This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json) Hash identifier: KeUma+XyQP3Dnmsd9L0FvQhogGhycLiV9+vGFTULrn4= Subject key identifier: DA:F4:0C:4F:D6:50:23:93:F6:7D:C9:43:C5:3A:F4:9F:35:B2:51:34 Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51 Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451 Certificate serial: 019B25535BD78E5312674392252766ECD3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft Manifest number: 1329 Signing time: Tue 16 Dec 2025 04:02:58 +0000 Manifest this update: Tue 16 Dec 2025 04:02:58 +0000 Manifest next update: Wed 17 Dec 2025 04:02:58 +0000 Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: qtfyOYHP+5BqcpWziPmVWVDYxMphE2tFt8/KtOARDZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:5b:d7:8e:53:12:67:43:92:25:27:66:ec:d3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451 Validity Not Before: Dec 16 04:02:58 2025 GMT Not After : Dec 17 04:02:58 2025 GMT Subject: CN=daf40c4fd6502393f67dc943c53af49f35b25134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:83:39:1f:aa:ad:e4:86:92:74:20:04:c4: 94:71:be:f1:6c:82:ae:da:2d:e0:26:a2:04:da:9b: b5:8f:a9:9e:de:ba:88:d5:70:bd:31:08:b3:3f:e4: 88:3f:eb:74:f0:38:d9:18:6c:bb:08:a9:2a:5d:9a: 3a:b7:a5:fa:6d:63:09:14:29:f3:16:e0:bc:e2:64: d7:42:53:8d:3c:84:f8:98:9d:2a:77:b3:a7:bf:0d: 1b:5f:4f:a2:c5:44:84:42:17:35:b6:c4:1e:6d:0a: 59:a4:f3:f0:83:12:55:0e:64:85:4c:31:3a:01:34: b2:82:9f:0a:b3:b0:cd:2b:7d:6c:b0:5f:a7:a3:0e: bc:7f:97:db:ff:df:df:fc:02:30:c5:9c:e9:27:12: b2:9c:89:f8:dc:31:99:1c:d9:a9:76:7d:6f:61:a7: 9c:6e:c5:25:00:15:02:2a:ef:90:70:7f:96:22:c8: cd:e1:4c:90:d1:7b:45:e3:9a:34:34:1f:1c:46:37: 02:5c:ea:a7:fb:68:85:22:49:58:1e:f6:24:ec:3b: e8:43:3b:7d:f8:72:0f:5f:a9:a4:3e:4d:4a:d8:4f: 44:fb:27:1e:c9:14:fa:7e:86:a7:0a:c3:67:d8:41: a3:ca:77:8f:6e:5b:b2:a7:84:f4:8d:ae:cf:c4:3f: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F4:0C:4F:D6:50:23:93:F6:7D:C9:43:C5:3A:F4:9F:35:B2:51:34 X509v3 Authority Key Identifier: keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:8d:41:dc:ec:78:a9:99:34:be:6f:27:a0:64:3f:3c:e8: c2:76:57:cc:cf:c6:87:24:40:f2:66:95:3e:c5:35:a5:7d:b3: 30:7b:d1:4d:f0:d6:67:0c:a1:f8:a4:d6:b5:0a:09:42:de:d5: 89:35:1d:95:e2:ad:a1:90:6a:d9:e2:b6:54:b5:ff:a5:9e:00: 54:6a:97:61:7f:b6:e1:db:26:89:9f:01:35:61:5d:5a:b4:eb: 15:d0:cc:70:9a:12:63:b3:4c:74:26:68:9a:a5:42:97:d2:f3: 22:04:61:00:3a:d3:e2:c1:17:da:9b:8d:50:b2:eb:e9:ba:46: d4:5a:8e:6a:b9:1a:c4:7e:70:dc:b2:c3:f2:b4:70:ef:b9:56: e9:78:0c:a9:44:5a:2f:04:c3:1b:27:13:61:23:dc:b3:c1:5a: 0e:20:9d:76:06:eb:9c:6c:c3:a7:b7:d1:fc:c5:5b:59:04:da: 0d:c7:e1:6a:74:d8:0f:96:cd:e1:b3:8a:5f:26:e2:a0:ca:ee: 61:7f:b5:5a:7f:71:99:be:7a:02:13:e5:2f:bc:7c:7a:3f:67: ea:08:38:7a:ee:87:d8:ee:de:31:b1:24:f9:11:9b:f3:39:17: 53:7b:66:d4:8f:8b:a4:66:04:7f:22:2a:be:3b:bb:1c:10:62: f3:28:2e:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslU1vXjlMSZ0OSJSdm7NPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjYjhlMzdmNTEzZGRjMjlmZmQ3OTFjMzhjOTY2MzIzNjlj YTU0NTEwHhcNMjUxMjE2MDQwMjU4WhcNMjUxMjE3MDQwMjU4WjAzMTEwLwYDVQQD EyhkYWY0MGM0ZmQ2NTAyMzkzZjY3ZGM5NDNjNTNhZjQ5ZjM1YjI1MTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcyDOR+qreSGknQgBMSUcb7xbIKu 2i3gJqIE2pu1j6me3rqI1XC9MQizP+SIP+t08DjZGGy7CKkqXZo6t6X6bWMJFCnz FuC84mTXQlONPIT4mJ0qd7Onvw0bX0+ixUSEQhc1tsQebQpZpPPwgxJVDmSFTDE6 ATSygp8Ks7DNK31ssF+now68f5fb/9/f/AIwxZzpJxKynIn43DGZHNmpdn1vYaec bsUlABUCKu+QcH+WIsjN4UyQ0XtF45o0NB8cRjcCXOqn+2iFIklYHvYk7DvoQzt9 +HIPX6mkPk1K2E9E+yceyRT6foanCsNn2EGjynePbluyp4T0ja7PxD9TMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr0DE/WUCOT9n3JQ8U69J81slE0MB8GA1UdIwQY MBaAFBy4439RPdwp/9eRw4yWYyNpylRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZGRmZDYtNzZkYi00MzMxLWFmZDMt ZTFjZGIyNGMxODBiLzEvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iZGRmZDYtNzZkYi00MzMxLWFmZDMtZTFjZGIyNGMxODBi LzEvSExqamYxRTkzQ25fMTVIRGpKWmpJMm5LVkZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkKNQdzs eKmZNL5vJ6BkPzzownZXzM/GhyRA8maVPsU1pX2zMHvRTfDWZwyh+KTWtQoJQt7V iTUdleKtoZBq2eK2VLX/pZ4AVGqXYX+24dsmiZ8BNWFdWrTrFdDMcJoSY7NMdCZo mqVCl9LzIgRhADrT4sEX2puNULLr6bpG1FqOarkaxH5w3LLD8rRw77lW6XgMqURa LwTDGycTYSPcs8FaDiCddgbrnGzDp7fR/MVbWQTaDcfhanTYD5bN4bOKXybioMru YX+1Wn9xmb56AhPlL7x8ej9n6gg4eu6H2O7eMbEk+RGb8zkXU3tm1I+LpGYEfyIq vju7HBBi8yguDg== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:46 2025 by rpki-client