This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft File: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft (raw, json) Hash identifier: nFKN3ArdprfKwPYi+2cLG32ALciboTA9uFwmG9GIIZA= Subject key identifier: 2B:DE:68:15:95:9E:4B:96:7F:87:23:E2:E6:60:32:66:C9:6F:75:8F Authority key identifier: 1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE Certificate issuer: /CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe Certificate serial: 019AF12E711E4A558D7721614AB8122490A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft Manifest number: 10BD Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: 5pynZFAsqvPIGH5-PXLgAGK58mA.roa (hash: fBc4s8OOq/rbaknM5GE/ZQ9xYBiAMIuTqJlNTn46D0Y=) 2: HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl (hash: sSQG9+Rn2Y0eSLAzj0NODVTtCrKUB6uGbaFumQI7HcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:71:1e:4a:55:8d:77:21:61:4a:b8:12:24:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c9c0b1d2144214ea4913c7d63b26fe26a472efe Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=2bde6815959e4b967f8723e2e6603266c96f758f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:e5:96:4c:99:60:6a:51:85:72:18:fb:fb: 92:d2:61:4f:fc:77:26:b7:83:7a:e4:62:7d:75:98: 84:07:96:d4:7f:f0:22:53:8f:22:14:7b:69:25:ff: 16:9e:3a:e0:c6:17:cf:d8:d5:18:46:e5:84:7f:af: 1f:42:e0:7c:82:14:48:d8:25:35:02:5d:8f:01:07: be:05:69:d5:da:83:58:25:a3:41:6d:bb:27:37:a9: 3c:0b:60:7d:f6:9c:eb:90:3b:10:5b:73:ff:f5:a4: 67:9e:09:0b:ee:e5:18:c2:0c:29:27:fe:b8:61:1b: 7a:b8:a7:59:5f:62:f0:3f:7e:f9:98:d9:ac:43:72: 66:29:86:aa:41:80:15:94:59:b1:5c:ee:80:9b:ca: 3a:f7:79:e6:fb:12:d5:ae:1b:36:65:cb:02:71:e4: f6:05:6d:13:98:99:cd:a1:21:48:6d:87:2f:0a:c0: 6c:01:a9:a8:19:42:ba:6c:af:3d:87:a4:0d:7b:12: c1:fe:34:d6:d7:cf:8f:9d:de:7c:cc:1d:b5:5a:98: e7:f5:b0:1c:4e:c8:63:26:f1:4c:52:bd:11:47:46: ed:25:80:48:f0:aa:1a:89:15:18:dd:1e:37:bd:ca: 1b:2d:4e:ab:3e:98:8e:42:e2:10:c2:aa:48:8e:3e: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:68:15:95:9E:4B:96:7F:87:23:E2:E6:60:32:66:C9:6F:75:8F X509v3 Authority Key Identifier: keyid:1C:9C:0B:1D:21:44:21:4E:A4:91:3C:7D:63:B2:6F:E2:6A:47:2E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d8514-0ee5-4cdb-b078-f65a93f480a8/1/HJwLHSFEIU6kkTx9Y7Jv4mpHLv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7a:0c:74:b9:11:40:34:39:f0:35:35:df:01:a0:63:6e:f4: eb:11:78:46:95:90:b9:87:82:96:60:ad:ed:cc:28:85:9a:4e: 2a:8a:10:84:71:48:26:61:27:b2:d4:d9:d5:02:ec:1e:2a:a4: f6:15:e7:6c:d1:6c:1b:87:31:dc:63:18:40:d7:2b:e1:2f:45: da:02:d2:8c:6d:87:b5:6b:9c:8b:fe:13:3a:78:3b:b3:41:37: 6b:b6:a2:3e:3e:cf:2a:e4:44:38:27:79:00:47:96:75:39:dd: fa:40:a0:76:8b:e9:5f:3f:c9:c3:f6:3c:60:a3:45:02:fc:0c: a8:25:e6:f6:d5:37:c5:c5:c6:ad:09:e4:3e:8d:44:0e:e8:3a: 8c:71:7e:d6:0f:4f:ca:11:76:b2:78:20:d6:b3:31:d1:97:32: 4a:a9:a7:21:70:06:d0:6d:30:20:7e:9c:1c:8c:49:ad:27:2d: 00:b9:c8:c7:ed:2f:78:04:a2:f7:7a:c5:1f:30:bc:99:40:d3: c4:a7:32:05:90:0f:85:04:e8:18:ee:94:6b:61:cd:85:62:11: 07:49:d5:f1:75:8f:ba:35:4e:65:10:45:de:34:41:47:de:22: ee:fd:84:ec:34:40:e0:69:08:80:bc:26:11:fa:76:19:e0:7c: 5e:f1:f3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnEeSlWNdyFhSrgSJJCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOWMwYjFkMjE0NDIxNGVhNDkxM2M3ZDYzYjI2ZmUyNmE0 NzJlZmUwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EygyYmRlNjgxNTk1OWU0Yjk2N2Y4NzIzZTJlNjYwMzI2NmM5NmY3NThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwurllkyZYGpRhXIY+/uS0mFP/Hcm t4N65GJ9dZiEB5bUf/AiU48iFHtpJf8WnjrgxhfP2NUYRuWEf68fQuB8ghRI2CU1 Al2PAQe+BWnV2oNYJaNBbbsnN6k8C2B99pzrkDsQW3P/9aRnngkL7uUYwgwpJ/64 YRt6uKdZX2LwP375mNmsQ3JmKYaqQYAVlFmxXO6Am8o693nm+xLVrhs2ZcsCceT2 BW0TmJnNoSFIbYcvCsBsAamoGUK6bK89h6QNexLB/jTW18+Pnd58zB21Wpjn9bAc TshjJvFMUr0RR0btJYBI8KoaiRUY3R43vcobLU6rPpiOQuIQwqpIjj6jNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCveaBWVnkuWf4cj4uZgMmbJb3WPMB8GA1UdIwQY MBaAFBycCx0hRCFOpJE8fWOyb+JqRy7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDg1MTQtMGVlNS00Y2RiLWIwNzgt ZjY1YTkzZjQ4MGE4LzEvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80ZDg1MTQtMGVlNS00Y2RiLWIwNzgtZjY1YTkzZjQ4MGE4 LzEvSEp3TEhTRkVJVTZra1R4OVk3SnY0bXBITHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3oMdLkR QDQ58DU13wGgY2706xF4RpWQuYeClmCt7cwohZpOKooQhHFIJmEnstTZ1QLsHiqk 9hXnbNFsG4cx3GMYQNcr4S9F2gLSjG2HtWuci/4TOng7s0E3a7aiPj7PKuREOCd5 AEeWdTnd+kCgdovpXz/Jw/Y8YKNFAvwMqCXm9tU3xcXGrQnkPo1EDug6jHF+1g9P yhF2sngg1rMx0ZcySqmnIXAG0G0wIH6cHIxJrSctALnIx+0veASi93rFHzC8mUDT xKcyBZAPhQToGO6Ua2HNhWIRB0nV8XWPujVOZRBF3jRBR94i7v2E7DRA4GkIgLwm Efp2GeB8XvHz+A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:26 2025 by rpki-client