This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json) Hash identifier: ILCQzSc83joSsFTz50AjzPKY9PM77UGi70utQC0xpQo= Subject key identifier: 21:7F:7E:A1:50:45:63:F6:39:78:EC:53:25:F2:CB:17:11:63:55:0D Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa Certificate serial: 019AF0BEED942818B62E2C6AF7BF9C23C19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: 3_exLez2c6RtEvnfTNzKi4Hkk5s.roa (hash: My7qt21+jNuMKjyzC8y2c2BBa1kohFZiD1+qyo1M/9o=) 2: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: k3zEBTatl5gv0HyOMnjrs2+phlUytf4iVHB5Z/VLE0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ed:94:28:18:b6:2e:2c:6a:f7:bf:9c:23:c1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=217f7ea1504563f63978ec5325f2cb171163550d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:d8:4e:a7:4c:d0:66:5d:df:50:67:5a:8b: 35:14:e7:d4:a7:71:5a:d3:0a:5d:6a:c3:cd:b7:fb: ba:18:8a:c8:68:4b:65:d8:b2:7b:04:a3:ee:6d:14: a2:6f:f8:09:24:5a:9d:a3:32:bb:32:15:dc:5d:41: ce:49:1f:da:af:b0:75:f8:bb:44:f2:6d:f2:e3:fe: 24:38:c8:de:ee:ea:30:41:4e:53:6a:8a:9f:ae:7c: 22:fd:74:33:cf:3b:3b:da:73:8b:4e:d9:6d:b9:49: 9d:3c:96:b6:cb:08:bd:13:06:be:c3:8d:a6:03:f6: b5:ad:d4:52:9c:a7:63:f3:41:4f:7c:a5:7b:8e:23: d9:fa:fe:e5:5d:d4:17:95:c2:65:66:8c:28:5c:f1: ff:42:d6:c6:1f:4d:1e:a1:26:e7:ff:bd:c0:1f:bf: 39:0a:92:d5:8f:0a:9a:ab:83:d6:2c:42:29:1a:64: 13:36:1d:2e:44:76:c1:a3:c7:4f:22:7c:3a:a3:59: 4f:0d:92:a1:22:ec:1b:86:94:01:7c:b0:c2:7d:4c: 11:69:6b:b5:4e:7a:5c:e6:a2:3e:ba:06:25:3d:5f: 5f:f0:e8:4f:2f:9c:1a:28:0d:a0:58:4e:39:54:3e: 75:95:92:a3:99:56:ed:de:1d:ab:9a:e6:3d:86:89: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:7E:A1:50:45:63:F6:39:78:EC:53:25:F2:CB:17:11:63:55:0D X509v3 Authority Key Identifier: keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dd:8b:dc:13:f5:35:78:bf:40:fd:8e:bd:22:b5:f4:19:93: 03:e1:98:af:54:89:e4:47:b2:92:7c:3c:23:b4:73:3b:e0:9a: 08:f7:63:c0:71:59:af:cb:56:ec:12:70:ce:99:a1:74:cf:7e: ca:9d:8d:da:9e:4b:36:87:0f:8c:d6:85:0b:dd:c8:9d:55:c6: 32:1e:7a:3d:50:af:94:40:1e:c2:90:26:20:a5:c3:87:b0:e0: 6f:4e:38:62:da:d5:c4:f9:84:5e:b8:20:c1:f4:ff:4d:ad:49: 77:05:d0:28:da:92:89:2a:e2:b6:70:6b:fc:25:fc:31:88:3a: 00:6e:6f:93:dc:ec:43:58:e8:62:28:8c:97:72:2a:53:50:dc: 5a:8c:47:5c:13:b5:65:77:65:96:3a:8f:fb:e2:d0:e1:e7:7a: 03:ec:ca:75:08:9a:a5:33:2e:49:83:ba:de:0f:ed:1c:f8:d0: 32:ae:d2:bf:72:7f:a0:c9:d2:11:05:ab:3d:93:f8:95:d7:f9: 2d:e8:3d:bd:44:ab:2d:72:db:ed:f0:16:33:a4:ed:44:22:bf: b2:6c:2e:bc:c9:66:a8:8a:73:61:ef:70:de:6d:d3:1f:97:26: 34:2f:18:ab:57:03:04:ac:82:6e:49:bc:32:40:e2:5c:d2:12: 16:f5:b8:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu2UKBi2Lixq97+cI8GaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm MDdiYWEwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD EygyMTdmN2VhMTUwNDU2M2Y2Mzk3OGVjNTMyNWYyY2IxNzExNjM1NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokTYTqdM0GZd31BnWos1FOfUp3Fa 0wpdasPNt/u6GIrIaEtl2LJ7BKPubRSib/gJJFqdozK7MhXcXUHOSR/ar7B1+LtE 8m3y4/4kOMje7uowQU5Taoqfrnwi/XQzzzs72nOLTtltuUmdPJa2ywi9Ewa+w42m A/a1rdRSnKdj80FPfKV7jiPZ+v7lXdQXlcJlZowoXPH/QtbGH00eoSbn/73AH785 CpLVjwqaq4PWLEIpGmQTNh0uRHbBo8dPInw6o1lPDZKhIuwbhpQBfLDCfUwRaWu1 Tnpc5qI+ugYlPV9f8OhPL5waKA2gWE45VD51lZKjmVbt3h2rmuY9homV+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF/fqFQRWP2OXjsUyXyyxcRY1UNMB8GA1UdIwQY MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ92L3BP1 NXi/QP2OvSK19BmTA+GYr1SJ5Eeyknw8I7RzO+CaCPdjwHFZr8tW7BJwzpmhdM9+ yp2N2p5LNocPjNaFC93InVXGMh56PVCvlEAewpAmIKXDh7Dgb044YtrVxPmEXrgg wfT/Ta1JdwXQKNqSiSritnBr/CX8MYg6AG5vk9zsQ1joYiiMl3IqU1DcWoxHXBO1 ZXdlljqP++LQ4ed6A+zKdQiapTMuSYO63g/tHPjQMq7Sv3J/oMnSEQWrPZP4ldf5 Leg9vUSrLXLb7fAWM6TtRCK/smwuvMlmqIpzYe9w3m3TH5cmNC8Yq1cDBKyCbkm8 MkDiXNISFvW4lw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:36 2025 by rpki-client