This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json) Hash identifier: kodosaB7m9Q+QHNyQGRTkKNlWS0NgVhB58igdLYrkeo= Subject key identifier: 43:39:C3:8F:FA:BB:1E:05:48:6C:4A:10:7C:19:C4:2A:07:21:82:AC Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1 Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1 Certificate serial: 019B39B39EF6998C08253C51C8E82DEA5BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 03:00:31 +0000 Manifest this update: Sat 20 Dec 2025 03:00:31 +0000 Manifest next update: Sun 21 Dec 2025 03:00:31 +0000 Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=) 2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: brXa1rL4ylbw383dcPO+1P9SiAOe32jjkHsIsvgIxXM=) 3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:9e:f6:99:8c:08:25:3c:51:c8:e8:2d:ea:5b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1 Validity Not Before: Dec 20 03:00:31 2025 GMT Not After : Dec 21 03:00:31 2025 GMT Subject: CN=4339c38ffabb1e05486c4a107c19c42a072182ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:53:92:92:cd:18:31:e4:61:56:6c:8d:01: 59:9b:6a:10:10:31:a7:49:fd:10:9d:7a:9d:5c:2f: e3:4c:97:db:ae:86:5a:23:85:4c:65:ed:92:e4:32: 05:3d:8f:be:ea:96:1d:b4:9b:0a:df:b7:97:c8:06: 02:ed:3e:ef:56:84:cc:46:9f:06:69:15:de:7d:f1: 3b:8a:b2:21:cc:70:f7:87:8e:28:f9:a3:59:34:45: 7a:1e:37:cd:09:ed:1a:1d:45:41:bb:64:a7:c4:d5: d5:32:79:72:bd:2e:0a:82:b9:99:23:be:46:b7:ef: 4f:df:d3:59:67:a6:85:a9:db:b0:21:4d:2f:1a:ec: 66:32:a2:dc:0e:8e:9b:c8:66:48:89:e8:94:20:c0: f9:fb:0e:01:bd:9f:87:08:90:53:88:9b:07:c1:92: 15:1f:2e:b0:d9:b6:9a:99:9d:b2:8b:3d:b3:7d:ec: e5:9e:42:45:80:5e:8e:09:b8:81:b5:74:9a:02:2e: e9:37:3e:ba:96:20:3f:13:92:bd:81:c9:5e:cf:cc: 52:3a:85:d4:7a:df:70:af:bb:74:6e:12:84:6d:17: d7:4a:db:2a:2a:e6:07:1f:81:79:c4:9f:0d:31:5a: 46:5a:38:1f:38:14:79:1c:aa:98:29:87:b1:22:52: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:39:C3:8F:FA:BB:1E:05:48:6C:4A:10:7C:19:C4:2A:07:21:82:AC X509v3 Authority Key Identifier: keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fb:eb:5b:57:36:5f:53:40:d5:7a:e1:df:ee:e7:4a:39:6c: 5b:91:b4:f2:cf:7f:09:cc:24:a3:fc:b9:82:86:3b:af:d1:bd: 3b:27:b7:bf:91:cb:21:ea:40:14:a0:b0:f8:be:24:08:54:a0: 6b:d0:89:d5:42:dd:f8:11:e4:77:f7:17:37:f1:cc:71:2a:f3: 38:8b:e2:90:8b:f5:43:de:de:9d:08:ac:e9:94:03:6d:f5:58: 49:1e:cb:fc:5d:02:e9:98:16:51:7f:bc:32:da:52:07:54:39: 25:75:2d:53:f5:60:73:aa:e7:d6:c5:78:68:bc:96:ca:12:fb: f8:9e:7c:32:e0:d7:fe:ab:b9:fc:09:38:89:d2:e6:b4:be:85: d4:7c:d4:e8:ca:09:b9:38:67:a6:89:6f:af:cd:29:c7:a2:f4: 2c:b9:b2:94:a7:78:cf:fa:d7:88:c9:0e:be:78:70:00:d6:bc: 98:07:ff:e4:c3:e5:ae:2b:74:36:1b:e1:d0:ec:a5:8c:15:ad: 7a:d5:0f:5e:78:64:66:8b:6e:2b:06:ed:46:31:1f:48:39:44: da:f3:01:70:4f:80:59:04:ba:2a:1b:1d:91:3a:48:10:35:be: db:94:28:6b:c2:28:50:3e:fc:36:f3:d9:66:4d:d5:ac:c0:b8: eb:f7:92:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s572mYwIJTxRyOgt6luwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4 N2FiZjEwHhcNMjUxMjIwMDMwMDMxWhcNMjUxMjIxMDMwMDMxWjAzMTEwLwYDVQQD Eyg0MzM5YzM4ZmZhYmIxZTA1NDg2YzRhMTA3YzE5YzQyYTA3MjE4MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE9TkpLNGDHkYVZsjQFZm2oQEDGn Sf0QnXqdXC/jTJfbroZaI4VMZe2S5DIFPY++6pYdtJsK37eXyAYC7T7vVoTMRp8G aRXeffE7irIhzHD3h44o+aNZNEV6HjfNCe0aHUVBu2SnxNXVMnlyvS4KgrmZI75G t+9P39NZZ6aFqduwIU0vGuxmMqLcDo6byGZIieiUIMD5+w4BvZ+HCJBTiJsHwZIV Hy6w2baamZ2yiz2zfezlnkJFgF6OCbiBtXSaAi7pNz66liA/E5K9gclez8xSOoXU et9wr7t0bhKEbRfXStsqKuYHH4F5xJ8NMVpGWjgfOBR5HKqYKYexIlLbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM5w4/6ux4FSGxKEHwZxCoHIYKsMB8GA1UdIwQY MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt OTllZWExZjBhMzU0LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0 LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvvrW1c2 X1NA1Xrh3+7nSjlsW5G08s9/Ccwko/y5goY7r9G9Oye3v5HLIepAFKCw+L4kCFSg a9CJ1ULd+BHkd/cXN/HMcSrzOIvikIv1Q97enQis6ZQDbfVYSR7L/F0C6ZgWUX+8 MtpSB1Q5JXUtU/Vgc6rn1sV4aLyWyhL7+J58MuDX/qu5/Ak4idLmtL6F1HzU6MoJ uThnpolvr80px6L0LLmylKd4z/rXiMkOvnhwANa8mAf/5MPlrit0Nhvh0OyljBWt etUPXnhkZotuKwbtRjEfSDlE2vMBcE+AWQS6KhsdkTpIEDW+25Qoa8IoUD78NvPZ Zk3VrMC46/eSLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:52:18 2025 by rpki-client