This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json) Hash identifier: nEwkipXPYOyN1pIaMMvZHzrpbFL1ojc+MP/rKJDFkPM= Subject key identifier: FB:13:C1:D9:6F:1C:03:A3:FC:E8:A0:52:BC:BE:9B:E0:69:60:04:B5 Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Certificate serial: 019AF5AEF7898501FC2D59BBAF545BBE5821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft Manifest number: 0AFB Signing time: Sat 06 Dec 2025 22:01:15 +0000 Manifest this update: Sat 06 Dec 2025 22:01:15 +0000 Manifest next update: Sun 07 Dec 2025 22:01:15 +0000 Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=) 2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: i7AK3kLh95rWHbGcPzqf9+FJBc2KRnSNPEomv/Xa5BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f7:89:85:01:fc:2d:59:bb:af:54:5b:be:58:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87 Validity Not Before: Dec 6 22:01:15 2025 GMT Not After : Dec 7 22:01:15 2025 GMT Subject: CN=fb13c1d96f1c03a3fce8a052bcbe9be0696004b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:20:af:2f:bf:b9:b2:da:8d:3d:4a:0b:a9:d8: 32:e8:d0:71:a2:34:86:46:29:b8:4d:9e:53:2a:19: cf:1a:20:97:7c:4a:d7:8a:86:67:7e:3a:cc:4f:a9: d9:b1:71:b0:0d:78:33:92:0b:a1:d7:62:6d:5c:41: c5:eb:ef:bd:57:67:c8:36:a0:4e:a2:73:e6:8e:56: ce:82:fb:67:16:a5:24:89:da:7d:88:60:25:84:21: 8a:22:2f:12:0d:64:10:c9:29:ee:e9:13:d7:d4:14: bd:70:a8:f5:59:78:4a:f3:a5:b0:9f:2e:2b:f7:a1: cf:e8:f2:b2:57:ed:fe:8e:2c:ff:82:82:66:8f:4e: 6e:31:66:e3:d2:84:5a:67:bd:8f:ef:0d:97:fa:c3: 7d:60:92:ce:dc:c0:31:35:36:1a:d8:bc:8b:74:43: cb:23:fa:36:63:23:d5:4e:56:e3:a4:b0:9b:65:74: 31:d7:14:35:9f:37:97:c9:4a:d6:93:e8:d5:5e:3e: 3f:0a:66:60:a6:89:12:d9:88:e0:bb:41:c2:3e:61: 74:a6:8c:01:07:52:c4:3b:05:41:d7:45:a9:54:0e: 1f:55:fa:e9:19:68:1f:64:de:9f:f5:37:a9:ed:ac: 84:c9:02:57:bc:8a:23:e1:ac:1d:01:00:75:d9:04: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:C1:D9:6F:1C:03:A3:FC:E8:A0:52:BC:BE:9B:E0:69:60:04:B5 X509v3 Authority Key Identifier: keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a0:74:8f:ed:bf:5a:d5:6c:88:6b:5f:ff:bd:33:13:a4:07: 54:30:21:b7:b0:22:86:e6:61:56:67:ab:7a:6a:d0:17:e4:a8: fd:e0:a5:f7:13:d4:ac:fa:86:a9:af:7e:ca:e1:13:f9:90:8f: ad:52:81:19:6f:91:43:61:c6:96:3c:06:91:ec:d9:88:c0:31: 48:8c:08:92:39:5e:2f:bc:2c:6c:71:09:6b:ec:95:07:77:8c: 5e:5a:fb:74:78:be:86:14:3a:2d:2c:87:d9:2e:8c:86:ed:a1: d4:bd:5e:26:c7:fb:52:c2:e4:17:1b:47:ce:81:55:e4:fb:89: bd:f1:27:1d:04:64:5e:5a:d7:d4:98:86:7f:b2:91:f1:ba:79: 90:de:02:db:0c:35:b6:42:11:9a:41:62:13:28:97:26:49:c4: eb:2a:9f:fa:2b:a6:24:41:91:b4:3f:4c:60:ab:8c:a8:c7:f2: 06:6f:8a:e4:2e:1e:70:2a:ea:9a:cb:4c:b6:0f:cb:0d:1c:7d: 8b:0d:66:d2:83:ad:96:af:30:33:3f:ae:7d:8b:da:f7:07:1c: 45:63:9f:5a:9d:2b:5e:6d:f6:91:04:75:bd:c3:a0:c1:e1:8f: a5:4c:3a:43:75:23:96:48:35:f4:04:6d:a4:33:d6:99:7b:a3: a7:61:e6:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rveJhQH8LVm7r1RbvlghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMmVhYWQ3YTg3MDY2MTVkMWM4NDM2ZGNlMDE5NTQ5NWYy MTRhODcwHhcNMjUxMjA2MjIwMTE1WhcNMjUxMjA3MjIwMTE1WjAzMTEwLwYDVQQD EyhmYjEzYzFkOTZmMWMwM2EzZmNlOGEwNTJiY2JlOWJlMDY5NjAwNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iCvL7+5stqNPUoLqdgy6NBxojSG Rim4TZ5TKhnPGiCXfErXioZnfjrMT6nZsXGwDXgzkguh12JtXEHF6++9V2fINqBO onPmjlbOgvtnFqUkidp9iGAlhCGKIi8SDWQQySnu6RPX1BS9cKj1WXhK86Wwny4r 96HP6PKyV+3+jiz/goJmj05uMWbj0oRaZ72P7w2X+sN9YJLO3MAxNTYa2LyLdEPL I/o2YyPVTlbjpLCbZXQx1xQ1nzeXyUrWk+jVXj4/CmZgpokS2Yjgu0HCPmF0powB B1LEOwVB10WpVA4fVfrpGWgfZN6f9Tep7ayEyQJXvIoj4awdAQB12QSNlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsTwdlvHAOj/OigUry+m+BpYAS1MB8GA1UdIwQY MBaAFB4uqteocGYV0chDbc4BlUlfIUqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYt MmM5OGYxN2I4ZWIzLzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8wOGNiNjItMzlkZi00MzJlLThhNzYtMmM5OGYxN2I4ZWIz LzEvSGk2cTE2aHdaaFhSeUVOdHpnR1ZTVjhoU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKB0j+2/ WtVsiGtf/70zE6QHVDAht7AihuZhVmeremrQF+So/eCl9xPUrPqGqa9+yuET+ZCP rVKBGW+RQ2HGljwGkezZiMAxSIwIkjleL7wsbHEJa+yVB3eMXlr7dHi+hhQ6LSyH 2S6Mhu2h1L1eJsf7UsLkFxtHzoFV5PuJvfEnHQRkXlrX1JiGf7KR8bp5kN4C2ww1 tkIRmkFiEyiXJknE6yqf+iumJEGRtD9MYKuMqMfyBm+K5C4ecCrqmstMtg/LDRx9 iw1m0oOtlq8wMz+ufYva9wccRWOfWp0rXm32kQR1vcOgweGPpUw6Q3Ujlkg19ARt pDPWmXujp2Hm9Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:19 2025 by rpki-client