This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json) Hash identifier: A2SFf4MoTbF3d/1NFrcOEuESgRFIvLZjUSxyGgBV0GI= Subject key identifier: 34:16:14:CE:A9:00:B2:B9:EB:31:E9:04:04:D3:6F:48:AA:2D:41:97 Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f Certificate serial: 019AF12D9F40D024B69BACBCE682216BA321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: HGbYhzQxHZjKSs6WNTDkAIQDhbxWd4g9xEEq2UE0U4E=) 2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9f:40:d0:24:b6:9b:ac:bc:e6:82:21:6b:a3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=341614cea900b2b9eb31e90404d36f48aa2d4197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:5a:ed:f7:b7:02:bf:1a:63:a8:72:b3:d3: d5:c0:43:65:d1:fc:47:48:ee:5f:dc:94:ad:af:22: 42:53:4f:e7:2b:e1:25:18:d3:cc:63:f5:8c:70:74: 33:de:c5:7a:86:a3:4e:b9:27:6e:63:59:29:33:1e: 2c:29:09:26:e5:a1:72:29:04:c2:03:3e:b7:62:09: cd:ff:2e:82:f5:84:4b:5f:da:f7:94:55:c2:01:0e: c2:25:cd:8d:dd:d8:c4:5a:00:c3:4e:6a:58:d3:22: ba:46:1c:40:6d:27:0e:ee:ed:8c:df:37:02:6d:3c: 00:36:c4:e6:27:c1:0f:ef:eb:39:c5:26:a1:80:2d: 7c:01:e6:b3:37:7f:f4:1c:55:2e:f8:55:3d:4e:3a: 65:78:9a:65:ec:a4:5d:2c:ef:0b:f6:1d:a2:f9:61: 22:0e:d6:e3:0d:a2:47:a8:31:17:de:79:cb:05:42: e3:4d:8a:2f:e7:16:cf:35:7b:6f:98:48:46:9d:f1: 43:69:5a:e0:ab:9c:a6:34:9e:08:aa:bf:2c:29:50: 4b:3b:c3:df:c7:56:9f:38:7a:df:c6:17:18:03:e4: 87:e7:ff:09:a3:64:78:9e:6c:49:83:18:51:ba:5a: 35:bd:7e:17:f5:e0:fa:18:3c:1d:56:77:61:fd:df: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:16:14:CE:A9:00:B2:B9:EB:31:E9:04:04:D3:6F:48:AA:2D:41:97 X509v3 Authority Key Identifier: keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:45:ff:ee:69:86:82:7c:e7:3f:85:ea:6c:86:df:0b:25:56: a6:48:54:de:85:57:1e:cf:22:26:f9:9b:c0:06:0b:a0:6f:a7: ea:26:3f:72:c3:ba:2f:6c:11:f4:f6:2a:53:03:47:ba:c7:77: fd:4e:ca:04:08:0e:d1:68:78:70:5e:f0:f9:71:0c:b8:af:87: a5:d6:b5:1d:80:b0:66:5d:75:f4:7d:d4:91:a4:d2:b6:17:39: 72:f4:23:88:22:04:f9:da:7c:39:9c:93:37:45:2c:d2:2f:df: b1:f4:72:c5:a1:9d:6c:78:ac:7d:6b:d1:38:31:09:eb:13:77: d4:36:1c:75:20:38:0d:7d:5f:00:18:a9:0e:e1:eb:25:2d:85: 09:9a:68:99:f8:4e:3f:b8:ba:30:66:97:7a:4b:47:68:03:46: d8:78:37:7d:f6:63:19:79:5d:f1:e5:f7:24:2a:3d:ca:41:6c: 65:44:d1:2b:0a:a2:e5:d3:f0:75:d9:af:3e:eb:76:91:71:0a: b8:e6:6a:fe:35:3f:59:97:c8:38:f9:21:81:9d:93:9e:4b:7f: 75:67:51:da:8f:c2:2f:e2:65:cb:81:63:a6:5d:31:4e:4b:34: 67:1b:fe:86:e0:cb:ca:c9:95:ce:de:2b:50:26:a8:29:da:aa: 16:09:c6:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ9A0CS2m6y85oIha6MhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMjhiMThkZjI0NGRiODlmMmI5N2E2YzcyNjI5NzMzYjM4 ODYwMmYwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD EygzNDE2MTRjZWE5MDBiMmI5ZWIzMWU5MDQwNGQzNmY0OGFhMmQ0MTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ha7fe3Ar8aY6hys9PVwENl0fxH SO5f3JStryJCU0/nK+ElGNPMY/WMcHQz3sV6hqNOuSduY1kpMx4sKQkm5aFyKQTC Az63YgnN/y6C9YRLX9r3lFXCAQ7CJc2N3djEWgDDTmpY0yK6RhxAbScO7u2M3zcC bTwANsTmJ8EP7+s5xSahgC18AeazN3/0HFUu+FU9TjpleJpl7KRdLO8L9h2i+WEi DtbjDaJHqDEX3nnLBULjTYov5xbPNXtvmEhGnfFDaVrgq5ymNJ4Iqr8sKVBLO8Pf x1afOHrfxhcYA+SH5/8Jo2R4nmxJgxhRulo1vX4X9eD6GDwdVndh/d8IWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQWFM6pALK56zHpBATTb0iqLUGXMB8GA1UdIwQY MBaAFB0osY3yRNuJ8rl6bHJilzOziGAvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTIt YTk5YzM5MDkwZGI0LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84ODc2MjAtZjM4NS00M2Y0LTliZTItYTk5YzM5MDkwZGI0 LzEvSFNpeGpmSkUyNG55dVhwc2NtS1hNN09JWUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkX/7mmG gnznP4XqbIbfCyVWpkhU3oVXHs8iJvmbwAYLoG+n6iY/csO6L2wR9PYqUwNHusd3 /U7KBAgO0Wh4cF7w+XEMuK+Hpda1HYCwZl119H3UkaTSthc5cvQjiCIE+dp8OZyT N0Us0i/fsfRyxaGdbHisfWvRODEJ6xN31DYcdSA4DX1fABipDuHrJS2FCZpomfhO P7i6MGaXektHaANG2Hg3ffZjGXld8eX3JCo9ykFsZUTRKwqi5dPwddmvPut2kXEK uOZq/jU/WZfIOPkhgZ2Tnkt/dWdR2o/CL+Jly4Fjpl0xTks0Zxv+huDLysmVzt4r UCaoKdqqFgnGbw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:46 2025 by rpki-client