This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json) Hash identifier: FlxYRK2uNQ7atOQKs5T1TncK/yDCkC79ys47H7MFGew= Subject key identifier: 1B:19:8C:92:5B:8C:26:5D:C5:9D:A7:61:99:37:F5:BB:D6:C9:47:A7 Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Certificate serial: 019B323174FDE60AD0112BB2257BD9B0B487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 16:01:00 +0000 Manifest this update: Thu 18 Dec 2025 16:01:00 +0000 Manifest next update: Fri 19 Dec 2025 16:01:00 +0000 Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=) 2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: wgcLG+XQ7hCctfqlzGvhwyugqqWkdMCzSb4op+c0OHo=) 3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:74:fd:e6:0a:d0:11:2b:b2:25:7b:d9:b0:b4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d Validity Not Before: Dec 18 16:01:00 2025 GMT Not After : Dec 19 16:01:00 2025 GMT Subject: CN=1b198c925b8c265dc59da7619937f5bbd6c947a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:45:48:1c:27:5c:48:4a:12:b2:71:99:13: c8:8c:52:92:f7:41:8d:95:c9:02:d8:5e:e2:9e:8c: 5a:21:65:f0:8a:7b:59:08:11:28:33:7b:fc:d2:7b: cd:c6:69:53:42:18:dc:a0:34:bc:e4:6f:8b:4b:7c: a9:8c:9f:34:02:4a:be:4e:74:2c:00:d9:fc:8e:57: 04:de:b1:3d:82:94:19:31:c8:fd:1b:fa:56:79:65: 5e:ef:b6:f3:0c:9c:06:f4:53:a7:a9:14:a8:93:de: d3:bc:e1:2d:3b:36:2e:cc:02:96:65:3f:27:de:70: a7:8a:41:39:37:52:08:e0:89:8a:c6:0f:a4:28:ed: b2:db:00:a7:19:1d:cd:96:ca:cb:92:0b:e7:ce:94: d9:f7:ae:36:b4:9d:60:39:09:b8:9f:e4:7f:54:2d: 32:ce:9f:1a:15:20:e9:2b:be:b2:dc:97:32:74:9c: 49:96:f0:60:15:ac:c1:39:3f:67:fc:d8:9e:c2:52: 25:5d:10:00:e9:bc:f4:ea:60:00:d9:8b:12:89:06: b9:59:73:f1:11:ff:84:98:61:35:39:50:81:34:8d: 51:94:52:b5:0d:c2:fe:1a:e8:6f:83:e4:5b:e7:44: 89:8e:72:a0:a0:e1:33:b9:7b:77:55:70:a6:12:82: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:8C:92:5B:8C:26:5D:C5:9D:A7:61:99:37:F5:BB:D6:C9:47:A7 X509v3 Authority Key Identifier: keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f9:ed:a5:d4:c6:82:49:47:c2:0e:ba:f7:87:e6:77:33:cf: 1a:6c:ae:22:51:3c:72:bb:1b:26:4f:60:76:25:61:4c:5e:36: 7b:ff:fa:b4:5d:c9:34:0e:a3:18:2d:b4:7a:4b:66:89:20:09: 98:31:83:d3:5b:a5:2d:ed:c9:0b:85:7b:89:60:46:5b:e0:52: 9a:86:f1:d6:66:b5:a7:cc:10:86:30:4c:21:b3:ab:28:0c:05: f4:cd:87:71:d3:15:e8:5a:eb:d1:71:12:41:8a:af:07:5f:98: 37:bd:b1:6e:30:d7:98:c5:fb:ab:0b:13:5e:0a:67:17:58:2f: 1f:4f:96:c4:b6:ea:3f:63:82:79:f5:88:53:c1:30:c9:18:55: 3f:11:8e:f0:cf:25:a9:c5:1c:6a:bf:ad:53:43:d0:1e:ce:7d: d0:9e:34:ad:cf:37:20:e3:cb:78:57:96:d0:42:69:65:a0:f3: 74:09:cd:93:75:fd:d4:47:2b:f2:53:1f:91:e6:8e:7c:c5:07: 8b:8b:dc:44:fe:f7:81:bc:df:39:1c:bd:37:70:6a:9d:28:37: 2c:d1:cc:13:67:92:3c:83:e3:05:67:cc:48:19:db:4d:b0:d3: b3:ed:43:51:ea:cd:ec:c1:df:c9:67:f7:bd:99:03:ed:5e:e5: 92:4e:1d:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMXT95grQESuyJXvZsLSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl YjliOGQwHhcNMjUxMjE4MTYwMTAwWhcNMjUxMjE5MTYwMTAwWjAzMTEwLwYDVQQD EygxYjE5OGM5MjViOGMyNjVkYzU5ZGE3NjE5OTM3ZjViYmQ2Yzk0N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtudFSBwnXEhKErJxmRPIjFKS90GN lckC2F7inoxaIWXwintZCBEoM3v80nvNxmlTQhjcoDS85G+LS3ypjJ80Akq+TnQs ANn8jlcE3rE9gpQZMcj9G/pWeWVe77bzDJwG9FOnqRSok97TvOEtOzYuzAKWZT8n 3nCnikE5N1II4ImKxg+kKO2y2wCnGR3NlsrLkgvnzpTZ9642tJ1gOQm4n+R/VC0y zp8aFSDpK76y3JcydJxJlvBgFazBOT9n/NiewlIlXRAA6bz06mAA2YsSiQa5WXPx Ef+EmGE1OVCBNI1RlFK1DcL+Guhvg+Rb50SJjnKgoOEzuXt3VXCmEoIAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsZjJJbjCZdxZ2nYZk39bvWyUenMB8GA1UdIwQY MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvntpdTG gklHwg6694fmdzPPGmyuIlE8crsbJk9gdiVhTF42e//6tF3JNA6jGC20ektmiSAJ mDGD01ulLe3JC4V7iWBGW+BSmobx1ma1p8wQhjBMIbOrKAwF9M2HcdMV6Frr0XES QYqvB1+YN72xbjDXmMX7qwsTXgpnF1gvH0+WxLbqP2OCefWIU8EwyRhVPxGO8M8l qcUcar+tU0PQHs590J40rc83IOPLeFeW0EJpZaDzdAnNk3X91Ecr8lMfkeaOfMUH i4vcRP73gbzfORy9N3BqnSg3LNHME2eSPIPjBWfMSBnbTbDTs+1DUerN7MHfyWf3 vZkD7V7lkk4dsA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:21:19 2025 by rpki-client