This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json) Hash identifier: TQr5b5Fs3yHWqMJFC78tuJp4YbK2L9KvQ47k/H1mmKM= Subject key identifier: 05:5A:52:20:8D:3C:B8:25:7F:20:56:F9:FF:AD:CA:10:CC:8F:E5:3E Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Certificate serial: 019AF276BE0F1603E307C82F9BA31F32B96A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: Lfm0BCrkEGiJLJfLKHT+LFE8W1FJ4iPsa++gTH90UWA=) 2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=) 3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:be:0f:16:03:e3:07:c8:2f:9b:a3:1f:32:b9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=055a52208d3cb8257f2056f9ffadca10cc8fe53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:33:89:02:c2:27:a3:7e:63:a6:ec:54:b6: 7f:3c:b9:83:3b:22:76:35:21:f6:1f:d5:62:93:8c: 3c:63:40:b3:17:22:6f:58:06:27:f5:0e:99:8a:ad: 61:d6:07:24:da:25:c2:dd:3a:52:5e:87:96:9b:39: 5a:d8:d9:d5:f4:c4:de:25:87:5b:aa:7d:e9:78:b5: 22:0c:26:54:1b:fb:6e:95:c8:3c:df:bd:29:d6:cd: 12:c5:a3:d0:9a:d4:2c:5f:64:af:c0:e4:94:0d:69: 24:04:ed:38:21:18:38:b7:6d:1c:37:93:19:01:7b: e9:20:a6:9b:66:0f:38:e1:8e:b1:f0:9b:ec:82:a3: 4a:dc:8e:51:c9:ce:b1:b0:ea:49:ce:37:d6:14:f9: ad:4b:d5:07:f1:2c:1e:30:96:04:34:95:9e:ba:ac: 06:1d:53:53:f8:fd:5d:65:26:17:75:de:9e:c2:86: ed:ed:54:86:b4:be:b9:b6:fd:24:8c:2c:c4:b9:3d: dd:a2:dd:b4:36:71:25:a6:f1:0d:3d:38:3f:91:11: de:69:c4:e8:92:12:09:fd:34:87:95:56:d6:63:83: 20:e7:7a:57:31:09:b8:bb:4c:e0:b5:6e:4c:3c:0e: 35:0f:8c:93:f7:80:99:13:05:57:6d:e6:0c:7a:08: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5A:52:20:8D:3C:B8:25:7F:20:56:F9:FF:AD:CA:10:CC:8F:E5:3E X509v3 Authority Key Identifier: keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:00:5b:9e:5b:92:70:47:84:a1:8f:e5:34:91:cc:c9:fa:cc: 9c:6f:ca:b9:01:9c:29:21:f0:71:2d:32:aa:af:bd:5c:e3:28: 7a:9f:13:2e:af:5a:0d:ca:0e:7b:e5:55:80:4e:15:61:14:bb: 2b:d6:75:77:76:f1:51:08:06:1f:6e:55:ef:c9:f7:cc:ed:ac: 13:71:89:37:4d:d4:a7:c9:1c:3b:fa:a4:f2:56:37:f9:1c:71: b8:c1:08:14:15:2c:ad:39:c0:9e:63:5e:60:93:bc:73:78:3a: 50:bd:56:e4:a4:c3:6f:af:94:1d:c8:89:b0:c0:1a:ca:25:0e: c7:79:74:e6:91:f6:f7:9c:db:48:8c:87:80:18:70:69:c3:70: 6d:75:7c:f9:55:bc:8d:fd:c8:ba:75:89:74:09:3d:e0:0d:bc: c8:65:5b:04:e5:cf:6a:cd:1a:dc:76:3c:73:07:ad:2d:4a:e8: db:50:65:a2:9e:73:d9:bc:e3:84:6d:d8:06:fb:47:26:50:fc: 3e:e1:3e:ba:33:33:01:82:83:d1:3c:e3:d7:72:2d:13:cc:a9: 40:24:2c:d0:3d:95:44:79:1c:bc:62:80:b5:68:3e:b2:9f:d2: 7b:96:a1:c3:dd:31:e2:ae:43:79:7d:07:f1:1f:b8:fd:5c:e8: d4:7f:1d:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr4PFgPjB8gvm6MfMrlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjODY0ODEzYzA4NjJlNmI0NzU2ZjhkZmRhODk1N2M2YWVh YzY2NTQwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EygwNTVhNTIyMDhkM2NiODI1N2YyMDU2ZjlmZmFkY2ExMGNjOGZlNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoicziQLCJ6N+Y6bsVLZ/PLmDOyJ2 NSH2H9Vik4w8Y0CzFyJvWAYn9Q6Ziq1h1gck2iXC3TpSXoeWmzla2NnV9MTeJYdb qn3peLUiDCZUG/tulcg8370p1s0SxaPQmtQsX2SvwOSUDWkkBO04IRg4t20cN5MZ AXvpIKabZg844Y6x8JvsgqNK3I5Ryc6xsOpJzjfWFPmtS9UH8SweMJYENJWeuqwG HVNT+P1dZSYXdd6ewobt7VSGtL65tv0kjCzEuT3dot20NnElpvENPTg/kRHeacTo khIJ/TSHlVbWY4Mg53pXMQm4u0zgtW5MPA41D4yT94CZEwVXbeYMegg7YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVaUiCNPLglfyBW+f+tyhDMj+U+MB8GA1UdIwQY MBaAFByGSBPAhi5rR1b439qJV8aurGZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUt OGYyZDY2ODRjODE0LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xMDM5M2QtYTAzMC00YWY1LTg5OTUtOGYyZDY2ODRjODE0 LzEvSElaSUU4Q0dMbXRIVnZqZjJvbFh4cTZzWmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgBbnluS cEeEoY/lNJHMyfrMnG/KuQGcKSHwcS0yqq+9XOMoep8TLq9aDcoOe+VVgE4VYRS7 K9Z1d3bxUQgGH25V78n3zO2sE3GJN03Up8kcO/qk8lY3+RxxuMEIFBUsrTnAnmNe YJO8c3g6UL1W5KTDb6+UHciJsMAayiUOx3l05pH295zbSIyHgBhwacNwbXV8+VW8 jf3IunWJdAk94A28yGVbBOXPas0a3HY8cwetLUro21Blop5z2bzjhG3YBvtHJlD8 PuE+ujMzAYKD0Tzj13ItE8ypQCQs0D2VRHkcvGKAtWg+sp/Se5ahw90x4q5DeX0H 8R+4/Vzo1H8dHg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:11:03 2025 by rpki-client