This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json) Hash identifier: BlAFRnUroN8hGyLRC5mc/9plQ6R/bkPvRDIR18oIKn0= Subject key identifier: FB:0A:47:3B:0E:47:9C:91:A8:18:5A:8E:79:74:31:04:05:11:21:41 Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66 Certificate issuer: /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66 Certificate serial: 019B446EBBD90758FEA7E62C8FD8C7CFA60D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft Manifest number: 171E Signing time: Mon 22 Dec 2025 05:01:06 +0000 Manifest this update: Mon 22 Dec 2025 05:01:06 +0000 Manifest next update: Tue 23 Dec 2025 05:01:06 +0000 Files and hashes: 1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: YbiZKCx3q/GFk1ffUTFYqHfS9gYPGtt6Kc50d/Vh8Z4=) 2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:bb:d9:07:58:fe:a7:e6:2c:8f:d8:c7:cf:a6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66 Validity Not Before: Dec 22 05:01:06 2025 GMT Not After : Dec 23 05:01:06 2025 GMT Subject: CN=fb0a473b0e479c91a8185a8e7974310405112141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:f0:d3:b9:3e:b9:91:81:19:af:1e:0e:18: fa:c7:20:95:ee:ac:e7:09:f2:76:84:fa:50:81:4f: 6e:62:cf:c5:18:39:b1:93:18:40:14:a4:bc:00:00: a7:51:a5:26:2f:b4:12:4a:2c:68:d2:9e:2e:4b:cd: 76:cd:e4:d9:6d:42:da:81:be:96:f9:35:4e:ff:6f: 3b:bc:ab:6b:1b:8b:1c:74:d1:d1:71:d2:95:87:2d: cc:b9:d0:0a:e7:ce:ae:c0:7d:52:a2:16:56:82:69: 5b:1f:72:0a:df:ee:a8:16:b4:e5:69:a6:4a:af:57: 7c:57:ed:01:66:b6:90:ed:78:54:81:13:5a:d3:0f: 5b:86:65:af:7a:18:74:29:af:c1:5f:02:6a:d9:c0: cf:1c:8c:7a:f9:4d:d4:04:7d:ae:34:96:3e:ac:f6: b6:9f:24:08:48:95:05:ea:39:7b:c9:e2:00:7b:68: 29:0c:8c:9e:23:6c:8f:31:4a:10:80:e4:4f:87:66: be:61:e2:c1:b5:32:f2:57:66:25:d5:3b:ad:d7:07: 81:00:1d:e8:00:61:99:2d:54:37:52:dc:4b:85:0e: af:52:1f:52:2d:2a:bf:23:a7:db:e2:25:fa:9a:08: 16:59:f3:68:0e:e4:d9:21:a4:de:83:4a:76:8f:af: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0A:47:3B:0E:47:9C:91:A8:18:5A:8E:79:74:31:04:05:11:21:41 X509v3 Authority Key Identifier: keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5a:48:e0:b6:d6:df:21:48:da:4f:03:a7:a9:13:70:d3:18: 25:72:60:23:ce:03:36:84:f7:29:6d:fe:b4:5b:48:0b:7f:69: 16:20:64:98:84:88:f6:23:89:b3:83:99:15:bd:bf:e0:5a:0e: 29:1c:ea:54:82:60:db:e4:b8:29:a7:bb:78:d1:0e:ff:e0:f6: 94:56:4c:47:2f:7b:63:23:3e:f7:c5:1c:76:e1:43:d4:f5:89: e8:47:a2:f5:74:82:73:75:d5:b3:7f:28:87:75:de:52:8a:a3: 74:d6:0f:35:b6:b1:f6:4f:43:87:b7:70:68:0e:83:e5:b5:49: 9e:83:90:dc:c0:70:5c:69:67:11:de:cf:f5:17:ff:de:c6:1b: ed:ce:21:25:42:9d:f9:39:79:74:87:75:36:2c:e6:a8:17:0b: 8e:b6:17:5c:dd:63:0f:65:92:72:69:e1:67:97:c7:6e:93:c1: 0a:8d:b3:0c:3f:35:72:17:15:20:dc:a4:4a:bb:67:1a:bf:81: 9d:e2:42:6a:2e:cd:27:e9:79:c0:04:dc:1f:73:c0:0c:55:14: f5:18:76:1f:d2:ef:6b:d3:6a:41:50:57:d0:ab:0c:db:5b:84: 14:eb:e6:84:ed:7f:d5:fb:e1:0b:1d:cb:03:58:ec:15:85:13: f9:39:cd:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbrvZB1j+p+Ysj9jHz6YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlM2JhNGRiYmE1MjNkNWIwZGM5ODkyMDNiZmQ2OTY0OGQx ZDRlNjYwHhcNMjUxMjIyMDUwMTA2WhcNMjUxMjIzMDUwMTA2WjAzMTEwLwYDVQQD EyhmYjBhNDczYjBlNDc5YzkxYTgxODVhOGU3OTc0MzEwNDA1MTEyMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g3w07k+uZGBGa8eDhj6xyCV7qzn CfJ2hPpQgU9uYs/FGDmxkxhAFKS8AACnUaUmL7QSSixo0p4uS812zeTZbULagb6W +TVO/287vKtrG4scdNHRcdKVhy3MudAK586uwH1SohZWgmlbH3IK3+6oFrTlaaZK r1d8V+0BZraQ7XhUgRNa0w9bhmWvehh0Ka/BXwJq2cDPHIx6+U3UBH2uNJY+rPa2 nyQISJUF6jl7yeIAe2gpDIyeI2yPMUoQgORPh2a+YeLBtTLyV2Yl1Tut1weBAB3o AGGZLVQ3UtxLhQ6vUh9SLSq/I6fb4iX6mggWWfNoDuTZIaTeg0p2j69ZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsKRzsOR5yRqBhajnl0MQQFESFBMB8GA1UdIwQY MBaAFB47pNu6Uj1bDcmJIDv9aWSNHU5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmIt MTJlMjBjODc1YzUzLzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmItMTJlMjBjODc1YzUz LzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFpI4LbW 3yFI2k8Dp6kTcNMYJXJgI84DNoT3KW3+tFtIC39pFiBkmISI9iOJs4OZFb2/4FoO KRzqVIJg2+S4Kae7eNEO/+D2lFZMRy97YyM+98UcduFD1PWJ6Eei9XSCc3XVs38o h3XeUoqjdNYPNbax9k9Dh7dwaA6D5bVJnoOQ3MBwXGlnEd7P9Rf/3sYb7c4hJUKd +Tl5dId1NizmqBcLjrYXXN1jD2WScmnhZ5fHbpPBCo2zDD81chcVINykSrtnGr+B neJCai7NJ+l5wATcH3PADFUU9Rh2H9Lva9NqQVBX0KsM21uEFOvmhO1/1fvhCx3L A1jsFYUT+TnNcw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:44 2025 by rpki-client