This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json) Hash identifier: u0X278PuaiPMBB+Ix/mhCM8t+hyqN8wnZ1rlnTvZ2zc= Subject key identifier: 18:99:92:E3:34:11:FE:70:D8:AD:95:B3:C7:01:F2:58:5E:BE:E9:34 Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21 Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821 Certificate serial: 019B0CDB503E254DEA1D589C01E5690D8292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft Manifest number: 0EE3 Signing time: Thu 11 Dec 2025 10:00:57 +0000 Manifest this update: Thu 11 Dec 2025 10:00:57 +0000 Manifest next update: Fri 12 Dec 2025 10:00:57 +0000 Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: 9WbIPK+wJ4DxMI5LwFvSU0ExzGm4ti6gRPJcxsEZsXM=) 2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:50:3e:25:4d:ea:1d:58:9c:01:e5:69:0d:82:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821 Validity Not Before: Dec 11 10:00:57 2025 GMT Not After : Dec 12 10:00:57 2025 GMT Subject: CN=189992e33411fe70d8ad95b3c701f2585ebee934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:6c:5b:05:8f:d6:a9:13:b2:67:38:ed:63: 6e:8a:4b:ed:fd:85:9c:2c:00:14:db:bb:1b:e1:24: 50:d3:74:3a:21:4d:20:d5:66:c3:6c:dc:95:67:fe: 87:f5:0d:9d:44:a7:db:63:01:91:ee:6e:f0:67:c8: 03:bc:56:0c:5c:a9:86:80:ef:5e:f1:8a:9c:53:d7: 79:13:dc:d4:ed:0f:62:4d:18:67:da:71:61:ae:53: b0:8a:7b:81:07:7e:d0:fb:53:3e:09:a4:e4:a1:d0: 43:0e:7d:7a:86:ac:71:12:48:e7:13:83:2b:75:74: 1b:c6:e4:2a:c4:49:20:93:78:ea:8b:72:b5:65:1b: a1:dd:73:07:db:47:f0:1d:1e:2b:e8:ae:53:df:4c: cf:ae:51:ff:55:02:a0:e0:d2:ba:03:5b:01:b0:e4: ea:6f:bb:af:d5:f6:f9:8e:d5:3c:86:d4:43:94:41: dc:ce:3a:d3:da:15:f1:2e:64:81:c9:79:42:9e:26: 1a:5c:e2:16:9f:95:dc:96:d9:60:ac:1c:82:32:7b: d0:a3:13:02:21:9d:b7:36:99:58:91:9f:59:62:97: ae:1f:73:bd:5e:aa:79:7b:a0:98:88:60:94:6e:39: ed:3b:e0:0a:d5:20:76:b7:1c:b9:d1:0f:a3:69:e6: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:92:E3:34:11:FE:70:D8:AD:95:B3:C7:01:F2:58:5E:BE:E9:34 X509v3 Authority Key Identifier: keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a0:63:86:af:e2:13:32:2f:f9:7f:14:57:fe:fe:8b:a9:5f: 19:fe:68:56:74:50:6e:53:22:10:e6:5f:6c:60:43:e4:3a:96: c2:da:5e:58:5e:ec:83:0c:3b:60:7e:87:ba:80:80:a8:ec:2a: 15:22:a3:44:75:8e:14:09:ea:f0:32:2a:bc:36:2d:66:f5:d2: 3b:92:16:f3:24:53:7e:9d:f2:ca:7b:6a:b4:f8:86:ad:ae:85: fd:11:3f:11:56:7c:c3:30:24:4c:a9:43:d6:9f:d2:50:3c:6d: 88:71:4f:24:35:eb:36:dc:e7:2b:e8:da:79:ca:d2:17:61:2c: 65:2f:46:3f:25:a6:2b:89:e2:cc:e2:12:02:ff:a2:1b:15:53: 4f:54:75:a3:f9:08:56:b5:60:e2:66:8c:4b:a9:68:44:4c:94: 50:1d:9f:95:4f:6e:88:e8:5f:d0:8d:87:c6:bc:3b:62:c2:ea: 0d:dd:51:bb:5d:2f:48:bf:7a:65:fa:f9:33:7d:52:b1:5b:d5: 08:22:69:88:e6:d5:e9:a2:be:c1:30:9b:79:fe:fd:f2:57:8c: 2c:c7:d4:db:4c:9b:be:26:23:48:e0:be:7e:53:51:03:85:cc: 4b:dc:56:6b:59:ce:64:f7:82:31:af:c7:65:4c:16:5e:a2:c0: 53:bb:0d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM21A+JU3qHVicAeVpDYKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDhhNTllZDk4ZjU5YTBlYTBlNmM0Mzc5YzMwZjViZDVm MjA4MjEwHhcNMjUxMjExMTAwMDU3WhcNMjUxMjEyMTAwMDU3WjAzMTEwLwYDVQQD EygxODk5OTJlMzM0MTFmZTcwZDhhZDk1YjNjNzAxZjI1ODVlYmVlOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmpsWwWP1qkTsmc47WNuikvt/YWc LAAU27sb4SRQ03Q6IU0g1WbDbNyVZ/6H9Q2dRKfbYwGR7m7wZ8gDvFYMXKmGgO9e 8YqcU9d5E9zU7Q9iTRhn2nFhrlOwinuBB37Q+1M+CaTkodBDDn16hqxxEkjnE4Mr dXQbxuQqxEkgk3jqi3K1ZRuh3XMH20fwHR4r6K5T30zPrlH/VQKg4NK6A1sBsOTq b7uv1fb5jtU8htRDlEHczjrT2hXxLmSByXlCniYaXOIWn5XcltlgrByCMnvQoxMC IZ23NplYkZ9ZYpeuH3O9Xqp5e6CYiGCUbjntO+AK1SB2txy50Q+jaeZthQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiZkuM0Ef5w2K2Vs8cB8lhevuk0MB8GA1UdIwQY MBaAFB4IpZ7Zj1mg6g5sQ3nDD1vV8gghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDct MWY0MDczYmE0MzZmLzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDctMWY0MDczYmE0MzZm LzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6Bjhq/i EzIv+X8UV/7+i6lfGf5oVnRQblMiEOZfbGBD5DqWwtpeWF7sgww7YH6HuoCAqOwq FSKjRHWOFAnq8DIqvDYtZvXSO5IW8yRTfp3yyntqtPiGra6F/RE/EVZ8wzAkTKlD 1p/SUDxtiHFPJDXrNtznK+jaecrSF2EsZS9GPyWmK4nizOISAv+iGxVTT1R1o/kI VrVg4maMS6loREyUUB2flU9uiOhf0I2Hxrw7YsLqDd1Ru10vSL96Zfr5M31SsVvV CCJpiObV6aK+wTCbef798leMLMfU20ybviYjSOC+flNRA4XMS9xWa1nOZPeCMa/H ZUwWXqLAU7sNzg== -----END CERTIFICATE-----Generated at Thu Dec 11 16:09:24 2025 by rpki-client