This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json) Hash identifier: JF+V1kPPeQm/keyua9Hh+pamS1P5q5RcGcLRj/Al1pA= Subject key identifier: 62:EA:4B:52:67:47:89:30:71:D5:C7:F8:48:BE:07:90:E2:88:38:3C Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Certificate serial: 019AF2AD96DBC99E445B6584DD64D9F98F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=) 2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: LqXhqZuhFjmLSMARfwJexfXuIuzeLqnT0lZgNkH9VzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:96:db:c9:9e:44:5b:65:84:dd:64:d9:f9:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=62ea4b526747893071d5c7f848be0790e288383c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:2c:0d:c2:c9:12:28:53:ba:e9:4c:ed:06: 87:18:2e:71:1a:c9:69:3f:d1:9c:c2:64:d0:d5:82: 49:cc:0a:38:c9:5c:90:77:66:e7:68:87:0d:46:7e: 78:22:f9:21:09:fc:ac:27:a0:9f:37:53:d5:99:82: 8c:d7:4f:5b:45:2a:3b:f9:1a:e9:92:9c:c8:69:db: 54:3d:70:a3:de:ee:33:4e:a5:0b:f1:9f:8d:2c:51: 96:3e:c0:85:c8:15:d7:dd:33:60:4d:bb:7b:79:27: fa:47:e5:bd:1a:7c:46:fe:b3:46:fa:9d:eb:ac:71: 10:dc:ce:e5:17:99:99:97:93:2b:8c:64:c9:b9:77: 64:a3:90:ce:31:9c:36:6e:a1:3a:ce:2d:6c:66:f1: 01:d5:dc:b9:52:e0:26:c4:d9:cb:41:7a:f6:81:38: 7d:2b:63:d0:41:a9:8c:93:a9:87:60:81:79:af:6c: 67:84:b5:e7:99:7f:6c:03:fd:03:d2:04:53:f2:14: fa:86:76:39:9b:19:90:d4:17:25:b0:d3:81:bb:5b: e6:7d:d2:09:90:3e:7b:03:e8:51:0e:ce:3b:7a:08: ae:e3:20:41:2f:fb:c1:f6:68:3c:f5:f3:3d:3a:26: 9d:9f:a9:c3:2d:22:15:4a:7e:7f:9d:df:bc:a5:f4: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EA:4B:52:67:47:89:30:71:D5:C7:F8:48:BE:07:90:E2:88:38:3C X509v3 Authority Key Identifier: keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c1:b8:61:26:ec:f9:0c:d4:3f:ff:21:d4:43:4a:bc:a7:ab: 69:9f:12:0f:e7:99:a6:64:89:0b:cc:59:d2:4f:da:64:c8:38: 2b:58:c4:1b:c0:42:0c:06:8d:c7:d1:05:64:2b:ae:57:a8:0e: 13:42:49:e7:dd:c6:a1:98:87:a9:c7:8b:e8:74:a6:7c:ec:96: cf:dc:eb:23:3b:60:73:1f:9d:c1:81:a5:e8:a0:a4:98:2e:7c: 8b:e0:cc:64:19:80:fb:7b:34:98:c3:a5:86:e3:93:73:f7:46: 39:f7:27:00:52:c3:66:c4:e5:51:56:ab:7d:76:06:ed:de:1e: 3e:f7:0e:66:f9:98:24:3e:4a:0a:c6:7c:64:43:f7:b7:92:7f: 81:4a:a6:66:2f:f6:b5:0d:c1:29:e0:e4:4d:85:c0:56:ac:9c: 0b:3b:27:05:35:b6:fe:26:cd:69:65:e9:1f:fa:5d:8c:eb:1d: 94:a4:8e:a8:ce:8b:55:21:80:90:24:ca:4f:de:ea:70:ab:d0: d7:57:a2:7f:5c:aa:52:aa:0b:5f:39:aa:18:63:a9:d4:a5:f4: 2d:d4:65:5d:5a:c0:0f:80:f0:56:e2:2e:c5:52:55:7b:ef:c7: 70:be:55:b1:6a:fe:76:7f:33:bf:5d:c5:49:c4:25:de:d7:ba: 01:c4:09:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZbbyZ5EW2WE3WTZ+Y8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzBhNjIyNjJkY2NiMjFhMDEwNGIzNGVkYjgyYjk1MTVj YWNkZmIwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg2MmVhNGI1MjY3NDc4OTMwNzFkNWM3Zjg0OGJlMDc5MGUyODgzODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nwsDcLJEihTuulM7QaHGC5xGslp P9GcwmTQ1YJJzAo4yVyQd2bnaIcNRn54IvkhCfysJ6CfN1PVmYKM109bRSo7+Rrp kpzIadtUPXCj3u4zTqUL8Z+NLFGWPsCFyBXX3TNgTbt7eSf6R+W9GnxG/rNG+p3r rHEQ3M7lF5mZl5MrjGTJuXdko5DOMZw2bqE6zi1sZvEB1dy5UuAmxNnLQXr2gTh9 K2PQQamMk6mHYIF5r2xnhLXnmX9sA/0D0gRT8hT6hnY5mxmQ1BclsNOBu1vmfdIJ kD57A+hRDs47egiu4yBBL/vB9mg89fM9Oiadn6nDLSIVSn5/nd+8pfQwswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLqS1JnR4kwcdXH+Ei+B5DiiDg8MB8GA1UdIwQY MBaAFB4wpiJi3MshoBBLNO24K5UVys37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMt MmEwNGQzOTIzZDIyLzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9mODM0YWQtZGYwZi00NTA1LTk2MTMtMmEwNGQzOTIzZDIy LzEvSGpDbUltTGN5eUdnRUVzMDdiZ3JsUlhLemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcG4YSbs +QzUP/8h1ENKvKeraZ8SD+eZpmSJC8xZ0k/aZMg4K1jEG8BCDAaNx9EFZCuuV6gO E0JJ593GoZiHqceL6HSmfOyWz9zrIztgcx+dwYGl6KCkmC58i+DMZBmA+3s0mMOl huOTc/dGOfcnAFLDZsTlUVarfXYG7d4ePvcOZvmYJD5KCsZ8ZEP3t5J/gUqmZi/2 tQ3BKeDkTYXAVqycCzsnBTW2/ibNaWXpH/pdjOsdlKSOqM6LVSGAkCTKT97qcKvQ 11eif1yqUqoLXzmqGGOp1KX0LdRlXVrAD4DwVuIuxVJVe+/HcL5VsWr+dn8zv13F ScQl3te6AcQJtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:16 2025 by rpki-client