This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json) Hash identifier: JEUjqNOyt/Q/6AiFfcHCu0p9nW2SI0EldsnjeYDeMxM= Subject key identifier: 72:A6:03:E8:57:FB:ED:2C:BF:21:6E:AA:3A:66:66:B8:B0:49:76:FF Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c Certificate serial: 019AF12E5B63A8A811E0A90FC15F507A1BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft Manifest number: 0E81 Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: rIegUNGoScRVWaR9LHH0TCCIX6DUs8kjxjR5ztyXAnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5b:63:a8:a8:11:e0:a9:0f:c1:5f:50:7a:1b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=72a603e857fbed2cbf216eaa3a6666b8b04976ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:a2:20:26:a8:b3:64:0c:d0:4f:4e:1e:42: 58:0b:e2:7f:ed:ba:24:ad:d8:9a:06:e5:4c:a6:81: a4:e7:d1:ea:29:f8:2c:aa:53:c2:20:cc:9d:2f:4d: fa:30:ca:3d:cc:d9:d9:0d:58:2d:cd:f8:1b:cd:05: 44:3b:9b:1e:90:60:22:a4:86:35:94:b0:e9:e2:4d: 8a:56:98:6d:1b:80:92:82:e8:68:a7:3d:56:3f:2a: d2:95:94:ed:17:1c:bf:ed:2a:e2:9b:f4:40:b1:c5: 26:ba:cc:6e:91:38:76:65:be:61:e5:d0:94:09:7d: 2b:03:02:31:e0:67:32:3a:22:a8:29:e5:c7:64:4b: 9b:04:de:3d:ef:20:75:8a:b2:41:86:1c:7e:cf:6f: f9:0f:5c:85:08:7b:e1:f9:83:fa:81:2d:01:6c:4c: 50:25:12:07:6c:f9:3b:70:06:36:6a:6f:9d:5e:76: 88:77:22:f4:4e:65:6d:f4:e9:4b:59:77:60:48:c0: 88:0b:ac:7f:26:de:d5:d9:bc:01:14:dd:b5:96:f3: 5b:20:a8:a1:3c:7f:af:0a:37:87:3d:65:15:d1:7a: bb:8b:29:fd:a2:4f:4e:94:11:ec:32:d4:fc:70:f2: b9:45:2d:36:23:ae:5b:77:d2:b9:d9:a2:42:73:8e: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:03:E8:57:FB:ED:2C:BF:21:6E:AA:3A:66:66:B8:B0:49:76:FF X509v3 Authority Key Identifier: keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5a:08:80:b2:f8:25:c9:e4:80:19:35:36:40:74:95:3f:2f: d2:5e:5b:cc:75:d1:8a:1c:a0:cb:3d:ee:f6:f3:de:d6:5b:18: 4e:87:48:e2:0b:7b:c6:e2:4b:21:3c:9c:67:29:7d:00:f3:c3: 03:2e:f7:0f:3f:fe:b9:31:20:d6:9f:74:96:3a:7d:02:40:67: 6e:e7:db:ba:83:87:e5:89:3f:8b:e7:b4:9e:de:e4:33:01:5b: 6a:b2:f2:68:bb:38:1f:cc:65:21:60:31:e5:6e:6e:f6:63:c5: cf:9d:59:ed:14:8c:98:af:fd:e4:c8:3c:0e:98:b0:e5:0e:44: 82:ca:57:28:05:13:00:0c:a4:8a:43:86:bd:91:65:ca:36:b7: 13:4a:0d:39:bb:ff:65:f5:c2:b4:3e:2c:c5:b1:fa:cd:8f:8e: 0a:87:20:da:d6:77:b4:72:56:f2:9f:f6:14:aa:f8:f2:59:c6: 72:63:cd:4e:1b:aa:16:52:40:fe:3d:1c:17:1b:87:ad:1b:cc: d9:08:56:c1:10:7b:dd:68:30:8f:15:09:ce:25:29:54:26:e2: 80:65:7b:c9:ad:77:0f:61:61:3c:9f:42:f9:b9:58:2a:e6:22: 48:94:6f:53:a8:df:cd:25:52:e8:87:74:b7:eb:f9:30:f1:3a: 10:c1:cc:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLltjqKgR4KkPwV9QehvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNjhiZjI3ZGFjNzA1ZjMxMDJlYTg4NjczNDcwZDI3ZGM4 Njg2NmMwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD Eyg3MmE2MDNlODU3ZmJlZDJjYmYyMTZlYWEzYTY2NjZiOGIwNDk3NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCKiICaos2QM0E9OHkJYC+J/7bok rdiaBuVMpoGk59HqKfgsqlPCIMydL036MMo9zNnZDVgtzfgbzQVEO5sekGAipIY1 lLDp4k2KVphtG4CSguhopz1WPyrSlZTtFxy/7Srim/RAscUmusxukTh2Zb5h5dCU CX0rAwIx4GcyOiKoKeXHZEubBN497yB1irJBhhx+z2/5D1yFCHvh+YP6gS0BbExQ JRIHbPk7cAY2am+dXnaIdyL0TmVt9OlLWXdgSMCIC6x/Jt7V2bwBFN21lvNbIKih PH+vCjeHPWUV0Xq7iyn9ok9OlBHsMtT8cPK5RS02I65bd9K52aJCc450rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKmA+hX++0svyFuqjpmZriwSXb/MB8GA1UdIwQY MBaAFB5ovyfaxwXzEC6ohnNHDSfchoZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgt YzE1NjQ3ZjU3MDEwLzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNjE0NjUtOTU1ZS00MDdlLWE3MDgtYzE1NjQ3ZjU3MDEw LzEvSG1pX0o5ckhCZk1RTHFpR2MwY05KOXlHaG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjloIgLL4 JcnkgBk1NkB0lT8v0l5bzHXRihygyz3u9vPe1lsYTodI4gt7xuJLITycZyl9APPD Ay73Dz/+uTEg1p90ljp9AkBnbufbuoOH5Yk/i+e0nt7kMwFbarLyaLs4H8xlIWAx 5W5u9mPFz51Z7RSMmK/95Mg8Dpiw5Q5EgspXKAUTAAykikOGvZFlyja3E0oNObv/ ZfXCtD4sxbH6zY+OCocg2tZ3tHJW8p/2FKr48lnGcmPNThuqFlJA/j0cFxuHrRvM 2QhWwRB73WgwjxUJziUpVCbigGV7ya13D2FhPJ9C+blYKuYiSJRvU6jfzSVS6Id0 t+v5MPE6EMHMQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:05 2025 by rpki-client