This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json) Hash identifier: p7fawJCyiFxHge0C06vQCTzmTtPL2o+2MoFYcWRWxOw= Subject key identifier: D9:94:16:07:37:68:2A:D4:EA:AB:E6:13:BA:6E:2D:63:00:FB:8D:AB Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Certificate serial: 019AF2402C4AF42E37F48E4FE530618703B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft Manifest number: 0AA5 Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: e+5K+AF+6FldKuIjqWGUicz/FDx9m8npOvHUP/HjWGc=) 2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2c:4a:f4:2e:37:f4:8e:4f:e5:30:61:87:03:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3 Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=d994160737682ad4eaabe613ba6e2d6300fb8dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:35:f0:a1:10:5f:90:82:a8:f7:fa:5a:8e: 07:03:69:63:3f:0f:eb:eb:63:e1:9d:ec:eb:93:14: 2b:30:b0:2f:20:5d:f5:70:8b:74:4f:73:e1:c5:6d: 67:cc:1b:7c:a7:eb:28:4d:ba:31:83:7e:48:5b:05: 4a:e1:5e:74:ee:d7:e3:b5:a9:15:54:d3:4e:5e:2f: be:d5:8f:23:a0:ce:b5:6d:fb:80:b3:d8:0f:04:7d: 37:bf:20:dc:89:60:78:ea:44:84:f6:57:45:a6:6d: e9:ba:02:4d:8d:b5:6a:f6:40:56:e2:3f:29:22:42: 65:b4:d4:22:be:0d:d3:63:e3:8f:69:a6:6f:17:ff: 00:a4:49:d0:26:14:87:c0:6f:b9:c0:dc:b2:4e:fe: cb:57:12:25:86:54:87:1c:bb:6e:4b:cb:88:00:c2: 61:5f:58:9f:3e:38:ac:2d:1d:52:02:46:a5:12:40: 89:7e:85:4c:bf:5b:99:5b:26:ae:6a:ab:d6:01:2d: be:d6:58:55:69:21:db:7c:50:7a:c3:38:4a:af:7b: 8d:36:89:9f:f4:b5:50:ac:ca:3d:35:df:b5:0e:9f: 35:ec:8e:a6:22:22:54:43:fb:64:d1:cf:e3:e8:c0: 43:4e:45:14:e0:24:2e:68:2a:b6:34:b3:b0:9b:e8: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:94:16:07:37:68:2A:D4:EA:AB:E6:13:BA:6E:2D:63:00:FB:8D:AB X509v3 Authority Key Identifier: keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d7:af:56:02:67:a1:8a:b7:3f:4e:67:27:b9:0b:3b:a9:f4: 8c:70:66:2c:e4:e6:6a:23:c7:53:b6:b7:bc:c6:1b:f5:c2:18: 56:d5:0e:87:1a:2c:93:b5:f2:ae:31:47:fd:bd:94:e5:91:c9: ce:33:de:94:7f:d1:fc:ec:27:a3:3f:88:7f:61:c9:ac:30:b5: 16:19:5e:41:0b:77:d1:3d:1b:5c:af:dc:35:20:a5:e6:20:10: 12:c3:ce:7f:de:5c:e2:a8:ac:43:a8:ea:7d:29:60:af:d8:3d: 2f:19:a5:6f:33:e8:2b:ec:1d:df:9f:cd:ec:47:27:fb:b1:53: 66:68:28:8b:4a:b6:7f:94:e9:25:fa:63:2e:00:4b:6c:cf:89: 60:d3:8b:26:f0:37:f2:d7:ce:ae:73:a6:30:dc:4f:8c:ac:a3: 38:80:e1:d1:2a:8e:f7:24:8f:6e:56:e1:2c:e1:cf:5b:ff:b3: 42:d4:48:a0:d4:fa:24:1a:39:f3:14:3d:89:02:5b:9b:a5:89: 81:2c:cd:45:cb:4d:a8:4a:bc:f0:14:4b:1f:ac:a9:17:0c:b6: 63:a6:a2:26:68:c9:90:a0:b3:10:a9:9d:db:65:76:15:b9:fc: cd:03:41:05:90:26:8d:68:23:fd:b6:e1:04:97:f1:25:1a:12: 74:71:d3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCxK9C439I5P5TBhhwO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz ZTM3YTMwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD EyhkOTk0MTYwNzM3NjgyYWQ0ZWFhYmU2MTNiYTZlMmQ2MzAwZmI4ZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGw18KEQX5CCqPf6Wo4HA2ljPw/r 62PhnezrkxQrMLAvIF31cIt0T3PhxW1nzBt8p+soTboxg35IWwVK4V507tfjtakV VNNOXi++1Y8joM61bfuAs9gPBH03vyDciWB46kSE9ldFpm3pugJNjbVq9kBW4j8p IkJltNQivg3TY+OPaaZvF/8ApEnQJhSHwG+5wNyyTv7LVxIlhlSHHLtuS8uIAMJh X1ifPjisLR1SAkalEkCJfoVMv1uZWyauaqvWAS2+1lhVaSHbfFB6wzhKr3uNNomf 9LVQrMo9Nd+1Dp817I6mIiJUQ/tk0c/j6MBDTkUU4CQuaCq2NLOwm+ioRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmUFgc3aCrU6qvmE7puLWMA+42rMB8GA1UdIwQY MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt Y2E3OGVmNTgyNmNhLzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9evVgJn oYq3P05nJ7kLO6n0jHBmLOTmaiPHU7a3vMYb9cIYVtUOhxosk7XyrjFH/b2U5ZHJ zjPelH/R/Ownoz+If2HJrDC1FhleQQt30T0bXK/cNSCl5iAQEsPOf95c4qisQ6jq fSlgr9g9LxmlbzPoK+wd35/N7Ecn+7FTZmgoi0q2f5TpJfpjLgBLbM+JYNOLJvA3 8tfOrnOmMNxPjKyjOIDh0SqO9ySPblbhLOHPW/+zQtRIoNT6JBo58xQ9iQJbm6WJ gSzNRctNqEq88BRLH6ypFwy2Y6aiJmjJkKCzEKmd22V2Fbn8zQNBBZAmjWgj/bbh BJfxJRoSdHHT7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:43 2025 by rpki-client