This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json) Hash identifier: lv+EjdqhyjgTHYwSGC0/h7csigZDEc17n6sQdn3mbBo= Subject key identifier: 80:EA:F3:AF:1B:86:56:35:32:BE:A6:44:AE:7A:8E:D6:21:8D:92:61 Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d Certificate serial: 019AF0BF39A35F1125D86B2BC69D754C23A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft Manifest number: 0FEC Signing time: Fri 05 Dec 2025 23:00:55 +0000 Manifest this update: Fri 05 Dec 2025 23:00:55 +0000 Manifest next update: Sat 06 Dec 2025 23:00:55 +0000 Files and hashes: 1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: 5Qle/vYCZYekQCGU30hpks3jHCqDK9fHIJ1hajkJPR8=) 2: ninSWYVRxBIemI94j-PYMUSu2YA.roa (hash: QrrWAcI9XBwetBsmpQPw5YCVH1U9RR0mswsdxCxACug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:39:a3:5f:11:25:d8:6b:2b:c6:9d:75:4c:23:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=865786c75fc16584b0271ff27b971d723416618d Validity Not Before: Dec 5 23:00:55 2025 GMT Not After : Dec 6 23:00:55 2025 GMT Subject: CN=80eaf3af1b86563532bea644ae7a8ed6218d9261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:68:05:a3:7f:f9:80:32:e2:2c:b1:44:ad: bc:d4:3b:97:3a:19:d3:12:c3:40:72:05:fa:5b:7e: 8c:d6:90:58:18:c4:17:80:3a:b8:dc:cf:25:fa:d6: e3:18:08:5c:cf:49:fd:03:ae:96:c2:28:de:ca:fd: fd:1f:a9:ed:f6:82:36:e4:3a:0d:bd:53:95:4e:72: 22:f6:0d:72:16:f4:80:c9:81:31:8a:fa:51:b8:31: ee:ec:7c:7f:ca:8b:c2:85:eb:ef:3b:99:a2:ab:e8: 51:c3:4c:d7:68:57:88:d5:33:ca:65:63:32:cf:99: 7c:14:74:67:a1:af:43:a1:07:cd:b8:4d:f1:f5:40: 33:d3:9c:e5:13:32:e9:0a:5f:25:3f:47:83:14:f0: 1e:bc:a1:36:2b:88:b4:61:37:4f:e6:9b:d4:09:98: 69:d3:07:1a:98:6c:cb:a0:59:dc:93:3a:87:09:30: 12:03:56:9a:8a:26:fc:c5:89:4b:98:18:01:5f:95: 7c:9b:9a:7e:4c:6c:79:ad:0c:01:de:43:2a:cc:c0: d3:33:39:1e:7b:2b:60:67:21:7f:f8:58:0a:f1:d9: 80:58:02:41:42:e7:b3:f3:2d:64:66:3e:b0:54:25: 1c:7f:7d:13:ea:be:0c:9b:ae:2c:9d:69:76:b2:cb: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EA:F3:AF:1B:86:56:35:32:BE:A6:44:AE:7A:8E:D6:21:8D:92:61 X509v3 Authority Key Identifier: keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ff:4c:15:50:76:41:94:e9:38:04:49:dc:b7:f5:81:c4:af: d6:7e:a6:bf:f7:10:65:7c:c9:6f:07:8a:b8:2a:cd:0b:a4:b5: fa:7f:0a:d3:29:78:da:a4:c3:80:1b:c6:1e:c1:5e:8e:4e:96: 02:42:11:48:9c:c7:0b:8b:8f:05:9f:a1:67:eb:be:11:fc:e0: 23:5f:3a:4c:0e:a1:13:f6:6d:be:ed:9f:8a:fc:67:5a:51:ef: 3f:cf:5d:e4:a9:2b:6a:83:fa:e8:cf:88:a5:32:04:c6:6e:ad: 35:3b:98:25:31:7a:e8:b9:b5:f6:31:fd:df:6c:14:56:23:8f: b3:30:29:8e:05:12:8b:85:f8:d3:7c:ce:35:fc:22:88:e3:21: 07:78:a3:2f:1d:39:75:db:07:96:a7:6a:10:85:f4:ed:31:52: ea:e2:e9:36:be:36:90:53:6a:62:d4:44:fb:de:49:50:fb:b0: 3e:85:14:fc:39:3b:e6:df:05:2f:82:56:78:15:2e:31:5a:72: 0c:b7:d0:68:4b:62:9a:0c:14:ef:4d:45:a5:b4:9f:dd:cd:5d: 8a:55:b0:58:c8:7b:a4:de:ad:4c:72:a0:6d:34:24:e8:fa:b9: 28:36:3e:cb:87:10:74:79:27:88:cc:4a:30:92:3c:6b:c8:02: 03:0f:f3:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzmjXxEl2Gsrxp11TCOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx NjYxOGQwHhcNMjUxMjA1MjMwMDU1WhcNMjUxMjA2MjMwMDU1WjAzMTEwLwYDVQQD Eyg4MGVhZjNhZjFiODY1NjM1MzJiZWE2NDRhZTdhOGVkNjIxOGQ5MjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEloBaN/+YAy4iyxRK281DuXOhnT EsNAcgX6W36M1pBYGMQXgDq43M8l+tbjGAhcz0n9A66Wwijeyv39H6nt9oI25DoN vVOVTnIi9g1yFvSAyYExivpRuDHu7Hx/yovChevvO5miq+hRw0zXaFeI1TPKZWMy z5l8FHRnoa9DoQfNuE3x9UAz05zlEzLpCl8lP0eDFPAevKE2K4i0YTdP5pvUCZhp 0wcamGzLoFnckzqHCTASA1aaiib8xYlLmBgBX5V8m5p+TGx5rQwB3kMqzMDTMzke eytgZyF/+FgK8dmAWAJBQuez8y1kZj6wVCUcf30T6r4Mm64snWl2sssJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDq868bhlY1Mr6mRK56jtYhjZJhMB8GA1UdIwQY MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt OGNmOWQ1MGFkZjI5LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5 LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf9MFVB2 QZTpOARJ3Lf1gcSv1n6mv/cQZXzJbweKuCrNC6S1+n8K0yl42qTDgBvGHsFejk6W AkIRSJzHC4uPBZ+hZ+u+EfzgI186TA6hE/Ztvu2fivxnWlHvP89d5KkraoP66M+I pTIExm6tNTuYJTF66Lm19jH932wUViOPszApjgUSi4X403zONfwiiOMhB3ijLx05 ddsHlqdqEIX07TFS6uLpNr42kFNqYtRE+95JUPuwPoUU/Dk75t8FL4JWeBUuMVpy DLfQaEtimgwU701FpbSf3c1dilWwWMh7pN6tTHKgbTQk6Pq5KDY+y4cQdHkniMxK MJI8a8gCAw/zxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:31 2025 by rpki-client