This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft File: HeL84IWat-AbhRy2Buvb1cAzgSU.mft (raw, json) Hash identifier: VX74qUDv1KW+UTIFC4iXoCl8KCqTz4zjfXebbz03MlA= Subject key identifier: 0F:0A:2B:E2:4F:7F:70:36:E4:0C:E2:2C:44:EB:05:7A:11:91:A7:9B Authority key identifier: 1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25 Certificate issuer: /CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125 Certificate serial: 019B3456FC98AD9AD241FB828E0F185626E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft Manifest number: 0C Signing time: Fri 19 Dec 2025 02:01:14 +0000 Manifest this update: Fri 19 Dec 2025 02:01:14 +0000 Manifest next update: Sat 20 Dec 2025 02:01:14 +0000 Files and hashes: 1: 4KV8lpniR8UxE5ZzouJqiraVYdU.roa (hash: 2DsJOVXnej+D8A8DI149UPDkM6EL2VAPk54dRCZJTH8=) 2: HeL84IWat-AbhRy2Buvb1cAzgSU.crl (hash: mSGbiLcms9UZtyK0U91iQW+oXz4eqrODFbFWC8sCvvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:fc:98:ad:9a:d2:41:fb:82:8e:0f:18:56:26:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de2fce0859ab7e01b851cb606ebdbd5c0338125 Validity Not Before: Dec 19 02:01:14 2025 GMT Not After : Dec 20 02:01:14 2025 GMT Subject: CN=0f0a2be24f7f7036e40ce22c44eb057a1191a79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f8:6b:1d:28:6b:54:6f:d2:f2:e7:ee:22:b2: 02:78:f7:d8:91:bf:d1:95:70:71:2b:d1:3a:ac:55: d7:b6:01:b8:e1:0a:64:22:bd:37:4b:eb:57:2c:e9: b6:38:59:14:73:f9:f1:4f:4f:92:28:e1:b4:08:00: 86:14:29:2c:2f:63:55:68:eb:99:d6:23:f2:53:07: 41:f6:2d:3b:5c:4b:01:0e:18:fb:42:30:e3:4f:70: 88:e6:e7:4c:f7:23:11:65:ad:45:e9:4a:22:c9:28: bb:cc:c5:31:68:3c:8c:d9:32:f0:71:57:4e:15:59: c0:b2:0a:85:c2:f1:e7:bc:c7:4a:66:53:ff:e3:81: af:ab:47:82:8a:d8:62:bf:17:39:76:92:5f:aa:b3: 58:32:92:95:34:5c:7e:34:53:63:79:3b:c7:9f:4f: ea:30:af:9c:f0:97:27:a5:05:8e:15:fb:5c:8e:0b: 0a:11:51:ad:be:a5:aa:34:46:58:fe:21:40:78:95: 9e:c7:8d:7b:74:d1:b5:81:f4:ad:b7:bf:f6:cb:66: 7d:7c:3a:69:e1:56:d7:c1:ba:4b:b2:c4:b7:a6:b6: 46:95:0c:c5:22:43:01:68:c9:7b:a7:1d:6c:b9:05: 6c:c2:d0:47:7d:8b:50:20:93:70:14:b9:08:5e:3f: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0A:2B:E2:4F:7F:70:36:E4:0C:E2:2C:44:EB:05:7A:11:91:A7:9B X509v3 Authority Key Identifier: keyid:1D:E2:FC:E0:85:9A:B7:E0:1B:85:1C:B6:06:EB:DB:D5:C0:33:81:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeL84IWat-AbhRy2Buvb1cAzgSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b66569-33db-4d89-9a67-f069345e428c/1/HeL84IWat-AbhRy2Buvb1cAzgSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bb:9d:33:04:6d:59:ed:1d:e9:0a:92:10:bc:e1:ef:08:ee: 43:fd:f5:cf:25:35:ad:4e:3d:a0:42:5e:0c:c3:55:7a:3c:f1: 81:f3:23:cf:5e:8d:ae:9a:dc:2f:43:2c:ef:52:aa:28:be:52: 0f:75:71:d0:2c:27:4e:46:c6:f3:25:1a:1f:d0:32:30:91:1b: 02:53:30:c4:dd:ef:63:4a:92:d3:cd:3c:78:b8:9b:a2:ea:d8: 34:d8:7f:5c:85:89:37:41:68:07:14:75:82:b3:f2:38:60:cc: 77:2e:a3:28:66:f4:cc:be:a5:f3:0f:e9:30:2e:d2:7b:44:43: d2:9e:97:c7:02:82:ad:cd:a0:46:41:8c:2c:6d:2d:5e:50:0b: 40:d5:23:f8:3f:7c:e6:61:44:05:4d:1a:f5:04:d1:a1:3b:6a: 50:c5:f7:b4:7b:32:da:ae:a0:44:a3:38:b5:eb:a2:77:68:6e: 3d:ea:b9:04:fe:fa:2e:38:1a:79:c6:f1:f5:9a:76:4f:d8:4a: 9d:dd:9c:88:03:d9:9e:e7:14:9b:b0:ce:b9:1a:54:ba:ce:16: cc:0f:e6:fb:11:87:d3:04:57:a8:bf:fc:40:d0:68:61:a6:3f: 25:ca:de:56:19:40:b5:3a:9e:23:35:4c:b4:60:49:03:72:66: 96:fc:58:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VvyYrZrSQfuCjg8YVibkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZTJmY2UwODU5YWI3ZTAxYjg1MWNiNjA2ZWJkYmQ1YzAz MzgxMjUwHhcNMjUxMjE5MDIwMTE0WhcNMjUxMjIwMDIwMTE0WjAzMTEwLwYDVQQD EygwZjBhMmJlMjRmN2Y3MDM2ZTQwY2UyMmM0NGViMDU3YTExOTFhNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PhrHShrVG/S8ufuIrICePfYkb/R lXBxK9E6rFXXtgG44QpkIr03S+tXLOm2OFkUc/nxT0+SKOG0CACGFCksL2NVaOuZ 1iPyUwdB9i07XEsBDhj7QjDjT3CI5udM9yMRZa1F6UoiySi7zMUxaDyM2TLwcVdO FVnAsgqFwvHnvMdKZlP/44Gvq0eCithivxc5dpJfqrNYMpKVNFx+NFNjeTvHn0/q MK+c8JcnpQWOFftcjgsKEVGtvqWqNEZY/iFAeJWex417dNG1gfStt7/2y2Z9fDpp 4VbXwbpLssS3prZGlQzFIkMBaMl7px1suQVswtBHfYtQIJNwFLkIXj8fiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8KK+JPf3A25AziLETrBXoRkaebMB8GA1UdIwQY MBaAFB3i/OCFmrfgG4Uctgbr29XAM4ElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGVMODRJV2F0LUFiaFJ5MkJ1dmIxY0F6Z1NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iNjY1NjktMzNkYi00ZDg5LTlhNjct ZjA2OTM0NWU0MjhjLzEvSGVMODRJV2F0LUFiaFJ5MkJ1dmIxY0F6Z1NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iNjY1NjktMzNkYi00ZDg5LTlhNjctZjA2OTM0NWU0Mjhj LzEvSGVMODRJV2F0LUFiaFJ5MkJ1dmIxY0F6Z1NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7udMwRt We0d6QqSELzh7wjuQ/31zyU1rU49oEJeDMNVejzxgfMjz16NrprcL0Ms71KqKL5S D3Vx0CwnTkbG8yUaH9AyMJEbAlMwxN3vY0qS0808eLibourYNNh/XIWJN0FoBxR1 grPyOGDMdy6jKGb0zL6l8w/pMC7Se0RD0p6XxwKCrc2gRkGMLG0tXlALQNUj+D98 5mFEBU0a9QTRoTtqUMX3tHsy2q6gRKM4teuid2huPeq5BP76Ljgaecbx9Zp2T9hK nd2ciAPZnucUm7DOuRpUus4WzA/m+xGH0wRXqL/8QNBoYaY/JcreVhlAtTqeIzVM tGBJA3JmlvxYBw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:26:11 2025 by rpki-client