This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json) Hash identifier: STCcOColXu1SpXDjeDq9fW/X9EP1fFM8ZFKpOFTWppU= Subject key identifier: 57:57:C9:DD:8D:12:24:C6:9C:7A:E2:E9:D2:13:11:A1:5F:A5:F2:AD Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8 Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8 Certificate serial: 019AF24018281E982350EA53C02764A41917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: k6Fi0nOw1wfOnSNwdvoNa2tBPkDQ1FIzb2/ljTZffD0=) 2: R12AgdneGd4IinauuD2IQCzaNdo.roa (hash: 0Vf4DfoprRpqIbS3viTk0elhBi8JnCMTTU8OHnzZBdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:18:28:1e:98:23:50:ea:53:c0:27:64:a4:19:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=5757c9dd8d1224c69c7ae2e9d21311a15fa5f2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:b0:f4:75:5e:05:fa:bd:38:5f:1e:49:29: 33:37:e3:98:81:7e:d7:42:89:30:13:c7:aa:67:64: c7:c0:1b:b1:8b:1f:e3:26:b4:ca:b7:3f:e1:69:6c: 78:f2:75:f5:1d:35:bd:3d:47:0a:85:1f:60:92:46: 16:d2:12:a2:69:4b:65:60:97:04:c0:13:cc:34:d5: 02:e4:d5:87:73:99:9a:98:7b:72:fb:d7:8a:76:3b: 87:23:8b:6e:f1:57:af:00:1d:a9:c9:00:10:14:a5: 1b:b9:78:56:3e:bf:49:53:ea:b3:5e:9d:76:33:d4: c1:3a:b7:17:69:ef:b6:fa:7a:50:c7:7f:35:3e:e3: c7:03:67:78:aa:1b:f7:e3:19:4e:9a:e2:01:9b:f7: a1:6d:07:c5:77:ce:cf:d9:d5:e3:81:10:de:f4:af: 12:fd:96:4f:fd:f6:ca:ec:b2:e7:a0:3f:80:0b:38: 6f:1c:11:13:b1:73:48:04:2c:ec:33:48:2c:38:27: d4:a2:61:d3:cc:22:d5:53:22:b3:ad:d4:00:a5:cc: be:3c:f4:99:48:30:36:10:a8:85:52:17:14:ee:3f: 38:47:c2:8f:2d:61:19:2a:43:cf:90:82:63:dd:fd: 7b:0a:dd:6e:b1:61:3c:c8:e8:d8:ae:3d:3c:fa:61: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:C9:DD:8D:12:24:C6:9C:7A:E2:E9:D2:13:11:A1:5F:A5:F2:AD X509v3 Authority Key Identifier: keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e0:84:02:1a:72:31:f1:5b:29:21:0e:c1:56:29:f7:89:a8: c6:a8:ac:22:39:54:e7:92:99:e6:42:39:da:d6:fc:cd:4e:aa: 64:e6:3b:87:c3:78:38:1b:e6:97:59:bd:44:17:39:18:7c:cb: 5e:ab:b0:cc:9a:b9:9c:8c:79:11:b8:15:2f:af:62:bc:31:cb: cc:8d:cd:8f:04:de:4b:23:ee:49:5c:93:f1:c6:c0:aa:18:f9: 19:d4:e8:b5:48:38:96:89:67:45:6e:78:54:8d:3b:39:52:dd: bc:06:2d:f7:3e:0d:8f:f5:1f:39:26:18:b7:75:ed:8a:f5:34: c7:1a:86:6c:3c:df:25:cf:f5:59:71:c5:c7:be:bf:85:21:c8: 81:93:61:cc:d7:b4:43:c8:de:92:de:0c:d6:4e:24:0f:65:85: a9:55:8f:e1:b0:72:21:33:c4:0c:0d:8a:3c:66:3a:de:d4:72: f0:da:48:69:3b:ea:6c:68:ae:b5:b6:01:7b:67:bb:e7:59:35: 0b:a2:77:c2:df:6e:67:f8:55:36:67:32:21:ec:32:f2:0e:26: fa:a4:df:d5:24:d2:be:d7:13:75:f8:f4:4c:a7:54:13:1d:5d: 25:d7:1d:8f:b7:cb:c3:e4:bb:26:f0:37:21:ad:1e:fb:4f:e1: 89:0d:50:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBgoHpgjUOpTwCdkpBkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzVjMDZhOGMwNmQ1ZGQ2NGZlNzZiMDkwYTNlMWUyYTQ5 OTZkYzgwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD Eyg1NzU3YzlkZDhkMTIyNGM2OWM3YWUyZTlkMjEzMTFhMTVmYTVmMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszuw9HVeBfq9OF8eSSkzN+OYgX7X QokwE8eqZ2THwBuxix/jJrTKtz/haWx48nX1HTW9PUcKhR9gkkYW0hKiaUtlYJcE wBPMNNUC5NWHc5mamHty+9eKdjuHI4tu8VevAB2pyQAQFKUbuXhWPr9JU+qzXp12 M9TBOrcXae+2+npQx381PuPHA2d4qhv34xlOmuIBm/ehbQfFd87P2dXjgRDe9K8S /ZZP/fbK7LLnoD+ACzhvHBETsXNIBCzsM0gsOCfUomHTzCLVUyKzrdQApcy+PPSZ SDA2EKiFUhcU7j84R8KPLWEZKkPPkIJj3f17Ct1usWE8yOjYrj08+mGDmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdXyd2NEiTGnHri6dITEaFfpfKtMB8GA1UdIwQY MBaAFB41wGqMBtXdZP52sJCj4eKkmW3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpYQWFvd0cxZDFrX25hd2tLUGg0cVNaYmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYjQ1ZTQtNmVhMC00OTVmLThiNzgt OWI1ZDc2YTk0OWY0LzEvSGpYQWFvd0cxZDFrX25hd2tLUGg0cVNaYmNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hYjQ1ZTQtNmVhMC00OTVmLThiNzgtOWI1ZDc2YTk0OWY0 LzEvSGpYQWFvd0cxZDFrX25hd2tLUGg0cVNaYmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOCEAhpy MfFbKSEOwVYp94moxqisIjlU55KZ5kI52tb8zU6qZOY7h8N4OBvml1m9RBc5GHzL XquwzJq5nIx5EbgVL69ivDHLzI3NjwTeSyPuSVyT8cbAqhj5GdTotUg4lolnRW54 VI07OVLdvAYt9z4Nj/UfOSYYt3XtivU0xxqGbDzfJc/1WXHFx76/hSHIgZNhzNe0 Q8jekt4M1k4kD2WFqVWP4bByITPEDA2KPGY63tRy8NpIaTvqbGiutbYBe2e751k1 C6J3wt9uZ/hVNmcyIewy8g4m+qTf1STSvtcTdfj0TKdUEx1dJdcdj7fLw+S7JvA3 Ia0e+0/hiQ1QAA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:51 2025 by rpki-client