This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json) Hash identifier: 6H1g8bfMG3ASMdihaSRpT25NiB0akketjR9/+Yf2vmo= Subject key identifier: 7D:37:7C:8E:0C:10:6A:CB:EE:38:63:4E:CA:84:3A:2E:07:D7:4F:15 Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59 Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859 Certificate serial: 019B2F9E54F07740C91E23FB342AD601EC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft Manifest number: 15B7 Signing time: Thu 18 Dec 2025 04:01:04 +0000 Manifest this update: Thu 18 Dec 2025 04:01:04 +0000 Manifest next update: Fri 19 Dec 2025 04:01:04 +0000 Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: h1k3iZtx1d2J7Y+wwZ7aL7lEeZEoHEG8R3JhfcgOm9s=) 2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:54:f0:77:40:c9:1e:23:fb:34:2a:d6:01:ec:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859 Validity Not Before: Dec 18 04:01:04 2025 GMT Not After : Dec 19 04:01:04 2025 GMT Subject: CN=7d377c8e0c106acbee38634eca843a2e07d74f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:97:66:e8:04:9a:d8:b2:56:e8:85:44:32: f6:40:ab:bf:90:f6:d8:fe:be:44:98:56:b8:16:84: 4e:a9:27:1f:21:4a:b9:2d:25:27:d2:e3:21:f2:05: 78:49:b9:e0:3d:8f:6e:83:0b:03:8c:00:e9:20:fe: d4:e9:5a:cd:16:e0:1f:27:81:f5:99:7b:b0:e6:5f: 75:0a:0d:7f:84:c8:91:88:d8:b7:c0:0a:c7:8e:d6: 7f:87:fa:e7:9a:7c:53:ac:44:92:e0:45:c5:88:4d: 33:21:fa:cd:92:f9:40:d5:70:ac:42:0b:08:89:2f: 8a:97:ce:e6:18:43:c8:44:f5:e8:c1:43:1c:9f:f4: ea:d0:44:8c:ba:c1:f6:3f:ec:11:6d:4e:5c:b9:f4: 26:4a:73:5e:8c:fc:70:b0:28:66:b8:8e:cf:49:35: e9:97:08:74:cf:2b:60:1a:2a:7b:95:bd:e7:1b:a8: 8c:bf:90:67:c4:16:de:1e:38:38:e1:be:01:ec:f5: 02:53:ea:20:e2:4a:98:b1:73:89:ed:8d:af:4f:7e: eb:30:46:7e:fb:94:fa:5d:ea:64:b4:74:e6:33:24: 5e:26:4e:cf:40:d6:52:6c:0c:b3:24:98:df:71:34: 8e:fa:be:65:83:c6:e9:67:20:88:cc:e6:5f:9a:d5: 2f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:7C:8E:0C:10:6A:CB:EE:38:63:4E:CA:84:3A:2E:07:D7:4F:15 X509v3 Authority Key Identifier: keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:42:85:5c:a8:6b:28:68:94:b6:1b:3b:f0:0e:5b:59:69: 59:29:af:85:3b:dc:c6:9d:70:99:e7:4c:a2:06:dc:dd:fc:cc: d9:bb:7e:aa:5e:39:73:f6:2b:ff:36:46:b7:f4:ed:03:7f:71: 72:1b:80:c0:54:39:24:5f:e8:13:bc:85:f9:83:c2:2c:70:3d: 35:25:7d:99:4c:16:48:6a:fd:ae:d0:a4:76:be:f6:2d:d2:34: 00:9a:67:5b:19:05:ab:4c:64:dc:0a:4c:e6:cd:29:85:74:b2: fe:b8:0e:e2:1f:9c:4f:e8:b2:e5:a3:4a:51:05:73:00:22:1a: 70:c8:dd:07:e2:e1:b7:df:8e:56:c6:f1:66:61:0e:51:df:ea: 8f:49:f4:08:76:a7:67:5c:21:8f:d2:6a:89:a9:e6:70:43:6b: ad:73:4b:fe:f5:6a:b3:b5:a6:45:31:75:bd:f9:d9:aa:93:7f: b4:4a:be:84:d8:27:9a:29:48:91:4b:a1:6c:95:47:eb:d3:97: ff:84:bd:f5:67:c9:30:b2:50:f4:09:80:97:98:90:1e:6f:71: 63:37:b7:01:d1:e0:b1:90:3a:f7:07:b5:ae:4d:43:dc:f7:a3: 39:bb:a6:41:0c:05:ff:7f:db:08:88:22:70:05:9e:53:b3:18: 57:46:5a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnlTwd0DJHiP7NCrWAewvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3 NjQ4NTkwHhcNMjUxMjE4MDQwMTA0WhcNMjUxMjE5MDQwMTA0WjAzMTEwLwYDVQQD Eyg3ZDM3N2M4ZTBjMTA2YWNiZWUzODYzNGVjYTg0M2EyZTA3ZDc0ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IWXZugEmtiyVuiFRDL2QKu/kPbY /r5EmFa4FoROqScfIUq5LSUn0uMh8gV4SbngPY9ugwsDjADpIP7U6VrNFuAfJ4H1 mXuw5l91Cg1/hMiRiNi3wArHjtZ/h/rnmnxTrESS4EXFiE0zIfrNkvlA1XCsQgsI iS+Kl87mGEPIRPXowUMcn/Tq0ESMusH2P+wRbU5cufQmSnNejPxwsChmuI7PSTXp lwh0zytgGip7lb3nG6iMv5BnxBbeHjg44b4B7PUCU+og4kqYsXOJ7Y2vT37rMEZ+ +5T6XepktHTmMyReJk7PQNZSbAyzJJjfcTSO+r5lg8bpZyCIzOZfmtUvSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH03fI4MEGrL7jhjTsqEOi4H108VMB8GA1UdIwQY MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsdChVyo ayholLYbO/AOW1lpWSmvhTvcxp1wmedMogbc3fzM2bt+ql45c/Yr/zZGt/TtA39x chuAwFQ5JF/oE7yF+YPCLHA9NSV9mUwWSGr9rtCkdr72LdI0AJpnWxkFq0xk3ApM 5s0phXSy/rgO4h+cT+iy5aNKUQVzACIacMjdB+Lht9+OVsbxZmEOUd/qj0n0CHan Z1whj9JqianmcENrrXNL/vVqs7WmRTF1vfnZqpN/tEq+hNgnmilIkUuhbJVH69OX /4S99WfJMLJQ9AmAl5iQHm9xYze3AdHgsZA69we1rk1D3PejObumQQwF/3/bCIgi cAWeU7MYV0ZafA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:18 2025 by rpki-client