This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json) Hash identifier: XLexu1AhT5wWSdO1TP/ijUyH9AKs5gRxunczhQYOglQ= Subject key identifier: C0:66:74:62:3F:3A:C9:A4:54:4E:F5:62:25:00:DA:2B:59:09:66:8A Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12 Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612 Certificate serial: 019AF1643252A29870F3216A9BB50ED56147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: 2cLgN0NggeJ7M4xJxwxjhjc1Q9YO6hqhlFH3KZvkfMM=) 2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:32:52:a2:98:70:f3:21:6a:9b:b5:0e:d5:61:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612 Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=c06674623f3ac9a4544ef5622500da2b5909668a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:52:f0:ec:3b:b4:09:ef:99:ed:bf:76:44: 43:06:5d:51:6b:30:8c:66:c4:16:a9:7d:1d:65:16: da:b7:b6:f6:89:b9:c0:30:b7:f5:9f:b5:cb:7b:d9: c8:d5:d8:24:85:c8:cd:f5:6b:bd:a3:b9:33:af:0d: 41:9c:98:48:cc:2e:60:a4:eb:4c:07:0f:98:0f:7b: b2:61:c9:e8:97:f4:58:30:c4:58:37:fe:45:69:23: 91:11:6a:04:47:53:86:66:ef:d3:64:e6:ed:7f:17: 58:20:74:7d:8f:be:a7:59:be:03:33:5d:d8:85:e8: a9:d3:8a:2a:6d:80:67:bb:c1:98:cb:97:01:32:a7: 9b:49:d2:97:3a:c3:de:42:f2:b8:44:7e:79:e7:68: ea:c4:6a:91:0c:3a:29:2e:ad:0a:6b:ad:cf:f4:03: 2a:9d:4a:94:46:14:de:21:39:d9:10:6a:83:43:4b: e4:50:69:9c:2e:e8:86:4f:d6:01:ed:c8:b4:36:4b: 0d:6e:ed:39:cc:f7:b3:52:5e:ad:f2:fd:e8:96:a0: 1f:54:46:a6:34:e5:ce:6e:7b:c7:b6:99:ba:89:db: 98:5b:01:30:18:0e:61:ce:79:52:3a:5d:25:2b:44: e1:7b:bf:56:be:c4:fa:fc:05:be:53:c6:ac:47:0e: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:66:74:62:3F:3A:C9:A4:54:4E:F5:62:25:00:DA:2B:59:09:66:8A X509v3 Authority Key Identifier: keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:85:bc:fe:d5:c2:44:99:86:ca:70:e8:a6:fe:3e:c2:b6:5c: df:93:3f:00:9a:58:94:12:f4:f2:f5:49:82:e3:bb:a9:1f:69: 4f:31:0c:07:16:51:7c:26:bd:62:9c:75:9d:31:94:4b:9f:c9: c6:06:4a:fb:fd:1e:d7:e0:e5:32:c2:8e:6d:28:fc:21:42:06: 27:86:da:81:6d:f1:62:03:ed:0b:3b:5f:ce:32:4e:0b:8a:4f: bf:08:67:82:db:31:a5:55:57:d8:35:18:9d:42:fb:32:dd:d9: 9d:1b:5b:f5:9b:17:10:b9:44:85:c5:60:95:b2:0f:9b:d8:6b: c2:8b:f5:81:c5:97:dd:db:4e:76:aa:7a:c7:e8:07:0e:00:27: c0:b9:8f:27:d2:38:b7:90:34:f4:53:1c:d5:96:24:87:c4:b1: 88:5b:01:1d:83:2c:eb:11:6e:40:c5:33:3d:c0:a8:9b:9d:a7: 56:c2:9c:73:e4:bc:c7:80:82:01:a8:50:a7:44:ec:20:79:73: 82:62:45:b1:54:2d:20:d6:f9:49:4c:f6:22:01:15:c2:21:4e: 86:25:1a:25:dd:66:b4:93:30:98:02:35:1c:10:5c:ab:b5:01: 4e:58:cc:17:c2:7f:0e:67:b3:06:08:2a:5f:25:fa:c1:18:2e: 62:55:d6:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDJSophw8yFqm7UO1WFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0 YmU2MTIwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD EyhjMDY2NzQ2MjNmM2FjOWE0NTQ0ZWY1NjIyNTAwZGEyYjU5MDk2NjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlS8Ow7tAnvme2/dkRDBl1RazCM ZsQWqX0dZRbat7b2ibnAMLf1n7XLe9nI1dgkhcjN9Wu9o7kzrw1BnJhIzC5gpOtM Bw+YD3uyYcnol/RYMMRYN/5FaSOREWoER1OGZu/TZObtfxdYIHR9j76nWb4DM13Y heip04oqbYBnu8GYy5cBMqebSdKXOsPeQvK4RH5552jqxGqRDDopLq0Ka63P9AMq nUqURhTeITnZEGqDQ0vkUGmcLuiGT9YB7ci0NksNbu05zPezUl6t8v3olqAfVEam NOXObnvHtpm6iduYWwEwGA5hznlSOl0lK0The79WvsT6/AW+U8asRw5B1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBmdGI/OsmkVE71YiUA2itZCWaKMB8GA1UdIwQY MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt ZTkwOWU0MWEwN2U1LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1 LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoW8/tXC RJmGynDopv4+wrZc35M/AJpYlBL08vVJguO7qR9pTzEMBxZRfCa9Ypx1nTGUS5/J xgZK+/0e1+DlMsKObSj8IUIGJ4bagW3xYgPtCztfzjJOC4pPvwhngtsxpVVX2DUY nUL7Mt3ZnRtb9ZsXELlEhcVglbIPm9hrwov1gcWX3dtOdqp6x+gHDgAnwLmPJ9I4 t5A09FMc1ZYkh8SxiFsBHYMs6xFuQMUzPcCom52nVsKcc+S8x4CCAahQp0TsIHlz gmJFsVQtINb5SUz2IgEVwiFOhiUaJd1mtJMwmAI1HBBcq7UBTljMF8J/DmezBggq XyX6wRguYlXWpw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:25 2025 by rpki-client