This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json) Hash identifier: q3CQGbvf5O/iDrYYENDMLWKEd/cZ3+Q8qyXBfqrUqhM= Subject key identifier: E4:34:3C:A8:DA:4F:41:F8:D4:E7:DF:B1:87:AB:6F:84:52:C2:58:D8 Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3 Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3 Certificate serial: 019AF49C1FBE36DBE2CC5BE7E7E2B0B60B86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:01:03 +0000 Manifest this update: Sat 06 Dec 2025 17:01:03 +0000 Manifest next update: Sun 07 Dec 2025 17:01:03 +0000 Files and hashes: 1: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: eTlodySPEkzFUSUDYN9ob1OUfPpgObkhGPpi36nvrGw=) 2: vNgalWxKyCFGqWuDm-_4-hQvAN8.roa (hash: dwnMTxgyRJ4mgwfPlrMhwXTTLitc5c5TREsY1/YmwBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1f:be:36:db:e2:cc:5b:e7:e7:e2:b0:b6:0b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3 Validity Not Before: Dec 6 17:01:03 2025 GMT Not After : Dec 7 17:01:03 2025 GMT Subject: CN=e4343ca8da4f41f8d4e7dfb187ab6f8452c258d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:cd:1f:a3:04:14:26:c5:0e:d8:b1:20:f1: 2d:f8:46:94:38:e7:f2:7a:03:0d:a9:03:75:ae:28: 55:0d:a5:16:e6:9a:9a:8b:08:32:bb:ae:91:b3:67: 40:24:c9:0d:82:59:77:cb:ee:fd:1e:84:eb:54:4a: c1:57:e0:f5:3a:bb:f0:0d:62:39:cb:38:ef:96:33: 3d:55:02:80:5b:a7:3b:71:ff:16:56:0e:e1:dd:fe: f9:9b:2c:26:3c:07:da:f1:76:7e:25:7d:f7:37:c7: a8:8d:82:bd:cc:47:86:72:4f:7d:cd:ba:bd:65:4b: 2c:e8:cf:33:e0:e2:ab:d4:19:5f:78:0b:cc:69:04: 62:c2:b2:da:3e:ca:c2:cd:3d:b0:22:65:7d:42:29: 9f:87:8f:c9:da:ce:11:be:b3:87:9c:0e:f1:9a:a9: 35:16:00:75:8c:bb:23:99:90:15:ab:1f:55:cc:50: a0:6a:ed:1e:87:50:36:6c:bc:dc:c5:41:da:e1:b9: 41:d2:96:0d:0f:fa:63:09:e0:05:23:70:7e:36:f3: 51:e8:e5:70:51:42:6e:f9:4a:ea:26:d8:1d:cd:93: 1b:5c:88:2c:4b:e9:45:01:75:42:f5:2f:04:8e:f0: d7:5b:d7:b7:98:af:9a:29:59:f3:c7:76:0f:51:06: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:34:3C:A8:DA:4F:41:F8:D4:E7:DF:B1:87:AB:6F:84:52:C2:58:D8 X509v3 Authority Key Identifier: keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d6:e4:64:5e:ad:43:b3:15:19:f7:7a:52:32:84:a7:bf:28: 41:72:58:8e:d9:f3:1b:64:0b:7d:c7:9d:56:7c:28:41:c6:0a: 8c:8a:8d:f9:c0:62:87:3a:47:01:3e:93:cc:77:23:6f:f6:8d: 34:0b:10:fb:92:51:65:cb:24:7d:3a:83:0a:7a:c1:51:4e:1f: b8:f0:51:44:b1:23:4b:6e:77:ab:cc:fc:be:64:56:25:3c:6e: d5:61:18:d5:a3:dd:f2:05:83:9b:d8:e7:57:30:63:39:89:77: 80:15:36:f4:cd:54:8b:35:72:70:9d:d4:42:4c:f0:a5:f0:91: 23:f6:91:6a:af:c9:aa:94:72:da:12:d8:f7:71:db:53:39:f8: b1:a1:e5:ba:f6:b9:1b:4d:9f:e2:6f:b0:8d:66:7f:30:b0:4f: d8:25:04:45:81:10:5c:70:98:1f:4c:c9:21:dc:80:02:37:45: 7e:ff:c1:3d:f5:2f:c3:c4:40:1a:b6:ed:5c:7a:79:c9:03:34: c2:74:a5:9e:6c:5b:08:88:c6:e8:95:85:f8:d7:fb:e3:66:1f: de:ff:8e:03:6f:5e:0a:9c:4a:ae:91:a1:1f:d5:e4:17:d4:4d: f8:64:6a:05:5f:c3:e6:a3:d5:ea:06:0a:21:d3:0c:3a:ce:ea: f8:3d:40:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nB++NtvizFvn5+KwtguGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZWQ0ZmNjNDU5NjRkNGVhNzJmYzQ0OTJjNGQ3OTU3MTMz MjEwYzMwHhcNMjUxMjA2MTcwMTAzWhcNMjUxMjA3MTcwMTAzWjAzMTEwLwYDVQQD EyhlNDM0M2NhOGRhNGY0MWY4ZDRlN2RmYjE4N2FiNmY4NDUyYzI1OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvNH6MEFCbFDtixIPEt+EaUOOfy egMNqQN1rihVDaUW5pqaiwgyu66Rs2dAJMkNgll3y+79HoTrVErBV+D1OrvwDWI5 yzjvljM9VQKAW6c7cf8WVg7h3f75mywmPAfa8XZ+JX33N8eojYK9zEeGck99zbq9 ZUss6M8z4OKr1BlfeAvMaQRiwrLaPsrCzT2wImV9Qimfh4/J2s4RvrOHnA7xmqk1 FgB1jLsjmZAVqx9VzFCgau0eh1A2bLzcxUHa4blB0pYND/pjCeAFI3B+NvNR6OVw UUJu+UrqJtgdzZMbXIgsS+lFAXVC9S8EjvDXW9e3mK+aKVnzx3YPUQa5LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQ0PKjaT0H41OffsYerb4RSwljYMB8GA1UdIwQY MBaAFIXtT8xFlk1Opy/ESSxNeVcTMhDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTkt Zjg1YTdjYjFkMTkyLzEvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTktZjg1YTdjYjFkMTky LzEvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftbkZF6t Q7MVGfd6UjKEp78oQXJYjtnzG2QLfcedVnwoQcYKjIqN+cBihzpHAT6TzHcjb/aN NAsQ+5JRZcskfTqDCnrBUU4fuPBRRLEjS253q8z8vmRWJTxu1WEY1aPd8gWDm9jn VzBjOYl3gBU29M1UizVycJ3UQkzwpfCRI/aRaq/JqpRy2hLY93HbUzn4saHluva5 G02f4m+wjWZ/MLBP2CUERYEQXHCYH0zJIdyAAjdFfv/BPfUvw8RAGrbtXHp5yQM0 wnSlnmxbCIjG6JWF+Nf742Yf3v+OA29eCpxKrpGhH9XkF9RN+GRqBV/D5qPV6gYK IdMMOs7q+D1A4g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:35 2025 by rpki-client