This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json) Hash identifier: /gV2wZbOVwxjrOcJNN9n34yTlXbr5VmCRy3GaPiAFGI= Subject key identifier: 1C:E5:0C:67:82:CB:06:90:15:AB:CA:A1:B5:2E:81:12:D5:B8:D6:62 Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62 Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62 Certificate serial: 019AF2AD68DC37FE20AA91B0CC898EC1FC54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft Manifest number: 05F5 Signing time: Sat 06 Dec 2025 08:00:42 +0000 Manifest this update: Sat 06 Dec 2025 08:00:42 +0000 Manifest next update: Sun 07 Dec 2025 08:00:42 +0000 Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: PtWyvofP6DrPyf9W4GPIxqzx2DHPvn7VIhzXXPtGRNY=) 2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:68:dc:37:fe:20:aa:91:b0:cc:89:8e:c1:fc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62 Validity Not Before: Dec 6 08:00:42 2025 GMT Not After : Dec 7 08:00:42 2025 GMT Subject: CN=1ce50c6782cb069015abcaa1b52e8112d5b8d662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:77:f2:e6:b4:af:64:98:02:00:a9:62:bf: be:13:99:02:28:db:e0:06:0e:c8:3e:1b:69:3c:cf: 3b:30:a7:46:e8:95:ab:65:e0:fc:3f:ce:d1:99:3f: 57:a1:46:d9:69:23:67:d8:49:b6:c1:bc:55:8b:d2: b5:fa:a0:32:d2:78:ad:97:90:c8:8a:37:4f:f2:d7: 48:04:ef:a9:5b:34:80:47:62:3a:61:4a:76:2e:9a: b8:f5:ab:f6:58:a3:f6:54:c1:85:8c:70:be:00:83: 9b:2c:f8:48:30:02:06:66:4a:83:60:a1:03:1f:68: 07:b2:5d:13:61:3c:7a:00:bc:52:73:48:b5:b7:d8: 57:7f:67:e2:2e:40:73:3a:84:1f:e9:05:68:66:3d: 64:62:fe:bb:2a:a1:a6:da:4b:50:40:bc:fb:9a:76: 5b:9a:0b:be:16:94:b2:f4:2d:2e:3e:bd:13:87:6c: d3:b7:5b:bb:0f:5b:94:46:e6:20:6d:89:d4:44:7a: 02:8b:dd:e1:6b:d0:25:f8:8a:82:47:48:40:21:e5: 72:3e:50:d0:24:46:fc:c7:01:87:85:87:73:5e:66: f8:3c:51:04:2a:d9:1f:d4:26:45:df:44:96:cf:e3: 7f:ee:96:2c:fa:7c:f3:12:7d:c5:1b:95:62:00:a4: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E5:0C:67:82:CB:06:90:15:AB:CA:A1:B5:2E:81:12:D5:B8:D6:62 X509v3 Authority Key Identifier: keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:49:19:a6:e5:33:fe:60:af:fe:c2:7e:a6:e0:5b:76:6a:1c: 36:48:66:0c:24:1f:af:c9:11:57:74:0b:62:76:8f:f9:1a:4d: a2:b2:ff:98:ca:e2:d2:cc:67:54:95:2f:b9:fd:15:2a:5c:48: 4e:ec:dc:a3:fd:67:79:7b:c3:f8:01:a1:ac:82:58:13:75:a9: 76:c7:58:ac:f0:68:da:2b:36:f1:27:dc:80:53:a7:98:9d:92: 60:83:2f:e9:c2:da:cf:c1:74:cb:9a:35:f0:d3:d9:2c:61:b2: e9:d0:9a:10:28:f2:08:f9:98:66:49:00:17:62:5a:44:6a:03: d0:ee:ac:df:df:04:c9:ef:72:ac:03:d2:f2:4d:4f:e2:0f:b0: ce:7d:9a:bd:8c:3e:f3:ac:c4:44:76:ee:39:fa:53:cb:64:aa: 13:33:0e:e3:4b:04:ef:f3:03:8c:0f:92:df:7f:81:df:27:07: 02:f0:ee:25:dd:5e:37:27:6a:80:fd:08:ca:a7:9c:08:52:ec: 45:6c:f6:0d:bd:32:6c:0b:f9:06:f6:cc:14:91:01:6f:96:49: ea:db:d1:63:84:4c:36:10:80:87:9d:f1:f7:66:6d:29:ce:68: b2:dc:8d:fd:48:58:f6:68:90:71:9e:2f:76:88:06:50:8f:c9: 6f:62:a6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWjcN/4gqpGwzImOwfxUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2FhYjBiMGRlZmM5M2MzMmY4MGM0NGIwODJmYjI5MDVm MjNjNjIwHhcNMjUxMjA2MDgwMDQyWhcNMjUxMjA3MDgwMDQyWjAzMTEwLwYDVQQD EygxY2U1MGM2NzgyY2IwNjkwMTVhYmNhYTFiNTJlODExMmQ1YjhkNjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY538ua0r2SYAgCpYr++E5kCKNvg Bg7IPhtpPM87MKdG6JWrZeD8P87RmT9XoUbZaSNn2Em2wbxVi9K1+qAy0nitl5DI ijdP8tdIBO+pWzSAR2I6YUp2Lpq49av2WKP2VMGFjHC+AIObLPhIMAIGZkqDYKED H2gHsl0TYTx6ALxSc0i1t9hXf2fiLkBzOoQf6QVoZj1kYv67KqGm2ktQQLz7mnZb mgu+FpSy9C0uPr0Th2zTt1u7D1uURuYgbYnURHoCi93ha9Al+IqCR0hAIeVyPlDQ JEb8xwGHhYdzXmb4PFEEKtkf1CZF30SWz+N/7pYs+nzzEn3FG5ViAKQpxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzlDGeCywaQFavKobUugRLVuNZiMB8GA1UdIwQY MBaAFBzKqwsN78k8MvgMRLCC+ykF8jxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQt Njk0N2YwMmFjNmFmLzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83ODdhYWUtMTEzMS00ZDljLTg1OTQtNjk0N2YwMmFjNmFm LzEvSE1xckN3M3Z5VHd5LUF4RXNJTDdLUVh5UEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0kZpuUz /mCv/sJ+puBbdmocNkhmDCQfr8kRV3QLYnaP+RpNorL/mMri0sxnVJUvuf0VKlxI Tuzco/1neXvD+AGhrIJYE3WpdsdYrPBo2is28SfcgFOnmJ2SYIMv6cLaz8F0y5o1 8NPZLGGy6dCaECjyCPmYZkkAF2JaRGoD0O6s398Eye9yrAPS8k1P4g+wzn2avYw+ 86zERHbuOfpTy2SqEzMO40sE7/MDjA+S33+B3ycHAvDuJd1eNydqgP0IyqecCFLs RWz2Db0ybAv5BvbMFJEBb5ZJ6tvRY4RMNhCAh53x92ZtKc5ostyN/UhY9miQcZ4v dogGUI/Jb2Kmhw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:13 2025 by rpki-client