This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json) Hash identifier: 9Y2j1I41kdju4FMUIj0kFKQFJfZrwj5CFBP+Fj9M/Zs= Subject key identifier: 58:6C:A0:66:72:55:1A:BF:E1:D2:B9:BB:55:92:68:4C:29:DB:E5:C1 Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab Certificate serial: 019AF3C02288397A5C6D4610A7FF6F42E4CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft Manifest number: 1162 Signing time: Sat 06 Dec 2025 13:00:46 +0000 Manifest this update: Sat 06 Dec 2025 13:00:46 +0000 Manifest next update: Sun 07 Dec 2025 13:00:46 +0000 Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: DzTR0unO4JbK0BiJx0aSVG/LRhDW3D9XrG5hmXN1RTk=) 2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:22:88:39:7a:5c:6d:46:10:a7:ff:6f:42:e4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab Validity Not Before: Dec 6 13:00:46 2025 GMT Not After : Dec 7 13:00:46 2025 GMT Subject: CN=586ca06672551abfe1d2b9bb5592684c29dbe5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:74:4c:a4:9a:c9:f1:e9:19:aa:b3:63:b3: ac:1a:e1:42:b8:b3:35:64:f7:34:6c:e1:16:fb:9f: 95:3e:c1:55:1c:72:a7:82:1f:1e:e8:f0:bd:a1:40: 13:ca:32:33:66:fa:2b:ce:4d:88:4b:a8:23:8d:27: 3c:42:46:e6:99:66:fa:01:1a:9f:88:4a:60:0e:0d: 2c:4d:7b:43:3c:47:24:e4:76:46:d9:d1:3d:29:78: 0a:7e:d1:96:94:13:7d:28:67:52:f9:7f:92:14:ac: 5c:90:5c:ff:ae:dc:50:d8:16:67:08:9a:d9:ce:1b: df:48:58:20:6d:c3:76:30:b4:b2:b0:c3:be:f0:49: 8c:ac:e7:c7:88:8f:d8:fb:c9:c3:9b:97:01:3a:f7: 98:e2:47:e3:db:2f:7b:82:93:39:47:97:e2:5b:68: 99:1d:b1:99:7a:4b:51:30:3f:9f:58:56:ee:a1:82: 05:a8:14:4e:74:1e:f7:7a:96:25:15:ea:0f:fc:73: 9e:1c:73:e9:5e:b6:75:fb:ec:b3:65:ae:b4:4d:d5: 35:f6:d1:86:f2:e8:13:99:bc:0e:a3:d5:48:bb:6d: 5c:5d:49:9f:45:45:e6:6f:b1:ca:44:c3:70:9f:de: e6:3f:60:10:f4:1b:e4:af:3d:08:f4:59:51:7a:f3: 6d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:A0:66:72:55:1A:BF:E1:D2:B9:BB:55:92:68:4C:29:DB:E5:C1 X509v3 Authority Key Identifier: keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c3:19:7a:c7:53:73:c3:e0:8f:2f:0f:3b:8b:9d:51:8a:2a: 77:ed:b0:66:85:a9:01:a8:05:5b:af:c8:a7:56:30:bf:2e:dd: b6:e9:a6:dd:be:96:b0:44:35:aa:a9:09:87:2b:12:31:22:71: 73:4d:5e:ef:3a:85:c1:87:92:4c:2a:8f:7a:4c:2c:3b:9e:d6: dc:39:44:83:2d:fe:ac:c8:46:cc:65:d8:b1:33:3c:4e:ef:64: ad:ad:39:ce:53:de:92:a4:c6:07:ca:bf:72:91:7f:72:e6:70: 26:ce:18:91:38:19:a4:8c:b4:14:9e:b9:82:af:85:20:fb:09: 18:91:56:2a:fe:da:49:42:a1:8c:d9:9b:2f:31:96:b3:8f:99: 37:d8:70:d7:da:30:7e:c9:74:74:a0:23:05:15:c8:ce:8d:a7: a0:3d:6c:f2:48:70:dd:8f:09:bb:52:96:0d:2e:8f:04:91:6e: 98:e3:66:c0:e5:4b:4c:3a:ff:c2:d4:7b:c4:3d:d0:67:d6:f6: 58:16:3c:be:63:b2:2c:3c:38:b5:2f:b0:36:95:26:04:81:13: 4f:be:93:95:18:f1:16:da:9d:bd:fe:79:a9:0b:01:cf:62:37: d6:d9:70:e2:00:04:42:f0:04:f7:5d:83:c1:9b:ba:0a:5a:0c: f2:89:28:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCKIOXpcbUYQp/9vQuTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1 NmMxYWIwHhcNMjUxMjA2MTMwMDQ2WhcNMjUxMjA3MTMwMDQ2WjAzMTEwLwYDVQQD Eyg1ODZjYTA2NjcyNTUxYWJmZTFkMmI5YmI1NTkyNjg0YzI5ZGJlNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwot0TKSayfHpGaqzY7OsGuFCuLM1 ZPc0bOEW+5+VPsFVHHKngh8e6PC9oUATyjIzZvorzk2IS6gjjSc8QkbmmWb6ARqf iEpgDg0sTXtDPEck5HZG2dE9KXgKftGWlBN9KGdS+X+SFKxckFz/rtxQ2BZnCJrZ zhvfSFggbcN2MLSysMO+8EmMrOfHiI/Y+8nDm5cBOveY4kfj2y97gpM5R5fiW2iZ HbGZektRMD+fWFbuoYIFqBROdB73epYlFeoP/HOeHHPpXrZ1++yzZa60TdU19tGG 8ugTmbwOo9VIu21cXUmfRUXmb7HKRMNwn97mP2AQ9Bvkrz0I9FlRevNtCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhsoGZyVRq/4dK5u1WSaEwp2+XBMB8GA1UdIwQY MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3 LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcMZesdT c8Pgjy8PO4udUYoqd+2wZoWpAagFW6/Ip1Ywvy7dtumm3b6WsEQ1qqkJhysSMSJx c01e7zqFwYeSTCqPekwsO57W3DlEgy3+rMhGzGXYsTM8Tu9kra05zlPekqTGB8q/ cpF/cuZwJs4YkTgZpIy0FJ65gq+FIPsJGJFWKv7aSUKhjNmbLzGWs4+ZN9hw19ow fsl0dKAjBRXIzo2noD1s8khw3Y8Ju1KWDS6PBJFumONmwOVLTDr/wtR7xD3QZ9b2 WBY8vmOyLDw4tS+wNpUmBIETT76TlRjxFtqdvf55qQsBz2I31tlw4gAEQvAE912D wZu6CloM8okoyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:25 2025 by rpki-client