This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json) Hash identifier: BYGPCuU4cWg2jKQUiYKQ/IeT97GNy+vSH7iwhbGvqUo= Subject key identifier: D3:FD:8C:BA:7D:97:31:56:C8:83:BC:3B:00:F4:38:71:B8:F1:4B:2D Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f Certificate serial: 019B25512067BB7C31EB0840D7A48EC9B66F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 04:00:32 +0000 Manifest this update: Tue 16 Dec 2025 04:00:32 +0000 Manifest next update: Wed 17 Dec 2025 04:00:32 +0000 Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: vo8Uro4L7iHioajezTrI6sJb9fqK0lrOrdhLEE5U6bw=) 2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:20:67:bb:7c:31:eb:08:40:d7:a4:8e:c9:b6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f Validity Not Before: Dec 16 04:00:32 2025 GMT Not After : Dec 17 04:00:32 2025 GMT Subject: CN=d3fd8cba7d973156c883bc3b00f43871b8f14b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:26:49:fc:22:c4:d0:97:9e:54:f6:e0:86: 9a:8f:02:cb:93:90:f3:a5:8f:03:cc:07:9e:5e:0d: b5:e2:d0:23:f7:bb:06:5e:72:83:f6:25:9d:a9:ef: 5a:ba:8a:c5:8b:7a:dd:d7:d7:fd:12:e0:09:a1:7a: 86:27:89:e5:db:f8:23:d3:97:e5:46:5e:58:1c:c5: dd:db:69:7d:e4:ce:76:3c:05:c0:13:55:30:a8:64: 4a:43:8f:18:43:c5:62:0c:5e:03:93:b7:3f:24:f9: 64:ba:50:90:3a:ce:1e:3f:ee:02:a8:45:68:6e:b7: 9b:70:00:ed:11:d8:23:c0:f7:7d:40:13:9a:68:30: 2c:92:44:22:ee:82:cd:db:1d:1b:32:35:9f:93:d7: ef:dd:49:bd:27:ba:36:96:29:af:9f:e2:1d:8d:52: dd:8d:96:5f:dc:50:6c:5f:d1:7e:a5:9e:21:37:38: 5d:6f:d4:0d:73:c0:f1:b4:19:4d:6f:92:b9:28:3b: 34:46:e4:2a:f8:4e:7e:27:50:d5:60:07:3e:56:b6: 78:7a:5a:f3:f4:35:22:c4:e2:da:34:4d:17:d4:5e: 06:bc:28:ae:c5:57:70:df:9c:90:cc:3f:d3:e0:49: 2d:40:4f:43:9f:de:b3:d6:f1:22:97:eb:98:ed:85: ba:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FD:8C:BA:7D:97:31:56:C8:83:BC:3B:00:F4:38:71:B8:F1:4B:2D X509v3 Authority Key Identifier: keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:0c:84:ee:5a:a0:8e:39:41:ac:0f:4e:f7:92:d3:68:4d:77: 5a:ab:03:41:39:18:0c:d1:6d:63:ca:19:45:43:6b:af:87:9a: 91:3b:6f:80:78:70:ba:fa:1d:77:1c:ed:1a:21:1a:a9:84:33: a9:d6:3b:7d:a0:26:88:cc:f2:09:96:08:e4:be:08:e5:76:c9: 03:bd:ee:12:01:e0:c8:c8:26:d4:c1:c2:18:e8:5a:fd:77:9e: ef:84:e7:10:45:15:61:e7:0c:7d:7e:dd:74:5d:4f:85:3a:6b: ff:05:57:bb:5b:2e:02:b2:cd:f2:b3:39:c7:8d:47:0d:b9:37: 41:d7:86:5d:1b:42:36:12:d0:dc:c7:09:a8:ec:f0:6b:a3:b9: 62:d9:71:dc:45:c5:32:6c:3c:6f:93:c0:b3:58:17:b7:60:04: be:44:16:4f:6f:bb:c5:1f:73:83:e1:c2:34:6a:3b:a2:71:07: 0a:be:a5:67:32:d6:cc:1c:fd:50:ae:7b:cb:a0:fe:8b:57:00: 7d:e6:89:3e:83:df:ff:60:56:73:c6:86:64:7a:38:c5:db:2e: 9d:d6:66:e5:49:43:56:cf:62:27:7f:a4:cd:68:d1:4b:35:3e: 0d:35:66:49:0d:02:7a:09:5f:0a:9e:48:1b:5d:ef:f7:5f:01: 47:72:d7:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUSBnu3wx6whA16SOybZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMjhiMThkZjI0NGRiODlmMmI5N2E2YzcyNjI5NzMzYjM4 ODYwMmYwHhcNMjUxMjE2MDQwMDMyWhcNMjUxMjE3MDQwMDMyWjAzMTEwLwYDVQQD EyhkM2ZkOGNiYTdkOTczMTU2Yzg4M2JjM2IwMGY0Mzg3MWI4ZjE0YjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwmSfwixNCXnlT24IaajwLLk5Dz pY8DzAeeXg214tAj97sGXnKD9iWdqe9auorFi3rd19f9EuAJoXqGJ4nl2/gj05fl Rl5YHMXd22l95M52PAXAE1UwqGRKQ48YQ8ViDF4Dk7c/JPlkulCQOs4eP+4CqEVo brebcADtEdgjwPd9QBOaaDAskkQi7oLN2x0bMjWfk9fv3Um9J7o2limvn+IdjVLd jZZf3FBsX9F+pZ4hNzhdb9QNc8DxtBlNb5K5KDs0RuQq+E5+J1DVYAc+VrZ4elrz 9DUixOLaNE0X1F4GvCiuxVdw35yQzD/T4EktQE9Dn96z1vEil+uY7YW6RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNP9jLp9lzFWyIO8OwD0OHG48UstMB8GA1UdIwQY MBaAFB0osY3yRNuJ8rl6bHJilzOziGAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTIt YTk5YzM5MDkwZGI0LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTItYTk5YzM5MDkwZGI0 LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAyE7lqg jjlBrA9O95LTaE13WqsDQTkYDNFtY8oZRUNrr4eakTtvgHhwuvoddxztGiEaqYQz qdY7faAmiMzyCZYI5L4I5XbJA73uEgHgyMgm1MHCGOha/Xee74TnEEUVYecMfX7d dF1PhTpr/wVXu1suArLN8rM5x41HDbk3QdeGXRtCNhLQ3McJqOzwa6O5Ytlx3EXF Mmw8b5PAs1gXt2AEvkQWT2+7xR9zg+HCNGo7onEHCr6lZzLWzBz9UK57y6D+i1cA feaJPoPf/2BWc8aGZHo4xdsundZm5UlDVs9iJ3+kzWjRSzU+DTVmSQ0CeglfCp5I G13v918BR3LXXg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:07:09 2025 by rpki-client