This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft File: Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft (raw, json) Hash identifier: JH03UqUTi1FguXjRqM6AgK0N7xNoIRT/PMbR9zl6o3g= Subject key identifier: 62:B0:CA:67:5B:5F:10:AF:67:76:63:3C:9E:4C:DE:62:01:B9:1B:AC Authority key identifier: 1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66 Certificate issuer: /CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66 Certificate serial: 019AF16462F4A1ACB78AB9965F2B5574D0F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl (hash: k5PvYcIGikDmnmpQplxf6RBdRUGPlEIoNoWPnvWMruc=) 2: yEdA_N7rWdELvU2ot9EEaCyQPBo.roa (hash: 8ht/7rJO+ixz8Sl+2g/oVNj6ivGQ0TQ42doSDeerWxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:62:f4:a1:ac:b7:8a:b9:96:5f:2b:55:74:d0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e3ba4dbba523d5b0dc989203bfd69648d1d4e66 Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=62b0ca675b5f10af6776633c9e4cde6201b91bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:f5:af:6b:5d:9a:55:2c:68:73:f7:c6:45: fc:be:d2:6b:d6:ae:c7:2d:8e:ac:cf:c4:82:f7:da: 31:b1:fb:6d:cc:eb:4f:ef:94:cb:bb:b3:cc:65:9f: 19:eb:39:a0:1e:cf:23:6c:91:8b:a9:2f:0a:16:2e: 06:46:f1:3d:e5:c4:eb:14:1b:02:55:04:d2:d7:6d: 17:f9:c1:b3:e7:e6:cb:79:ed:b3:e6:cb:6e:4d:db: cf:9e:f6:ad:08:ed:2a:46:75:6a:f6:80:5c:19:6c: b4:27:a8:09:98:a1:19:d9:d4:43:cd:c9:e5:13:0e: 0b:e2:a0:f1:5f:32:8f:2b:12:8f:18:5b:91:40:03: 1d:a3:8b:24:dc:1f:f4:0f:67:b4:b9:85:7e:ee:71: ad:76:19:75:a4:8b:f5:07:93:d8:ef:28:b5:f1:5d: 22:ae:6d:fc:65:c2:5f:34:4d:79:82:35:e0:70:aa: 71:45:05:b7:6f:91:62:13:8c:b8:ff:0b:d6:e5:86: f4:7a:86:92:aa:df:90:bd:d0:93:f3:72:82:73:7e: 3d:3e:d5:e4:70:79:98:5c:7a:35:e1:f0:d2:86:35: c7:6b:db:78:e8:71:52:ab:da:1c:b7:75:45:f9:81: 6c:29:8a:e5:fe:87:5c:6d:03:c3:47:86:48:72:53: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B0:CA:67:5B:5F:10:AF:67:76:63:3C:9E:4C:DE:62:01:B9:1B:AC X509v3 Authority Key Identifier: keyid:1E:3B:A4:DB:BA:52:3D:5B:0D:C9:89:20:3B:FD:69:64:8D:1D:4E:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hjuk27pSPVsNyYkgO_1pZI0dTmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d2548c-bd6a-4395-95fb-12e20c875c53/1/Hjuk27pSPVsNyYkgO_1pZI0dTmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:83:fa:de:84:64:c2:d7:a6:a1:1a:01:75:87:b8:84:f5:51: d0:61:65:2a:ef:da:be:9f:32:27:cc:fa:06:7f:48:58:e3:a5: 0c:6b:b7:10:bc:7a:bc:f2:c9:97:dd:6e:40:fa:15:4d:e7:7a: 8f:0f:29:6b:f3:f2:52:bd:66:cc:b6:04:7e:2b:b4:e4:c2:52: 61:13:53:45:0e:1f:3f:f9:69:61:76:7f:b3:ac:73:81:02:e0: 38:a9:fe:29:a0:56:db:e5:17:99:4b:bb:8b:29:22:0c:a6:64: 53:c5:b8:75:fd:9b:85:dd:0c:55:da:88:ce:2b:18:c0:59:58: 04:4c:d5:48:a8:09:af:20:b1:63:8e:c5:04:8a:5f:51:b1:d2: 69:a8:d1:05:4c:f9:49:63:3d:bd:37:ff:16:c1:7a:15:ec:0a: c1:39:10:f2:7a:e2:fe:21:6b:98:ec:06:5b:fb:57:ad:d7:34: 13:17:e0:ad:6a:9d:56:28:0d:da:c6:0e:9c:e3:5c:79:23:e4: ff:cb:36:f6:96:16:fb:00:a4:e8:78:76:34:a4:5e:c2:2c:85: 70:f0:26:7b:86:5c:41:ae:82:f7:a9:27:11:b5:f4:c9:85:f0: 43:07:5e:3c:53:d5:80:91:3e:a1:cc:b0:15:82:40:d7:46:6d: a7:1c:96:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGL0oay3irmWXytVdND1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlM2JhNGRiYmE1MjNkNWIwZGM5ODkyMDNiZmQ2OTY0OGQx ZDRlNjYwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD Eyg2MmIwY2E2NzViNWYxMGFmNjc3NjYzM2M5ZTRjZGU2MjAxYjkxYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnj1r2tdmlUsaHP3xkX8vtJr1q7H LY6sz8SC99oxsfttzOtP75TLu7PMZZ8Z6zmgHs8jbJGLqS8KFi4GRvE95cTrFBsC VQTS120X+cGz5+bLee2z5stuTdvPnvatCO0qRnVq9oBcGWy0J6gJmKEZ2dRDzcnl Ew4L4qDxXzKPKxKPGFuRQAMdo4sk3B/0D2e0uYV+7nGtdhl1pIv1B5PY7yi18V0i rm38ZcJfNE15gjXgcKpxRQW3b5FiE4y4/wvW5Yb0eoaSqt+QvdCT83KCc349PtXk cHmYXHo14fDShjXHa9t46HFSq9oct3VF+YFsKYrl/odcbQPDR4ZIclNimQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKwymdbXxCvZ3ZjPJ5M3mIBuRusMB8GA1UdIwQY MBaAFB47pNu6Uj1bDcmJIDv9aWSNHU5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmIt MTJlMjBjODc1YzUzLzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kMjU0OGMtYmQ2YS00Mzk1LTk1ZmItMTJlMjBjODc1YzUz LzEvSGp1azI3cFNQVnNOeVlrZ09fMXBaSTBkVG1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4P63oRk wtemoRoBdYe4hPVR0GFlKu/avp8yJ8z6Bn9IWOOlDGu3ELx6vPLJl91uQPoVTed6 jw8pa/PyUr1mzLYEfiu05MJSYRNTRQ4fP/lpYXZ/s6xzgQLgOKn+KaBW2+UXmUu7 iykiDKZkU8W4df2bhd0MVdqIzisYwFlYBEzVSKgJryCxY47FBIpfUbHSaajRBUz5 SWM9vTf/FsF6FewKwTkQ8nri/iFrmOwGW/tXrdc0ExfgrWqdVigN2sYOnONceSPk /8s29pYW+wCk6Hh2NKRewiyFcPAme4ZcQa6C96knEbX0yYXwQwdePFPVgJE+ocyw FYJA10ZtpxyWXw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:50:27 2025 by rpki-client