This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json) Hash identifier: skjL/rvlNS4jqndUzT2L8RvN6X2HlBXiqIXhS8hR2iM= Subject key identifier: CC:B5:B4:F6:25:B0:AD:73:B5:7B:96:57:7B:43:BE:02:A1:E0:E6:6C Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Certificate serial: 019AF23F9826ECED373853BF88148EF895DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft Manifest number: 0E02 Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: IgxkTRYTXV12QxIFaDo0itietmQCx+hUMyuEYw0uce4=) 2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:98:26:ec:ed:37:38:53:bf:88:14:8e:f8:95:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=ccb5b4f625b0ad73b57b96577b43be02a1e0e66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:ba:45:6b:f7:60:d0:02:2a:93:ba:9e:86: 67:1d:7b:24:84:41:b9:d9:b7:96:eb:4a:96:27:58: 5c:53:0e:36:a4:05:d9:de:ae:67:ed:43:17:ec:2a: d2:3d:e4:63:53:0a:d2:b0:5f:3c:e1:73:fc:18:11: 4e:bc:fe:4b:35:f4:f5:9a:60:91:e1:0f:4a:97:73: cd:c0:d0:69:b9:3b:ff:04:7b:00:47:8b:20:ae:2a: 9b:89:f1:e0:1e:60:e9:a5:a5:bb:9f:37:e0:30:33: e8:04:f1:e5:b8:cd:a2:0f:e5:47:13:96:c6:28:56: e1:cc:bc:dc:47:f3:5e:3f:73:ae:75:00:96:df:4f: 14:74:d2:a3:01:db:21:25:14:c1:97:70:c4:93:e4: 46:8a:f8:c4:00:7b:38:fc:5e:82:e1:3e:34:40:7f: fb:c3:a2:c9:67:f4:3a:43:bc:df:56:d4:b2:03:4c: df:cf:e0:33:cd:1d:19:53:3b:fd:c5:18:93:6a:02: 21:15:2b:62:0a:54:cb:27:d0:3a:26:a1:15:85:bc: ea:ff:69:15:ed:04:67:ad:06:54:0c:cf:e0:56:48: 29:a7:5b:91:83:57:b8:0c:a6:14:0d:13:0f:ff:b8: 00:53:d5:3b:d8:29:18:40:b8:74:cd:0d:64:21:29: 51:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B5:B4:F6:25:B0:AD:73:B5:7B:96:57:7B:43:BE:02:A1:E0:E6:6C X509v3 Authority Key Identifier: keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:05:6a:62:9b:b0:c4:d5:83:31:23:06:81:4f:3a:ae:5e:2c: e4:60:57:bb:6b:b6:72:ea:fe:e2:b3:74:f4:10:3b:9f:b1:5c: d6:00:49:9d:ae:3c:67:65:01:3e:bf:49:a7:4a:7c:02:0e:b4: 9e:28:67:04:c4:fa:fb:86:1d:94:c9:4e:f6:d8:7f:8c:22:22: 30:89:43:2f:5b:92:4f:ec:90:43:ab:36:2a:53:80:19:9d:e0: 78:7b:4d:73:45:9e:74:44:b9:d4:14:a6:c4:17:a0:8a:b2:06: 3d:dd:6b:c4:7e:d3:e2:f2:a6:db:d8:bd:0f:4c:a0:8d:7e:7e: 19:73:59:a5:a8:9e:72:3d:5e:09:a3:76:4e:5e:d3:a5:b6:4e: 0b:b8:69:ec:3d:ec:49:78:a4:12:90:17:a6:7c:37:2a:82:d5: e0:dd:13:d8:7d:28:56:24:1c:86:a0:2b:ec:92:01:21:35:ab: 20:8d:e4:a4:38:49:21:86:5b:7b:d3:fd:05:a2:22:84:2f:7d: 5b:a5:eb:95:04:75:46:fd:c5:3d:10:d0:35:07:37:c8:04:04: 86:80:34:db:2d:33:c8:67:8b:6f:7f:0d:f0:43:4b:c9:e0:2d: b2:2d:72:e6:5a:35:99:76:cb:d1:76:bf:02:84:78:c2:60:1e: 0e:c6:1d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5gm7O03OFO/iBSO+JXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTg5NTUxMjhiY2JjNzY5M2ViMWE5MzdmZjI4YjQwZWIz NDQ4YTAwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhjY2I1YjRmNjI1YjBhZDczYjU3Yjk2NTc3YjQzYmUwMmExZTBlNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFq6RWv3YNACKpO6noZnHXskhEG5 2beW60qWJ1hcUw42pAXZ3q5n7UMX7CrSPeRjUwrSsF884XP8GBFOvP5LNfT1mmCR 4Q9Kl3PNwNBpuTv/BHsAR4sgriqbifHgHmDppaW7nzfgMDPoBPHluM2iD+VHE5bG KFbhzLzcR/NeP3OudQCW308UdNKjAdshJRTBl3DEk+RGivjEAHs4/F6C4T40QH/7 w6LJZ/Q6Q7zfVtSyA0zfz+AzzR0ZUzv9xRiTagIhFStiClTLJ9A6JqEVhbzq/2kV 7QRnrQZUDM/gVkgpp1uRg1e4DKYUDRMP/7gAU9U72CkYQLh0zQ1kISlREQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy1tPYlsK1ztXuWV3tDvgKh4OZsMB8GA1UdIwQY MBaAFByYlVEovLx2k+sak3/yi0DrNEigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQt YmY4MTNjZjA4MWI3LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83Yzg3MWQtODUzZS00YTJkLWE4ZDQtYmY4MTNjZjA4MWI3 LzEvSEppVlVTaTh2SGFUNnhxVGZfS0xRT3MwU0tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAVqYpuw xNWDMSMGgU86rl4s5GBXu2u2cur+4rN09BA7n7Fc1gBJna48Z2UBPr9Jp0p8Ag60 nihnBMT6+4YdlMlO9th/jCIiMIlDL1uST+yQQ6s2KlOAGZ3geHtNc0WedES51BSm xBegirIGPd1rxH7T4vKm29i9D0ygjX5+GXNZpaiecj1eCaN2Tl7TpbZOC7hp7D3s SXikEpAXpnw3KoLV4N0T2H0oViQchqAr7JIBITWrII3kpDhJIYZbe9P9BaIihC99 W6XrlQR1Rv3FPRDQNQc3yAQEhoA02y0zyGeLb38N8ENLyeAtsi1y5lo1mXbL0Xa/ AoR4wmAeDsYddQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:08 2025 by rpki-client