70:e1:e8:2c:3a:32:da:ca: bb:41:a3:3f:7d:f6:39:64:fe:d7:5e:e9:05:d3:1a: c5:61:a2:71:91:27:4b:a8:9f:10:69:11:38:42:75: 17:fe:b5:10:7b:ec:0b:0b:63:05:27:de:14:26:b5: 95:7b:c1:f5:02:e5:e3:9d:21:fb:ff:21:a2:01:9a: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:21:29:F1:62:B1:2D:E9:AD:C4:B2:96:55:FA:86:6D:74:F9:15 X509v3 Authority Key Identifier: keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ed:b4:8d:59:7f:d7:c9:78:71:10:8b:8a:6d:e0:5f:6e:a8: 40:23:cf:21:a3:07:fb:0c:b3:03:37:15:d0:2d:23:f1:ee:57: a0:d3:fd:b4:4c:95:02:af:fc:45:72:51:f1:4f:20:fe:30:0d: d2:2b:77:66:23:ba:81:27:1d:b3:9f:9c:ef:3d:f7:5d:b5:68: cd:4f:c7:f8:d6:e4:78:4b:a2:65:5f:65:cf:cc:a6:82:60:33: 23:85:87:37:23:64:3b:23:d2:95:89:26:f8:a2:13:b3:e2:c0: 25:75:bf:6e:3b:5e:ce:e7:a7:65:0e:c7:5f:6f:15:cd:9b:19: 16:c1:eb:b1:ae:e2:a4:5b:cc:61:3c:7b:f4:8d:04:2e:23:14: aa:2a:98:29:18:af:59:f7:d9:10:6d:95:13:1c:34:ba:ee:fc: fe:4d:d0:61:54:ff:f2:65:96:3a:1f:ed:c6:65:94:61:2e:d6: 8b:ed:d3:fb:bc:db:d4:a3:09:46:b7:5c:a9:01:74:18:87:22: 13:36:ab:42:64:3f:fc:64:ff:17:67:8c:39:79:76:07:c5:29: 38:31:eb:76:ab:f2:43:49:2f:8e:62:93:e8:14:83:09:0a:7f: 96:ff:fc:db:45:9f:46:97:c6:1e:5a:c1:2a:37:7d:31:38:ac: 22:e3:10:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1+R2H6eo0avbCoXcfi33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy M2U1YmYwHhcNMjUxMjE4MTkwMjQ4WhcNMjUxMjE5MTkwMjQ4WjAzMTEwLwYDVQQD EyhmZDJjMjEyOWYxNjJiMTJkZTlhZGM0YjI5NjU1ZmE4NjZkNzRmOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjDcZ/mkYECEACd7tjbZLc1JrUVl UogMXFh8wLomPYdLWuzM9Z2f15hyFa0UQvPi1+WS3YZ8m6PrpSOhy5gLVScRh7K4 wfhOPSqQ73Mu1AxZoicisgTcdqQbgY7jIMGc277fMGSSLGj8W/X2JX2DNzOsB5y/ 7mxluCMtEF3IPBk02Y+IkMGXm8gbfpZpoLpfwsIaHRZk4yYBFimuyRNKaUDRA8Kf VpJQ4kBUCN7Kkv+4uzKmrupl8G7zcOHoLDoy2sq7QaM/ffY5ZP7XXukF0xrFYaJx kSdLqJ8QaRE4QnUX/rUQe+wLC2MFJ94UJrWVe8H1AuXjnSH7/yGiAZrLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0sISnxYrEt6a3EspZV+oZtdPkVMB8GA1UdIwQY MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO20jVl/ 18l4cRCLim3gX26oQCPPIaMH+wyzAzcV0C0j8e5XoNP9tEyVAq/8RXJR8U8g/jAN 0it3ZiO6gScds5+c7z33XbVozU/H+NbkeEuiZV9lz8ymgmAzI4WHNyNkOyPSlYkm +KITs+LAJXW/bjtezuenZQ7HX28VzZsZFsHrsa7ipFvMYTx79I0ELiMUqiqYKRiv WffZEG2VExw0uu78/k3QYVT/8mWWOh/txmWUYS7Wi+3T+7zb1KMJRrdcqQF0GIci EzarQmQ//GT/F2eMOXl2B8UpODHrdqvyQ0kvjmKT6BSDCQp/lv/820WfRpfGHlrB Kjd9MTisIuMQtg== -----END CERTIFICATE-----Generated at Fri Dec 19 04:44:22 2025 by rpki-client