This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json) Hash identifier: Z+fwmfdGbscs3xrvR+yihD21XdBluhdjTWU2kztMejI= Subject key identifier: 99:BE:BE:D8:1C:12:9C:45:D4:10:9E:F0:49:1A:BD:A6:4B:55:48:06 Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Certificate serial: 019AF8E74AD809618590F1A6FFFB28B810E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft Manifest number: 1517 Signing time: Sun 07 Dec 2025 13:01:38 +0000 Manifest this update: Sun 07 Dec 2025 13:01:38 +0000 Manifest next update: Mon 08 Dec 2025 13:01:38 +0000 Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: SbQU+6hsePPz7nXovlFPAkmzmVD5IQfSccuAFQfNlwI=) 2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e7:4a:d8:09:61:85:90:f1:a6:ff:fb:28:b8:10:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007 Validity Not Before: Dec 7 13:01:38 2025 GMT Not After : Dec 8 13:01:38 2025 GMT Subject: CN=99bebed81c129c45d4109ef0491abda64b554806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:bb:8d:8f:47:17:4d:7e:cf:87:9c:93:e5: 0a:ef:a4:66:ba:44:a2:32:e1:a4:b9:f7:d1:c8:9b: ec:59:6d:60:4c:bd:42:cb:0f:7a:a8:e7:17:49:ed: 74:53:f7:e5:c4:6f:7c:96:05:6c:23:cd:96:15:7e: ac:e4:ba:07:c3:cd:76:5b:57:d5:58:af:25:c9:a0: 0c:40:78:ea:2d:a8:f1:70:1b:e9:01:a4:f8:61:d4: c5:90:fd:14:4f:c5:52:f4:ce:55:be:98:ce:33:0b: 12:c4:d1:9b:7e:63:ac:9f:30:df:61:a9:53:4f:bc: fd:02:64:c4:69:bb:1d:07:50:48:37:c1:9a:8c:5a: 8c:60:e6:07:2d:58:a3:1c:d5:d8:a6:0c:6e:f5:47: c5:eb:e7:91:73:1e:6e:a2:a8:eb:e2:c2:33:8f:26: 32:71:10:e5:30:1a:f0:17:05:04:4e:c7:0a:e6:03: 59:7a:66:c3:57:7a:23:4a:78:c5:3e:bc:65:cb:67: 86:fb:5b:81:24:7c:b3:f8:46:91:a3:0f:b7:be:00: cd:d8:36:fa:a6:47:80:f5:47:4f:49:f8:f6:37:8a: 69:a2:52:ce:93:3c:1a:68:6c:4e:44:14:72:64:0c: 11:87:86:67:a5:7d:57:57:45:3a:dc:db:c3:f9:2a: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:BE:D8:1C:12:9C:45:D4:10:9E:F0:49:1A:BD:A6:4B:55:48:06 X509v3 Authority Key Identifier: keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:63:50:63:77:35:c5:48:73:aa:13:8d:f0:a3:20:7b:98:c9: 06:62:b3:53:68:4e:9c:25:f9:41:69:44:e1:ca:56:69:ef:e0: 23:b7:6e:63:94:22:e1:57:81:31:0b:b1:ac:76:2a:ce:c5:ac: e0:02:d1:b7:33:24:0a:bf:c4:b6:a3:24:4d:bf:9c:29:39:6c: 7f:61:81:6a:ba:94:a7:d9:0c:a3:0a:84:9e:25:9f:ce:a1:a3: 40:d7:fd:75:e1:ec:f0:51:4d:40:d0:e1:38:75:51:d4:6a:37: 30:32:57:d3:ae:98:a8:78:18:cc:c5:64:ff:08:69:0f:ca:15: 19:aa:69:a3:c0:43:15:8e:b8:1c:1d:73:ec:ea:19:d1:6f:ec: 2f:54:ba:be:01:cf:ab:88:1b:0c:fc:c6:42:f6:7e:fa:db:3f: ce:21:72:9a:92:91:a1:69:e3:47:d3:07:d3:95:78:0e:74:37: 8e:2e:68:c9:68:4a:4c:4b:45:ad:63:77:1c:37:8a:46:0b:98: 0d:e5:e1:41:8a:d9:14:c5:d9:4f:94:b0:58:2b:4f:ec:a3:32: 25:d2:26:b2:f8:30:a7:8b:c0:25:d9:bb:7b:9c:60:9b:a1:90: 33:56:82:41:e4:fa:d8:0a:bb:f4:8b:f4:92:a7:12:8e:17:e1: 73:9d:75:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr450rYCWGFkPGm//souBDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3 NmMwMDcwHhcNMjUxMjA3MTMwMTM4WhcNMjUxMjA4MTMwMTM4WjAzMTEwLwYDVQQD Eyg5OWJlYmVkODFjMTI5YzQ1ZDQxMDllZjA0OTFhYmRhNjRiNTU0ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow67jY9HF01+z4eck+UK76RmukSi MuGkuffRyJvsWW1gTL1Cyw96qOcXSe10U/flxG98lgVsI82WFX6s5LoHw812W1fV WK8lyaAMQHjqLajxcBvpAaT4YdTFkP0UT8VS9M5VvpjOMwsSxNGbfmOsnzDfYalT T7z9AmTEabsdB1BIN8GajFqMYOYHLVijHNXYpgxu9UfF6+eRcx5uoqjr4sIzjyYy cRDlMBrwFwUETscK5gNZembDV3ojSnjFPrxly2eG+1uBJHyz+EaRow+3vgDN2Db6 pkeA9UdPSfj2N4ppolLOkzwaaGxORBRyZAwRh4ZnpX1XV0U63NvD+SqQBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm+vtgcEpxF1BCe8EkavaZLVUgGMB8GA1UdIwQY MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct ZTAzYWM1ODlhMDNmLzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2NQY3c1 xUhzqhON8KMge5jJBmKzU2hOnCX5QWlE4cpWae/gI7duY5Qi4VeBMQuxrHYqzsWs 4ALRtzMkCr/EtqMkTb+cKTlsf2GBarqUp9kMowqEniWfzqGjQNf9deHs8FFNQNDh OHVR1Go3MDJX066YqHgYzMVk/whpD8oVGappo8BDFY64HB1z7OoZ0W/sL1S6vgHP q4gbDPzGQvZ++ts/ziFympKRoWnjR9MH05V4DnQ3ji5oyWhKTEtFrWN3HDeKRguY DeXhQYrZFMXZT5SwWCtP7KMyJdImsvgwp4vAJdm7e5xgm6GQM1aCQeT62Aq79Iv0 kqcSjhfhc511JA== -----END CERTIFICATE-----Generated at Sun Dec 7 18:27:07 2025 by rpki-client