This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json) Hash identifier: 7mDbB8AAWwjxMWtWUQc74cw1BPNop/tR9F5m71b7xzI= Subject key identifier: 44:ED:77:2C:A5:35:BA:66:51:BB:A0:E0:F9:25:27:B6:1D:69:D6:1B Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500 Certificate serial: 019AF23F9C1189C5EBD27C79AB0137FF11C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft Manifest number: 13EE Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: 2gbU1lJN81mX6/sLIdlthF2hQLiFvRjqIZ8v0Mi+MRI=) 2: vOY7PB5NDzFxhVih037o9jJ1bUc.roa (hash: 8OCsn1+9HWmViC4NQ7DEHa7bN4pK4rZb0B/Nsp5g6gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9c:11:89:c5:eb:d2:7c:79:ab:01:37:ff:11:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=44ed772ca535ba6651bba0e0f92527b61d69d61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:5f:94:70:0a:95:6a:dc:5b:8b:bf:79:56: 65:5b:15:11:1e:f7:5d:b5:c1:86:03:68:84:7c:5f: a6:2c:35:53:1a:ca:13:f9:48:09:5e:48:7d:d6:68: a7:52:a5:a7:3c:0a:93:2d:03:d9:d5:37:5d:92:0c: fb:9c:4b:99:4c:1f:0a:34:4a:f7:65:d7:5f:de:8b: a9:c0:55:68:ae:43:25:c5:71:a8:d1:75:91:c4:64: fe:f8:28:20:00:7d:53:fe:b2:40:75:8a:ee:a3:e3: 07:49:fb:21:7c:de:b8:8a:84:95:be:fb:42:5d:fc: 22:49:fe:ac:e2:6f:bf:5f:34:a5:21:0f:99:1a:16: 24:7e:e1:3d:ee:93:f0:8c:71:b4:e0:43:bf:44:f1: 6f:88:5b:49:c9:78:f4:0c:3b:45:d6:fa:8c:34:df: d3:7b:02:25:80:6e:e6:0e:52:42:25:25:47:c4:21: 33:84:39:43:1b:86:e5:bc:a1:88:f6:1f:8e:f8:ce: b8:2c:97:1c:78:a1:35:f7:59:eb:a3:f4:c7:53:9e: f2:3e:bb:aa:f6:d0:9c:18:ed:c7:d0:c4:61:aa:18: 2d:48:48:b8:b5:ed:90:f1:7e:31:d1:c5:ae:12:7f: de:6d:d1:a2:96:b3:11:9b:d5:40:51:16:bc:1b:8c: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:ED:77:2C:A5:35:BA:66:51:BB:A0:E0:F9:25:27:B6:1D:69:D6:1B X509v3 Authority Key Identifier: keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:95:ba:ca:28:08:03:87:95:62:a7:cd:c7:15:cd:0b:1b:3c: ff:2e:e4:67:f9:41:a2:e1:e9:44:88:3b:36:b3:af:ab:43:6a: 97:06:29:ac:d3:30:de:b9:d0:c0:8d:34:20:ba:da:7d:84:e0: 0a:96:3a:71:dc:1a:ca:a1:45:2a:cc:bb:3b:34:99:12:8d:d6: c0:78:55:3f:4b:cc:19:b5:bb:c6:d4:28:65:f6:98:17:71:87: 9c:7d:9c:cc:3b:96:53:19:6a:fc:7a:10:05:be:4c:37:f7:f4: 74:50:82:8d:e0:ae:7f:14:c4:f6:15:df:3d:76:e7:9e:23:a3: 4f:46:8d:40:10:16:10:33:13:f3:fa:47:bf:cc:82:30:5e:a5: 75:ee:99:ce:2a:8c:96:d2:6e:17:01:02:2d:8a:da:75:c0:ba: f5:00:1e:e4:fc:8c:18:4b:a7:14:42:52:2c:43:ab:f7:51:0e: ba:ec:4d:03:a2:be:ef:41:0b:38:5d:d8:6a:76:52:0a:d3:b7: 21:ec:92:95:6b:68:b8:15:44:83:5e:ae:ed:b3:d6:30:d7:82: e2:8c:94:c7:be:09:87:04:17:c2:da:5c:b0:97:a9:69:c5:14: 20:7e:86:2b:2e:79:b8:6f:ce:c3:23:a0:90:a9:5d:fc:bd:f1: 81:fa:44:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5wRicXr0nx5qwE3/xHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz OTM1MDAwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg0NGVkNzcyY2E1MzViYTY2NTFiYmEwZTBmOTI1MjdiNjFkNjlkNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFtflHAKlWrcW4u/eVZlWxURHvdd tcGGA2iEfF+mLDVTGsoT+UgJXkh91minUqWnPAqTLQPZ1Tddkgz7nEuZTB8KNEr3 Zddf3oupwFVorkMlxXGo0XWRxGT++CggAH1T/rJAdYruo+MHSfshfN64ioSVvvtC XfwiSf6s4m+/XzSlIQ+ZGhYkfuE97pPwjHG04EO/RPFviFtJyXj0DDtF1vqMNN/T ewIlgG7mDlJCJSVHxCEzhDlDG4blvKGI9h+O+M64LJcceKE191nro/THU57yPruq 9tCcGO3H0MRhqhgtSEi4te2Q8X4x0cWuEn/ebdGilrMRm9VAURa8G4wIQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETtdyylNbpmUbug4PklJ7YdadYbMB8GA1UdIwQY MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0 LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJW6yigI A4eVYqfNxxXNCxs8/y7kZ/lBouHpRIg7NrOvq0NqlwYprNMw3rnQwI00ILrafYTg CpY6cdwayqFFKsy7OzSZEo3WwHhVP0vMGbW7xtQoZfaYF3GHnH2czDuWUxlq/HoQ Bb5MN/f0dFCCjeCufxTE9hXfPXbnniOjT0aNQBAWEDMT8/pHv8yCMF6lde6ZziqM ltJuFwECLYradcC69QAe5PyMGEunFEJSLEOr91EOuuxNA6K+70ELOF3YanZSCtO3 IeySlWtouBVEg16u7bPWMNeC4oyUx74JhwQXwtpcsJepacUUIH6GKy55uG/OwyOg kKld/L3xgfpEIA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:39 2025 by rpki-client