This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json) Hash identifier: TNf/W7OWNEKBfoKqfRjr5S4AqdY/SpjxzSf0HuW7kSM= Subject key identifier: B2:BC:8F:46:B0:4C:41:BF:13:F0:2A:2D:EB:9A:03:AB:11:75:A2:57 Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Certificate serial: 019AF3895FD29F414499008F9CE011414FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft Manifest number: 0722 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: c0UjrLBUttSX6Nqtrb+GXuO65ckLB6VKof4Dd5ScS6A=) 2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5f:d2:9f:41:44:99:00:8f:9c:e0:11:41:4f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=b2bc8f46b04c41bf13f02a2deb9a03ab1175a257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:6b:da:b0:c2:9d:af:8a:7d:2e:56:05:54: 0c:4a:9c:76:a0:43:f5:c5:ae:ee:84:de:66:ab:66: ed:e0:8e:07:79:0a:2f:f0:cd:5d:52:f8:60:ae:11: 6c:6a:0d:21:c9:2d:fd:48:93:de:70:8b:4f:a0:d7: 30:89:a6:53:79:bd:de:a0:c7:ca:12:b2:50:af:b6: 6a:4d:86:dd:0d:24:46:69:d7:f1:c6:ce:fb:52:c5: 95:51:22:24:13:38:7f:ce:42:a4:0f:ea:c1:5b:28: 40:ae:53:0f:a0:85:c1:fc:93:5e:1b:f1:8d:90:7c: 17:14:3f:a5:32:f3:28:5f:ab:af:41:75:3e:7d:82: c6:54:3b:87:8b:b3:19:3e:d9:43:f2:01:4a:f8:af: 8c:1b:70:6d:22:bf:90:91:91:96:6f:11:29:31:08: cf:a9:2d:81:1d:0a:df:cc:8c:bb:6c:7d:e0:23:8c: 8a:8d:9e:41:64:c1:1e:53:2f:9d:62:1a:34:9f:2c: 16:63:78:eb:38:0d:8e:75:d6:3f:15:cb:6b:10:c8: 8e:11:3d:e0:c6:b7:68:6c:53:e8:51:d0:54:d0:4a: db:bf:c3:8f:49:fd:9e:8d:a1:a5:ba:43:65:d8:97: 1e:bf:7c:c5:0a:7d:c2:a2:0e:d3:00:65:c8:30:ca: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:8F:46:B0:4C:41:BF:13:F0:2A:2D:EB:9A:03:AB:11:75:A2:57 X509v3 Authority Key Identifier: keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:47:e5:a1:6e:01:d8:b1:ce:3a:c5:ee:e8:c0:0b:02:3e:f4: 72:88:03:b4:58:f9:a5:17:c6:48:c6:a9:8c:57:20:18:f4:50: d2:c1:bf:02:3d:c9:48:8d:48:bc:69:27:32:f6:01:ab:f9:7e: 20:3c:e4:89:1d:ac:96:73:2f:28:5b:b6:ec:69:c6:96:6d:7b: 46:30:93:63:25:02:44:d1:27:e0:1f:52:7b:24:85:0a:cb:e8: 83:14:af:21:9c:f2:1e:a9:99:0a:b0:23:49:6d:db:37:88:f4: f1:c5:75:61:01:63:17:44:ad:95:c8:99:67:ec:38:e8:db:ff: 6b:cf:17:3e:bb:1a:e6:13:26:b3:6b:dc:67:b4:23:ed:ca:cc: 2d:82:01:6c:51:64:87:d2:0e:35:8d:87:1d:b8:e2:05:ae:94: 9c:f7:ae:b9:fe:5e:b2:a6:68:49:cc:52:6c:40:31:81:9a:c2: 38:2b:0d:9a:d1:cb:e1:e7:a4:9a:54:13:f6:86:5e:9c:26:9b: 3e:c2:70:3a:c5:43:c8:7d:db:c3:8a:7b:a0:b5:6d:96:c0:26: 09:b7:c1:6c:b9:bc:ea:aa:69:d8:0e:23:9c:67:a0:93:11:4a: f6:01:88:01:9b:05:b9:32:92:30:d5:4e:b5:e3:e5:b8:9d:37: e7:0c:7c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV/Sn0FEmQCPnOARQU/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh NzY2OTMwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EyhiMmJjOGY0NmIwNGM0MWJmMTNmMDJhMmRlYjlhMDNhYjExNzVhMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqklr2rDCna+KfS5WBVQMSpx2oEP1 xa7uhN5mq2bt4I4HeQov8M1dUvhgrhFsag0hyS39SJPecItPoNcwiaZTeb3eoMfK ErJQr7ZqTYbdDSRGadfxxs77UsWVUSIkEzh/zkKkD+rBWyhArlMPoIXB/JNeG/GN kHwXFD+lMvMoX6uvQXU+fYLGVDuHi7MZPtlD8gFK+K+MG3BtIr+QkZGWbxEpMQjP qS2BHQrfzIy7bH3gI4yKjZ5BZMEeUy+dYho0nywWY3jrOA2OddY/FctrEMiOET3g xrdobFPoUdBU0Erbv8OPSf2ejaGlukNl2Jcev3zFCn3Cog7TAGXIMMrD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLK8j0awTEG/E/AqLeuaA6sRdaJXMB8GA1UdIwQY MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEfloW4B 2LHOOsXu6MALAj70cogDtFj5pRfGSMapjFcgGPRQ0sG/Aj3JSI1IvGknMvYBq/l+ IDzkiR2slnMvKFu27GnGlm17RjCTYyUCRNEn4B9SeySFCsvogxSvIZzyHqmZCrAj SW3bN4j08cV1YQFjF0StlciZZ+w46Nv/a88XPrsa5hMms2vcZ7Qj7crMLYIBbFFk h9IONY2HHbjiBa6UnPeuuf5esqZoScxSbEAxgZrCOCsNmtHL4eekmlQT9oZenCab PsJwOsVDyH3bw4p7oLVtlsAmCbfBbLm86qpp2A4jnGegkxFK9gGIAZsFuTKSMNVO tePluJ035wx8Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:22 2025 by rpki-client