This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json) Hash identifier: twC/1t2oPLGDpHEV2Zn7yqcUhh5cGKrMwFxqBa8FuQI= Subject key identifier: EB:D0:09:1B:6B:9B:6D:3C:4B:18:D4:25:AF:22:2C:AE:71:99:8C:4D Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40 Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340 Certificate serial: 019AF50BD89DFD045E15C8AC1C20BEC2716C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft Manifest number: 0228 Signing time: Sat 06 Dec 2025 19:03:05 +0000 Manifest this update: Sat 06 Dec 2025 19:03:05 +0000 Manifest next update: Sun 07 Dec 2025 19:03:05 +0000 Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=) 2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: y9Y75BPwkR6wqdB9iN2NhcirZZwwOlALSSaixOeEV3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:d8:9d:fd:04:5e:15:c8:ac:1c:20:be:c2:71:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8fba993650348a135152eec348a119430e6340 Validity Not Before: Dec 6 19:03:05 2025 GMT Not After : Dec 7 19:03:05 2025 GMT Subject: CN=ebd0091b6b9b6d3c4b18d425af222cae71998c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:af:b0:47:d1:28:97:a2:99:d9:d4:cc:29: b6:57:aa:33:f6:2d:2d:3a:0b:78:a5:eb:6b:8f:c9: 90:74:c6:6a:14:be:b1:c2:b0:1a:f3:19:7e:74:e5: b1:dd:eb:8e:81:f5:ee:40:aa:51:59:a1:b0:aa:15: 5e:ce:9e:a7:6c:ea:6a:ca:a2:70:de:af:07:e0:d6: 9a:91:de:06:6d:7c:32:1a:1f:b5:b7:39:7b:7c:99: 45:6d:3a:a9:02:d1:b8:47:50:e2:f5:6d:50:29:0f: 6b:d3:8d:1f:93:c0:07:9a:79:13:42:bf:10:ab:68: 7c:60:8a:66:b0:31:98:be:20:0f:ba:4a:60:ff:9a: b0:b9:f1:e5:0c:ff:ef:36:03:87:9c:3d:b3:5f:23: ae:8c:51:22:b4:a8:6d:61:83:4e:fe:54:3e:21:f0: 7d:bf:fd:04:1e:06:e0:32:e9:c8:5c:be:a6:8d:ef: 52:94:ca:69:26:3e:85:8b:cf:e3:2b:bb:cb:4b:8d: d1:26:8f:b2:fd:83:cb:fc:a2:f0:cf:4e:e0:07:95: 35:da:48:24:ee:e9:a4:93:5f:f6:71:4e:a4:57:df: 05:3f:9f:35:d8:84:7b:ff:05:ed:c7:25:60:ab:f9: 5b:f3:2e:66:55:db:54:90:2f:69:0f:70:52:72:77: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:09:1B:6B:9B:6D:3C:4B:18:D4:25:AF:22:2C:AE:71:99:8C:4D X509v3 Authority Key Identifier: keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:eb:af:93:2e:d2:0b:4f:b7:e0:eb:6a:38:13:dd:0f:d6:47: 65:58:e6:c3:83:ef:68:05:d8:1e:fa:ff:5a:ee:e2:7a:7f:fc: 46:74:56:fa:51:28:59:af:46:f9:94:87:a6:67:f5:78:0e:5c: 62:1b:83:f8:f2:94:3b:f8:d5:89:ca:d2:1f:4f:55:06:4c:3d: 96:b0:c0:09:9d:d0:c1:0e:72:1f:dd:6d:d9:99:d6:6e:0f:4f: 6c:f3:aa:7c:7a:e1:b3:9a:23:24:b6:f0:52:ee:3c:98:42:b1: 12:91:34:20:44:34:b9:3b:db:09:1a:cb:91:c3:49:b1:23:be: 4e:0d:6e:d0:b8:52:28:5a:38:1a:65:4b:d3:21:79:4e:50:ce: d2:99:85:fb:cd:c8:1d:be:d7:82:6c:f1:48:e7:5e:8e:a9:c3: f3:dc:3c:36:fb:a2:b0:38:9a:77:15:08:92:e0:f2:c8:2a:a9: 04:9a:c9:18:01:57:6a:75:c9:50:fc:7e:74:57:25:66:ea:90: bc:dd:30:d8:39:59:0f:fa:94:78:12:e6:d2:de:48:d9:82:6b: dc:e4:e8:2a:0b:dd:6a:bb:d3:38:6e:ef:71:19:82:38:51:0f: 4c:9d:be:6a:22:f0:9d:96:44:e7:dc:56:4b:a3:d1:5b:ad:0e: 56:0a:3f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C9id/QReFcisHCC+wnFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGZiYTk5MzY1MDM0OGExMzUxNTJlZWMzNDhhMTE5NDMw ZTYzNDAwHhcNMjUxMjA2MTkwMzA1WhcNMjUxMjA3MTkwMzA1WjAzMTEwLwYDVQQD EyhlYmQwMDkxYjZiOWI2ZDNjNGIxOGQ0MjVhZjIyMmNhZTcxOTk4YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2vsEfRKJeimdnUzCm2V6oz9i0t Ogt4petrj8mQdMZqFL6xwrAa8xl+dOWx3euOgfXuQKpRWaGwqhVezp6nbOpqyqJw 3q8H4Naakd4GbXwyGh+1tzl7fJlFbTqpAtG4R1Di9W1QKQ9r040fk8AHmnkTQr8Q q2h8YIpmsDGYviAPukpg/5qwufHlDP/vNgOHnD2zXyOujFEitKhtYYNO/lQ+IfB9 v/0EHgbgMunIXL6mje9SlMppJj6Fi8/jK7vLS43RJo+y/YPL/KLwz07gB5U12kgk 7umkk1/2cU6kV98FP5812IR7/wXtxyVgq/lb8y5mVdtUkC9pD3BScnfVuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvQCRtrm208SxjUJa8iLK5xmYxNMB8GA1UdIwQY MBaAFByPupk2UDSKE1FS7sNIoRlDDmNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEktNm1UWlFOSW9UVVZMdXcwaWhHVU1PWTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMGI4NGItMTE0NS00MDYzLTg2Yjct ZDVkOGI0NGZjZTM0LzEvSEktNm1UWlFOSW9UVVZMdXcwaWhHVU1PWTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMGI4NGItMTE0NS00MDYzLTg2YjctZDVkOGI0NGZjZTM0 LzEvSEktNm1UWlFOSW9UVVZMdXcwaWhHVU1PWTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+uvky7S C0+34OtqOBPdD9ZHZVjmw4PvaAXYHvr/Wu7ien/8RnRW+lEoWa9G+ZSHpmf1eA5c YhuD+PKUO/jVicrSH09VBkw9lrDACZ3QwQ5yH91t2ZnWbg9PbPOqfHrhs5ojJLbw Uu48mEKxEpE0IEQ0uTvbCRrLkcNJsSO+Tg1u0LhSKFo4GmVL0yF5TlDO0pmF+83I Hb7XgmzxSOdejqnD89w8NvuisDiadxUIkuDyyCqpBJrJGAFXanXJUPx+dFclZuqQ vN0w2DlZD/qUeBLm0t5I2YJr3OToKgvdarvTOG7vcRmCOFEPTJ2+aiLwnZZE59xW S6PRW60OVgo/WQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:53 2025 by rpki-client